b05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 17:57:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280), 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:57:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 17:57:04 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, 0x0, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:05 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:57:05 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) getpid() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:57:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, 0x0, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:05 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES16, @ANYBLOB="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"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:57:05 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) getpid() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:57:05 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES16, @ANYBLOB="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"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:57:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, 0x0, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 632.542952] Bluetooth: hci1: command 0x0409 tx timeout [ 632.734936] Bluetooth: hci3: command 0x0409 tx timeout [ 632.798929] Bluetooth: hci4: command 0x0409 tx timeout [ 632.862920] Bluetooth: hci5: command 0x0409 tx timeout [ 632.926906] Bluetooth: hci7: command 0x0409 tx timeout [ 634.590902] Bluetooth: hci1: command 0x041b tx timeout [ 634.782895] Bluetooth: hci3: command 0x041b tx timeout [ 634.846904] Bluetooth: hci4: command 0x041b tx timeout [ 634.910954] Bluetooth: hci5: command 0x041b tx timeout [ 634.974920] Bluetooth: hci7: command 0x041b tx timeout [ 636.638941] Bluetooth: hci1: command 0x040f tx timeout [ 636.830898] Bluetooth: hci3: command 0x040f tx timeout [ 636.894884] Bluetooth: hci4: command 0x040f tx timeout [ 636.958925] Bluetooth: hci5: command 0x040f tx timeout [ 637.022886] Bluetooth: hci7: command 0x040f tx timeout [ 638.686937] Bluetooth: hci1: command 0x0419 tx timeout [ 638.878925] Bluetooth: hci3: command 0x0419 tx timeout [ 638.942920] Bluetooth: hci4: command 0x0419 tx timeout [ 639.006892] Bluetooth: hci5: command 0x0419 tx timeout [ 639.070885] Bluetooth: hci7: command 0x0419 tx timeout [ 641.417212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.418039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.423516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 641.464677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.465493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.467414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 641.873981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.874620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.894037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 641.955468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.956847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.959484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 642.038005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.038763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.040406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 642.086685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.087406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.088965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 642.179951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.181455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.187470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 642.226971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.227691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.229157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 642.602949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.604433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.605619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 642.687735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.688394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.689757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:57:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:57:31 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES16, @ANYBLOB="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"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:57:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 17:57:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280), 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:57:31 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) getpid() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:57:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:57:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 17:57:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:31 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:57:32 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:32 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:57:32 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:57:32 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:32 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) getpid() dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 659.166953] Bluetooth: hci1: command 0x0409 tx timeout [ 659.358925] Bluetooth: hci3: command 0x0409 tx timeout [ 659.423872] Bluetooth: hci4: command 0x0409 tx timeout [ 659.486936] Bluetooth: hci7: command 0x0409 tx timeout [ 659.487554] Bluetooth: hci5: command 0x0409 tx timeout [ 661.214895] Bluetooth: hci1: command 0x041b tx timeout [ 661.406892] Bluetooth: hci3: command 0x041b tx timeout [ 661.470960] Bluetooth: hci4: command 0x041b tx timeout [ 661.534979] Bluetooth: hci5: command 0x041b tx timeout [ 661.535710] Bluetooth: hci7: command 0x041b tx timeout [ 663.262888] Bluetooth: hci1: command 0x040f tx timeout [ 663.455222] Bluetooth: hci3: command 0x040f tx timeout [ 663.518882] Bluetooth: hci4: command 0x040f tx timeout [ 663.582968] Bluetooth: hci7: command 0x040f tx timeout [ 663.583480] Bluetooth: hci5: command 0x040f tx timeout [ 665.310886] Bluetooth: hci1: command 0x0419 tx timeout [ 665.502884] Bluetooth: hci3: command 0x0419 tx timeout [ 665.566876] Bluetooth: hci4: command 0x0419 tx timeout [ 665.630886] Bluetooth: hci5: command 0x0419 tx timeout [ 665.631387] Bluetooth: hci7: command 0x0419 tx timeout [ 666.528631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.529414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.530681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 666.577620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.578415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.579969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 666.621283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.622289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.623644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 666.724063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.724806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.726247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 667.067423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.068170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.069432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 667.093218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.093915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.109102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 667.418417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.419223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.429824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 667.432995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.433644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.434928] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 667.575959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.576677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.577965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 667.601812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.602999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.604223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:57:55 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:57:55 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) getpid() dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:57:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:57:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) getpid() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17:57:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) fcntl$getflags(r2, 0x401) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 17:57:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 17:57:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:57:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:55 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:57:55 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) getpid() dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:57:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:55 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:57:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:55 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:57:55 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r8) 17:57:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:55 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 682.718884] Bluetooth: hci1: command 0x0409 tx timeout [ 683.102885] Bluetooth: hci4: command 0x0409 tx timeout [ 683.166894] Bluetooth: hci7: command 0x0409 tx timeout [ 683.167375] Bluetooth: hci5: command 0x0409 tx timeout [ 683.230889] Bluetooth: hci3: command 0x0409 tx timeout [ 684.766879] Bluetooth: hci1: command 0x041b tx timeout [ 685.150928] Bluetooth: hci4: command 0x041b tx timeout [ 685.214938] Bluetooth: hci5: command 0x041b tx timeout [ 685.216226] Bluetooth: hci7: command 0x041b tx timeout [ 685.278896] Bluetooth: hci3: command 0x041b tx timeout [ 686.814881] Bluetooth: hci1: command 0x040f tx timeout [ 687.198882] Bluetooth: hci4: command 0x040f tx timeout [ 687.262926] Bluetooth: hci7: command 0x040f tx timeout [ 687.263588] Bluetooth: hci5: command 0x040f tx timeout [ 687.326914] Bluetooth: hci3: command 0x040f tx timeout [ 688.862877] Bluetooth: hci1: command 0x0419 tx timeout [ 689.246951] Bluetooth: hci4: command 0x0419 tx timeout [ 689.310877] Bluetooth: hci5: command 0x0419 tx timeout [ 689.311329] Bluetooth: hci7: command 0x0419 tx timeout [ 689.374894] Bluetooth: hci3: command 0x0419 tx timeout [ 690.242690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.243437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.245112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 690.309673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.310500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.311704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 690.339316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.339998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.341344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 690.377722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.378398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.379736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 690.952075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.953002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.954384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 690.984775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.985457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.986746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 691.133065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.133776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.135110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 691.162796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.163741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.164883] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 691.310313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.311087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.312404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 691.332042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.332700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.333990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:58:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) fcntl$getflags(r2, 0x401) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 17:58:23 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r8) 17:58:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) getpid() dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:58:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:58:23 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:58:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:58:23 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:58:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 17:58:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:58:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:58:24 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:58:24 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r8) 17:58:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:58:24 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2}) getpid() dup2(0xffffffffffffffff, 0xffffffffffffffff) 17:58:24 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:58:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 711.198965] Bluetooth: hci1: command 0x0409 tx timeout [ 711.454868] Bluetooth: hci7: command 0x0409 tx timeout [ 711.454880] Bluetooth: hci4: command 0x0409 tx timeout [ 711.454903] Bluetooth: hci3: command 0x0409 tx timeout [ 713.246886] Bluetooth: hci1: command 0x041b tx timeout [ 713.502883] Bluetooth: hci7: command 0x041b tx timeout [ 713.503384] Bluetooth: hci4: command 0x041b tx timeout [ 713.503989] Bluetooth: hci3: command 0x041b tx timeout [ 715.294929] Bluetooth: hci1: command 0x040f tx timeout [ 715.550872] Bluetooth: hci3: command 0x040f tx timeout [ 715.551373] Bluetooth: hci4: command 0x040f tx timeout [ 715.551954] Bluetooth: hci7: command 0x040f tx timeout [ 716.555621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.556404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.557970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 716.616964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.617706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.619615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 717.103306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.104464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.106346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 717.133575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.134262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.135573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 717.488087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.488886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.490231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 717.506139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.506773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.508003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 717.599204] Bluetooth: hci7: command 0x0419 tx timeout [ 717.600097] Bluetooth: hci3: command 0x0419 tx timeout [ 718.095296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.097321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.100893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 718.108991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.110769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.115225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:58:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) fcntl$getflags(r2, 0x401) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 17:58:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) fcntl$getflags(r2, 0x401) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 17:58:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:58:46 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:58:46 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:58:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r8) 17:58:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 17:58:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:58:46 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:58:46 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:58:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r8) 17:58:46 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:58:46 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:58:47 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:58:47 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) fcntl$getflags(r2, 0x401) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 17:58:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 734.239904] Bluetooth: hci1: command 0x0409 tx timeout [ 734.430934] Bluetooth: hci3: command 0x0409 tx timeout [ 734.495106] Bluetooth: hci4: command 0x0409 tx timeout [ 734.558936] Bluetooth: hci5: command 0x0409 tx timeout [ 736.286859] Bluetooth: hci1: command 0x041b tx timeout [ 736.478859] Bluetooth: hci3: command 0x041b tx timeout [ 736.543143] Bluetooth: hci4: command 0x041b tx timeout [ 736.606893] Bluetooth: hci5: command 0x041b tx timeout [ 738.334857] Bluetooth: hci1: command 0x040f tx timeout [ 738.526856] Bluetooth: hci3: command 0x040f tx timeout [ 738.591291] Bluetooth: hci4: command 0x040f tx timeout [ 738.654899] Bluetooth: hci5: command 0x040f tx timeout [ 740.266181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.266986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.268350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 740.329555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.330333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.331631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 740.382853] Bluetooth: hci1: command 0x0419 tx timeout [ 740.543517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.544326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.545719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 740.574859] Bluetooth: hci3: command 0x0419 tx timeout [ 740.583608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.584335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.585735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 740.639036] Bluetooth: hci4: command 0x0419 tx timeout [ 740.667445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.668277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.669667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 740.702890] Bluetooth: hci5: command 0x0419 tx timeout [ 740.713488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.714278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.715683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 740.731745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.732791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.734168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 740.776506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.777273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.778551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:59:08 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:59:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 17:59:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:59:08 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 17:59:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000001c0)=r7) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r8) 17:59:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 17:59:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:59:08 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:59:08 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:59:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:59:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 17:59:08 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 17:59:08 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:59:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 17:59:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 751.358005] perf: interrupt took too long (4005 > 3958), lowering kernel.perf_event_max_sample_rate to 49000 [ 751.384469] perf: interrupt took too long (5042 > 5006), lowering kernel.perf_event_max_sample_rate to 39000 [ 751.405780] perf: interrupt took too long (6315 > 6302), lowering kernel.perf_event_max_sample_rate to 31000 [ 751.415538] perf: interrupt took too long (7898 > 7893), lowering kernel.perf_event_max_sample_rate to 25000 [ 751.470863] perf: interrupt took too long (9873 > 9872), lowering kernel.perf_event_max_sample_rate to 20000 [ 755.871849] Bluetooth: hci1: command 0x0409 tx timeout [ 756.063847] Bluetooth: hci3: command 0x0409 tx timeout [ 756.126867] Bluetooth: hci5: command 0x0409 tx timeout [ 756.127431] Bluetooth: hci4: command 0x0409 tx timeout [ 757.919936] Bluetooth: hci1: command 0x041b tx timeout [ 758.110922] Bluetooth: hci3: command 0x041b tx timeout [ 758.175868] Bluetooth: hci4: command 0x041b tx timeout [ 758.176391] Bluetooth: hci5: command 0x041b tx timeout [ 759.966899] Bluetooth: hci1: command 0x040f tx timeout [ 760.158885] Bluetooth: hci3: command 0x040f tx timeout [ 760.223035] Bluetooth: hci5: command 0x040f tx timeout [ 760.226574] Bluetooth: hci4: command 0x040f tx timeout [ 762.015856] Bluetooth: hci1: command 0x0419 tx timeout [ 762.127928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.128699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.130417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 762.188420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.189335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.191242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 762.207889] Bluetooth: hci3: command 0x0419 tx timeout [ 762.270866] Bluetooth: hci4: command 0x0419 tx timeout [ 762.271335] Bluetooth: hci5: command 0x0419 tx timeout [ 762.463592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.464314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.465844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 762.539597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.540950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.542003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 762.677402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.678159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.679598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 762.725913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.726704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.728407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 763.178093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.179100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.183603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 763.191637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.192555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.193915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:59:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:59:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 17:59:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:59:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 17:59:31 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:59:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:59:31 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 17:59:31 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 17:59:31 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:59:31 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 17:59:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 17:59:31 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 17:59:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:59:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:59:31 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:59:31 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 779.166870] Bluetooth: hci1: command 0x0409 tx timeout [ 779.486903] Bluetooth: hci3: command 0x0409 tx timeout [ 779.615852] Bluetooth: hci4: command 0x0409 tx timeout [ 779.616513] Bluetooth: hci5: command 0x0409 tx timeout [ 781.214857] Bluetooth: hci1: command 0x041b tx timeout [ 781.534843] Bluetooth: hci3: command 0x041b tx timeout [ 781.662881] Bluetooth: hci5: command 0x041b tx timeout [ 781.665100] Bluetooth: hci4: command 0x041b tx timeout [ 783.262849] Bluetooth: hci1: command 0x040f tx timeout [ 783.584193] Bluetooth: hci3: command 0x040f tx timeout [ 783.711838] Bluetooth: hci4: command 0x040f tx timeout [ 783.712365] Bluetooth: hci5: command 0x040f tx timeout [ 784.329732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.330615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.335877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 784.363067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.363757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.365304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 784.882594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.883416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.884794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 784.899908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.900552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.901827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 785.543703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.544780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.546146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 785.562880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.563506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.564850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 785.759851] Bluetooth: hci5: command 0x0419 tx timeout [ 785.770478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.771233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.772441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 785.805485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.806559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.808314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:59:53 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 17:59:53 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:59:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:59:53 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 17:59:53 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 17:59:53 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:59:53 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 17:59:53 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 17:59:53 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:59:53 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 17:59:53 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:59:53 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:59:53 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 17:59:53 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 17:59:53 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 17:59:53 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 800.350877] Bluetooth: hci1: command 0x0409 tx timeout [ 800.734849] Bluetooth: hci3: command 0x0409 tx timeout [ 800.735738] Bluetooth: hci5: command 0x0409 tx timeout [ 800.736326] Bluetooth: hci7: command 0x0409 tx timeout [ 800.798876] Bluetooth: hci4: command 0x0409 tx timeout [ 802.398867] Bluetooth: hci1: command 0x041b tx timeout [ 802.782847] Bluetooth: hci7: command 0x041b tx timeout [ 802.783764] Bluetooth: hci5: command 0x041b tx timeout [ 802.784991] Bluetooth: hci3: command 0x041b tx timeout [ 802.846838] Bluetooth: hci4: command 0x041b tx timeout [ 804.447135] Bluetooth: hci1: command 0x040f tx timeout [ 804.830842] Bluetooth: hci3: command 0x040f tx timeout [ 804.831367] Bluetooth: hci5: command 0x040f tx timeout [ 804.831950] Bluetooth: hci7: command 0x040f tx timeout [ 804.894826] Bluetooth: hci4: command 0x040f tx timeout [ 806.494839] Bluetooth: hci1: command 0x0419 tx timeout [ 806.878887] Bluetooth: hci7: command 0x0419 tx timeout [ 806.879590] Bluetooth: hci5: command 0x0419 tx timeout [ 806.880348] Bluetooth: hci3: command 0x0419 tx timeout [ 806.942832] Bluetooth: hci4: command 0x0419 tx timeout [ 808.621790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.623315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.625543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 808.765075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.766121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.767729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 808.812141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.812830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.814261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 808.872372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.873066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.874308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 809.397984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.399304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.401442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 809.432848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.434068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.435924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 809.442236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.443428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.445302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 809.530699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.531415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.532874] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 809.699462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.700731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.706407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 809.731459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.732686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.734709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:00:18 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:00:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:00:18 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) epoll_create(0x7ffd) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:00:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:00:18 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:00:18 executing program 3: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES16, @ANYBLOB="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"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:00:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:18 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:18 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) epoll_create(0x7ffd) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:00:18 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:00:18 executing program 3: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES16, @ANYBLOB="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"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:00:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:18 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) epoll_create(0x7ffd) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) [ 826.078927] Bluetooth: hci1: command 0x0409 tx timeout [ 826.334830] Bluetooth: hci3: command 0x0409 tx timeout [ 828.126837] Bluetooth: hci1: command 0x041b tx timeout [ 828.382922] Bluetooth: hci3: command 0x041b tx timeout [ 828.557718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.558499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.559876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 828.580191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.581040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.582227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 828.687627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.688571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.689830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 828.712213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.713274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.714290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 830.174843] Bluetooth: hci1: command 0x040f tx timeout [ 830.431842] Bluetooth: hci3: command 0x040f tx timeout [ 832.223838] Bluetooth: hci1: command 0x0419 tx timeout [ 832.530908] Bluetooth: hci3: command 0x0419 tx timeout 18:00:37 executing program 3: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES16, @ANYBLOB="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"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:00:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:00:37 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) epoll_create(0x7ffd) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:00:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:00:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:00:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) epoll_create(0x7ffd) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:00:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:37 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:00:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:00:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:00:37 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:00:37 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:00:37 executing program 3: r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:00:37 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 844.702845] Bluetooth: hci1: command 0x0409 tx timeout [ 845.022977] Bluetooth: hci4: command 0x0409 tx timeout [ 845.086827] Bluetooth: hci5: command 0x0409 tx timeout [ 846.750846] Bluetooth: hci1: command 0x041b tx timeout [ 847.070826] Bluetooth: hci4: command 0x041b tx timeout [ 847.134842] Bluetooth: hci5: command 0x041b tx timeout [ 848.798819] Bluetooth: hci1: command 0x040f tx timeout [ 848.857613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.858409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.859904] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 848.906437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.907499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.908605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 849.082458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.083312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.084819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 849.118815] Bluetooth: hci4: command 0x040f tx timeout [ 849.138695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.139410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.140723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 849.182817] Bluetooth: hci5: command 0x040f tx timeout [ 849.271032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.271742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.276195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 849.287283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.288032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.289665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 851.168604] Bluetooth: hci4: command 0x0419 tx timeout 18:00:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:57 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:00:57 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:00:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r0, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:00:57 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:00:57 executing program 3: r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:00:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280), 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r0, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:00:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:00:58 executing program 3: r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:00:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280), 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:00:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r0, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:00:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:00:58 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(0x0, 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:00:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) [ 865.566817] Bluetooth: hci1: command 0x0409 tx timeout [ 865.822810] Bluetooth: hci3: command 0x0409 tx timeout [ 865.886814] Bluetooth: hci4: command 0x0409 tx timeout [ 867.614804] Bluetooth: hci1: command 0x041b tx timeout [ 867.870836] Bluetooth: hci3: command 0x041b tx timeout [ 867.934802] Bluetooth: hci4: command 0x041b tx timeout [ 869.666434] Bluetooth: hci1: command 0x040f tx timeout [ 869.686058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.686762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.688204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 869.726177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.727471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.731201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 869.918982] Bluetooth: hci3: command 0x040f tx timeout [ 869.963190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.964429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.966441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 869.982805] Bluetooth: hci4: command 0x040f tx timeout [ 870.049673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.050961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.053028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 870.402740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.404253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.406285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 870.434204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.435018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.436815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 871.967825] Bluetooth: hci3: command 0x0419 tx timeout 18:01:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r0, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:01:19 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:01:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:01:19 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(0x0, 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:01:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:01:19 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280), 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:01:19 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:01:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:01:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:01:20 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:01:20 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(0x0, 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:01:20 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:01:20 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:01:20 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 887.390978] Bluetooth: hci1: command 0x0409 tx timeout [ 887.582860] Bluetooth: hci3: command 0x0409 tx timeout [ 887.584511] Bluetooth: hci4: command 0x0409 tx timeout [ 887.710804] Bluetooth: hci5: command 0x0409 tx timeout [ 889.438805] Bluetooth: hci1: command 0x041b tx timeout [ 889.630868] Bluetooth: hci4: command 0x041b tx timeout [ 889.631435] Bluetooth: hci3: command 0x041b tx timeout [ 889.758848] Bluetooth: hci5: command 0x041b tx timeout [ 891.486885] Bluetooth: hci1: command 0x040f tx timeout [ 891.678810] Bluetooth: hci3: command 0x040f tx timeout [ 891.679336] Bluetooth: hci4: command 0x040f tx timeout [ 891.806863] Bluetooth: hci5: command 0x040f tx timeout [ 893.041292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.042475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.044031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 893.089746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.090848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.092803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 893.353071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.354151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.355964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 893.432132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.433003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.434632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 893.534804] Bluetooth: hci1: command 0x0419 tx timeout [ 893.728708] Bluetooth: hci4: command 0x0419 tx timeout [ 893.845207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.846022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.849307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 893.851833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.852489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.859747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 893.889563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.890263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.891329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.892064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.892914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 893.894172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:01:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r0, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:01:43 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:01:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:01:43 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:01:43 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:01:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:01:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:01:43 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:01:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:01:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:01:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r0, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:01:43 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:01:43 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:01:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:01:43 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:01:43 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:01:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 910.750805] Bluetooth: hci1: command 0x0409 tx timeout [ 911.006818] Bluetooth: hci4: command 0x0409 tx timeout [ 911.070794] Bluetooth: hci3: command 0x0409 tx timeout [ 912.798807] Bluetooth: hci1: command 0x041b tx timeout [ 913.054874] Bluetooth: hci4: command 0x041b tx timeout [ 913.118815] Bluetooth: hci3: command 0x041b tx timeout [ 914.846852] Bluetooth: hci1: command 0x040f tx timeout [ 915.102828] Bluetooth: hci4: command 0x040f tx timeout [ 915.122642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.123986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.126351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 915.166844] Bluetooth: hci3: command 0x040f tx timeout [ 915.215870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.217533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.219688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 916.359025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.359792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.361426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 916.387523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.388245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.389470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 916.444575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.445479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.447237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 916.477888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.478673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.480544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:02:05 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:02:05 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:02:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r0, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:02:05 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:02:05 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:02:05 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:02:05 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:02:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:02:05 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:02:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:02:05 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:02:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:02:05 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:02:06 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:02:06 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:02:06 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 933.151816] Bluetooth: hci1: command 0x0409 tx timeout [ 933.406823] Bluetooth: hci4: command 0x0409 tx timeout [ 933.470853] Bluetooth: hci3: command 0x0409 tx timeout [ 933.472426] Bluetooth: hci5: command 0x0409 tx timeout [ 933.535416] Bluetooth: hci7: command 0x0409 tx timeout [ 935.198794] Bluetooth: hci1: command 0x041b tx timeout [ 935.455199] Bluetooth: hci4: command 0x041b tx timeout [ 935.518845] Bluetooth: hci5: command 0x041b tx timeout [ 935.519480] Bluetooth: hci3: command 0x041b tx timeout [ 935.582825] Bluetooth: hci7: command 0x041b tx timeout [ 937.246789] Bluetooth: hci1: command 0x040f tx timeout [ 937.502787] Bluetooth: hci4: command 0x040f tx timeout [ 937.566836] Bluetooth: hci3: command 0x040f tx timeout [ 937.568790] Bluetooth: hci5: command 0x040f tx timeout [ 937.630787] Bluetooth: hci7: command 0x040f tx timeout [ 939.294797] Bluetooth: hci1: command 0x0419 tx timeout [ 939.550809] Bluetooth: hci4: command 0x0419 tx timeout [ 939.614804] Bluetooth: hci5: command 0x0419 tx timeout [ 939.615326] Bluetooth: hci3: command 0x0419 tx timeout [ 939.678869] Bluetooth: hci7: command 0x0419 tx timeout [ 942.134338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.135167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.136494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 942.242029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.242829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.266467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 942.271163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.271873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.273215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 942.312118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.312990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.313961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 942.334850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.335545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.342021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 942.405554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.406632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.416614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 942.424456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.425418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.426696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 942.473386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.474150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.475418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 942.528161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.528930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.530299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 942.610040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.610886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.612282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:02:31 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:02:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:02:31 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:02:31 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:02:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) 18:02:31 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:02:31 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:02:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:02:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:02:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:02:31 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:02:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:02:31 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, 0x0, 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:02:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:02:31 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:02:31 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) [ 958.814795] Bluetooth: hci1: command 0x0409 tx timeout [ 959.070779] Bluetooth: hci4: command 0x0409 tx timeout [ 959.134836] Bluetooth: hci5: command 0x0409 tx timeout [ 959.135947] Bluetooth: hci3: command 0x0409 tx timeout [ 959.198778] Bluetooth: hci7: command 0x0409 tx timeout [ 960.862839] Bluetooth: hci1: command 0x041b tx timeout [ 961.118816] Bluetooth: hci4: command 0x041b tx timeout [ 961.182784] Bluetooth: hci3: command 0x041b tx timeout [ 961.183308] Bluetooth: hci5: command 0x041b tx timeout [ 961.246775] Bluetooth: hci7: command 0x041b tx timeout [ 962.910873] Bluetooth: hci1: command 0x040f tx timeout [ 963.166820] Bluetooth: hci4: command 0x040f tx timeout [ 963.230811] Bluetooth: hci5: command 0x040f tx timeout [ 963.231397] Bluetooth: hci3: command 0x040f tx timeout [ 963.294822] Bluetooth: hci7: command 0x040f tx timeout [ 964.958842] Bluetooth: hci1: command 0x0419 tx timeout [ 965.214778] Bluetooth: hci4: command 0x0419 tx timeout [ 965.278823] Bluetooth: hci3: command 0x0419 tx timeout [ 965.279474] Bluetooth: hci5: command 0x0419 tx timeout [ 965.342774] Bluetooth: hci7: command 0x0419 tx timeout [ 966.433240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.434055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.435597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 966.487297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.488129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.489485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 966.638368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.639182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.662287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 966.689437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.690282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.691754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 966.968654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.970039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.971166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 967.031642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.032508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.034938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 967.347134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.348012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.356114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 967.380706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.381383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.382654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 967.526192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.527358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.539686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 967.565131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.565935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.567482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 967.808778] perf: interrupt took too long (12349 > 12341), lowering kernel.perf_event_max_sample_rate to 16000 18:02:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:02:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:02:56 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:02:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:02:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:02:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:02:56 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, 0x0, 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:02:56 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:02:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:02:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:02:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:02:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:02:56 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, 0x0, 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:02:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:02:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:02:56 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 983.902786] Bluetooth: hci1: command 0x0409 tx timeout [ 984.158828] Bluetooth: hci3: command 0x0409 tx timeout [ 984.222803] Bluetooth: hci7: command 0x0409 tx timeout [ 984.286779] Bluetooth: hci4: command 0x0409 tx timeout [ 984.287287] Bluetooth: hci5: command 0x0409 tx timeout [ 985.950848] Bluetooth: hci1: command 0x041b tx timeout [ 986.206781] Bluetooth: hci3: command 0x041b tx timeout [ 986.271801] Bluetooth: hci7: command 0x041b tx timeout [ 986.334828] Bluetooth: hci5: command 0x041b tx timeout [ 986.337306] Bluetooth: hci4: command 0x041b tx timeout [ 987.999773] Bluetooth: hci1: command 0x040f tx timeout [ 988.254806] Bluetooth: hci3: command 0x040f tx timeout [ 988.318772] Bluetooth: hci7: command 0x040f tx timeout [ 988.382882] Bluetooth: hci4: command 0x040f tx timeout [ 988.385777] Bluetooth: hci5: command 0x040f tx timeout [ 990.047964] Bluetooth: hci1: command 0x0419 tx timeout [ 990.302773] Bluetooth: hci3: command 0x0419 tx timeout [ 990.367765] Bluetooth: hci7: command 0x0419 tx timeout [ 990.432161] Bluetooth: hci5: command 0x0419 tx timeout [ 990.432714] Bluetooth: hci4: command 0x0419 tx timeout [ 991.611851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.612615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.613943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 991.697411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.698224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.699521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 991.868771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.869495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.870749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 991.953679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.954480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.955781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 992.030451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.031605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.033069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 992.100393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.101150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.102573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 992.378503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.379360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.398098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 992.426037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.426702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.432631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 992.452895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.453704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.457541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 992.474886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.475589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.476869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:03:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:03:20 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:03:20 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:03:20 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:03:20 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:03:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:03:20 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:03:20 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:03:20 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:03:20 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:03:20 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:03:20 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:03:20 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:03:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:03:20 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:03:20 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x0, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1008.030785] Bluetooth: hci1: command 0x0409 tx timeout [ 1008.222764] Bluetooth: hci3: command 0x0409 tx timeout [ 1008.286799] Bluetooth: hci5: command 0x0409 tx timeout [ 1008.289147] Bluetooth: hci4: command 0x0409 tx timeout [ 1010.078815] Bluetooth: hci1: command 0x041b tx timeout [ 1010.270781] Bluetooth: hci3: command 0x041b tx timeout [ 1010.334762] Bluetooth: hci4: command 0x041b tx timeout [ 1010.335251] Bluetooth: hci5: command 0x041b tx timeout [ 1012.126768] Bluetooth: hci1: command 0x040f tx timeout [ 1012.318791] Bluetooth: hci3: command 0x040f tx timeout [ 1012.382779] Bluetooth: hci5: command 0x040f tx timeout [ 1012.383292] Bluetooth: hci4: command 0x040f tx timeout [ 1013.229204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.230040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.231684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1013.304805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.305530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.306895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1014.366765] Bluetooth: hci3: command 0x0419 tx timeout [ 1014.430814] Bluetooth: hci4: command 0x0419 tx timeout [ 1014.431672] Bluetooth: hci5: command 0x0419 tx timeout [ 1014.603383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.604974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.611473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1014.623100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.624940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.626947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1015.018083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.019674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.021992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1015.061042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.062602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.064806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1015.116799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.118131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.120241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1015.143675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.144994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.147053] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:03:43 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:03:43 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:03:43 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x0, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:03:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:03:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 18:03:43 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:03:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:03:43 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1025.878530] FAULT_INJECTION: forcing a failure. [ 1025.878530] name failslab, interval 1, probability 0, space 0, times 1 [ 1025.879961] CPU: 0 PID: 62270 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1025.880588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1025.881325] Call Trace: [ 1025.881580] dump_stack+0x107/0x167 [ 1025.881915] should_fail.cold+0x5/0xa [ 1025.882263] should_failslab+0x5/0x20 [ 1025.882608] kmem_cache_alloc_bulk+0x4b/0x320 [ 1025.883016] io_submit_sqes+0x6f76/0x85c0 [ 1025.883391] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1025.883838] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1025.884277] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1025.884716] ? lock_downgrade+0x6d0/0x6d0 [ 1025.885089] ? find_held_lock+0x2c/0x110 [ 1025.885456] ? io_submit_sqes+0x85c0/0x85c0 [ 1025.885849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1025.886276] ? wait_for_completion_io+0x270/0x270 [ 1025.886707] ? rcu_read_lock_any_held+0x75/0xa0 [ 1025.887117] ? vfs_write+0x354/0xa70 [ 1025.887459] ? fput_many+0x2f/0x1a0 [ 1025.887784] ? ksys_write+0x1a9/0x260 [ 1025.888129] ? __ia32_sys_read+0xb0/0xb0 [ 1025.888495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1025.888958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1025.889428] do_syscall_64+0x33/0x40 [ 1025.889757] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1025.890204] RIP: 0033:0x7f861f949b19 [ 1025.890539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1025.892158] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1025.892832] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1025.893458] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1025.894084] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1025.894711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.895342] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:03:43 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x0, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:03:43 executing program 7: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:03:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 1026.089908] FAULT_INJECTION: forcing a failure. [ 1026.089908] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1026.090934] CPU: 0 PID: 62280 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1026.091490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1026.092161] Call Trace: [ 1026.092382] dump_stack+0x107/0x167 [ 1026.092674] should_fail.cold+0x5/0xa [ 1026.092989] __alloc_pages_nodemask+0x182/0x600 [ 1026.093365] ? mark_held_locks+0x9e/0xe0 [ 1026.093692] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1026.094174] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1026.094598] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1026.095046] alloc_pages_current+0x187/0x280 [ 1026.095404] ? allocate_slab+0x2ad/0x380 [ 1026.095734] allocate_slab+0x26f/0x380 [ 1026.096056] ___slab_alloc+0x470/0x700 [ 1026.096376] ? io_submit_sqes+0x6f76/0x85c0 [ 1026.096735] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 1026.097118] kmem_cache_alloc_bulk+0x1ec/0x320 [ 1026.097488] io_submit_sqes+0x6f76/0x85c0 [ 1026.097820] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1026.098222] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1026.098625] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1026.099017] ? lock_downgrade+0x6d0/0x6d0 [ 1026.099349] ? find_held_lock+0x2c/0x110 [ 1026.099682] ? io_submit_sqes+0x85c0/0x85c0 [ 1026.100034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1026.100425] ? wait_for_completion_io+0x270/0x270 [ 1026.100816] ? rcu_read_lock_any_held+0x75/0xa0 [ 1026.101190] ? vfs_write+0x354/0xa70 [ 1026.101491] ? fput_many+0x2f/0x1a0 [ 1026.101788] ? ksys_write+0x1a9/0x260 [ 1026.102095] ? __ia32_sys_read+0xb0/0xb0 [ 1026.102424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1026.102849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1026.103268] do_syscall_64+0x33/0x40 [ 1026.103575] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1026.103985] RIP: 0033:0x7f861f949b19 [ 1026.104287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1026.105758] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1026.106368] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1026.106940] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1026.107517] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1026.108091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.108666] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:03:43 executing program 7: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:03:43 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:03:43 executing program 7: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:03:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 1026.291311] FAULT_INJECTION: forcing a failure. [ 1026.291311] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.292292] CPU: 0 PID: 62289 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1026.292817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1026.293442] Call Trace: [ 1026.293653] dump_stack+0x107/0x167 [ 1026.293947] should_fail.cold+0x5/0xa [ 1026.294266] ? create_object.isra.0+0x3a/0xa20 [ 1026.294643] should_failslab+0x5/0x20 [ 1026.294957] kmem_cache_alloc+0x5b/0x310 [ 1026.295292] create_object.isra.0+0x3a/0xa20 [ 1026.295658] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1026.296078] kmem_cache_alloc_bulk+0x168/0x320 [ 1026.296456] io_submit_sqes+0x6f76/0x85c0 [ 1026.296800] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1026.297207] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1026.297617] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1026.298016] ? lock_downgrade+0x6d0/0x6d0 [ 1026.298351] ? find_held_lock+0x2c/0x110 [ 1026.298690] ? io_submit_sqes+0x85c0/0x85c0 [ 1026.299056] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1026.299459] ? wait_for_completion_io+0x270/0x270 [ 1026.299860] ? rcu_read_lock_any_held+0x75/0xa0 [ 1026.300243] ? vfs_write+0x354/0xa70 [ 1026.300554] ? fput_many+0x2f/0x1a0 [ 1026.300855] ? ksys_write+0x1a9/0x260 [ 1026.301167] ? __ia32_sys_read+0xb0/0xb0 [ 1026.301502] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1026.301933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1026.302360] do_syscall_64+0x33/0x40 [ 1026.302667] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1026.303089] RIP: 0033:0x7f861f949b19 [ 1026.303395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1026.304898] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1026.305526] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1026.306113] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1026.306690] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1026.307277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.307874] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 [ 1030.686768] Bluetooth: hci1: command 0x0409 tx timeout [ 1030.942757] Bluetooth: hci4: command 0x0409 tx timeout [ 1031.006786] Bluetooth: hci3: command 0x0409 tx timeout [ 1031.006894] Bluetooth: hci5: command 0x0409 tx timeout [ 1031.070804] Bluetooth: hci7: command 0x0409 tx timeout [ 1032.735173] Bluetooth: hci1: command 0x041b tx timeout [ 1032.991255] Bluetooth: hci4: command 0x041b tx timeout [ 1033.054828] Bluetooth: hci5: command 0x041b tx timeout [ 1033.055567] Bluetooth: hci3: command 0x041b tx timeout [ 1033.118840] Bluetooth: hci7: command 0x041b tx timeout [ 1034.783803] Bluetooth: hci1: command 0x040f tx timeout [ 1035.038801] Bluetooth: hci4: command 0x040f tx timeout [ 1035.103765] Bluetooth: hci3: command 0x040f tx timeout [ 1035.104339] Bluetooth: hci5: command 0x040f tx timeout [ 1035.166780] Bluetooth: hci7: command 0x040f tx timeout [ 1036.831335] Bluetooth: hci1: command 0x0419 tx timeout [ 1037.086789] Bluetooth: hci4: command 0x0419 tx timeout [ 1037.151200] Bluetooth: hci5: command 0x0419 tx timeout [ 1037.155457] Bluetooth: hci3: command 0x0419 tx timeout [ 1037.214778] Bluetooth: hci7: command 0x0419 tx timeout [ 1039.146231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.147029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.148704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1039.243012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.243765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.245048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1039.900149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.901451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.903193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1039.938194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.939086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.940383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1040.131555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.132770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.134215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1040.172143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.172939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.174218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1040.239821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.240525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.247197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1040.322824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.323658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.345586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1040.404748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.405627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.407028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1040.482039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.482858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.484629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:04:09 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 18:04:09 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:04:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:04:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bb0000000000000000020000ab00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ff00000000000000008088d9c7079338e10000000000000000f9ffffff00000004000000"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) kcmp(0x0, 0xffffffffffffffff, 0x5, r0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) 18:04:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:04:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1051.877206] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=6384 comm=kworker/1:4 [ 1051.895573] FAULT_INJECTION: forcing a failure. [ 1051.895573] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.897626] CPU: 0 PID: 64582 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1051.898695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1051.899514] Call Trace: [ 1051.899917] dump_stack+0x107/0x167 [ 1051.900442] should_fail.cold+0x5/0xa [ 1051.900996] ? create_object.isra.0+0x3a/0xa20 [ 1051.901651] should_failslab+0x5/0x20 [ 1051.902202] kmem_cache_alloc+0x5b/0x310 [ 1051.902786] ? mark_held_locks+0x9e/0xe0 [ 1051.903371] create_object.isra.0+0x3a/0xa20 [ 1051.904020] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1051.904749] kmem_cache_alloc_bulk+0x168/0x320 [ 1051.905417] io_submit_sqes+0x6f76/0x85c0 [ 1051.906016] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1051.906735] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1051.907450] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1051.908158] ? lock_downgrade+0x6d0/0x6d0 [ 1051.908754] ? find_held_lock+0x2c/0x110 [ 1051.909346] ? io_submit_sqes+0x85c0/0x85c0 [ 1051.909983] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1051.910682] ? wait_for_completion_io+0x270/0x270 [ 1051.911378] ? rcu_read_lock_any_held+0x75/0xa0 [ 1051.912055] ? vfs_write+0x354/0xa70 [ 1051.912592] ? fput_many+0x2f/0x1a0 [ 1051.913121] ? ksys_write+0x1a9/0x260 [ 1051.913671] ? __ia32_sys_read+0xb0/0xb0 [ 1051.914264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1051.915015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1051.915782] do_syscall_64+0x33/0x40 [ 1051.916318] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1051.917057] RIP: 0033:0x7f861f949b19 [ 1051.917594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1051.920242] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1051.921333] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1051.922357] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1051.923380] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1051.924413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.925441] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:04:09 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:04:09 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:04:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0xfffffffffffffffa, 0xfc9) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x13, r0, 0x7ee26000) write(r1, &(0x7f0000000180)="f5", 0x1) r2 = dup(r1) sendfile(r2, r2, &(0x7f0000000040), 0x3fffc000000000) 18:04:09 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:04:09 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:04:09 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:04:09 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:04:09 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:04:09 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:04:09 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1056.734815] Bluetooth: hci1: command 0x0409 tx timeout [ 1057.054761] Bluetooth: hci4: command 0x0409 tx timeout [ 1057.118801] Bluetooth: hci5: command 0x0409 tx timeout [ 1057.182773] Bluetooth: hci7: command 0x0409 tx timeout [ 1058.782754] Bluetooth: hci1: command 0x041b tx timeout [ 1059.103822] Bluetooth: hci4: command 0x041b tx timeout [ 1059.166783] Bluetooth: hci5: command 0x041b tx timeout [ 1059.231788] Bluetooth: hci7: command 0x041b tx timeout [ 1060.830748] Bluetooth: hci1: command 0x040f tx timeout [ 1061.150744] Bluetooth: hci4: command 0x040f tx timeout [ 1061.215728] Bluetooth: hci5: command 0x040f tx timeout [ 1061.278790] Bluetooth: hci7: command 0x040f tx timeout [ 1062.878771] Bluetooth: hci1: command 0x0419 tx timeout [ 1063.198774] Bluetooth: hci4: command 0x0419 tx timeout [ 1063.262794] Bluetooth: hci5: command 0x0419 tx timeout [ 1063.326754] Bluetooth: hci7: command 0x0419 tx timeout [ 1063.632770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.634240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.638859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1063.714112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.714947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.716393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1064.228224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.228998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.230274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1064.289806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.290573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.291970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1064.342806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.343582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.344909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1064.379045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.380114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.381244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1064.693311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.694142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.695605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1064.717400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.718361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.719968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:04:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:04:32 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:04:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:04:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x1ec) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40008001d00210ccde40000007e00000400020014001180c09801a7b0c7dba09475f251c743092f08", @ANYRES32], 0xc4}}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x2, 0x7, 0x3, 0xff, 0x0, 0x2, 0x20000, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9f, 0x1, @perf_bp={&(0x7f00000000c0), 0xa}, 0x8110, 0xaef, 0xfffffffc, 0x8, 0x6, 0xfffffffd, 0x1, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) 18:04:32 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:04:32 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 18:04:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:04:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1075.580474] FAULT_INJECTION: forcing a failure. [ 1075.580474] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.581904] CPU: 0 PID: 66437 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1075.582534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1075.583285] Call Trace: [ 1075.583542] dump_stack+0x107/0x167 [ 1075.583890] should_fail.cold+0x5/0xa [ 1075.584264] ? create_object.isra.0+0x3a/0xa20 [ 1075.584696] should_failslab+0x5/0x20 [ 1075.585054] kmem_cache_alloc+0x5b/0x310 [ 1075.585438] ? mark_held_locks+0x9e/0xe0 [ 1075.585824] create_object.isra.0+0x3a/0xa20 [ 1075.586219] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1075.586671] kmem_cache_alloc_bulk+0x168/0x320 [ 1075.587084] io_submit_sqes+0x6f76/0x85c0 [ 1075.587449] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1075.587888] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1075.588349] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1075.588787] ? lock_downgrade+0x6d0/0x6d0 [ 1075.589151] ? find_held_lock+0x2c/0x110 [ 1075.589510] ? io_submit_sqes+0x85c0/0x85c0 [ 1075.589898] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1075.590328] ? wait_for_completion_io+0x270/0x270 [ 1075.590750] ? rcu_read_lock_any_held+0x75/0xa0 [ 1075.591161] ? vfs_write+0x354/0xa70 [ 1075.591491] ? fput_many+0x2f/0x1a0 [ 1075.591812] ? ksys_write+0x1a9/0x260 [ 1075.592160] ? __ia32_sys_read+0xb0/0xb0 [ 1075.592524] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1075.592979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1075.593438] do_syscall_64+0x33/0x40 [ 1075.593765] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1075.594215] RIP: 0033:0x7f861f949b19 [ 1075.594544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1075.596138] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1075.596810] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1075.597437] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1075.598064] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1075.598688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.599315] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:04:33 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:04:33 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x3}]}]}]}, 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRESDEC, @ANYRESDEC=r5, @ANYRESDEC], 0xb0a) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000200)=ANY=[@ANYBLOB="01006bf58dbc19e6625bf82b000001fffffd17000000bcb104bc4cd53afeecb59be2eb95bca4828d257b19a4e78e3de0f212203dcdd04870868a5b2f74166ac9dc5ac0251d35269d396a6ea73198507a9e509d45daacc97d7d5d000000000000fc01000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x50, r6, 0x5) close(r0) clone3(&(0x7f00000008c0)={0x10c0900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 1075.761026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:04:33 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:04:33 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:04:33 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) bind$packet(r1, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000000c0), 0xe}, 0x40000, 0x100, 0x0, 0x0, 0x0, 0x0, 0xb6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xdd) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x21dfdbfe}, 0xc) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@mcast2, 0x2d}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) r7 = accept4(r3, &(0x7f0000000180)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80, 0x0) connect$netlink(r7, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) listen(r0, 0x4) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 18:04:33 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:04:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 1075.878163] FAULT_INJECTION: forcing a failure. [ 1075.878163] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.879199] CPU: 0 PID: 66459 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1075.879755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1075.880429] Call Trace: [ 1075.880653] dump_stack+0x107/0x167 [ 1075.880960] should_fail.cold+0x5/0xa [ 1075.881266] ? create_object.isra.0+0x3a/0xa20 [ 1075.881638] should_failslab+0x5/0x20 [ 1075.881955] kmem_cache_alloc+0x5b/0x310 [ 1075.882292] create_object.isra.0+0x3a/0xa20 [ 1075.882651] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1075.883073] kmem_cache_alloc_bulk+0x168/0x320 [ 1075.883450] io_submit_sqes+0x6f76/0x85c0 [ 1075.883794] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1075.884212] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1075.884614] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1075.885018] ? lock_downgrade+0x6d0/0x6d0 [ 1075.885351] ? find_held_lock+0x2c/0x110 [ 1075.885680] ? io_submit_sqes+0x85c0/0x85c0 [ 1075.886034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1075.886419] ? wait_for_completion_io+0x270/0x270 [ 1075.886815] ? rcu_read_lock_any_held+0x75/0xa0 [ 1075.887194] ? vfs_write+0x354/0xa70 [ 1075.887494] ? fput_many+0x2f/0x1a0 [ 1075.887785] ? ksys_write+0x1a9/0x260 [ 1075.888092] ? __ia32_sys_read+0xb0/0xb0 [ 1075.888420] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1075.888838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1075.889260] do_syscall_64+0x33/0x40 [ 1075.889563] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1075.889977] RIP: 0033:0x7f861f949b19 [ 1075.890279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1075.891728] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1075.892350] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1075.892936] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1075.893505] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1075.894087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.894662] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:04:33 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1080.478838] Bluetooth: hci1: command 0x0409 tx timeout [ 1080.606735] Bluetooth: hci4: command 0x0409 tx timeout [ 1080.670729] Bluetooth: hci7: command 0x0409 tx timeout [ 1080.670783] Bluetooth: hci5: command 0x0409 tx timeout [ 1082.527115] Bluetooth: hci1: command 0x041b tx timeout [ 1082.654743] Bluetooth: hci4: command 0x041b tx timeout [ 1082.718786] Bluetooth: hci5: command 0x041b tx timeout [ 1082.719303] Bluetooth: hci7: command 0x041b tx timeout [ 1084.574773] Bluetooth: hci1: command 0x040f tx timeout [ 1084.702738] Bluetooth: hci4: command 0x040f tx timeout [ 1084.766733] Bluetooth: hci7: command 0x040f tx timeout [ 1084.767248] Bluetooth: hci5: command 0x040f tx timeout [ 1085.912870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.913620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.914892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1085.984357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.985122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.986485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1086.349997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.351084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.352512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1086.391676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.392476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.393749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1086.750740] Bluetooth: hci4: command 0x0419 tx timeout [ 1086.814737] Bluetooth: hci5: command 0x0419 tx timeout [ 1086.949592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.950397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.958226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1086.965933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.966916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.968645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1087.003600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.004353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.005867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1087.029170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.030227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.031338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:04:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 18:04:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:04:56 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:04:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:04:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:04:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:04:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x24000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xffffffffffffffad, 0xdf}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0x8, 0x5b5f24bb, 0x7, 0x8, 0xeb5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0/../file0/file0\x00', 0x0, 0xffffff30, 0x0, 0x1008a, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 18:04:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1099.121677] FAULT_INJECTION: forcing a failure. [ 1099.121677] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.124513] CPU: 1 PID: 68294 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1099.125901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1099.127505] Call Trace: [ 1099.128019] dump_stack+0x107/0x167 [ 1099.128750] should_fail.cold+0x5/0xa [ 1099.129485] ? create_object.isra.0+0x3a/0xa20 [ 1099.130382] should_failslab+0x5/0x20 [ 1099.131141] kmem_cache_alloc+0x5b/0x310 [ 1099.131966] ? mark_held_locks+0x9e/0xe0 [ 1099.132815] create_object.isra.0+0x3a/0xa20 [ 1099.133684] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1099.134660] kmem_cache_alloc_bulk+0x168/0x320 [ 1099.135558] io_submit_sqes+0x6f76/0x85c0 [ 1099.136390] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1099.137224] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1099.138036] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1099.138824] ? lock_downgrade+0x6d0/0x6d0 [ 1099.139493] ? find_held_lock+0x2c/0x110 [ 1099.140158] ? io_submit_sqes+0x85c0/0x85c0 [ 1099.140874] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1099.141658] ? wait_for_completion_io+0x270/0x270 [ 1099.142444] ? rcu_read_lock_any_held+0x75/0xa0 [ 1099.143197] ? vfs_write+0x354/0xa70 [ 1099.143800] ? fput_many+0x2f/0x1a0 [ 1099.144411] ? ksys_write+0x1a9/0x260 [ 1099.145029] ? __ia32_sys_read+0xb0/0xb0 [ 1099.145691] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1099.146534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1099.147381] do_syscall_64+0x33/0x40 [ 1099.147987] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1099.148820] RIP: 0033:0x7f861f949b19 [ 1099.149421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1099.152392] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1099.153626] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1099.154782] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1099.155937] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.157102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.158251] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:04:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:04:56 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:04:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:04:56 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:04:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) [ 1099.610017] FAULT_INJECTION: forcing a failure. [ 1099.610017] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.612140] CPU: 1 PID: 68314 Comm: syz-executor.0 Not tainted 5.10.214 #1 18:04:57 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1099.613274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1099.614841] Call Trace: [ 1099.615282] dump_stack+0x107/0x167 [ 1099.615874] should_fail.cold+0x5/0xa [ 1099.616511] ? create_object.isra.0+0x3a/0xa20 [ 1099.617256] should_failslab+0x5/0x20 [ 1099.617870] kmem_cache_alloc+0x5b/0x310 [ 1099.618529] ? mark_held_locks+0x9e/0xe0 [ 1099.619196] create_object.isra.0+0x3a/0xa20 [ 1099.619911] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1099.620755] kmem_cache_alloc_bulk+0x168/0x320 [ 1099.621506] io_submit_sqes+0x6f76/0x85c0 [ 1099.622186] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1099.622994] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1099.623798] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1099.624599] ? lock_downgrade+0x6d0/0x6d0 [ 1099.625273] ? find_held_lock+0x2c/0x110 [ 1099.625943] ? io_submit_sqes+0x85c0/0x85c0 [ 1099.626655] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1099.627400] ? wait_for_completion_io+0x270/0x270 [ 1099.628190] ? rcu_read_lock_any_held+0x75/0xa0 [ 1099.628960] ? vfs_write+0x354/0xa70 [ 1099.629566] ? fput_many+0x2f/0x1a0 [ 1099.630164] ? ksys_write+0x1a9/0x260 [ 1099.630781] ? __ia32_sys_read+0xb0/0xb0 [ 1099.631445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1099.632296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1099.633160] do_syscall_64+0x33/0x40 [ 1099.633765] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1099.634591] RIP: 0033:0x7f861f949b19 [ 1099.635165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1099.638129] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1099.639367] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1099.640530] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1099.641698] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.642849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.643999] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:04:57 executing program 2: lseek(0xffffffffffffffff, 0x0, 0x3) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x602, 0x0, 0x0, @u32}, @nested={0x8, 0x64, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x24}}, 0x40c4) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000380)=0x7851669e) getdents64(r1, &(0x7f0000000140)=""/255, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x4010) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0x210041) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) unshare(0x48020200) 18:04:57 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:04:57 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1104.414788] Bluetooth: hci1: command 0x0409 tx timeout [ 1104.670775] Bluetooth: hci4: command 0x0409 tx timeout [ 1104.734717] Bluetooth: hci7: command 0x0409 tx timeout [ 1104.735212] Bluetooth: hci5: command 0x0409 tx timeout [ 1106.462723] Bluetooth: hci1: command 0x041b tx timeout [ 1106.718983] Bluetooth: hci4: command 0x041b tx timeout [ 1106.782782] Bluetooth: hci5: command 0x041b tx timeout [ 1106.783297] Bluetooth: hci7: command 0x041b tx timeout [ 1108.510731] Bluetooth: hci1: command 0x040f tx timeout [ 1108.766730] Bluetooth: hci4: command 0x040f tx timeout [ 1108.830728] Bluetooth: hci7: command 0x040f tx timeout [ 1108.831209] Bluetooth: hci5: command 0x040f tx timeout [ 1110.558771] Bluetooth: hci1: command 0x0419 tx timeout [ 1110.814747] Bluetooth: hci4: command 0x0419 tx timeout [ 1110.878731] Bluetooth: hci5: command 0x0419 tx timeout [ 1110.879206] Bluetooth: hci7: command 0x0419 tx timeout [ 1111.203391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.204217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.205826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1111.244308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.245048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.246704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1111.584529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.585290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.586594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1111.627488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.628193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.629535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1111.989975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.990769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.992472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1112.038428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.039473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.040539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1112.097489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.098836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.106539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1112.122056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.122892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.124139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:05:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:05:22 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) preadv2(r0, &(0x7f0000001500)=[{0x0}], 0x1, 0x0, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@loose}], [{@obj_user={'obj_user', 0x3d, '[+['}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@dont_hash}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@fowner_lt={'fowner<', r1}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@appraise_type}]}}) r2 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) getpeername(r5, &(0x7f0000000400)=@xdp, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f00000004c0)) syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, r6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="cf0a0000010000002e2f66696c65300068d7877f78697faca5b9eb4eb2ff2dde43014a5cbb25305acc3c96e3f7f335d4ef0c5b4359572d484c87b4837af01d3ecca5b90e0f74f671896f11c4ae9fa7eada0dff21f3d2ec8a5c1223b4667aa2c4572ce146606df325e563e08baff01992b432a13431a1f329cb3a478bfb4cfc98720af2c9dd7f9ad5f956747cbbd9f0cc58ab5f2a9a380cb325fa318aaca93b4f4b86703b23ab4b93ed3e86f4ab822bbf"]) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) 18:05:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:05:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:05:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:05:22 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00']) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:05:22 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:05:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 1125.436371] FAULT_INJECTION: forcing a failure. [ 1125.436371] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.438119] CPU: 0 PID: 70158 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1125.439015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.440067] Call Trace: [ 1125.440408] dump_stack+0x107/0x167 [ 1125.440899] should_fail.cold+0x5/0xa [ 1125.441400] ? create_object.isra.0+0x3a/0xa20 [ 1125.442008] should_failslab+0x5/0x20 [ 1125.442508] kmem_cache_alloc+0x5b/0x310 [ 1125.443045] ? mark_held_locks+0x9e/0xe0 [ 1125.443579] create_object.isra.0+0x3a/0xa20 [ 1125.444146] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1125.444801] kmem_cache_alloc_bulk+0x168/0x320 [ 1125.445395] io_submit_sqes+0x6f76/0x85c0 [ 1125.445924] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1125.446551] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1125.447187] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1125.447804] ? lock_downgrade+0x6d0/0x6d0 [ 1125.448331] ? find_held_lock+0x2c/0x110 [ 1125.448866] ? io_submit_sqes+0x85c0/0x85c0 [ 1125.449431] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1125.450056] ? wait_for_completion_io+0x270/0x270 [ 1125.450675] ? rcu_read_lock_any_held+0x75/0xa0 [ 1125.451274] ? vfs_write+0x354/0xa70 [ 1125.451754] ? fput_many+0x2f/0x1a0 [ 1125.452219] ? ksys_write+0x1a9/0x260 [ 1125.452706] ? __ia32_sys_read+0xb0/0xb0 [ 1125.453235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1125.453903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1125.454564] do_syscall_64+0x33/0x40 [ 1125.455042] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1125.455695] RIP: 0033:0x7f861f949b19 [ 1125.456176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.458501] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1125.459479] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1125.460385] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1125.461285] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.462174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.463056] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:05:22 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x0, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:05:22 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00']) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:05:23 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00']) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:05:23 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x0, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:05:23 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x0, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:05:23 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:05:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x3, 0xde4, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) getpeername(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000240)=0x80) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x3, @empty, 0x1a1}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x29, 0xd5, 0xc6, 0x9, 0x6f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7800, 0x9}}) sendmmsg$inet6(r1, &(0x7f0000001e80)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3c}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000700)=[@dstopts={{0xc8, 0x29, 0x37, {0x3b, 0x15, '\x00', [@calipso={0x7, 0x58, {0x2, 0x14, 0x3f, 0x0, [0x4, 0xb5, 0x7ff, 0x6c6, 0x77, 0x100, 0x10000, 0x7, 0x1ffc0000000000, 0x8]}}, @calipso={0x7, 0x50, {0x3, 0x12, 0x6, 0x7f, [0x0, 0x3, 0x0, 0x1, 0x7c5, 0xff, 0xa7a, 0x401, 0xfffffffffffffff7]}}, @padn={0x1, 0x1, [0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r2}}}, @rthdrdstopts={{0xc0, 0x29, 0x37, {0x29, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @remote}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x8, 0x3ff, [0x5, 0x20, 0x9, 0x3, 0x8]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x6, 0x1ff, [0x9, 0x0, 0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0xd27}, @hao={0xc9, 0x10, @mcast2}, @generic={0x0, 0x3, "b771b5"}, @hao={0xc9, 0x10, @private1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x40}}, @dontfrag={{0x14, 0x29, 0x3e, 0x200}}], 0x1e0}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x401, @mcast2, 0x7fffffff}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000580)="b0992b49ec94a98b1add276622b8501b3f367854b12a59efb14f80bdf11dc83172f83060c3b2436c47d2373c97ae5d1013a87ff65f8b87509d2034d60bd17ff47a49e12e31127b381462ea7c38ceecc9da6f9a3179460419658d83f8efe5a0a0c9295390eba993e394617b3cafd9fd2e6b8dfbb7c4f7ea8979035fd04832f0be5db8100e4daf53015988aa08b77815787515f95c07178331ca58e0083cecf21f52f8539759819ec95fbf92ea24b78f499ae8d253", 0xb4}, {&(0x7f0000000900)="243929b19064d6eea7d8e28851ead9046ec8eb275d2a622d729ccb2c4357f140749a89f52b97055b926c4c985444eae84f73e3075c5e730b36a1c1822e1aa8670b88bd89ddf408b6562e7462fdb602242e5ef7b0c1cc3970b021b4f5e40a7569d5cf3514d21a385af9c3899c798a28385f91e02a6cfe087fc9c8c1fdf5c83fb542581b178f2656a5a89bc22385771e79bf8f1de955a8ad1d94637d559369a4f1aea39ae9d6a606ab47a4ec9826051e43db892c158ea5d54186ac52b13f3bd30284894fb19b1973fc1b2f", 0xca}, {&(0x7f0000000500)="dd6973af1b842da6f6b92176ad6c42278cae30e559c5d32b5b40e0ea2d12b31ef867e59e48e0aa2daea6b73c00e16864ae7a6ce74c0b8066543040", 0x3b}], 0x3, &(0x7f0000000a00)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x98, 0x4, 0x2, 0x8, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hoplimit={{0x14, 0x29, 0x34, 0x62}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hoplimit={{0x14}}, @rthdr={{0x88, 0x29, 0x39, {0x1, 0xe, 0x0, 0x80, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private1, @mcast1, @private0]}}}, @tclass={{0x14, 0x29, 0x43, 0x80000001}}], 0x120}}, {{&(0x7f0000000680)={0xa, 0x4e20, 0x0, @private1, 0xff}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000000b40)='\v', 0x1}, {&(0x7f0000000b80)="eb7d1d4049515e0df52a09e907ab6d06b37fdcb374f27e404957c08b494a778310c4", 0x22}, {&(0x7f0000000bc0)="c664ba10cf4f5a387776ae9cbf8e9b743a07e7444843410cfa480abb59c8432c64fd814b2cccd99a124e4681665371540d415e0049c8482f3f515eab8e296c7232247d491a45c3527224c4e52c6ebbd2fd5e2242a572d4247b0272b6a69c622fb773d0b26da8d44a46cb0fbdb84d879a24ae748461aeddfdb669", 0x7a}, {&(0x7f0000000c40)="b5c229275ea7abb149fbae6d329d2778204b241d2f99e5be87bb986ee543b1c4e569d021e34612aa3cb03af1dbc4f9bc5beb587bc52d31a2292a3a51f32b8389da7d15cfb820f58a9205f629499cb494cadfe7b6c0f97157b6cf53afe93f83822473d1b792e7ff40a09e1b43e9f0e5741a96cb7289be9fd65575e80f2a36ce757cd27cb4a8c198656e50b2a0ef201fd2e73491984024492eb9a503e6940b1119142204192bb68adf3119e712a58faea7f1ef494aa8d90a77415b7e6f54d5f3d41793ad270fc5e750fb6461a33c6d8ecea96549dca6d398cd47ecba0b949b71526f9647802e447b07789d2f645ceca0c859ba5b969d12189318d582f0fe080f9e21b135159195c08fe114322df66a2be7dff0fb1df7758e9fbb892fb3f5a6fcd5fd6e5644064c61b12a8ba792af77e6b7ec85596e09f80edeb795892a5d9cbde9fefefb029f6748247b2904eee93b0df21b2e11984140b860d4294aec79df34aece0e0a12d39259cec4c28724c4e2f9a9fb5416a22fb22e84e38d1e4dd059b37c88aa73a83148e06db2325ddcf1f28e1d70a423902175c9c0678fe2f8260f8701039bd05caaa02a58b62f1e93486339a0e0564a174a374256e03ca8de35900ccce83b40a8589e0413614806ec760855cf878c862b68591da8db44aed9274c313de8232cae96b6a3e828806330b9305a00ede3d04f67738cbe488497776f1745690c851f5917e83ee56cb2e8d137806e631075bf777391df88d81154838ca2f9545351221f9a418fd4630efc5477dbd26a90cf6bb56648f1d3864f06a905661d821a1b3dcd3ebc66b6b301dc54391b540a719922a97623c9f70278e06deb1d6cc3b44455703fedf2025b82967d8aa15855f9f22c39acb850e1895c316d6776a7df12cb75fae9425d6a351d7ef911ca160f68e02538d563eb0998ec845008757c689b8574dbb017005bc65eb92c95daa351e1ea5190551cf8e12709de08d3cbe55d14b10ddcff4977e2f4fc8092cf1a052762b3adca66f775598949573123457dd1a204402eec00be8cf98de49ef9461f19717abb6dd2dfe55c8d2b66f83bca4a6f22f1fcfc05f252bed830973d071dbe375855d0c832215f7f41ea223ca62a5486f7be9dce3d5be1daed3ab591f11a70a2ba9d2ec8f3330fd7c01d1990efe92d4100d85099fae1506971b6b46296a62f763d75b2dadf574f7e8c36f2db5c49b975bca7aeb33f37b3aa0c34a5d7d817054bb3b0614de5cd8cae8c8b368c24867655c3503633850d6a7b6c31efe1e44d2e93646c397ff3f7211500be48dc96cfb3140d63e3c59f1e8766339cdb6d8c15679796ad1eb61c6978d485104a320bca897160ebfc2423afeabda4af2da3ebcc74e1b12a543d8f2dce5b6f124a50eb82978dd1d65bde134765278ce7264824b163ee76c59462a3b6c0251cdc850bad804723b442d6660dfd389b8cacbeae5b756b2ac66c094733474833fb810fcccd14eaa77298fe28673735c1c848d79844fbfadc137de905275a04bd1e9c13dcde235859c6e64bc47f961b3757234ed2c149e91a25d128b80d87a098ee092e237adb0f3bfc5dcecac21e3dbb307408295bcbadcaeb7b1e22451ec08bbc60b83179d26b589dd6d0fc8f75a1f0bc88e0ad67f6f107252f069d7c76e1f0ca73daf54701d048afa13a783b59add517dd1382f7eada25ad300c5ae968158ade130ac68bf8d81cdcec1d5da30e6bd4571b8ed5d4631f82648d25a8dd73907319d51d951a92ab87ac27253d80ec980479ee0c5b1b0191ff6ef60e3142fe51fd1410372ebea01afe74eaa1457aa4128784d5081ae651d2280d06d22c8206de5fa56bb4917a40d37fdcd4480890ab2a3c307b13dee7d33b4d5a20626520dc90bf0a1f79faddc2cd9ce054abd605e6e6fd4a033a0c22fd3dc9d381531ea464f3a962be1b8a9d0bb90b0c22cd2daa5f4578c98546354138136791cc2601ec229e7ea653b1af54af52a488884a5c7d27f9adc671f1a94ce97426f6cb9fc42f9e4c610dd518cf969538f2df75c9007ecce052a67fd5709b76780dbe627c1acf8bd73a0b09b870cbb16096cc5be44c919c1321be84eae3dd90448ccd3e3a032b30bcf75f8da8b25c4ab9e2d39ac0aab647effda509b601e2492610f4e6a71834a20198c2c1caa22ace159f6351bbad4fc965849aef7ec4442538b1ab92a0bdaef2799797cf0813e46fc332140a2bf6dc6cc3820fd20e9f5eef2285aa3112d8365f069a4f7bccfe617e600c23b6ff75ac85031da631689eab40b0446274b64f8cc60c02dad00fe88d6a21f20caae8611bdcff7f55216d760009367f7816690075f39341f9d85214492be085008ff48d3822e366c67debf6ab4e8b6521728d72b682e41749d94dd0cca5423b0c41901e5a4ad5a4855ca8d91980b05ec3072ed6871e65ce5cd4a24f4cabb2746b8d2d3e380d4708af1333143c797c4b12ea7d296a5228d08276b663b549e9e2629e3ac978cd20797f3f3b0fa94d51de12d9373d219837ba707ffefe03b291d5b22e5ee371e2771975d643c28d05f4c2cf70aba51665544398a5b609bd1d42149ec9f044cb19c6d0b326a4dc7704f227bf39b308696de0dd572c6829320a77ceadcf6e92c4ce6380895bd6e700f27ecf0331e74174fe83182dde60263ec63f252f03ba31f39e4d90d8e2ebf5395f932ef8ded76a67f93ca4eb0ab3e7b7d3881253c11ffaab9f30c4bc0db63ae785783aa563f41569c9e2ee854078c9b878eb6cb9cd4893589d802f1b84e570ce096e16bd5f5f35834ef43862a1e646e5d28cbd809135d935cd972f54a209e3885f124441918e1a61d68bee5b60c288c48e1d05d45c47fb5163ffee417420034d2a6fdfae01626967c52f2e4e980fd2a4e2403154dbd9b60a01eadd3946f09a757bc050382f482e6e491c83232e460f73ee9cc01eb3bc3d412a8712c88289949a01a90f53d8cd1b748811265e5bd8002730e7c5c280e46a4f596a85e60e2d4a72581b6bb454e8a335c667264154fe01b61692e220bfdf370bd9831d07aca2a54c7778ebb7cfc068236c35e55fe0f6d065fc91a73923d5b3d72b7b4b77f9aa12d7d958334365995559b23a7f3f890b17b948929bf0a5d9a19a6de68820edde240a69bd4ee06f1cd55965a05aff2b6c72dbeffb7bc0a5c17a1283ce4a59d018e64f1b5204d3e991aaccc90e9107a7b7530e68e513d3361ec63d443c526c47566dd750f33f7761cffe7e367b49c78f44eda890657c203e20bcb43c69b48af77228525540033982b161d570d046b2db963d4527f02bdd666d803bb651cc9656428388ef3aaeab9cdd278f6afa09897ee63ede83e40cae8da245e895019066996a824e790ff99ffabe06028613db05e50c31fc042ece9913375a86ace0ddfc85168b06aad86152cc64f59c5f1d1bc3beb65fc28e8c16b4a7148c81ea3de90b03bd6ed4582351e1ec2b3e21b808d378df23dc1c4ea80503b2f85e24bd32c3db16710c0a371895ccd8e64d9f1d85146680141dea4a8eec529aa11073a7f5783deb21a5d16e1df45a981029744e27b9540db8cfbad82da5c5f2e43d4afc8dcb9ebee19fd987a38b76c84b87901f32c292e4110fe6c2bcac0dc0f5289bfe6597cead0012f617a622dc8074a30ba875cc56713d57fbde12c0956e5be72e6d9f25e9bcbf1e9d586b31bd6b80cf57c6a4ac2c59df0711a6f40e0bf2982e8b8f593c7da98133694d62920e10f70a0b17c35029756c0f648eaa64d478b0c907ec644d21f67f81acbd5467fde141a6a3a32f030c43948979a26bf7150e09a61f2371e59d4c5250616c9edfef82c2891592119b44e404e49fbb1ee6d2c6567b988c3eefe1a62a953537b95c5aeb562d258ce37417d91728229d193855ab0ff127223b8dc009256094623545bc1303c47ca98d545933bb86a2631656182f4be754f09a9fb3ff1f8fa9130b710b5f483def857ccd54aad69ae86b2294304f6ae5f576a752b070081c78a4119d1c2a954f8d3c5965c33a20db01f29267c89dfb8626d9f2cf9c6e588c724de2e5aa261928b03cfea6cca10fce87836c3f67db32bd13931810f383c6b65704e56c70daf0166406d921ccc19629c3cfca82d02ecdab4675cc4e479b9ebe65a492e3e785da8639d8331629b734c5a99de832cd6b627d5cf46fc6594fc61d79b4511693f23699111a2cfb63848b30d345784c6d92c8ab1e17237735af66525daeb5bde091cc5801ac6744d4edd727996305536f9145ddda0569e0f92d651ed3fbff6c05baa1ac50443eff4b7669e8ef2179eaedd19f85afba93985816a290dfc6b5f843446d6da05cc3137fd6dc3cde51180e2404bd6dfa224857e3c6b6e1d20001ef6c179d0a037a8a0ed3c48ef36607906338bd3a09f682b49650e4e0f14a1ee7ecffd8c66fd54e9347dc543e1265a0f3a8d88e6464243e079d65ae40e8552a0ee208b263c3dd4655abf50492ad7913b0f32c65038c15ca9ea7ceccd38d406af2a60345d2d854bc4222bf85f39a9c77642752436c08f3d8fd1dd2e8d6d21e14cea59d4e3ab94401a19c203856d7c36dc25d092c21c1286a56aaa4e5b7f57e35d8875d649cd3c3e2674deda1bfcae008138a36915ad44566f9893a546f84e4eeca0335b138e9800a0875248eb7dfc13ef2147a0f60c1d0c22adb4b9dc6ca548e00696daf5ab518c155d77d5cfa414cfdac88be99bf06f9de4ba5b9a96c117498ae72f97b32e2f9de966031fbeed97eec39569b7c08c42c3f074b17f82523559c4d4d763b82b7b383d70dca0c6b82556075ff1b4bc01a5f6fee4646fce4e7257012ff0821cb54e9a10b5c473b48295477be3f32729858398499051cfd200b518ab0cc1dc2b490c86f2f61e2eea8d480d2d1bb43fecbf9b2478bdf90171266e87f5d0e4e6c6b1d44f27fcabfe2b75d558a543681d00b4d4c5d11951fe7efaddca8d93237f94386c8018b226b3b0e7bc548b8a9b52a10e3488f30afe98c60246e72ecfa10101793ac797c22406f1a1821cd20986e972e94def0d162c5eaab309313558607b0a871dbfcbd8e60d7ce9a10cddb6dfb355b79cc3c388b86e4af58f001ba8c198af2c1b26122209390d005757aeb1e043f580ce762be8f8d971ac2d47d583e113c2859096b3f53c180e11444cf873a1e16c03171461c2f236c9c4a490a58b84389b8607723836d1c2239c2393e7e3703c58ec67632f8ef23fe1c1b2955672b56d07d9cd3c4926ccaaaf08713e2eee88a57ccab127d058046c2e0f2f367bed1930a6da047458e6733cf2a7707db28359db2d0905c4c8fe47800cb0c88646d5de9e593e894a208079ab29468c08c9b06983a86585066a95aee3fc84ee5b7eebcee8802649f8bb2f034dd26fd9bd39a3e3d7d180b6ca9964f0b1741382df073bee6a85072957f8cf19b1bc26e9d56705eb32972d0dc32a7627317cc4cd0e85438d297081e5c3489262d45ae9060038bf01d735e3727abea5d740214b5f43f7d20d03c29d817f0d8e21d4477dc00c692d34d72fef81c33468bf1884b35a34438f4ea78ccd8f2c61e9a8c1eaee847f5921652038fb23fc3c83c178834ad5ae8b178b235a887a50c922aea11d79b0763ac02a75f95aadcdb0faa65efcd4624602f65230c0e7f2fea8ad08cb14536536967da1c5325cd10368bd56418b64fe71ada30566906ba3167a9d720c0291f8446a3a0d0813dcd6d2ea82404bbbee6f37159b9c84dcb4ec780c88b4997134921b77232bab981b5ac2a6a430746430e7df8e2e8aba99a5dfdeb735632c27496c38126f4", 0x1000}, {&(0x7f0000001c40)="9dcfa715acd88ac89e177789a857f6af3ad26754129d8193919489910a62e27a51ae8ce373b28d691d034cfd9b0035070ab0a4ce2bcd8f1a368215d7ebb7fed107c9e9529dcdc8750bef554d9a84f5e3daf5dac2a662bf235b037fb2332945f299142b52a47e3c769ee90281aca144c4411362e35bcce88ea9284607b5b80a4290ea639c1fc204d4ab185fa1bd3ed0b89e151b2ed12b46041115ab9a4e7be43e7fc64c1aae3d28fc8e41ab22aa63d5b49cf093a4a8f79ddbf08e6651ddf6e5307dec2a57ccd63ddc5375eb72fa704d1e1191009a72cef542d1c8e159e31094f8decbcd010e4e2a8907b0e089063d285ac9fa3a929e12", 0xf6}, {&(0x7f0000001d40)="eaa52e7f9a7b39f6a98dd0eb56fdcffdfa31df0fd923da8b40d7afaf5e6df2892bb37e21e3dd4e00a07bc2435166d0794983457f9265471adc607d1850d98a05f09d8b3b18194173b447", 0x4a}], 0x6, &(0x7f0000001e40)=[@tclass={{0x14, 0x29, 0x43, 0xfffffff7}}], 0x18}}], 0x3, 0x40440c0) 18:05:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) [ 1125.930132] FAULT_INJECTION: forcing a failure. [ 1125.930132] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1125.932104] CPU: 1 PID: 70182 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1125.933175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.934435] Call Trace: [ 1125.934847] dump_stack+0x107/0x167 [ 1125.935403] should_fail.cold+0x5/0xa [ 1125.935996] _copy_from_user+0x2e/0x1b0 [ 1125.936608] iovec_from_user+0x141/0x400 [ 1125.937245] __import_iovec+0x67/0x590 [ 1125.937845] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1125.938656] io_import_iovec+0x581/0x1120 [ 1125.939284] ? io_complete_rw+0x230/0x230 [ 1125.939930] ? lock_downgrade+0x6d0/0x6d0 [ 1125.940575] ? unwind_next_frame+0x13ef/0x1a90 [ 1125.941293] io_read+0xe14/0x11e0 [ 1125.941847] ? kiocb_done+0xc90/0xc90 [ 1125.942437] ? lock_chain_count+0x20/0x20 [ 1125.943088] ? lock_chain_count+0x20/0x20 [ 1125.943727] ? stack_trace_save+0x8c/0xc0 [ 1125.944371] ? stack_trace_consume_entry+0x160/0x160 [ 1125.945169] ? lock_acquire+0x197/0x470 [ 1125.945781] ? __lock_acquire+0xbb1/0x5b00 [ 1125.946434] io_issue_sqe+0x2e8a/0x7700 [ 1125.947053] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1125.947858] ? lock_chain_count+0x20/0x20 [ 1125.948499] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1125.949309] ? io_connect+0x610/0x610 [ 1125.949907] ? lock_acquire+0x197/0x470 [ 1125.950523] ? find_held_lock+0x2c/0x110 [ 1125.951164] ? __fget_files+0x26d/0x4c0 [ 1125.951750] ? lock_downgrade+0x6d0/0x6d0 [ 1125.952400] __io_queue_sqe+0x90/0x9d0 [ 1125.953018] ? io_issue_sqe+0x7700/0x7700 [ 1125.953659] ? io_prep_rw+0x7f5/0x1050 [ 1125.954277] io_submit_sqes+0x4461/0x85c0 [ 1125.954952] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1125.955722] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1125.956469] ? lock_downgrade+0x6d0/0x6d0 [ 1125.957121] ? find_held_lock+0x2c/0x110 [ 1125.957754] ? io_submit_sqes+0x85c0/0x85c0 [ 1125.958397] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1125.959142] ? wait_for_completion_io+0x270/0x270 [ 1125.959883] ? rcu_read_lock_any_held+0x75/0xa0 [ 1125.960604] ? vfs_write+0x354/0xa70 [ 1125.961182] ? fput_many+0x2f/0x1a0 [ 1125.961744] ? ksys_write+0x1a9/0x260 [ 1125.962339] ? __ia32_sys_read+0xb0/0xb0 [ 1125.962976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1125.963782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1125.964586] do_syscall_64+0x33/0x40 [ 1125.965180] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1125.965971] RIP: 0033:0x7f861f949b19 [ 1125.966546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.969197] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1125.970376] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1125.971482] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1125.972581] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.973686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1125.974771] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 [ 1130.398866] Bluetooth: hci1: command 0x0409 tx timeout [ 1130.590715] Bluetooth: hci4: command 0x0409 tx timeout [ 1130.718731] Bluetooth: hci5: command 0x0409 tx timeout [ 1130.719271] Bluetooth: hci7: command 0x0409 tx timeout [ 1132.446935] Bluetooth: hci1: command 0x041b tx timeout [ 1132.638717] Bluetooth: hci4: command 0x041b tx timeout [ 1132.766727] Bluetooth: hci7: command 0x041b tx timeout [ 1132.767265] Bluetooth: hci5: command 0x041b tx timeout [ 1134.494912] Bluetooth: hci1: command 0x040f tx timeout [ 1134.686725] Bluetooth: hci4: command 0x040f tx timeout [ 1134.814767] Bluetooth: hci5: command 0x040f tx timeout [ 1134.815616] Bluetooth: hci7: command 0x040f tx timeout [ 1136.248889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.249985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.251495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1136.314635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.315341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.316622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1136.543525] Bluetooth: hci1: command 0x0419 tx timeout [ 1136.607659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.609206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.618183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1136.649658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.651163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.653191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1136.862720] Bluetooth: hci7: command 0x0419 tx timeout [ 1136.863257] Bluetooth: hci5: command 0x0419 tx timeout [ 1137.150501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.151266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.152853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1137.194084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.194797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.197588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1137.254041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.254771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.256089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1137.291023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.292114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.293176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:05:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:05:47 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:05:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:05:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:05:47 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40010000) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x4040000) io_uring_enter(0xffffffffffffffff, 0x4c37, 0x43c9, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) 18:05:47 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 18:05:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:05:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1150.217731] FAULT_INJECTION: forcing a failure. [ 1150.217731] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.219872] CPU: 0 PID: 72016 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1150.220928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1150.222176] Call Trace: [ 1150.222584] dump_stack+0x107/0x167 [ 1150.223139] should_fail.cold+0x5/0xa [ 1150.223718] ? io_setup_async_rw+0x180/0x580 [ 1150.224390] should_failslab+0x5/0x20 [ 1150.224981] __kmalloc+0x72/0x390 [ 1150.225521] io_setup_async_rw+0x180/0x580 [ 1150.226161] ? iov_iter_restore+0x195/0x3a0 [ 1150.226819] io_read+0x775/0x11e0 [ 1150.227361] ? kiocb_done+0xc90/0xc90 [ 1150.227964] ? stack_trace_consume_entry+0x160/0x160 [ 1150.228730] ? lock_chain_count+0x20/0x20 [ 1150.229367] ? lock_acquire+0x197/0x470 [ 1150.229974] ? __lock_acquire+0xbb1/0x5b00 [ 1150.230618] io_issue_sqe+0x2e8a/0x7700 [ 1150.231222] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1150.232011] ? lock_chain_count+0x20/0x20 [ 1150.232642] ? __is_insn_slot_addr+0x14c/0x290 [ 1150.233344] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1150.234128] ? io_connect+0x610/0x610 [ 1150.234714] ? lock_acquire+0x197/0x470 [ 1150.235315] ? find_held_lock+0x2c/0x110 [ 1150.235937] ? __fget_files+0x26d/0x4c0 [ 1150.236539] ? lock_downgrade+0x6d0/0x6d0 [ 1150.237183] __io_queue_sqe+0x90/0x9d0 [ 1150.237790] ? io_issue_sqe+0x7700/0x7700 [ 1150.238428] ? io_prep_rw+0x7f5/0x1050 [ 1150.239025] io_submit_sqes+0x4461/0x85c0 [ 1150.239684] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1150.240436] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1150.241181] ? lock_downgrade+0x6d0/0x6d0 [ 1150.241803] ? find_held_lock+0x2c/0x110 [ 1150.242424] ? io_submit_sqes+0x85c0/0x85c0 [ 1150.243092] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1150.243831] ? wait_for_completion_io+0x270/0x270 [ 1150.244557] ? rcu_read_lock_any_held+0x75/0xa0 [ 1150.245271] ? vfs_write+0x354/0xa70 [ 1150.245834] ? fput_many+0x2f/0x1a0 [ 1150.246391] ? ksys_write+0x1a9/0x260 [ 1150.246973] ? __ia32_sys_read+0xb0/0xb0 [ 1150.247586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1150.248381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1150.249190] do_syscall_64+0x33/0x40 [ 1150.249755] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1150.250531] RIP: 0033:0x7f861f949b19 [ 1150.251093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1150.253882] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1150.255045] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1150.256130] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1150.257213] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.258284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.259366] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:05:47 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:05:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:05:47 executing program 2: syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="d1ffffffffffff40030009a500010006eb"], 0x25) r0 = fork() r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r1, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) r2 = fork() ptrace(0x10, r2) ptrace$cont(0x9, r2, 0x7fffffff, 0x4) ptrace(0x4207, r2) ptrace(0x10, r0) ptrace$cont(0x9, r0, 0x7fffffff, 0x4) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x80804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1b}, 0x0, 0x0, 0x400000, 0x0, 0xfffffffffffffffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r3, 0x1be9c000) preadv(r4, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) 18:05:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:05:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x0, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:05:47 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1150.618245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:05:48 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x0, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:05:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 1150.750666] FAULT_INJECTION: forcing a failure. [ 1150.750666] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.752767] CPU: 1 PID: 72040 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1150.753768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1150.754964] Call Trace: [ 1150.755350] dump_stack+0x107/0x167 [ 1150.755881] should_fail.cold+0x5/0xa [ 1150.756438] ? create_object.isra.0+0x3a/0xa20 [ 1150.757110] should_failslab+0x5/0x20 [ 1150.757663] kmem_cache_alloc+0x5b/0x310 [ 1150.758251] ? find_held_lock+0x2c/0x110 [ 1150.758849] create_object.isra.0+0x3a/0xa20 [ 1150.759489] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1150.760233] __kmalloc_node+0x1ae/0x420 [ 1150.760817] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1150.761561] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1150.762291] kmem_cache_alloc_bulk+0x182/0x320 [ 1150.762955] io_submit_sqes+0x6f76/0x85c0 [ 1150.763557] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1150.764280] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1150.765014] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1150.765714] ? lock_downgrade+0x6d0/0x6d0 [ 1150.766316] ? find_held_lock+0x2c/0x110 [ 1150.766909] ? io_submit_sqes+0x85c0/0x85c0 [ 1150.767540] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1150.768238] ? wait_for_completion_io+0x270/0x270 [ 1150.768947] ? rcu_read_lock_any_held+0x75/0xa0 [ 1150.769619] ? vfs_write+0x354/0xa70 [ 1150.770157] ? fput_many+0x2f/0x1a0 [ 1150.770685] ? ksys_write+0x1a9/0x260 [ 1150.771233] ? __ia32_sys_read+0xb0/0xb0 [ 1150.771823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1150.772577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1150.773338] do_syscall_64+0x33/0x40 [ 1150.773878] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1150.774620] RIP: 0033:0x7f861f949b19 [ 1150.775157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1150.777811] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1150.778905] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1150.779931] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1150.780967] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.781987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.783012] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 [ 1150.882011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.399189] Bluetooth: hci3: command 0x0406 tx timeout [ 1155.294726] Bluetooth: hci1: command 0x0409 tx timeout [ 1155.551726] Bluetooth: hci4: command 0x0409 tx timeout [ 1155.614706] Bluetooth: hci5: command 0x0409 tx timeout [ 1155.614717] Bluetooth: hci7: command 0x0409 tx timeout [ 1157.342715] Bluetooth: hci1: command 0x041b tx timeout [ 1157.598720] Bluetooth: hci4: command 0x041b tx timeout [ 1157.662745] Bluetooth: hci7: command 0x041b tx timeout [ 1157.662810] Bluetooth: hci5: command 0x041b tx timeout [ 1159.390766] Bluetooth: hci1: command 0x040f tx timeout [ 1159.646734] Bluetooth: hci4: command 0x040f tx timeout [ 1159.710722] Bluetooth: hci7: command 0x040f tx timeout [ 1159.710952] Bluetooth: hci5: command 0x040f tx timeout [ 1161.438752] Bluetooth: hci1: command 0x0419 tx timeout [ 1161.694760] Bluetooth: hci4: command 0x0419 tx timeout [ 1161.758724] Bluetooth: hci7: command 0x0419 tx timeout [ 1161.759730] Bluetooth: hci5: command 0x0419 tx timeout [ 1162.330880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.331882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.333553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1162.389492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.390399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.392142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1162.459247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.460372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.461941] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1162.501636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.502296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.503772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1162.626943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.627608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.629133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1162.735464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.736193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.737646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1163.112735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.113443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.114747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1163.132588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.133352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.135039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:06:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:06:11 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:06:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000200)={&(0x7f0000000280)=@qipcrtr={0x2a, 0x0, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="63f6229ca57c6ad6e29cac012647bd9f13221bbb8d27ec8b73c6eea00df242d6f2bcffd6ab7f0f20f8060023a93d065a4a320c96ee17c7404591969f236ee906dc6fc3e1560f6eb9ab76ccb557717ef0203718257fb9d2e6c979992fbc22c90f390d7195fa884f5d", 0x68}, {&(0x7f00000000c0)="509f4b", 0x3}], 0x2, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x100}}, @mark={{0x14, 0x1, 0x24, 0xfffffff8}}, @timestamping={{0x14, 0x1, 0x25, 0xe09}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}, 0x4004000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000640)=ANY=[@ANYBLOB="d9e6833ebb4226e2aea1d25d1b010500006d1ee1fb330000000007c0", @ANYRES32=r0, @ANYBLOB="0600000000002e2f66696c6530000000"]) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) splice(r0, &(0x7f0000000440)=0x7, r3, &(0x7f0000000480)=0xc8, 0x9, 0x3) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x882, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0xa140, 0x0, 0x0, 0x9, 0x0, 0xa5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x14ee, &(0x7f00000004c0)={0x0, 0xeffe, 0x10, 0x1, 0x119, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000880), 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="8ee2309c47995455ec7dced68eb160c46014b839663252e10fdc61f5e2e2fd88054934d706470c49e1ecb5911b279caf9597c38f7138e265a9c0895eb5c08249a2c2fffbb7cf7c5a067a39e016d7a7be11e2a0359da88dd80144d1175f50989065d52c715c0fec711859e0ef0d7a51407b3c7d181c7a613c92ee0fb23ccfcc9ad88560cba56f1d1efc1e673619d9a31f9815bd4010524cce05589faff0ede4bcae4f0a79b2c7bf7721c3abcb4c37089fe8606a8293f7106711070be0505b1fa4c390dd60589e10d91df26fd0e49770", 0xcf, 0x2001, 0x0, {0x0, r6}}, 0x2) syz_io_uring_submit(r4, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x8001) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000005c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r7, 0x6, {}, 0xfff, 0x4, 0x1, {0x0, 0x0, r8}}, 0x3) rmdir(&(0x7f0000000000)='./file0\x00') 18:06:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:06:11 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x0, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:06:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:06:11 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 18:06:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:06:11 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1174.536522] FAULT_INJECTION: forcing a failure. [ 1174.536522] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.539087] CPU: 1 PID: 73881 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1174.540287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.541740] Call Trace: [ 1174.542218] dump_stack+0x107/0x167 [ 1174.542882] should_fail.cold+0x5/0xa [ 1174.543542] ? __io_queue_sqe+0x666/0x9d0 [ 1174.544290] should_failslab+0x5/0x20 [ 1174.544988] kmem_cache_alloc_trace+0x55/0x320 [ 1174.545809] __io_queue_sqe+0x666/0x9d0 [ 1174.546483] ? io_issue_sqe+0x7700/0x7700 [ 1174.547241] ? io_prep_rw+0x7f5/0x1050 [ 1174.547954] io_submit_sqes+0x4461/0x85c0 [ 1174.548714] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1174.549584] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1174.550435] ? lock_downgrade+0x6d0/0x6d0 [ 1174.551207] ? find_held_lock+0x2c/0x110 [ 1174.551939] ? io_submit_sqes+0x85c0/0x85c0 [ 1174.552682] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1174.553533] ? wait_for_completion_io+0x270/0x270 [ 1174.554370] ? rcu_read_lock_any_held+0x75/0xa0 [ 1174.555225] ? vfs_write+0x354/0xa70 [ 1174.555910] ? fput_many+0x2f/0x1a0 [ 1174.556551] ? ksys_write+0x1a9/0x260 18:06:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8be}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {0x0}], 0x2, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x51, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0x0, 0x8000, 0x3, 0x9, 0x0, 0x200, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0xe5, 0x4, 0x0, 0x0, 0xff, 0x285, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xa390, 0x2, @perf_config_ext={0x6, 0x7}, 0x8d0, 0x8001, 0x876, 0x4, 0x9b, 0x2, 0xff, 0x0, 0xffffffff, 0x0, 0x9f30}, 0xffffffffffffffff, 0xd, r1, 0xb) close(r1) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) [ 1174.557318] ? __ia32_sys_read+0xb0/0xb0 [ 1174.558324] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1174.559235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.560159] do_syscall_64+0x33/0x40 [ 1174.560793] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1174.561684] RIP: 0033:0x7f861f949b19 [ 1174.562331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 18:06:11 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1174.565442] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1174.566907] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1174.568148] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1174.569343] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.570559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.571791] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:06:12 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:06:12 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:06:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000100)="1f016c0e3b836d95b5d37a827f0584bf1f3cf8dcb32344ad3929659df2cc1771e101f807a3f7e15b569620ce10f3de0944df92af4ad53ba93efa3f620c6a8f649d54e4", 0x43, 0x7fffffff}, {&(0x7f0000000180)="58800aaae67cfe9ad5826cfd561fb13e505b94a0f320c61f05aaf3dd46e40f8fba0d5dd2d52bd2d2dba6df192910036524f1c275b62cfcbc1f9543a3056b982bbe8d525cea9c62e3bec65807d5937d057c7773f64dc3a72e43f264c866af44f9eff7a4738827bc5040cda3a42e2f5ce7022375fb80e86618ba51e842c7334fdc1938761d1fc41eee07c32bb9df52b794f9194831278d0579937843e20f70f581fe3222d4ffc2c2005c2b5e7da6b23c69772eed4fde1c3e956ff9d78ea4c122ed93c11a63034b3209a70a52ccdd367c430019c4e84ab8d71d988a1c0cb1b2b3c5283e86c1a3bd2b2e10740b48d54b12516846ff", 0xf3, 0x6}, {&(0x7f0000000280)="4de854ddeb468b7570e1321d0629a408d77fbf32d0351cb732013c920f6aaa8691bde2c9596ff483021c5677bf905afd07", 0x31, 0x4ee9}], 0x200042, &(0x7f0000000340)=ANY=[@ANYBLOB='nocompress,unhide,sbsector=0x0000000000000d31,check=strict,mode=0x0000000000003e0e,unhide,map=off,fowner<', @ANYRESDEC=0xee00, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC, @ANYBLOB=',hash,smackfshat=,euid=', @ANYRESDEC=0xee00, @ANYBLOB=',context=system_u,\x00']) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x16, 0x20, 0x70bd26, 0x25dfdbfb, {0x1d}, [@nested={0xb, 0x84, 0x0, 0x1, [@generic="f956c5e2f864ec"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xc054) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000540)={0x3ff, 0xee3e}) socket$inet6(0xa, 0x0, 0x0) 18:06:12 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 18:06:12 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1174.966502] FAULT_INJECTION: forcing a failure. [ 1174.966502] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.967571] CPU: 0 PID: 73907 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1174.968126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.968792] Call Trace: [ 1174.969016] dump_stack+0x107/0x167 [ 1174.969320] should_fail.cold+0x5/0xa [ 1174.969638] ? io_setup_async_rw+0x180/0x580 [ 1174.970031] should_failslab+0x5/0x20 [ 1174.970343] __kmalloc+0x72/0x390 [ 1174.970634] io_setup_async_rw+0x180/0x580 [ 1174.971008] ? iov_iter_restore+0x195/0x3a0 [ 1174.971363] io_read+0x775/0x11e0 [ 1174.971652] ? __is_insn_slot_addr+0x14c/0x290 [ 1174.972062] ? kiocb_done+0xc90/0xc90 [ 1174.972375] ? register_lock_class+0xbb/0x17b0 [ 1174.972747] ? arch_stack_walk+0x99/0xf0 [ 1174.973115] ? is_dynamic_key+0x1e0/0x1e0 [ 1174.973469] ? __lock_acquire+0x1657/0x5b00 [ 1174.973823] ? __lock_acquire+0xbb1/0x5b00 [ 1174.974172] io_issue_sqe+0x2e8a/0x7700 [ 1174.974531] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1174.974957] ? lock_chain_count+0x20/0x20 [ 1174.975299] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1174.975763] ? io_connect+0x610/0x610 [ 1174.976104] ? lock_acquire+0x197/0x470 [ 1174.976430] ? find_held_lock+0x2c/0x110 [ 1174.976769] ? __fget_files+0x26d/0x4c0 [ 1174.977121] ? lock_downgrade+0x6d0/0x6d0 [ 1174.977471] __io_queue_sqe+0x90/0x9d0 [ 1174.977818] ? io_issue_sqe+0x7700/0x7700 [ 1174.978156] ? io_prep_rw+0x7f5/0x1050 [ 1174.978507] io_submit_sqes+0x4461/0x85c0 [ 1174.978862] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1174.979265] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1174.979656] ? lock_downgrade+0x6d0/0x6d0 [ 1174.979992] ? find_held_lock+0x2c/0x110 [ 1174.980324] ? io_submit_sqes+0x85c0/0x85c0 [ 1174.980683] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1174.981072] ? wait_for_completion_io+0x270/0x270 [ 1174.981509] ? rcu_read_lock_any_held+0x75/0xa0 [ 1174.981885] ? vfs_write+0x354/0xa70 [ 1174.982214] ? fput_many+0x2f/0x1a0 [ 1174.982511] ? ksys_write+0x1a9/0x260 [ 1174.982850] ? __ia32_sys_read+0xb0/0xb0 [ 1174.983183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1174.983646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.984106] do_syscall_64+0x33/0x40 [ 1174.984407] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1174.984816] RIP: 0033:0x7f861f949b19 [ 1174.985118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.986727] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1174.987348] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1174.987917] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1174.988486] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.989059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.989634] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 [ 1179.360066] Bluetooth: hci1: command 0x0409 tx timeout [ 1179.551710] Bluetooth: hci4: command 0x0409 tx timeout [ 1179.615687] Bluetooth: hci5: command 0x0409 tx timeout [ 1179.678746] Bluetooth: hci7: command 0x0409 tx timeout [ 1181.406707] Bluetooth: hci1: command 0x041b tx timeout [ 1181.598709] Bluetooth: hci4: command 0x041b tx timeout [ 1181.662701] Bluetooth: hci5: command 0x041b tx timeout [ 1181.726716] Bluetooth: hci7: command 0x041b tx timeout [ 1183.454865] Bluetooth: hci1: command 0x040f tx timeout [ 1183.646768] Bluetooth: hci4: command 0x040f tx timeout [ 1183.710737] Bluetooth: hci5: command 0x040f tx timeout [ 1183.774716] Bluetooth: hci7: command 0x040f tx timeout [ 1185.485323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.486328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.488073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1185.502702] Bluetooth: hci1: command 0x0419 tx timeout [ 1185.538590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.539717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.540897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1185.694710] Bluetooth: hci4: command 0x0419 tx timeout [ 1185.760679] Bluetooth: hci5: command 0x0419 tx timeout [ 1185.822773] Bluetooth: hci7: command 0x0419 tx timeout [ 1186.369043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.369854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.371203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1186.396496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.397189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.398468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1186.600273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.601053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.602837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1186.641816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.642480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.643818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1186.721055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.721809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.723167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1186.751487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.752411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.753519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:06:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:06:34 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:06:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:06:34 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:06:34 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:06:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:06:34 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 18:06:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:06:34 executing program 2: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) lseek(r1, 0x0, 0x0) openat(r0, 0x0, 0x800, 0x100) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) openat(0xffffffffffffffff, 0x0, 0x1a340, 0x100) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1\x00'}) renameat2(r2, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x9) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) [ 1197.503212] FAULT_INJECTION: forcing a failure. [ 1197.503212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.504296] CPU: 0 PID: 75741 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1197.504897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.505617] Call Trace: [ 1197.505856] dump_stack+0x107/0x167 [ 1197.506177] should_fail.cold+0x5/0xa [ 1197.506514] _copy_from_user+0x2e/0x1b0 [ 1197.506863] iovec_from_user+0x141/0x400 [ 1197.507222] __import_iovec+0x67/0x590 [ 1197.507558] ? __is_insn_slot_addr+0x123/0x290 [ 1197.507962] ? mark_lock+0xf5/0x2df0 [ 1197.508292] io_import_iovec+0x581/0x1120 [ 1197.508658] ? io_complete_rw+0x230/0x230 [ 1197.509020] ? lock_downgrade+0x6d0/0x6d0 [ 1197.509387] ? mark_lock+0xf5/0x2df0 [ 1197.509722] io_read+0xe14/0x11e0 [ 1197.510026] ? lock_chain_count+0x20/0x20 [ 1197.510397] ? register_lock_class+0xbb/0x17b0 [ 1197.510794] ? kiocb_done+0xc90/0xc90 [ 1197.511135] ? mark_lock+0xf5/0x2df0 [ 1197.511463] ? lock_chain_count+0x20/0x20 [ 1197.511835] ? __lock_acquire+0x1657/0x5b00 [ 1197.512227] ? __lock_acquire+0xbb1/0x5b00 [ 1197.512596] io_issue_sqe+0x2e8a/0x7700 [ 1197.512949] ? find_held_lock+0x2c/0x110 [ 1197.513311] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1197.513779] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1197.514190] ? lock_downgrade+0x6d0/0x6d0 [ 1197.514549] ? io_connect+0x610/0x610 [ 1197.514886] ? lock_acquire+0x197/0x470 [ 1197.515229] ? find_held_lock+0x2c/0x110 [ 1197.515593] ? __fget_files+0x26d/0x4c0 [ 1197.515937] ? lock_downgrade+0x6d0/0x6d0 [ 1197.516304] __io_queue_sqe+0x90/0x9d0 [ 1197.516636] ? io_issue_sqe+0x7700/0x7700 [ 1197.517005] ? io_prep_rw+0x7f5/0x1050 [ 1197.517341] io_submit_sqes+0x4461/0x85c0 [ 1197.517734] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1197.518169] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1197.518579] ? lock_downgrade+0x6d0/0x6d0 [ 1197.518938] ? find_held_lock+0x2c/0x110 [ 1197.519295] ? io_submit_sqes+0x85c0/0x85c0 [ 1197.519681] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1197.520097] ? wait_for_completion_io+0x270/0x270 [ 1197.520513] ? rcu_read_lock_any_held+0x75/0xa0 [ 1197.520928] ? vfs_write+0x354/0xa70 [ 1197.521254] ? fput_many+0x2f/0x1a0 [ 1197.521586] ? ksys_write+0x1a9/0x260 [ 1197.521917] ? __ia32_sys_read+0xb0/0xb0 [ 1197.522269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1197.522718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.523178] do_syscall_64+0x33/0x40 [ 1197.523508] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1197.523958] RIP: 0033:0x7f861f949b19 [ 1197.524278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.525867] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1197.526519] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1197.527137] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1197.527751] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.528370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1197.528989] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:06:34 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:06:35 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:06:35 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:06:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000008c0)={0x98, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000080}, 0x40000) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r3, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860", 0x5f) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mount$bind(&(0x7f0000000980)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x2013c1a, 0x0) 18:06:35 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) [ 1197.722149] FAULT_INJECTION: forcing a failure. [ 1197.722149] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.723134] CPU: 0 PID: 75757 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1197.723679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.724358] Call Trace: [ 1197.724585] dump_stack+0x107/0x167 [ 1197.724891] should_fail.cold+0x5/0xa [ 1197.725209] ? io_setup_async_rw+0x180/0x580 [ 1197.725569] should_failslab+0x5/0x20 [ 1197.725887] __kmalloc+0x72/0x390 [ 1197.726172] io_setup_async_rw+0x180/0x580 [ 1197.726514] ? iov_iter_restore+0x195/0x3a0 [ 1197.726858] io_read+0x775/0x11e0 [ 1197.727146] ? register_lock_class+0xbb/0x17b0 [ 1197.727512] ? kiocb_done+0xc90/0xc90 [ 1197.727822] ? mark_lock+0xf5/0x2df0 [ 1197.728143] ? __lock_acquire+0xbb1/0x5b00 [ 1197.728487] io_issue_sqe+0x2e8a/0x7700 [ 1197.728808] ? find_held_lock+0x2c/0x110 [ 1197.729140] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1197.729564] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1197.729940] ? lock_downgrade+0x6d0/0x6d0 [ 1197.730281] ? io_connect+0x610/0x610 [ 1197.730594] ? lock_acquire+0x197/0x470 [ 1197.730913] ? find_held_lock+0x2c/0x110 [ 1197.731254] ? __fget_files+0x26d/0x4c0 [ 1197.731568] ? lock_downgrade+0x6d0/0x6d0 [ 1197.731899] __io_queue_sqe+0x90/0x9d0 [ 1197.732220] ? io_issue_sqe+0x7700/0x7700 [ 1197.732554] ? io_prep_rw+0x7f5/0x1050 [ 1197.732879] io_submit_sqes+0x4461/0x85c0 [ 1197.733224] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1197.733638] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1197.734025] ? io_submit_sqes+0x85c0/0x85c0 [ 1197.734375] ? recalibrate_cpu_khz+0x10/0x10 [ 1197.734733] ? ktime_get+0x158/0x1f0 [ 1197.735040] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1197.735382] ? clockevents_program_event+0x131/0x360 [ 1197.735788] ? tick_program_event+0xa8/0x140 [ 1197.736147] ? hrtimer_interrupt+0x771/0x9b0 [ 1197.736506] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1197.736931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.737344] do_syscall_64+0x33/0x40 [ 1197.737659] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1197.738064] RIP: 0033:0x7f861f949b19 [ 1197.738365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.739887] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1197.740492] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1197.741055] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1197.741629] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.742191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1197.742785] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:06:35 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:06:35 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff}, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000300)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001740)=',', 0x1}], 0x1, &(0x7f0000002040)=[@rights={{0x10}}], 0x10}}], 0x2, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) fallocate(0xffffffffffffffff, 0x40, 0x8, 0x3f) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xa4, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffc0000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdc4a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x19d0}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x35d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82ed}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x80) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) [ 1197.968097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=75766 comm=syz-executor.2 [ 1198.141328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=75770 comm=syz-executor.2 [ 1202.270693] Bluetooth: hci1: command 0x0409 tx timeout [ 1202.462701] Bluetooth: hci4: command 0x0409 tx timeout [ 1202.526699] Bluetooth: hci5: command 0x0409 tx timeout [ 1202.590751] Bluetooth: hci7: command 0x0409 tx timeout [ 1204.318693] Bluetooth: hci1: command 0x041b tx timeout [ 1204.510688] Bluetooth: hci4: command 0x041b tx timeout [ 1204.574691] Bluetooth: hci5: command 0x041b tx timeout [ 1204.638699] Bluetooth: hci7: command 0x041b tx timeout [ 1206.366699] Bluetooth: hci1: command 0x040f tx timeout [ 1206.558698] Bluetooth: hci4: command 0x040f tx timeout [ 1206.622758] Bluetooth: hci5: command 0x040f tx timeout [ 1206.686682] Bluetooth: hci7: command 0x040f tx timeout [ 1207.806957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.807748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.809721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1207.849777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.850514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.851817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1208.148952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.149801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.163966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1208.198905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.199636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.201993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1208.246790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.247485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.256220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1208.290087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.290822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.292707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1208.430941] Bluetooth: hci1: command 0x0419 tx timeout [ 1208.606722] Bluetooth: hci4: command 0x0419 tx timeout [ 1209.152856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.154909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.157500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1209.184382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.185689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.188286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:06:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:06:57 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 18:06:57 executing program 2: syz_io_uring_setup(0x3ac4, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f00000001c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0, 0xffffffffffffffff}, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) inotify_init() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r3, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000300)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001740)=',', 0x1}], 0x1, &(0x7f0000002040)=[@rights={{0x10}}], 0x10}}], 0x2, 0x0) syz_io_uring_setup(0x313a, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x1, 0x232}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000400)) fallocate(0xffffffffffffffff, 0x40, 0x8, 0x3f) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xa4, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffc0000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdc4a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x19d0}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x35d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82ed}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x80) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) 18:06:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:06:57 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:06:57 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:06:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:06:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1220.308542] FAULT_INJECTION: forcing a failure. [ 1220.308542] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.310940] CPU: 0 PID: 77601 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1220.312155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.313608] Call Trace: [ 1220.314092] dump_stack+0x107/0x167 [ 1220.314738] should_fail.cold+0x5/0xa [ 1220.315415] ? create_object.isra.0+0x3a/0xa20 [ 1220.316228] should_failslab+0x5/0x20 [ 1220.316899] kmem_cache_alloc+0x5b/0x310 [ 1220.317624] create_object.isra.0+0x3a/0xa20 [ 1220.318408] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1220.319308] __kmalloc+0x16e/0x390 [ 1220.319951] io_setup_async_rw+0x180/0x580 [ 1220.320699] ? iov_iter_restore+0x195/0x3a0 [ 1220.321459] io_read+0x775/0x11e0 [ 1220.322088] ? register_lock_class+0xbb/0x17b0 [ 1220.322901] ? kiocb_done+0xc90/0xc90 [ 1220.323576] ? mark_lock+0xf5/0x2df0 [ 1220.324279] ? __lock_acquire+0xbb1/0x5b00 [ 1220.325035] io_issue_sqe+0x2e8a/0x7700 [ 1220.325742] ? find_held_lock+0x2c/0x110 [ 1220.326478] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1220.327406] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1220.328238] ? lock_downgrade+0x6d0/0x6d0 [ 1220.328969] ? io_connect+0x610/0x610 [ 1220.329646] ? lock_acquire+0x197/0x470 [ 1220.330358] ? find_held_lock+0x2c/0x110 [ 1220.331078] ? __fget_files+0x26d/0x4c0 [ 1220.331780] ? lock_downgrade+0x6d0/0x6d0 [ 1220.332523] __io_queue_sqe+0x90/0x9d0 [ 1220.333218] ? io_issue_sqe+0x7700/0x7700 [ 1220.333963] ? io_prep_rw+0x7f5/0x1050 [ 1220.334658] io_submit_sqes+0x4461/0x85c0 [ 1220.335427] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1220.336305] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1220.337160] ? lock_downgrade+0x6d0/0x6d0 [ 1220.337909] ? find_held_lock+0x2c/0x110 [ 1220.338537] ? io_submit_sqes+0x85c0/0x85c0 [ 1220.339181] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1220.339890] ? wait_for_completion_io+0x270/0x270 [ 1220.340597] ? rcu_read_lock_any_held+0x75/0xa0 [ 1220.341275] ? vfs_write+0x354/0xa70 [ 1220.341831] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1220.342501] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1220.343293] ? ksys_write+0x1a9/0x260 [ 1220.343854] ? __ia32_sys_read+0xb0/0xb0 [ 1220.344457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1220.345226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1220.345996] do_syscall_64+0x33/0x40 [ 1220.346540] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1220.347288] RIP: 0033:0x7f861f949b19 [ 1220.347831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.350500] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1220.351620] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1220.352660] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1220.353700] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1220.354741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1220.355773] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 [ 1220.388218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=77600 comm=syz-executor.2 18:06:57 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:06:57 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:06:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 18:06:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1220.666422] FAULT_INJECTION: forcing a failure. [ 1220.666422] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.668369] CPU: 1 PID: 77615 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1220.669429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.670843] Call Trace: [ 1220.671344] dump_stack+0x107/0x167 [ 1220.672074] should_fail.cold+0x5/0xa [ 1220.672636] ? __io_queue_sqe+0x666/0x9d0 [ 1220.673256] should_failslab+0x5/0x20 [ 1220.673844] kmem_cache_alloc_trace+0x55/0x320 [ 1220.674521] __io_queue_sqe+0x666/0x9d0 [ 1220.675112] ? io_issue_sqe+0x7700/0x7700 [ 1220.675714] ? io_prep_rw+0x7f5/0x1050 [ 1220.676296] io_submit_sqes+0x4461/0x85c0 [ 1220.676930] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1220.677659] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1220.678380] ? lock_downgrade+0x6d0/0x6d0 [ 1220.678984] ? find_held_lock+0x2c/0x110 [ 1220.679580] ? io_submit_sqes+0x85c0/0x85c0 [ 1220.680219] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1220.680925] ? wait_for_completion_io+0x270/0x270 [ 1220.681633] ? rcu_read_lock_any_held+0x75/0xa0 [ 1220.682318] ? vfs_write+0x354/0xa70 [ 1220.682866] ? fput_many+0x2f/0x1a0 [ 1220.683399] ? ksys_write+0x1a9/0x260 [ 1220.683958] ? __ia32_sys_read+0xb0/0xb0 [ 1220.684561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1220.685322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1220.686097] do_syscall_64+0x33/0x40 [ 1220.686644] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1220.687393] RIP: 0033:0x7f861f949b19 [ 1220.687940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.690605] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1220.691715] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1220.692754] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1220.693846] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1220.694889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1220.695925] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:06:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:06:58 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:06:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6d7cf708bc06516e}, 0x23a, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x5a, 0x0, 0x6, 0x0, 0x7, 0xc100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x100, 0x1}, 0x1000, 0x0, 0x2, 0x8, 0x2, 0x5, 0x1f, 0x0, 0x34, 0x0, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x2) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}, 0x8) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x6a00) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000001c0)={0x89, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x2ba7}, @calipso={0x7, 0x20, {0x0, 0x6, 0x5, 0xff, [0x101, 0xccd, 0x3]}}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x40, {0x2, 0xe, 0x3, 0xdc, [0x8, 0x0, 0x200, 0x7, 0x34, 0x5, 0x6]}}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x8}, @ra]}, 0x88) 18:06:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1225.438719] Bluetooth: hci1: command 0x0409 tx timeout [ 1225.759058] Bluetooth: hci4: command 0x0409 tx timeout [ 1225.822735] Bluetooth: hci5: command 0x0409 tx timeout [ 1225.886708] Bluetooth: hci7: command 0x0409 tx timeout [ 1227.488333] Bluetooth: hci1: command 0x041b tx timeout [ 1227.806703] Bluetooth: hci4: command 0x041b tx timeout [ 1227.870685] Bluetooth: hci5: command 0x041b tx timeout [ 1227.934684] Bluetooth: hci7: command 0x041b tx timeout [ 1229.534822] Bluetooth: hci1: command 0x040f tx timeout [ 1229.854677] Bluetooth: hci4: command 0x040f tx timeout [ 1229.919684] Bluetooth: hci5: command 0x040f tx timeout [ 1229.983688] Bluetooth: hci7: command 0x040f tx timeout [ 1231.582833] Bluetooth: hci1: command 0x0419 tx timeout [ 1231.638253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.639387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.640689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1231.717774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.718539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.719826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1231.901401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.902264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.903794] Bluetooth: hci4: command 0x0419 tx timeout [ 1231.913734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1231.966497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.967332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.968952] Bluetooth: hci5: command 0x0419 tx timeout [ 1231.969416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1232.031769] Bluetooth: hci7: command 0x0419 tx timeout [ 1232.354933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.355746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.366903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1232.374255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.374941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.376224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1232.420965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.421700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.432985] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1232.446823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.447584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.449004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:07:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:07:21 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:07:21 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:07:21 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 18:07:21 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:07:21 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:07:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:07:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1243.684942] FAULT_INJECTION: forcing a failure. [ 1243.684942] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.686850] CPU: 1 PID: 79463 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1243.687830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.688991] Call Trace: [ 1243.689373] dump_stack+0x107/0x167 [ 1243.689921] should_fail.cold+0x5/0xa [ 1243.690495] ? create_object.isra.0+0x3a/0xa20 [ 1243.691368] should_failslab+0x5/0x20 [ 1243.691908] kmem_cache_alloc+0x5b/0x310 [ 1243.692504] create_object.isra.0+0x3a/0xa20 [ 1243.693128] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1243.693857] kmem_cache_alloc_trace+0x151/0x320 [ 1243.694526] __io_queue_sqe+0x666/0x9d0 [ 1243.695094] ? io_issue_sqe+0x7700/0x7700 [ 1243.695683] ? io_prep_rw+0x7f5/0x1050 [ 1243.696241] io_submit_sqes+0x4461/0x85c0 [ 1243.696864] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1243.697593] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1243.698300] ? lock_downgrade+0x6d0/0x6d0 [ 1243.698890] ? find_held_lock+0x2c/0x110 [ 1243.699477] ? io_submit_sqes+0x85c0/0x85c0 [ 1243.700103] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1243.700787] ? wait_for_completion_io+0x270/0x270 [ 1243.701485] ? rcu_read_lock_any_held+0x75/0xa0 [ 1243.702146] ? vfs_write+0x354/0xa70 [ 1243.702674] ? fput_many+0x2f/0x1a0 [ 1243.703189] ? ksys_write+0x1a9/0x260 [ 1243.703726] ? __ia32_sys_read+0xb0/0xb0 [ 1243.704306] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.705039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.705771] do_syscall_64+0x33/0x40 [ 1243.706303] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1243.707023] RIP: 0033:0x7f861f949b19 [ 1243.707547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.710126] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1243.711243] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1243.712266] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1243.713301] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1243.714334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1243.715370] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:07:21 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:07:21 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:07:21 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x7f, 0x101) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x2502, 0x0) write$binfmt_elf64(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300000002000000000000000000000040000000000000003300000000000000070000000100380000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000232fb6560197b1fa9d00"/719], 0x478) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x2c, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x4}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) dup(r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x48020200) 18:07:21 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:07:21 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:07:21 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:07:21 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:07:21 executing program 2: io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xa3, &(0x7f00000005c0)=""/163}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000280), 0x5, 0x400081) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = syz_io_uring_setup(0x274d, &(0x7f00000002c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(r5, r0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x5, 0x4, 0x1, 0x0, 0x7f, 0x20050, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb9fb, 0x4, @perf_config_ext={0x3, 0x9}, 0x40010, 0x33d, 0x9, 0x9, 0x8, 0x4, 0x8, 0x0, 0xca35, 0x0, 0x9}, 0xffffffffffffffff, 0x9, r4, 0x8) [ 1248.542707] Bluetooth: hci1: command 0x0409 tx timeout [ 1248.862695] Bluetooth: hci7: command 0x0409 tx timeout [ 1248.863514] Bluetooth: hci4: command 0x0409 tx timeout [ 1248.990709] Bluetooth: hci5: command 0x0409 tx timeout [ 1250.590676] Bluetooth: hci1: command 0x041b tx timeout [ 1250.910747] Bluetooth: hci4: command 0x041b tx timeout [ 1250.912080] Bluetooth: hci7: command 0x041b tx timeout [ 1251.038671] Bluetooth: hci5: command 0x041b tx timeout [ 1252.638700] Bluetooth: hci1: command 0x040f tx timeout [ 1252.958680] Bluetooth: hci7: command 0x040f tx timeout [ 1252.959227] Bluetooth: hci4: command 0x040f tx timeout [ 1253.086781] Bluetooth: hci5: command 0x040f tx timeout [ 1254.676977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.678131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.679620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1254.686723] Bluetooth: hci1: command 0x0419 tx timeout [ 1254.749537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.750366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.751686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1254.914675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.915445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.916878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1254.955102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.955825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.957192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1255.006708] Bluetooth: hci4: command 0x0419 tx timeout [ 1255.008339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.008513] Bluetooth: hci7: command 0x0419 tx timeout [ 1255.009171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.010755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1255.109565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.110293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.112881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1255.125879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.126536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.127717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1255.134667] Bluetooth: hci5: command 0x0419 tx timeout [ 1255.171728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.172517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.173990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:07:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:07:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:07:43 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:07:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 18:07:43 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:07:43 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x7a88, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r4, 0x0, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x7, 0x0, &(0x7f0000000340)="a48e489b5d4ebe15d23c854cef1a8bee0f50699b245a22c142b872d2a78820f91d89e371a2fcd5070b12cf1cfd583f58b12bb4720d56fe97e96877d62a6997348d0e51b816807b47fbb7f1d4bab989ad5a4769536221a589b0747782717301d65bb9117ffa6fced6f772dd72976ce7e42eb410be3720f51c7c34", 0x4, 0x0, 0x0, {0x3}}, 0x7) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r5, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r5, &(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, {0x0, r3}}, 0x65) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x4d, 0x2, 0x23a, 0x4, 0x0, {0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 18:07:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1266.347053] FAULT_INJECTION: forcing a failure. [ 1266.347053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1266.348062] CPU: 1 PID: 81322 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1266.348618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1266.349284] Call Trace: [ 1266.349508] dump_stack+0x107/0x167 [ 1266.349805] should_fail.cold+0x5/0xa [ 1266.350111] _copy_from_user+0x2e/0x1b0 [ 1266.350442] iovec_from_user+0x141/0x400 [ 1266.350775] __import_iovec+0x67/0x590 [ 1266.351093] ? __is_insn_slot_addr+0x123/0x290 [ 1266.351460] ? mark_lock+0xf5/0x2df0 [ 1266.351766] io_import_iovec+0x581/0x1120 [ 1266.352104] ? io_complete_rw+0x230/0x230 [ 1266.352435] ? lock_downgrade+0x6d0/0x6d0 18:07:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1266.352859] ? mark_lock+0xf5/0x2df0 [ 1266.353210] io_read+0xe14/0x11e0 [ 1266.353487] ? lock_chain_count+0x20/0x20 [ 1266.353819] ? kiocb_done+0xc90/0xc90 [ 1266.354128] ? mark_lock+0xf5/0x2df0 [ 1266.354436] ? lock_chain_count+0x20/0x20 [ 1266.354772] ? __lock_acquire+0x1657/0x5b00 [ 1266.355126] ? __lock_acquire+0xbb1/0x5b00 [ 1266.355462] io_issue_sqe+0x2e8a/0x7700 [ 1266.355776] ? find_held_lock+0x2c/0x110 [ 1266.356099] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1266.356511] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1266.356885] ? lock_downgrade+0x6d0/0x6d0 [ 1266.357216] ? io_connect+0x610/0x610 [ 1266.357522] ? lock_acquire+0x197/0x470 [ 1266.357836] ? find_held_lock+0x2c/0x110 [ 1266.358163] ? __fget_files+0x26d/0x4c0 [ 1266.358490] ? lock_downgrade+0x6d0/0x6d0 [ 1266.358824] __io_queue_sqe+0x90/0x9d0 [ 1266.359139] ? io_issue_sqe+0x7700/0x7700 [ 1266.359471] ? io_prep_rw+0x7f5/0x1050 [ 1266.359785] io_submit_sqes+0x4461/0x85c0 [ 1266.360130] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1266.360522] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1266.360907] ? lock_downgrade+0x6d0/0x6d0 [ 1266.361236] ? find_held_lock+0x2c/0x110 [ 1266.361561] ? io_submit_sqes+0x85c0/0x85c0 [ 1266.361910] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1266.362291] ? wait_for_completion_io+0x270/0x270 [ 1266.362684] ? rcu_read_lock_any_held+0x75/0xa0 [ 1266.363056] ? vfs_write+0x354/0xa70 [ 1266.363351] ? fput_many+0x2f/0x1a0 [ 1266.363642] ? ksys_write+0x1a9/0x260 [ 1266.363946] ? __ia32_sys_read+0xb0/0xb0 [ 1266.364269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1266.364681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1266.365092] do_syscall_64+0x33/0x40 [ 1266.365384] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1266.365788] RIP: 0033:0x7f861f949b19 [ 1266.366081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1266.367536] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1266.368138] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1266.368698] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1266.369261] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.369819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1266.370397] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:07:43 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:07:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:07:43 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:07:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:07:44 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:07:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) [ 1266.618587] FAULT_INJECTION: forcing a failure. [ 1266.618587] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.619827] CPU: 1 PID: 81339 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1266.620375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1266.621023] Call Trace: [ 1266.621242] dump_stack+0x107/0x167 [ 1266.621537] should_fail.cold+0x5/0xa [ 1266.621845] ? __io_queue_sqe+0x666/0x9d0 [ 1266.622182] should_failslab+0x5/0x20 [ 1266.622499] kmem_cache_alloc_trace+0x55/0x320 [ 1266.622871] __io_queue_sqe+0x666/0x9d0 [ 1266.623191] ? io_issue_sqe+0x7700/0x7700 [ 1266.623521] ? io_prep_rw+0x7f5/0x1050 [ 1266.623838] io_submit_sqes+0x4461/0x85c0 [ 1266.624195] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1266.624591] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1266.624984] ? lock_downgrade+0x6d0/0x6d0 [ 1266.625310] ? find_held_lock+0x2c/0x110 [ 1266.625644] ? io_submit_sqes+0x85c0/0x85c0 [ 1266.625996] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1266.626393] ? wait_for_completion_io+0x270/0x270 [ 1266.626784] ? rcu_read_lock_any_held+0x75/0xa0 [ 1266.627166] ? vfs_write+0x354/0xa70 [ 1266.627470] ? fput_many+0x2f/0x1a0 [ 1266.627764] ? ksys_write+0x1a9/0x260 [ 1266.628077] ? __ia32_sys_read+0xb0/0xb0 [ 1266.628404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1266.628832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1266.629276] do_syscall_64+0x33/0x40 [ 1266.629578] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1266.629997] RIP: 0033:0x7f861f949b19 [ 1266.630307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1266.631808] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1266.632419] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1266.633006] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1266.633584] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.634161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1266.634738] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:07:44 executing program 2: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = inotify_init() pipe(&(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x283, &(0x7f0000000000)=0x0) dup2(r1, r2) io_submit(r3, 0x1, &(0x7f00000015c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21, @remote}, {0x1, @broadcast}, 0x20, {0x2, 0x0, @private=0xa010101}, 'ip6_vti0\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x2, 0x4) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd, 0x7}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x9, 0x100, 0x4}) 18:07:44 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1271.262793] Bluetooth: hci1: command 0x0409 tx timeout [ 1271.454699] Bluetooth: hci4: command 0x0409 tx timeout [ 1271.518680] Bluetooth: hci5: command 0x0409 tx timeout [ 1273.310744] Bluetooth: hci1: command 0x041b tx timeout [ 1273.503681] Bluetooth: hci4: command 0x041b tx timeout [ 1273.566693] Bluetooth: hci5: command 0x041b tx timeout [ 1275.358876] Bluetooth: hci1: command 0x040f tx timeout [ 1275.550864] Bluetooth: hci4: command 0x040f tx timeout [ 1275.614687] Bluetooth: hci5: command 0x040f tx timeout [ 1275.717141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.719352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.721688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1275.790704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.792012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.793997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1276.035138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.035943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.037435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1276.070360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.071043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.072303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1276.472485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.473703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.474829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1276.510039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.511348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.513471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:08:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 18:08:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:08:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:08:05 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:08:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x5e7270a966ef3db7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x20, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001380)) r3 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x446c84, 0x4a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) r4 = open_tree(r3, &(0x7f0000000280)='./file0/file0/file0\x00', 0x800) openat(r4, 0x0, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000001680)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYRES16=r2, @ANYRESOCT, @ANYRESHEX=r0], 0x10) openat(0xffffffffffffffff, 0x0, 0x0, 0x120) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0xfef) fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/65) sendfile(r0, r1, 0x0, 0x20d315) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000140)) 18:08:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:08:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:08:05 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1287.807334] FAULT_INJECTION: forcing a failure. [ 1287.807334] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.809460] CPU: 0 PID: 82727 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1287.810753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1287.812285] Call Trace: [ 1287.812788] dump_stack+0x107/0x167 [ 1287.813472] should_fail.cold+0x5/0xa [ 1287.814185] ? create_object.isra.0+0x3a/0xa20 [ 1287.815068] should_failslab+0x5/0x20 [ 1287.815793] kmem_cache_alloc+0x5b/0x310 [ 1287.816563] create_object.isra.0+0x3a/0xa20 [ 1287.817390] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1287.818329] __kmalloc+0x16e/0x390 [ 1287.818941] io_setup_async_rw+0x180/0x580 [ 1287.819714] ? iov_iter_restore+0x195/0x3a0 [ 1287.820516] io_read+0x775/0x11e0 [ 1287.821177] ? kiocb_done+0xc90/0xc90 [ 1287.821902] ? mark_lock+0xf5/0x2df0 [ 1287.822647] ? __lock_acquire+0xbb1/0x5b00 [ 1287.823287] io_issue_sqe+0x2e8a/0x7700 [ 1287.824040] ? find_held_lock+0x2c/0x110 [ 1287.824801] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1287.825784] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1287.826680] ? lock_downgrade+0x6d0/0x6d0 [ 1287.827457] ? io_connect+0x610/0x610 [ 1287.828158] ? lock_acquire+0x197/0x470 [ 1287.828899] ? find_held_lock+0x2c/0x110 [ 1287.829661] ? __fget_files+0x26d/0x4c0 [ 1287.830400] ? lock_downgrade+0x6d0/0x6d0 [ 1287.831191] __io_queue_sqe+0x90/0x9d0 [ 1287.831914] ? io_issue_sqe+0x7700/0x7700 [ 1287.832684] ? io_prep_rw+0x7f5/0x1050 [ 1287.833321] io_submit_sqes+0x4461/0x85c0 [ 1287.834116] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1287.835064] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1287.835978] ? lock_downgrade+0x6d0/0x6d0 [ 1287.836759] ? find_held_lock+0x2c/0x110 [ 1287.837527] ? io_submit_sqes+0x85c0/0x85c0 [ 1287.838333] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1287.839253] ? wait_for_completion_io+0x270/0x270 [ 1287.840158] ? rcu_read_lock_any_held+0x75/0xa0 [ 1287.841041] ? vfs_write+0x354/0xa70 [ 1287.841757] ? fput_many+0x2f/0x1a0 [ 1287.842431] ? ksys_write+0x1a9/0x260 [ 1287.843050] ? __ia32_sys_read+0xb0/0xb0 [ 1287.843814] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1287.844799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1287.845764] do_syscall_64+0x33/0x40 [ 1287.846459] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1287.847222] RIP: 0033:0x7f861f949b19 [ 1287.847917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1287.851348] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1287.852760] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1287.854078] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1287.855370] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.856656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1287.858040] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 [ 1287.947281] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:08:05 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:08:05 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:08:05 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:08:05 executing program 2: lseek(0xffffffffffffffff, 0x0, 0x3) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@generic="5163d0e903d35e59fbab46fb815827de3b193ae11b5f3538852efb073f8d9de2c3d9995e6276506ea6b91da11c8ba06cca", @nested={0x8, 0x24, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x50}}, 0x40c4) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000380)=0x7851669e) getdents64(r1, &(0x7f0000000140)=""/255, 0xff) ioctl$FITHAW(r0, 0xc0045878) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x4010) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) unshare(0x48020200) 18:08:05 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1288.101204] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 18:08:05 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:08:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 1288.194020] FAULT_INJECTION: forcing a failure. [ 1288.194020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.196427] CPU: 0 PID: 82752 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1288.197580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1288.199092] Call Trace: [ 1288.199519] dump_stack+0x107/0x167 [ 1288.200219] should_fail.cold+0x5/0xa [ 1288.200831] _copy_from_user+0x2e/0x1b0 [ 1288.201593] iovec_from_user+0x141/0x400 [ 1288.202293] __import_iovec+0x67/0x590 [ 1288.203033] ? __is_insn_slot_addr+0x123/0x290 [ 1288.203736] ? mark_lock+0xf5/0x2df0 [ 1288.204447] io_import_iovec+0x581/0x1120 [ 1288.205099] ? io_complete_rw+0x230/0x230 [ 1288.205883] ? lock_downgrade+0x6d0/0x6d0 [ 1288.206595] ? mark_lock+0xf5/0x2df0 [ 1288.207281] io_read+0xe14/0x11e0 [ 1288.207852] ? lock_chain_count+0x20/0x20 [ 1288.208637] ? kiocb_done+0xc90/0xc90 [ 1288.209271] ? mark_lock+0xf5/0x2df0 [ 1288.209963] ? lock_chain_count+0x20/0x20 [ 1288.210605] ? __lock_acquire+0x1657/0x5b00 [ 1288.211444] ? __lock_acquire+0xbb1/0x5b00 [ 1288.212141] io_issue_sqe+0x2e8a/0x7700 [ 1288.212883] ? find_held_lock+0x2c/0x110 [ 1288.213553] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1288.214526] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1288.215253] ? lock_downgrade+0x6d0/0x6d0 [ 1288.216024] ? io_connect+0x610/0x610 [ 1288.216607] ? lock_acquire+0x197/0x470 [ 1288.217351] ? find_held_lock+0x2c/0x110 [ 1288.217969] ? __fget_files+0x26d/0x4c0 [ 1288.218738] ? lock_downgrade+0x6d0/0x6d0 [ 1288.219369] __io_queue_sqe+0x90/0x9d0 [ 1288.220094] ? io_issue_sqe+0x7700/0x7700 [ 1288.220792] ? io_prep_rw+0x7f5/0x1050 [ 1288.221499] io_submit_sqes+0x4461/0x85c0 [ 1288.222147] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1288.223084] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1288.223879] ? lock_downgrade+0x6d0/0x6d0 [ 1288.224660] ? find_held_lock+0x2c/0x110 [ 1288.225277] ? io_submit_sqes+0x85c0/0x85c0 [ 1288.226099] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1288.226910] ? wait_for_completion_io+0x270/0x270 [ 1288.227808] ? rcu_read_lock_any_held+0x75/0xa0 [ 1288.228498] ? vfs_write+0x354/0xa70 [ 1288.229180] ? fput_many+0x2f/0x1a0 [ 1288.229722] ? ksys_write+0x1a9/0x260 [ 1288.230416] ? __ia32_sys_read+0xb0/0xb0 [ 1288.231077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1288.232031] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1288.232811] do_syscall_64+0x33/0x40 [ 1288.233512] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1288.234277] RIP: 0033:0x7f861f949b19 [ 1288.234988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.237662] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1288.239081] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1288.240154] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1288.241209] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.242261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1288.243317] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 [ 1288.252267] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1292.638698] Bluetooth: hci1: command 0x0409 tx timeout [ 1292.894694] Bluetooth: hci4: command 0x0409 tx timeout [ 1293.022696] Bluetooth: hci7: command 0x0409 tx timeout [ 1293.022775] Bluetooth: hci5: command 0x0409 tx timeout [ 1294.686871] Bluetooth: hci1: command 0x041b tx timeout [ 1294.942690] Bluetooth: hci4: command 0x041b tx timeout [ 1295.070711] Bluetooth: hci5: command 0x041b tx timeout [ 1295.074019] Bluetooth: hci7: command 0x041b tx timeout [ 1296.734701] Bluetooth: hci1: command 0x040f tx timeout [ 1296.990757] Bluetooth: hci4: command 0x040f tx timeout [ 1297.118695] Bluetooth: hci7: command 0x040f tx timeout [ 1297.120521] Bluetooth: hci5: command 0x040f tx timeout [ 1298.782798] Bluetooth: hci1: command 0x0419 tx timeout [ 1299.038966] Bluetooth: hci4: command 0x0419 tx timeout [ 1299.166657] Bluetooth: hci5: command 0x0419 tx timeout [ 1299.167179] Bluetooth: hci7: command 0x0419 tx timeout [ 1299.357115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.357906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.359241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1299.432892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.433693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.435045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1300.240050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.240904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.242211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1300.263526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.264345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.265509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1300.307647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.308345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.321006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1300.330157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.330827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.332141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1300.639392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.640213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.653581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1300.663353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.664038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.665279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:08:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:08:29 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:08:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:08:29 executing program 2: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12, 0x0, 0x8f6, 0x0, 0x15b}) r1 = dup2(0xffffffffffffffff, r0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='[^.,+\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pread64(r2, &(0x7f00000001c0)=""/55, 0x37, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) flock(r3, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6=@private0, {}, {0x80000001}, {}, 0x0, 0x0, 0xa, 0x4}}, 0xf0}}, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000140)={0x14, 0x24, 0x14, 0x14, 0x7, 0x80000000, 0x0, 0xdc, 0x1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 18:08:29 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:08:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 18:08:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:08:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1312.414237] FAULT_INJECTION: forcing a failure. [ 1312.414237] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.416148] CPU: 1 PID: 84590 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1312.417175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1312.418392] Call Trace: [ 1312.418789] dump_stack+0x107/0x167 [ 1312.419343] should_fail.cold+0x5/0xa [ 1312.419912] ? create_object.isra.0+0x3a/0xa20 [ 1312.420587] should_failslab+0x5/0x20 [ 1312.421154] kmem_cache_alloc+0x5b/0x310 [ 1312.421762] create_object.isra.0+0x3a/0xa20 [ 1312.422416] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1312.423181] kmem_cache_alloc_trace+0x151/0x320 [ 1312.423875] __io_queue_sqe+0x666/0x9d0 [ 1312.424470] ? io_issue_sqe+0x7700/0x7700 [ 1312.425087] ? io_prep_rw+0x7f5/0x1050 [ 1312.425672] io_submit_sqes+0x4461/0x85c0 [ 1312.426297] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1312.427037] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1312.427722] ? lock_downgrade+0x6d0/0x6d0 [ 1312.428309] ? find_held_lock+0x2c/0x110 [ 1312.428897] ? io_submit_sqes+0x85c0/0x85c0 [ 1312.429517] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1312.430209] ? wait_for_completion_io+0x270/0x270 [ 1312.430902] ? rcu_read_lock_any_held+0x75/0xa0 [ 1312.431557] ? vfs_write+0x354/0xa70 [ 1312.432088] ? fput_many+0x2f/0x1a0 [ 1312.432609] ? ksys_write+0x1a9/0x260 [ 1312.433182] ? __ia32_sys_read+0xb0/0xb0 [ 1312.433764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1312.434515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1312.435293] do_syscall_64+0x33/0x40 [ 1312.435825] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1312.436574] RIP: 0033:0x7f861f949b19 [ 1312.437114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1312.439811] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1312.440906] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1312.441950] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1312.442997] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.444040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1312.445077] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:08:29 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:08:29 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1312.559250] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:08:30 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:08:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r2 = signalfd4(r0, &(0x7f0000000080)={[0x46ff]}, 0x8, 0x80000) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r1, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000003c0)) 18:08:30 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:08:30 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:08:30 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:08:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1e6) [ 1317.150684] Bluetooth: hci1: command 0x0409 tx timeout [ 1317.406725] Bluetooth: hci7: command 0x0409 tx timeout [ 1317.407564] Bluetooth: hci5: command 0x0409 tx timeout [ 1317.470683] Bluetooth: hci4: command 0x0409 tx timeout [ 1319.198673] Bluetooth: hci1: command 0x041b tx timeout [ 1319.454663] Bluetooth: hci5: command 0x041b tx timeout [ 1319.455183] Bluetooth: hci7: command 0x041b tx timeout [ 1319.518659] Bluetooth: hci4: command 0x041b tx timeout [ 1321.246662] Bluetooth: hci1: command 0x040f tx timeout [ 1321.502662] Bluetooth: hci7: command 0x040f tx timeout [ 1321.503225] Bluetooth: hci5: command 0x040f tx timeout [ 1321.566649] Bluetooth: hci4: command 0x040f tx timeout [ 1323.294660] Bluetooth: hci1: command 0x0419 tx timeout [ 1323.550685] Bluetooth: hci5: command 0x0419 tx timeout [ 1323.551191] Bluetooth: hci7: command 0x0419 tx timeout [ 1323.614649] Bluetooth: hci4: command 0x0419 tx timeout [ 1325.720687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.721466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.723037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1325.789772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.790569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.792995] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1325.819044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.819845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.821759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1325.886729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.887485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.888855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1326.117005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.117809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.121229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1326.176506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.177188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.178437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1326.235327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.236006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.258138] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1326.271094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.271753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.273076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:08:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:08:57 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:08:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:08:57 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 18:08:57 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:08:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @ipv4=@empty}]}]}, 0x28}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x145340, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040)) 18:08:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:08:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1340.536054] FAULT_INJECTION: forcing a failure. [ 1340.536054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.537299] CPU: 0 PID: 86450 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1340.537914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1340.538646] Call Trace: [ 1340.538891] dump_stack+0x107/0x167 [ 1340.539222] should_fail.cold+0x5/0xa [ 1340.539566] _copy_from_user+0x2e/0x1b0 [ 1340.539923] iovec_from_user+0x141/0x400 [ 1340.540287] __import_iovec+0x67/0x590 [ 1340.540639] ? __is_insn_slot_addr+0x123/0x290 [ 1340.541047] ? mark_lock+0xf5/0x2df0 [ 1340.541387] io_import_iovec+0x581/0x1120 [ 1340.541758] ? io_complete_rw+0x230/0x230 [ 1340.542127] ? lock_downgrade+0x6d0/0x6d0 [ 1340.542500] ? mark_lock+0xf5/0x2df0 [ 1340.542835] io_read+0xe14/0x11e0 [ 1340.543144] ? lock_chain_count+0x20/0x20 [ 1340.543526] ? kiocb_done+0xc90/0xc90 [ 1340.543867] ? mark_lock+0xf5/0x2df0 [ 1340.544198] ? lock_chain_count+0x20/0x20 [ 1340.544573] ? __lock_acquire+0x1657/0x5b00 [ 1340.544969] ? __lock_acquire+0xbb1/0x5b00 [ 1340.545345] io_issue_sqe+0x2e8a/0x7700 [ 1340.545697] ? find_held_lock+0x2c/0x110 [ 1340.546059] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1340.546522] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1340.546940] ? lock_downgrade+0x6d0/0x6d0 [ 1340.547313] ? io_connect+0x610/0x610 [ 1340.547653] ? lock_acquire+0x197/0x470 [ 1340.548007] ? find_held_lock+0x2c/0x110 [ 1340.548371] ? __fget_files+0x26d/0x4c0 [ 1340.548725] ? lock_downgrade+0x6d0/0x6d0 [ 1340.549096] __io_queue_sqe+0x90/0x9d0 [ 1340.549443] ? io_issue_sqe+0x7700/0x7700 [ 1340.549818] ? io_prep_rw+0x7f5/0x1050 [ 1340.550165] io_submit_sqes+0x4461/0x85c0 [ 1340.550547] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1340.550982] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1340.551416] ? lock_downgrade+0x6d0/0x6d0 [ 1340.551784] ? find_held_lock+0x2c/0x110 [ 1340.552148] ? io_submit_sqes+0x85c0/0x85c0 [ 1340.552527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1340.552992] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1340.553467] ? trace_hardirqs_on+0x5b/0x180 [ 1340.553851] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1340.554333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1340.554793] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1340.555271] ? trace_hardirqs_on+0x5b/0x180 [ 1340.555654] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1340.556144] do_syscall_64+0x33/0x40 [ 1340.556473] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1340.556925] RIP: 0033:0x7f861f949b19 [ 1340.557254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1340.558864] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1340.558876] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1340.558882] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1340.558887] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1340.558906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1340.562589] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:08:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1425ff7f00"/20], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000480)=0x10001, 0x4) pipe2(&(0x7f00000000c0)={0x0, 0x0}, 0x800) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0xa302}], 0x10000000000002a3, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1}, 0x1c) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') 18:08:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:08:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:08:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:08:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:08:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:08:58 executing program 2: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xe8, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='keyring\x00') r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r6}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4", 0x32, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f0100", 0x1e, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000), 0x0, 0x10000}], 0x0, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="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", @ANYRES64, @ANYRESOCT=r5]) 18:08:58 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1345.375695] Bluetooth: hci1: command 0x0409 tx timeout [ 1345.567665] Bluetooth: hci4: command 0x0409 tx timeout [ 1347.422905] Bluetooth: hci1: command 0x041b tx timeout [ 1347.614683] Bluetooth: hci4: command 0x041b tx timeout [ 1348.016644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.017400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.018850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1348.061047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.061730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.063749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1348.473161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.474445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.476909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1348.513137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.514357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.516792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1349.663472] Bluetooth: hci4: command 0x040f tx timeout [ 1351.711264] Bluetooth: hci4: command 0x0419 tx timeout 18:09:17 executing program 2: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xe8, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='keyring\x00') r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r6}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4", 0x32, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f0100", 0x1e, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000), 0x0, 0x10000}], 0x0, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="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", @ANYRES64, @ANYRESOCT=r5]) 18:09:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:09:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:09:17 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:09:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:09:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:09:17 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 18:09:17 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(0x0, 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1360.548098] FAULT_INJECTION: forcing a failure. [ 1360.548098] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.549826] CPU: 0 PID: 87406 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1360.550796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1360.551949] Call Trace: [ 1360.552323] dump_stack+0x107/0x167 [ 1360.552834] should_fail.cold+0x5/0xa [ 1360.553381] ? io_setup_async_rw+0x180/0x580 [ 1360.554011] should_failslab+0x5/0x20 [ 1360.554555] __kmalloc+0x72/0x390 [ 1360.555055] io_setup_async_rw+0x180/0x580 [ 1360.555663] ? iov_iter_restore+0x195/0x3a0 [ 1360.556272] io_read+0x775/0x11e0 [ 1360.556774] ? kiocb_done+0xc90/0xc90 [ 1360.557327] ? mark_lock+0xf5/0x2df0 [ 1360.557887] ? __lock_acquire+0xbb1/0x5b00 [ 1360.558493] io_issue_sqe+0x2e8a/0x7700 [ 1360.559058] ? find_held_lock+0x2c/0x110 [ 1360.559640] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1360.560375] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1360.561042] ? lock_downgrade+0x6d0/0x6d0 [ 1360.561621] ? io_connect+0x610/0x610 [ 1360.562159] ? lock_acquire+0x197/0x470 [ 1360.562715] ? find_held_lock+0x2c/0x110 [ 1360.563319] ? __fget_files+0x26d/0x4c0 [ 1360.563896] ? lock_downgrade+0x6d0/0x6d0 [ 1360.564489] __io_queue_sqe+0x90/0x9d0 [ 1360.565039] ? io_issue_sqe+0x7700/0x7700 [ 1360.565629] ? io_prep_rw+0x7f5/0x1050 [ 1360.566180] io_submit_sqes+0x4461/0x85c0 [ 1360.566793] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1360.567505] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1360.568213] ? io_submit_sqes+0x85c0/0x85c0 [ 1360.568822] ? recalibrate_cpu_khz+0x10/0x10 [ 1360.569457] ? ktime_get+0x158/0x1f0 [ 1360.569989] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1360.570616] ? clockevents_program_event+0x131/0x360 [ 1360.571330] ? tick_program_event+0xa8/0x140 [ 1360.571976] ? hrtimer_interrupt+0x771/0x9b0 [ 1360.572612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1360.573362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1360.574094] do_syscall_64+0x33/0x40 [ 1360.574638] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1360.575360] RIP: 0033:0x7f861f949b19 [ 1360.575909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1360.578485] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1360.579594] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1360.580598] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1360.581625] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1360.582631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1360.583665] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:09:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:09:18 executing program 2: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xe8, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='keyring\x00') r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r6}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4", 0x32, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f0100", 0x1e, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000), 0x0, 0x10000}], 0x0, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="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", @ANYRES64, @ANYRESOCT=r5]) 18:09:18 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:09:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r0, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:09:18 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(0x0, 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:09:18 executing program 2: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xe8, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='keyring\x00') r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r6}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4", 0x32, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f0100", 0x1e, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000), 0x0, 0x10000}], 0x0, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="7bc6aea094d563a67fda5c855af342b822aac346107b076240361e39b7b42a6b0805841c293a30d543f7a45ddcb5ddc2f8233a7e45e83656aa490d634a85e370d1950959ed53fab56d956b3acdfb0be4a4ff1b4d6cfc9521de5d63288cc055b0577648891b532710ff7eaa31552842dc129d675a5c92b4347df2ff809482b1a7965982164e79eb0c1c488c2f00dbacf51e057aa354e3a3a1f54c764bf5b8fe654700e4c7f09f4e913f0e66fb4ec54ed258bc6f1d369a19e125eb9e80cae98064c7f53359546f9cd1f3c24909494b07cc37482e2060ffdba64c5f300116cae26398d42657eb98752a3d0765f51bcb6ac35f670bc45b0235bdcce87d34780bdb53afb5c38f9abe858620c0614cd3", @ANYRES64, @ANYRESOCT=r5]) 18:09:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1365.407640] Bluetooth: hci1: command 0x0409 tx timeout [ 1365.535641] Bluetooth: hci4: command 0x0409 tx timeout [ 1367.455628] Bluetooth: hci1: command 0x041b tx timeout [ 1367.582668] Bluetooth: hci4: command 0x041b tx timeout [ 1367.876680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.877394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.888474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1367.898929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.899536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.900799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1367.937358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.938372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.939377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1367.947430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.948238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.949651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1369.630642] Bluetooth: hci4: command 0x040f tx timeout [ 1371.678643] Bluetooth: hci4: command 0x0419 tx timeout 18:09:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:09:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:09:36 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(0x0, 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:09:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:09:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 18:09:36 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r0, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:09:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e000040000001000000000000"], 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)=""/270, 0x10e}], 0x1, 0x0, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000001740)={0x2, 0x4e21, @empty}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d2e2c4f4b4861777938e37cc6aa5e6317b632ef4fac2ae3a0bfa05063787f5f99462ff96073b36d0dfeec64c8612182a77458d9f01962ccf1fee60a7f2ca8ce21c049939c62508d63a620f81489d3173a184846ac17b880161bbed8d48d64550cd6802e3ba67c054c9fe640e32a3dbec96f8e7a2ed03feaaabb19f38ae4793f9886a30398e821982c8bb6e37ea10c78eb52c2a5ec2880fe0ebf0945ade0ab3646c04d11e50b13cd13972df1ac7cbe8a99950971"], 0xfdef) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff) r4 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r3}) keyctl$chown(0x4, r3, 0xee01, r4) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x4, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_add_to_accept_list={{0x2011, 0x7}, {0x5, @none}}}, 0xb) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$setown(r5, 0x8, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000140)={{}, {0x1, 0x1}, [{0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x2, 0xffffffffffffffff}], {0x4, 0x6}, [{}, {0x8, 0x0, r4}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x7}}, 0x4c, 0x2) unshare(0x48020200) r6 = syz_open_dev$vcsu(&(0x7f0000000480), 0x0, 0x400100) bind$bt_l2cap(r6, &(0x7f0000000580)={0x1f, 0x401, @none, 0xbb, 0x1}, 0xe) 18:09:36 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540), 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1379.116574] FAULT_INJECTION: forcing a failure. [ 1379.116574] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.117797] CPU: 0 PID: 88351 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1379.118392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1379.119102] Call Trace: [ 1379.119342] dump_stack+0x107/0x167 [ 1379.119676] should_fail.cold+0x5/0xa [ 1379.120016] ? create_object.isra.0+0x3a/0xa20 [ 1379.120420] should_failslab+0x5/0x20 [ 1379.120755] kmem_cache_alloc+0x5b/0x310 [ 1379.121102] create_object.isra.0+0x3a/0xa20 [ 1379.121453] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1379.121858] __kmalloc+0x16e/0x390 [ 1379.122167] io_setup_async_rw+0x180/0x580 [ 1379.122522] ? iov_iter_restore+0x195/0x3a0 [ 1379.122889] io_read+0x775/0x11e0 [ 1379.123174] ? kiocb_done+0xc90/0xc90 [ 1379.123496] ? mark_lock+0xf5/0x2df0 [ 1379.123821] ? __lock_acquire+0xbb1/0x5b00 [ 1379.124179] io_issue_sqe+0x2e8a/0x7700 [ 1379.124499] ? find_held_lock+0x2c/0x110 [ 1379.124823] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1379.125263] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1379.125638] ? lock_downgrade+0x6d0/0x6d0 [ 1379.125965] ? io_connect+0x610/0x610 [ 1379.126269] ? lock_acquire+0x197/0x470 [ 1379.126613] ? find_held_lock+0x2c/0x110 [ 1379.126961] ? __fget_files+0x26d/0x4c0 [ 1379.127297] ? lock_downgrade+0x6d0/0x6d0 [ 1379.127636] __io_queue_sqe+0x90/0x9d0 18:09:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1379.127978] ? io_issue_sqe+0x7700/0x7700 [ 1379.128450] ? io_prep_rw+0x7f5/0x1050 [ 1379.128777] io_submit_sqes+0x4461/0x85c0 [ 1379.129114] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1379.129499] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1379.129879] ? lock_downgrade+0x6d0/0x6d0 [ 1379.130227] ? find_held_lock+0x2c/0x110 [ 1379.130554] ? io_submit_sqes+0x85c0/0x85c0 [ 1379.130929] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1379.131312] ? wait_for_completion_io+0x270/0x270 [ 1379.131724] ? rcu_read_lock_any_held+0x75/0xa0 [ 1379.132093] ? vfs_write+0x354/0xa70 [ 1379.132383] ? fput_many+0x2f/0x1a0 [ 1379.132690] ? ksys_write+0x1a9/0x260 [ 1379.133012] ? __ia32_sys_read+0xb0/0xb0 [ 1379.133343] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1379.133784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1379.134199] do_syscall_64+0x33/0x40 [ 1379.134519] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1379.134930] RIP: 0033:0x7f861f949b19 [ 1379.135229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1379.136741] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1379.137334] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1379.137921] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1379.138473] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1379.139059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1379.139649] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:09:36 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540), 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:09:36 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540), 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:09:36 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(0x0, 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:09:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:09:36 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{0x0}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:09:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0x10e) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x8) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000005c0)={0x1, 'bond_slave_1\x00', {}, 0x2}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000600)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x47, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:09:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1383.838783] Bluetooth: hci1: command 0x0409 tx timeout [ 1384.094692] Bluetooth: hci5: command 0x0409 tx timeout [ 1384.158650] Bluetooth: hci7: command 0x0409 tx timeout [ 1385.886643] Bluetooth: hci1: command 0x041b tx timeout [ 1386.142670] Bluetooth: hci5: command 0x041b tx timeout [ 1386.206628] Bluetooth: hci7: command 0x041b tx timeout [ 1387.862165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.863250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.864780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1387.906909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.907556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.908993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1387.934793] Bluetooth: hci1: command 0x040f tx timeout [ 1388.106341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.107520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.109021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1388.152123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.152802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.154832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1388.192019] Bluetooth: hci5: command 0x040f tx timeout [ 1388.479319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.480773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.492007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1388.527457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.528258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.529335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:09:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r3, 0x0, 0x0) fcntl$getflags(r3, 0x401) copy_file_range(r2, 0x0, r0, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:09:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:09:58 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(0x0, 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:09:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 18:09:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x45e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x40010, r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), 0x4000) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0xfffc000000000000, 0x4, &(0x7f00000003c0)=[{&(0x7f0000001940)="ba03f9ab5e1e0957d6096aa4c445a6f7e701dbb16ef01d647cf1581ca8789b85289b21c5d5ef12c896a46e20e81d68f9adb7d5e722796633152eab23dd0e1463d95302735c35fe9ec0f40c6c7fad902de2e6528e72e5d0b3f201d4f061a7cb19f70bff1b3f9f3dc9956ddd71e4825c3bde68caf8dd3f48094ac4618c36bb02f0402c1405063e58139099c5f597b0c2761a94f5ab6641e87e16900f39f1478102208df49e1bf7650d5911e2ef6153e364ee32e5f121a3b0c5ebf376a3f1d157766be3b4666830c5763461e50a", 0xcc, 0x3}, {&(0x7f00000005c0)="a762d3b6750afadbe46aab259f88c94cb59b9e7a50703e646a71dd00aa509e7fe60e6cfd5c7175ea3d66ed0c6b2d3949d12a3a30eeeca6126a0d400aa231c36b9944d9fe9685942505c9ce12c4030b3235cda959480cec6abde43ca27baf548302d8fa83286c854adafabf4d409b1acc608924b9d657315480e7e56139a79b1ee0a05c02596b6672332e245354b58d50a63197f1bb7d4f2f9dc6b628f9f648e16c8d858cb92c9f22c1b268892d385c1e6cc4479020ea9ea522409fb58d5996971679872f5755100bfab8c807b4436d4f7d74f7cbf6105ae11e5ab2ecdda5e79635b3817536efabe5e4bcb706a4476fee4ece8dbd80", 0xf5, 0x4}, {&(0x7f00000006c0)="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", 0x1000, 0x1}, {&(0x7f0000001840)="7f6baf66a329b4bf5e7b5455c3f4388a9895af6ff201edfd1370d017eb9ccb7415803c0adf2c742fdc7513d63a4c7eac527e01ceb0723f2398", 0x39, 0xffffffff}], 0x824424, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x1}, 0x1b28) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3000009, 0x11, r3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = creat(&(0x7f0000000180)='./file1\x00', 0x20) preadv(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000200)=""/137, 0x89}], 0x2, 0xb391, 0x0) connect$802154_dgram(r4, &(0x7f0000001e80)={0x24, @short}, 0x12) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f0000000000000001000000010000000040000000400000200077a4176d904cdf804aa80000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000015f0000", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x800000002100}], 0x1000000, &(0x7f00000000c0)=ANY=[@ANYRES32]) 18:09:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{0x0}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:09:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:09:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1400.967862] FAULT_INJECTION: forcing a failure. [ 1400.967862] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.969631] CPU: 1 PID: 89757 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1400.970631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1400.971819] Call Trace: [ 1400.972218] dump_stack+0x107/0x167 [ 1400.972752] should_fail.cold+0x5/0xa [ 1400.973313] ? __io_queue_sqe+0x666/0x9d0 [ 1400.973920] should_failslab+0x5/0x20 [ 1400.974472] kmem_cache_alloc_trace+0x55/0x320 [ 1400.975140] __io_queue_sqe+0x666/0x9d0 [ 1400.975721] ? io_issue_sqe+0x7700/0x7700 [ 1400.976330] ? io_prep_rw+0x7f5/0x1050 [ 1400.976903] io_submit_sqes+0x4461/0x85c0 [ 1400.977531] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1400.978253] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1400.978953] ? lock_downgrade+0x6d0/0x6d0 [ 1400.979555] ? find_held_lock+0x2c/0x110 [ 1400.980166] ? io_submit_sqes+0x85c0/0x85c0 [ 1400.980803] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1400.981509] ? wait_for_completion_io+0x270/0x270 [ 1400.982215] ? rcu_read_lock_any_held+0x75/0xa0 [ 1400.982890] ? vfs_write+0x354/0xa70 [ 1400.983429] ? fput_many+0x2f/0x1a0 [ 1400.983976] ? ksys_write+0x1a9/0x260 [ 1400.984524] ? __ia32_sys_read+0xb0/0xb0 [ 1400.985124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1400.985883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1400.986636] do_syscall_64+0x33/0x40 [ 1400.987178] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1400.987923] RIP: 0033:0x7f861f949b19 [ 1400.988471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1400.991132] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1400.992226] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1400.993295] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1400.994354] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1400.995413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1400.996480] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:09:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:09:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x214d}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="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", 0x732}], 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x206800, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000040), 0x2, 0x0) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x7, 0x6, 0x1, 0x3, 0x0, 0x2, 0x3068, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000009c0), 0x4}, 0x920, 0x7, 0x9, 0x4, 0x401, 0x9, 0x200, 0x0, 0x1a2, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) r2 = eventfd(0x1f) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000840)) r3 = syz_open_dev$evdev(&(0x7f0000000880), 0x9, 0x28001) write(r3, &(0x7f00000008c0)="1b2b2a06d726966787499cef0d2b7844c1fd473201d31aaec6116d6579c322256285f5c5eae87d405c39610f03cc35ff66443c795c061c", 0x37) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000940)={0x9, &(0x7f0000000080)=[{0x6, 0x20}, {0xfff7, 0x5}, {0x3, 0x80}, {0x1, 0x100}, {0x7fff, 0x5}, {0xcb, 0x7fff}, {0x4, 0x6}, {}, {0x9, 0x5}]}) syz_open_dev$vcsu(&(0x7f0000000980), 0xfff, 0x711740) sendfile(r2, r4, &(0x7f0000000800)=0x200, 0x100000000) 18:09:58 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(0x0, 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:09:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{0x0}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:09:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:09:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="3400000010000100060000000000000000002c5910fa548fb2661a7d12b500150000809be149c8234d056a98ce5f747348f8326594a831fed8df81ea00000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ade7daae4433b91e5be24f079e43a9064d68a1d6a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fedf97990c195cdd6e5a3ec69861582d62e9182637b26db43c04d57f6347516027b7371ef6d57bb665800245e02e023c7cbd35dd92db51b6b9e621f72cd7ee1b2062b45aa514f7a9df82b468015ca553a28ee53e69ba1bf2117d89bc226437f0e726fb6627a0f1e689027bf58f88047ba1eb3937355dbf702e68208f9fc4a79a083b18e58636dca0040233fd2b08cad839347f04000000fbfb1583a4ee507c7b4d0dd55828016e866077e67f246200000000000000000000000000000000000000000000000000000000000035ed70fdf05a6e02016ed94378bb10d0000000000000000000"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x8, 0x0, 0x0, 0x151, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340)) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000580)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r2) io_uring_setup(0x23, &(0x7f00000008c0)={0x0, 0x0, 0x2, 0x7, 0xb1, 0x0, r1}) r4 = eventfd2(0x8, 0x0) syz_io_uring_setup(0x6e47, &(0x7f0000000ac0)={0x0, 0x800809c, 0x4, 0x0, 0x1d7, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000300)) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) r5 = fsmount(r3, 0x0, 0x8) execveat(r5, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E/\xc6\x17gB0Qim\x82u\x0fZ\xa9\x14\xf5\xc7X\xa9\x00\xb7\xaf\xcfouN\xbd\xb2\t^\xbe&~\xa7l\xfa\x036\x1c\"\x80\xfc/\x9b\x95\xf1!K\xc5{\xe7\xfdB[\xca\x87\x9bc\x98dg\x1a\xa1\xaa\xb4\x19\x7f\xa7\x90y\x9fq\xf5\x8a\xa9 \xa6\xdd\xf0+gb\xa6g\\\xec\tz\x06\xdf\x1a\x9c\xc9\xf7\xcc\x85\xb4G\xe9\xd3D\xf4\x8c\n\x17\xd5\x00\xf18\xb3T', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f0000000940)=']\xadt\xe0\r\xa3\xd7\xe8\x91\x90\n\x03_\x85\xa9\'E\xae\"\xeb]DE\xa3w\x8b\x94\xf7Yf\x03\x00\xd2:-\xab7\xd0\xf6\x0e\x903U\xe1\xe2\x8cS*HC\x17\xa0}@\xf4.\x87]\xed\x1f\x1e\xe8;\xfd\xee$\x8f\xba\xa5@\"\x93\xf7yR\x95z\x95\xc4\x03{\x11\xbe\xb3e\xb8B\x13\xa3uh\xcf\x11\xc7{Y\x0fp\x031\xb1/b_mq\x96\xccc\xa7\xbb\xb4T\x00J\xd7\xb8\n\xd4\xd9B\xa9\xec\xc5\xb5\x0e\xf1Q\x03\xbcX\x8d\xb2\xf6^\xb9\xc8\xa5\xdc\xa5\xcb\xde\xd3\xd03\xcc\xbe\xed\x9b\xbd\xcbb\x91\x98\x80\xe1X(t\xda\xd3F\x02\xa9\xa0\x81\xce;{\xfa\xba\xa3,{\xe87\xf6\x0f\xf9M\xb5mz', &(0x7f0000000700), &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000280)=0x2b8) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7c, 0x2, 0x3, 0x2, 0x0, 0xfffffffffffffffe, 0x8001, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000440), 0xa}, 0x4240, 0x8, 0xfffffffd, 0x4, 0x81, 0x10000, 0xb, 0x0, 0xfffffffd, 0x0, 0x63279da8}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x100) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x7b7542, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r6, 0x0) [ 1401.241379] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:09:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:09:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1401.325055] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1405.982649] Bluetooth: hci1: command 0x0409 tx timeout [ 1406.238836] Bluetooth: hci5: command 0x0409 tx timeout [ 1406.239673] Bluetooth: hci7: command 0x0409 tx timeout [ 1408.031614] Bluetooth: hci1: command 0x041b tx timeout [ 1408.286626] Bluetooth: hci7: command 0x041b tx timeout [ 1408.287144] Bluetooth: hci5: command 0x041b tx timeout [ 1409.874182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.875003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.876511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1409.930965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.932114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.933499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1410.079754] Bluetooth: hci1: command 0x040f tx timeout [ 1410.338312] Bluetooth: hci5: command 0x040f tx timeout [ 1410.583981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.584802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.597517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1410.605455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.606143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.607209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1410.692357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.693399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.704150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1410.718771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.719435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.721232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:10:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:10:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:10:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:10:19 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x0, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:10:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 18:10:19 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc6840, 0xa7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x169402, 0xc2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000280)=0x6e, 0x100800) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x1}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x484803, 0xa0) openat(r2, &(0x7f0000000180)='./file0\x00', 0x420980, 0x190) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/pcmcia_rsrc', 0x100, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESHEX]) 18:10:19 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1421.780904] FAULT_INJECTION: forcing a failure. [ 1421.780904] name failslab, interval 1, probability 0, space 0, times 0 [ 1421.781907] CPU: 1 PID: 91160 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1421.782501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1421.783206] Call Trace: [ 1421.783440] dump_stack+0x107/0x167 [ 1421.783751] should_fail.cold+0x5/0xa [ 1421.784091] ? create_object.isra.0+0x3a/0xa20 [ 1421.784490] should_failslab+0x5/0x20 [ 1421.784818] kmem_cache_alloc+0x5b/0x310 [ 1421.785173] create_object.isra.0+0x3a/0xa20 [ 1421.785555] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1421.785999] kmem_cache_alloc_trace+0x151/0x320 [ 1421.786405] __io_queue_sqe+0x666/0x9d0 [ 1421.786755] ? io_issue_sqe+0x7700/0x7700 [ 1421.787124] ? io_prep_rw+0x7f5/0x1050 [ 1421.787466] io_submit_sqes+0x4461/0x85c0 [ 1421.787842] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1421.788279] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1421.788702] ? lock_downgrade+0x6d0/0x6d0 [ 1421.789062] ? find_held_lock+0x2c/0x110 [ 1421.789414] ? io_submit_sqes+0x85c0/0x85c0 [ 1421.789796] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1421.790224] ? wait_for_completion_io+0x270/0x270 [ 1421.790641] ? rcu_read_lock_any_held+0x75/0xa0 [ 1421.791045] ? vfs_write+0x354/0xa70 [ 1421.791369] ? fput_many+0x2f/0x1a0 [ 1421.791686] ? ksys_write+0x1a9/0x260 [ 1421.792023] ? __ia32_sys_read+0xb0/0xb0 [ 1421.792388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1421.792845] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1421.793303] do_syscall_64+0x33/0x40 [ 1421.793626] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1421.794068] RIP: 0033:0x7f861f949b19 [ 1421.794090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1421.796232] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1421.796883] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1421.797492] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1421.798100] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1421.798709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1421.799317] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 [ 1421.802812] blktrace: Concurrent blktraces are not allowed on loop4 18:10:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:10:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:10:19 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x3b, 0x0, &(0x7f0000000080)=0x1f) accept4(r0, 0x0, 0x0, 0x80000) io_uring_enter(0xffffffffffffffff, 0x6813, 0x731f, 0x1, &(0x7f0000000000)={[0x1]}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x290004, &(0x7f0000000800)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2330}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 18:10:19 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x0, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:10:19 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761460f666900"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:10:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:10:19 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x0, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:10:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:10:19 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:10:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1426.590614] Bluetooth: hci1: command 0x0409 tx timeout [ 1426.782687] Bluetooth: hci5: command 0x0409 tx timeout [ 1426.846605] Bluetooth: hci7: command 0x0409 tx timeout [ 1428.638603] Bluetooth: hci1: command 0x041b tx timeout [ 1428.830661] Bluetooth: hci5: command 0x041b tx timeout [ 1428.894941] Bluetooth: hci7: command 0x041b tx timeout [ 1430.587234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.588198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.589694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1430.632633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.633302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.634672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1430.687606] Bluetooth: hci1: command 0x040f tx timeout [ 1430.823174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.824636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.846117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1430.878700] Bluetooth: hci5: command 0x040f tx timeout [ 1430.910367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.911631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.914528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1431.741847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.743410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.746256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1431.787856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.789080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.790974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:10:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:10:42 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:10:42 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:10:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:10:42 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f00000001c0)="2000000080000000060000006a0000000f00000000d897000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000016725b79412b7c7b961f1201b441074be16e0", 0x6c, 0x400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='delalc\v\x00\x00\x00']) 18:10:42 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 18:10:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:10:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1445.207961] FAULT_INJECTION: forcing a failure. [ 1445.207961] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.209359] CPU: 0 PID: 92568 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1445.210064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.211060] Call Trace: [ 1445.211327] dump_stack+0x107/0x167 [ 1445.211690] should_fail.cold+0x5/0xa [ 1445.212073] ? create_object.isra.0+0x3a/0xa20 [ 1445.212534] should_failslab+0x5/0x20 [ 1445.212910] kmem_cache_alloc+0x5b/0x310 [ 1445.213310] create_object.isra.0+0x3a/0xa20 [ 1445.213745] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1445.214246] kmem_cache_alloc_trace+0x151/0x320 [ 1445.214711] __io_queue_sqe+0x666/0x9d0 [ 1445.215103] ? io_issue_sqe+0x7700/0x7700 [ 1445.215502] ? io_prep_rw+0x7f5/0x1050 [ 1445.215897] io_submit_sqes+0x4461/0x85c0 [ 1445.216324] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1445.216821] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1445.217295] ? lock_downgrade+0x6d0/0x6d0 [ 1445.217700] ? find_held_lock+0x2c/0x110 [ 1445.218103] ? io_submit_sqes+0x85c0/0x85c0 [ 1445.218534] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.219011] ? wait_for_completion_io+0x270/0x270 [ 1445.219483] ? rcu_read_lock_any_held+0x75/0xa0 [ 1445.219941] ? vfs_write+0x354/0xa70 [ 1445.220309] ? fput_many+0x2f/0x1a0 [ 1445.220670] ? ksys_write+0x1a9/0x260 [ 1445.221051] ? __ia32_sys_read+0xb0/0xb0 [ 1445.221455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.221970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.222487] do_syscall_64+0x33/0x40 [ 1445.222856] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1445.223360] RIP: 0033:0x7f861f949b19 [ 1445.223730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.225528] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1445.226273] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1445.226972] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1445.227670] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.228370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.229074] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:10:42 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x6000) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/45) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000040)=""/39) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_RMID(0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/197) r1 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000180)=""/169) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000240)=""/46) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(r1, 0x0) r2 = shmget(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000280)=""/180) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000340)=""/100) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000003c0)=""/171) 18:10:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') (fail_nth: 1) write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1445.344867] FAULT_INJECTION: forcing a failure. [ 1445.344867] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.346033] CPU: 0 PID: 92574 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1445.346694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.347473] Call Trace: [ 1445.347730] dump_stack+0x107/0x167 [ 1445.348074] should_fail.cold+0x5/0xa [ 1445.348432] ? getname_flags.part.0+0x50/0x4f0 [ 1445.348865] should_failslab+0x5/0x20 [ 1445.349227] kmem_cache_alloc+0x5b/0x310 [ 1445.349607] ? ksys_write+0x21a/0x260 [ 1445.349967] getname_flags.part.0+0x50/0x4f0 [ 1445.350380] user_path_at_empty+0xa1/0x100 [ 1445.350778] __do_sys_pivot_root+0x13d/0x14b0 [ 1445.351202] ? wait_for_completion_io+0x270/0x270 [ 1445.351660] ? rcu_read_lock_any_held+0x75/0xa0 [ 1445.352095] ? vfs_write+0x354/0xa70 [ 1445.352447] ? is_path_reachable+0x110/0x110 [ 1445.352866] ? fput_many+0x2f/0x1a0 [ 1445.353209] ? ksys_write+0x1a9/0x260 [ 1445.353569] ? __ia32_sys_read+0xb0/0xb0 [ 1445.353952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.354449] do_syscall_64+0x33/0x40 [ 1445.354804] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1445.355284] RIP: 0033:0x7f6d8a022b19 [ 1445.355634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.357356] RSP: 002b:00007f6d87598188 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 1445.358080] RAX: ffffffffffffffda RBX: 00007f6d8a135f60 RCX: 00007f6d8a022b19 [ 1445.358749] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000020000180 [ 1445.359415] RBP: 00007f6d875981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.360083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.360761] R13: 00007ffdcbf5febf R14: 00007f6d87598300 R15: 0000000000022000 18:10:42 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:10:42 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:10:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') (fail_nth: 2) write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:10:42 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:10:42 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) [ 1445.503180] FAULT_INJECTION: forcing a failure. [ 1445.503180] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.504262] CPU: 0 PID: 92583 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1445.504866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.505574] Call Trace: [ 1445.505815] dump_stack+0x107/0x167 [ 1445.506140] should_fail.cold+0x5/0xa [ 1445.506474] ? create_object.isra.0+0x3a/0xa20 [ 1445.506877] should_failslab+0x5/0x20 [ 1445.507219] kmem_cache_alloc+0x5b/0x310 [ 1445.507580] create_object.isra.0+0x3a/0xa20 [ 1445.507967] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1445.508410] kmem_cache_alloc+0x159/0x310 [ 1445.508792] getname_flags.part.0+0x50/0x4f0 [ 1445.509179] user_path_at_empty+0xa1/0x100 [ 1445.509551] __do_sys_pivot_root+0x13d/0x14b0 [ 1445.509946] ? wait_for_completion_io+0x270/0x270 [ 1445.510378] ? rcu_read_lock_any_held+0x75/0xa0 [ 1445.510787] ? vfs_write+0x354/0xa70 [ 1445.511117] ? is_path_reachable+0x110/0x110 [ 1445.511501] ? fput_many+0x2f/0x1a0 [ 1445.511826] ? ksys_write+0x1a9/0x260 [ 1445.512172] ? __ia32_sys_read+0xb0/0xb0 [ 1445.512539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.513013] do_syscall_64+0x33/0x40 [ 1445.513340] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1445.513790] RIP: 0033:0x7f6d8a022b19 [ 1445.514119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.515718] RSP: 002b:00007f6d87598188 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 1445.516393] RAX: ffffffffffffffda RBX: 00007f6d8a135f60 RCX: 00007f6d8a022b19 [ 1445.517022] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000020000180 [ 1445.517637] RBP: 00007f6d875981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.518255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.518873] R13: 00007ffdcbf5febf R14: 00007f6d87598300 R15: 0000000000022000 18:10:42 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1445.571833] FAULT_INJECTION: forcing a failure. [ 1445.571833] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.573713] CPU: 1 PID: 92587 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1445.574736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.575950] Call Trace: [ 1445.576349] dump_stack+0x107/0x167 [ 1445.576900] should_fail.cold+0x5/0xa [ 1445.577468] ? io_setup_async_rw+0x180/0x580 [ 1445.578119] should_failslab+0x5/0x20 [ 1445.578684] __kmalloc+0x72/0x390 [ 1445.579206] io_setup_async_rw+0x180/0x580 [ 1445.579831] ? iov_iter_restore+0x195/0x3a0 [ 1445.580460] io_read+0x775/0x11e0 [ 1445.581002] ? kiocb_done+0xc90/0xc90 [ 1445.581564] ? mark_lock+0xf5/0x2df0 [ 1445.582149] ? __lock_acquire+0xbb1/0x5b00 [ 1445.582778] io_issue_sqe+0x2e8a/0x7700 [ 1445.583366] ? find_held_lock+0x2c/0x110 [ 1445.583967] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1445.584742] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1445.585438] ? lock_downgrade+0x6d0/0x6d0 [ 1445.586048] ? io_connect+0x610/0x610 [ 1445.586607] ? lock_acquire+0x197/0x470 [ 1445.587189] ? find_held_lock+0x2c/0x110 [ 1445.587796] ? __fget_files+0x26d/0x4c0 [ 1445.588383] ? lock_downgrade+0x6d0/0x6d0 [ 1445.589006] __io_queue_sqe+0x90/0x9d0 [ 1445.589588] ? io_issue_sqe+0x7700/0x7700 [ 1445.590204] ? io_prep_rw+0x7f5/0x1050 [ 1445.590790] io_submit_sqes+0x4461/0x85c0 [ 1445.591431] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1445.592165] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1445.592889] ? lock_downgrade+0x6d0/0x6d0 [ 1445.593497] ? find_held_lock+0x2c/0x110 [ 1445.594093] ? io_submit_sqes+0x85c0/0x85c0 [ 1445.594739] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.595452] ? wait_for_completion_io+0x270/0x270 [ 1445.596166] ? rcu_read_lock_any_held+0x75/0xa0 [ 1445.596859] ? vfs_write+0x354/0xa70 [ 1445.597407] ? fput_many+0x2f/0x1a0 [ 1445.597949] ? ksys_write+0x1a9/0x260 [ 1445.598509] ? __ia32_sys_read+0xb0/0xb0 [ 1445.599112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.599887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.600660] do_syscall_64+0x33/0x40 [ 1445.601208] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1445.601959] RIP: 0033:0x7f861f949b19 [ 1445.602507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.605198] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1445.606315] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1445.607360] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1445.608405] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.609455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.610504] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 [ 1450.206674] Bluetooth: hci1: command 0x0409 tx timeout [ 1450.398605] Bluetooth: hci5: command 0x0409 tx timeout [ 1450.462604] Bluetooth: hci4: command 0x0409 tx timeout [ 1452.254614] Bluetooth: hci1: command 0x041b tx timeout [ 1452.446610] Bluetooth: hci5: command 0x041b tx timeout [ 1452.510607] Bluetooth: hci4: command 0x041b tx timeout [ 1453.974133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.975304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.976799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1454.028628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.029318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.030820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1454.302604] Bluetooth: hci1: command 0x040f tx timeout [ 1454.558860] Bluetooth: hci4: command 0x040f tx timeout [ 1454.567031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.567846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.569140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1454.596234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.596944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.598231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1454.879655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.880330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.896137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1454.898450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.899120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.900490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:11:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') (fail_nth: 3) write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:11:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 18:11:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:03 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xb, &(0x7f0000000000)=0xba, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="31000e0080000000ffffffffffff0802110000005050505050500000000000000000000064000000060200000503000000000000d277243e420fbef10e3a9428e9429384642cfc303d49148b8e47aa1c348598f77a896b622ab3c60f666931ce359eab770ce78cd877"], 0x50}}, 0x0) 18:11:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) [ 1465.824850] FAULT_INJECTION: forcing a failure. [ 1465.824850] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.825956] CPU: 0 PID: 93965 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1465.826581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1465.827344] Call Trace: [ 1465.827608] dump_stack+0x107/0x167 [ 1465.827959] should_fail.cold+0x5/0xa [ 1465.828325] ? create_object.isra.0+0x3a/0xa20 [ 1465.828771] should_failslab+0x5/0x20 [ 1465.829120] kmem_cache_alloc+0x5b/0x310 [ 1465.829490] create_object.isra.0+0x3a/0xa20 [ 1465.829890] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1465.830355] __kmalloc+0x16e/0x390 [ 1465.830685] io_setup_async_rw+0x180/0x580 [ 1465.831071] ? iov_iter_restore+0x195/0x3a0 [ 1465.831463] io_read+0x775/0x11e0 [ 1465.831791] ? kiocb_done+0xc90/0xc90 [ 1465.832145] ? mark_lock+0xf5/0x2df0 [ 1465.832515] ? __lock_acquire+0xbb1/0x5b00 [ 1465.832907] io_issue_sqe+0x2e8a/0x7700 [ 1465.833270] ? find_held_lock+0x2c/0x110 [ 1465.833638] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1465.834121] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1465.834548] ? lock_downgrade+0x6d0/0x6d0 [ 1465.834935] ? io_connect+0x610/0x610 [ 1465.835284] ? lock_acquire+0x197/0x470 [ 1465.835638] ? find_held_lock+0x2c/0x110 [ 1465.836010] ? __fget_files+0x26d/0x4c0 [ 1465.836367] ? lock_downgrade+0x6d0/0x6d0 [ 1465.836756] __io_queue_sqe+0x90/0x9d0 [ 1465.837107] ? io_issue_sqe+0x7700/0x7700 [ 1465.837488] ? io_prep_rw+0x7f5/0x1050 [ 1465.837850] io_submit_sqes+0x4461/0x85c0 [ 1465.838243] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1465.838692] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1465.839131] ? lock_downgrade+0x6d0/0x6d0 [ 1465.839507] ? find_held_lock+0x2c/0x110 [ 1465.839873] ? io_submit_sqes+0x85c0/0x85c0 [ 1465.840276] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1465.840727] ? wait_for_completion_io+0x270/0x270 [ 1465.841173] ? rcu_read_lock_any_held+0x75/0xa0 [ 1465.841595] ? vfs_write+0x354/0xa70 [ 1465.841939] ? fput_many+0x2f/0x1a0 [ 1465.842273] ? ksys_write+0x1a9/0x260 [ 1465.842625] ? __ia32_sys_read+0xb0/0xb0 [ 1465.842999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1465.843471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1465.843945] do_syscall_64+0x33/0x40 [ 1465.844295] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1465.844767] RIP: 0033:0x7f861f949b19 [ 1465.845107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.846776] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1465.847467] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1465.848164] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1465.848915] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1465.849553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1465.850194] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:11:03 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:11:03 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:11:03 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:11:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000000080)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@local}, {@in=@local, 0x0, 0x6c}, @in6=@mcast1}, 0x0, 0xffffffff}}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2a) 18:11:03 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:11:03 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:11:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 18:11:03 executing program 2: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f0000000400)}}], 0x1, 0x0) fallocate(0xffffffffffffffff, 0x49, 0x100000000, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}}, 0x5) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x138081, 0xcb) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) r5 = accept4$packet(r3, 0x0, &(0x7f00000001c0), 0x100000) write$binfmt_elf32(r5, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x9, 0x12, 0x6, 0x100, 0x3, 0x6, 0x0, 0x46, 0x38, 0x286, 0x7951, 0x3, 0x20, 0x1, 0x8, 0x3, 0x3ff}, [{0x1, 0x0, 0x0, 0x7fff, 0x3, 0x8001, 0x2, 0x6}, {0x1, 0x3f, 0x66d3, 0xa81e, 0x2, 0x200, 0xb6, 0x8}], "ac970d35991dece6318ecd7d49ee63d0ef632dd79e0895c5d74fe6d37c14431bca9f962d3e50739ead84d4b5a6e6e26d72eb1495e1de7bab8b468d9394d8bbded4fccae0e0edc9a77a35a530c2a11904778ddfb4f18259bd851fdd22f38dd859f0c94ea234fb94dcb494316650f942b39da322f015cfb563dea6c93a35fdf858ddf05f90230ca901825e5d36a0fed96f47b3fda4436961004dd5cb8fb9a435d8ea589e8faf43aff1f6db395ec8faa3970f30b863d63e45855a5e5cd0debc92dd01c8872434a66a6cb11a368c4b539b83e8cce9ebfd047c469b9493ef1576abd01b91b053b1cf93a1d7", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x661) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r4, 0x0) [ 1466.128261] FAULT_INJECTION: forcing a failure. [ 1466.128261] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.130873] CPU: 1 PID: 93989 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1466.132109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1466.133597] Call Trace: [ 1466.134080] dump_stack+0x107/0x167 [ 1466.134749] should_fail.cold+0x5/0xa [ 1466.135438] ? __io_queue_sqe+0x666/0x9d0 [ 1466.136203] should_failslab+0x5/0x20 [ 1466.136843] kmem_cache_alloc_trace+0x55/0x320 [ 1466.137666] __io_queue_sqe+0x666/0x9d0 [ 1466.138267] ? io_issue_sqe+0x7700/0x7700 [ 1466.139012] ? io_prep_rw+0x7f5/0x1050 [ 1466.139592] io_submit_sqes+0x4461/0x85c0 [ 1466.140240] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1466.140990] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1466.141709] ? lock_downgrade+0x6d0/0x6d0 [ 1466.142321] ? find_held_lock+0x2c/0x110 [ 1466.142929] ? io_submit_sqes+0x85c0/0x85c0 [ 1466.143575] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1466.144297] ? wait_for_completion_io+0x270/0x270 [ 1466.145031] ? rcu_read_lock_any_held+0x75/0xa0 [ 1466.145723] ? vfs_write+0x354/0xa70 [ 1466.146278] ? fput_many+0x2f/0x1a0 [ 1466.146938] ? ksys_write+0x1a9/0x260 [ 1466.147506] ? __ia32_sys_read+0xb0/0xb0 [ 1466.148242] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1466.149035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1466.149972] do_syscall_64+0x33/0x40 [ 1466.150574] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1466.151498] RIP: 0033:0x7f861f949b19 18:11:03 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1466.152109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1466.155530] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1466.156910] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1466.158188] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1466.159486] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1466.160776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1466.162065] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:11:03 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1470.750594] Bluetooth: hci1: command 0x0409 tx timeout [ 1470.878655] Bluetooth: hci4: command 0x0409 tx timeout [ 1471.006604] Bluetooth: hci7: command 0x0409 tx timeout [ 1471.006615] Bluetooth: hci5: command 0x0409 tx timeout [ 1472.798617] Bluetooth: hci1: command 0x041b tx timeout [ 1472.926626] Bluetooth: hci4: command 0x041b tx timeout [ 1473.054625] Bluetooth: hci7: command 0x041b tx timeout [ 1473.055553] Bluetooth: hci5: command 0x041b tx timeout [ 1474.846598] Bluetooth: hci1: command 0x040f tx timeout [ 1474.975604] Bluetooth: hci4: command 0x040f tx timeout [ 1475.102628] Bluetooth: hci5: command 0x040f tx timeout [ 1475.103224] Bluetooth: hci7: command 0x040f tx timeout [ 1476.894591] Bluetooth: hci1: command 0x0419 tx timeout [ 1477.022611] Bluetooth: hci4: command 0x0419 tx timeout [ 1477.144293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.145185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.146677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1477.150647] Bluetooth: hci7: command 0x0419 tx timeout [ 1477.151397] Bluetooth: hci5: command 0x0419 tx timeout [ 1477.217506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.218303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.219707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1477.305566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.306374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.307759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1477.334611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.335383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.336915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1477.353596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.354275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.355583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1477.423363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.424346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.425726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1477.569508] FAULT_INJECTION: forcing a failure. [ 1477.569508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.570659] CPU: 1 PID: 95758 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1477.571222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1477.571895] Call Trace: [ 1477.572114] dump_stack+0x107/0x167 [ 1477.572425] should_fail.cold+0x5/0xa [ 1477.572765] strncpy_from_user+0x34/0x470 [ 1477.573142] getname_flags.part.0+0x95/0x4f0 [ 1477.573510] user_path_at_empty+0xa1/0x100 [ 1477.573860] __do_sys_pivot_root+0x13d/0x14b0 [ 1477.574235] ? wait_for_completion_io+0x270/0x270 [ 1477.574630] ? rcu_read_lock_any_held+0x75/0xa0 [ 1477.575014] ? vfs_write+0x354/0xa70 [ 1477.575319] ? is_path_reachable+0x110/0x110 [ 1477.575677] ? fput_many+0x2f/0x1a0 [ 1477.575978] ? ksys_write+0x1a9/0x260 [ 1477.576295] ? __ia32_sys_read+0xb0/0xb0 [ 1477.576632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1477.577071] do_syscall_64+0x33/0x40 [ 1477.577376] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1477.577792] RIP: 0033:0x7f06eaa05b19 [ 1477.578100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1477.579580] RSP: 002b:00007f06e7f7b188 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 1477.580198] RAX: ffffffffffffffda RBX: 00007f06eab18f60 RCX: 00007f06eaa05b19 [ 1477.580777] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000020000180 [ 1477.581363] RBP: 00007f06e7f7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1477.581940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.582523] R13: 00007fff67c9b10f R14: 00007f06e7f7b300 R15: 0000000000022000 [ 1478.048772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.050326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.053438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1478.075189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.076697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.079074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:11:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:11:27 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1490.571024] FAULT_INJECTION: forcing a failure. [ 1490.571024] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.572181] CPU: 0 PID: 95831 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1490.572814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1490.573582] Call Trace: [ 1490.573831] dump_stack+0x107/0x167 [ 1490.574164] should_fail.cold+0x5/0xa [ 1490.574514] ? getname_flags.part.0+0x50/0x4f0 [ 1490.574929] ? getname_flags.part.0+0x50/0x4f0 [ 1490.575350] should_failslab+0x5/0x20 [ 1490.575701] kmem_cache_alloc+0x5b/0x310 [ 1490.576072] ? strncpy_from_user+0x9e/0x470 [ 1490.576464] getname_flags.part.0+0x50/0x4f0 [ 1490.576867] user_path_at_empty+0xa1/0x100 [ 1490.577238] __do_sys_pivot_root+0x1c4/0x14b0 [ 1490.577654] ? wait_for_completion_io+0x270/0x270 [ 1490.578093] ? rcu_read_lock_any_held+0x75/0xa0 [ 1490.578518] ? vfs_write+0x354/0xa70 [ 1490.578855] ? is_path_reachable+0x110/0x110 [ 1490.579228] ? ksys_write+0x1a9/0x260 [ 1490.579577] ? __ia32_sys_read+0xb0/0xb0 [ 1490.579955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1490.580434] do_syscall_64+0x33/0x40 [ 1490.580747] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1490.581183] RIP: 0033:0x7f06eaa05b19 [ 1490.581499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1490.583012] RSP: 002b:00007f06e7f7b188 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 1490.583708] RAX: ffffffffffffffda RBX: 00007f06eab18f60 RCX: 00007f06eaa05b19 [ 1490.584352] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000020000180 [ 1490.584997] RBP: 00007f06e7f7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.585646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.586291] R13: 00007fff67c9b10f R14: 00007f06e7f7b300 R15: 0000000000022000 18:11:27 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:11:27 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 18:11:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1063afa20c446e64eb2e2f665c4ae629a1bcaa4b9c5d88e525472f1a696c653106233613751451f4e52459e69c44fd7b2e8af4bf9da3b710ef3fcf43827a78ae8115b22d66c1aa551986e9c412a09567ec282eab084d63408033638c42eeb1be64f352714b0d65b16e231cc631f4e51ad5f1a95147bbcc00"/132], 0x3ffffe00) 18:11:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') (fail_nth: 4) write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1490.613032] FAULT_INJECTION: forcing a failure. [ 1490.613032] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.614223] CPU: 0 PID: 95834 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1490.614995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1490.615940] Call Trace: [ 1490.616253] dump_stack+0x107/0x167 [ 1490.616674] should_fail.cold+0x5/0xa [ 1490.617123] ? create_object.isra.0+0x3a/0xa20 [ 1490.617647] should_failslab+0x5/0x20 [ 1490.618088] kmem_cache_alloc+0x5b/0x310 [ 1490.618557] create_object.isra.0+0x3a/0xa20 [ 1490.619057] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1490.619640] kmem_cache_alloc_trace+0x151/0x320 [ 1490.620179] __io_queue_sqe+0x666/0x9d0 [ 1490.620643] ? io_issue_sqe+0x7700/0x7700 [ 1490.621132] ? io_prep_rw+0x7f5/0x1050 [ 1490.621571] io_submit_sqes+0x4461/0x85c0 [ 1490.622060] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1490.622622] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1490.623178] ? lock_downgrade+0x6d0/0x6d0 [ 1490.623653] ? find_held_lock+0x2c/0x110 [ 1490.624129] ? io_submit_sqes+0x85c0/0x85c0 [ 1490.624622] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1490.625179] ? wait_for_completion_io+0x270/0x270 [ 1490.625615] ? rcu_read_lock_any_held+0x75/0xa0 [ 1490.626142] ? vfs_write+0x354/0xa70 [ 1490.626557] ? fput_many+0x2f/0x1a0 [ 1490.626970] ? ksys_write+0x1a9/0x260 [ 1490.627404] ? __ia32_sys_read+0xb0/0xb0 [ 1490.627869] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1490.628466] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1490.629062] do_syscall_64+0x33/0x40 [ 1490.629477] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1490.630058] RIP: 0033:0x7f861f949b19 [ 1490.630472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1490.632512] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1490.633378] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1490.634185] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1490.634994] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.635781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1490.636565] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:11:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') (fail_nth: 5) write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1490.735053] FAULT_INJECTION: forcing a failure. [ 1490.735053] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.736315] CPU: 0 PID: 95843 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1490.737033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1490.737685] Call Trace: [ 1490.737982] dump_stack+0x107/0x167 [ 1490.738384] should_fail.cold+0x5/0xa [ 1490.738794] ? create_object.isra.0+0x3a/0xa20 [ 1490.739280] should_failslab+0x5/0x20 [ 1490.739687] kmem_cache_alloc+0x5b/0x310 [ 1490.740125] create_object.isra.0+0x3a/0xa20 [ 1490.740592] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1490.741154] kmem_cache_alloc+0x159/0x310 [ 1490.741603] ? strncpy_from_user+0x9e/0x470 [ 1490.742073] getname_flags.part.0+0x50/0x4f0 [ 1490.742552] user_path_at_empty+0xa1/0x100 [ 1490.743005] __do_sys_pivot_root+0x1c4/0x14b0 [ 1490.743483] ? wait_for_completion_io+0x270/0x270 [ 1490.744008] ? rcu_read_lock_any_held+0x75/0xa0 [ 1490.744502] ? vfs_write+0x354/0xa70 [ 1490.744903] ? is_path_reachable+0x110/0x110 [ 1490.745375] ? ksys_write+0x1a9/0x260 [ 1490.745786] ? __ia32_sys_read+0xb0/0xb0 [ 1490.746221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1490.746785] do_syscall_64+0x33/0x40 [ 1490.747189] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1490.747732] RIP: 0033:0x7f06eaa05b19 [ 1490.748126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1490.750084] RSP: 002b:00007f06e7f7b188 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 1490.750885] RAX: ffffffffffffffda RBX: 00007f06eab18f60 RCX: 00007f06eaa05b19 [ 1490.751637] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000020000180 [ 1490.752380] RBP: 00007f06e7f7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.753135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.753879] R13: 00007fff67c9b10f R14: 00007f06e7f7b300 R15: 0000000000022000 18:11:28 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:11:28 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d37355"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:11:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') (fail_nth: 6) write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1495.454711] Bluetooth: hci1: command 0x0409 tx timeout [ 1497.503614] Bluetooth: hci1: command 0x041b tx timeout [ 1499.550616] Bluetooth: hci1: command 0x040f tx timeout [ 1500.207783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.209118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.211600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1500.258417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.259662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.261580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1501.598701] Bluetooth: hci1: command 0x0419 tx timeout 18:11:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:11:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:11:51 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 18:11:51 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d37355"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:11:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:51 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:11:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000880), 0x4) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="8ee2309c47995455ec7dced68eb160c46014b839663252e10fdc61f5e2e2fd88054934d706470c49e1ecb5911b279caf9597c38f7138e265a9c0895eb5c08249a2c2fffbb7cf7c5a067a39e016d7a7be11e2a0359da88dd80144d1175f50989065d52c715c0fec711859e0ef0d7a51407b3c7d181c7a613c92ee0fb23ccfcc9ad88560cba56f1d1efc1e673619d9a31f9815bd4010524cce05589faff0ede4bcae4f0a79b2c7bf7721c3abcb4c37089fe8606a8293f7106711070be0505b1fa4c390dd60589e10d91df26fd0e49770", 0xcf, 0x2001, 0x0, {0x0, r0}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101, 0x1, {0x3, r0}}, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) fsync(0xffffffffffffffff) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = gettid() pidfd_open(r2, 0x0) prlimit64(0x0, 0x1, &(0x7f00000015c0)={0x0, 0x3}, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x7, 0x0, 0x400, 0x0, 0x0, "020d413cc96c2d23ccc5963c1b539e66b59a9f", 0x7}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000300)=""/231) prlimit64(r2, 0xe, &(0x7f0000000040)={0x101, 0x6}, &(0x7f0000000080)) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) readv(0xffffffffffffffff, 0x0, 0x30) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x5}}) write(0xffffffffffffffff, 0x0, 0x0) [ 1513.872496] FAULT_INJECTION: forcing a failure. [ 1513.872496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1513.874495] CPU: 0 PID: 96321 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1513.875493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1513.876698] Call Trace: [ 1513.877089] dump_stack+0x107/0x167 [ 1513.877630] should_fail.cold+0x5/0xa [ 1513.878189] _copy_from_user+0x2e/0x1b0 [ 1513.878767] iovec_from_user+0x141/0x400 [ 1513.879366] __import_iovec+0x67/0x590 [ 1513.879933] ? __is_insn_slot_addr+0x123/0x290 [ 1513.880600] ? mark_lock+0xf5/0x2df0 [ 1513.881133] io_import_iovec+0x581/0x1120 [ 1513.881748] ? io_complete_rw+0x230/0x230 [ 1513.882336] ? lock_downgrade+0x6d0/0x6d0 [ 1513.882942] ? mark_lock+0xf5/0x2df0 [ 1513.883485] io_read+0xe14/0x11e0 [ 1513.883993] ? lock_chain_count+0x20/0x20 [ 1513.884607] ? kiocb_done+0xc90/0xc90 [ 1513.885167] ? mark_lock+0xf5/0x2df0 [ 1513.885717] ? lock_chain_count+0x20/0x20 [ 1513.886332] ? __lock_acquire+0x1657/0x5b00 [ 1513.886992] ? __lock_acquire+0xbb1/0x5b00 [ 1513.887619] io_issue_sqe+0x2e8a/0x7700 [ 1513.888207] ? find_held_lock+0x2c/0x110 [ 1513.888799] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1513.889576] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1513.890271] ? lock_downgrade+0x6d0/0x6d0 [ 1513.890875] ? io_connect+0x610/0x610 [ 1513.891438] ? lock_acquire+0x197/0x470 [ 1513.892013] ? find_held_lock+0x2c/0x110 [ 1513.892611] ? __fget_files+0x26d/0x4c0 [ 1513.893195] ? lock_downgrade+0x6d0/0x6d0 [ 1513.893805] __io_queue_sqe+0x90/0x9d0 [ 1513.894371] ? io_issue_sqe+0x7700/0x7700 [ 1513.894967] ? io_prep_rw+0x7f5/0x1050 [ 1513.895534] io_submit_sqes+0x4461/0x85c0 [ 1513.896158] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1513.896876] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1513.897576] ? lock_downgrade+0x6d0/0x6d0 [ 1513.898163] ? find_held_lock+0x2c/0x110 [ 1513.898750] ? io_submit_sqes+0x85c0/0x85c0 [ 1513.899377] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1513.900071] ? wait_for_completion_io+0x270/0x270 [ 1513.900766] ? rcu_read_lock_any_held+0x75/0xa0 [ 1513.901494] ? vfs_write+0x354/0xa70 [ 1513.902033] ? fput_many+0x2f/0x1a0 [ 1513.902564] ? ksys_write+0x1a9/0x260 [ 1513.903116] ? __ia32_sys_read+0xb0/0xb0 [ 1513.903706] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1513.904456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1513.905199] do_syscall_64+0x33/0x40 [ 1513.905747] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1513.906481] RIP: 0033:0x7f861f949b19 [ 1513.907017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1513.909628] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1513.910717] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1513.911736] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1513.912747] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1513.913763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1513.914781] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:11:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:11:51 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0), 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:11:51 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x8) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r1, 0x0, 0x86) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@dev, @empty}, &(0x7f0000000440)=0xc) creat(0x0, 0x7f0b893b7b19eb96) 18:11:51 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d37355"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:11:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:11:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) [ 1518.942591] Bluetooth: hci5: command 0x0409 tx timeout [ 1520.991608] Bluetooth: hci5: command 0x041b tx timeout [ 1523.038701] Bluetooth: hci5: command 0x040f tx timeout [ 1523.870812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.872942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.875672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1523.942334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.943804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.946176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:12:14 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:12:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:12:14 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 18:12:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:12:14 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2004, @fd=r5, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000000500)=""/12, 0xc}], 0x5, 0x8, 0x1}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0xf8e, 0x4, 0x1}, 0x3) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e3a834080000610100000000000000ffffffff"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)) splice(r2, 0x0, r1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 18:12:14 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0), 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:12:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:12:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1536.946840] FAULT_INJECTION: forcing a failure. [ 1536.946840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1536.947983] CPU: 1 PID: 96829 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1536.948575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1536.949346] Call Trace: [ 1536.949610] dump_stack+0x107/0x167 [ 1536.949957] should_fail.cold+0x5/0xa [ 1536.950320] _copy_from_user+0x2e/0x1b0 [ 1536.950702] iovec_from_user+0x141/0x400 [ 1536.951087] __import_iovec+0x67/0x590 [ 1536.951452] ? __is_insn_slot_addr+0x123/0x290 [ 1536.951888] ? mark_lock+0xf5/0x2df0 [ 1536.952251] io_import_iovec+0x581/0x1120 [ 1536.952621] ? io_complete_rw+0x230/0x230 [ 1536.953013] ? lock_downgrade+0x6d0/0x6d0 [ 1536.953405] ? mark_lock+0xf5/0x2df0 [ 1536.953762] io_read+0xe14/0x11e0 [ 1536.954090] ? lock_chain_count+0x20/0x20 [ 1536.954490] ? kiocb_done+0xc90/0xc90 [ 1536.954829] ? mark_lock+0xf5/0x2df0 [ 1536.955184] ? lock_chain_count+0x20/0x20 [ 1536.955573] ? __lock_acquire+0x1657/0x5b00 [ 1536.955990] ? __lock_acquire+0xbb1/0x5b00 [ 1536.956391] io_issue_sqe+0x2e8a/0x7700 [ 1536.956743] ? find_held_lock+0x2c/0x110 [ 1536.957123] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1536.957618] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1536.958063] ? lock_downgrade+0x6d0/0x6d0 [ 1536.958449] ? io_connect+0x610/0x610 [ 1536.958810] ? lock_acquire+0x197/0x470 [ 1536.959180] ? find_held_lock+0x2c/0x110 [ 1536.959564] ? __fget_files+0x26d/0x4c0 [ 1536.959938] ? lock_downgrade+0x6d0/0x6d0 [ 1536.960329] __io_queue_sqe+0x90/0x9d0 [ 1536.960672] ? io_issue_sqe+0x7700/0x7700 [ 1536.961064] ? io_prep_rw+0x7f5/0x1050 [ 1536.961433] io_submit_sqes+0x4461/0x85c0 [ 1536.961846] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1536.962308] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1536.962761] ? lock_downgrade+0x6d0/0x6d0 [ 1536.963145] ? find_held_lock+0x2c/0x110 [ 1536.963530] ? io_submit_sqes+0x85c0/0x85c0 [ 1536.963942] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1536.964394] ? wait_for_completion_io+0x270/0x270 [ 1536.964812] ? rcu_read_lock_any_held+0x75/0xa0 [ 1536.965245] ? vfs_write+0x354/0xa70 [ 1536.965568] ? fput_many+0x2f/0x1a0 [ 1536.965918] ? ksys_write+0x1a9/0x260 [ 1536.966276] ? __ia32_sys_read+0xb0/0xb0 [ 1536.966661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1536.967147] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1536.967630] do_syscall_64+0x33/0x40 [ 1536.967957] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1536.968431] RIP: 0033:0x7f861f949b19 [ 1536.968782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1536.970484] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1536.971190] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1536.971853] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1536.972512] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1536.973173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1536.973845] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:12:14 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d37355"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:12:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:12:14 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0), 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:12:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:12:14 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2004, @fd=r5, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000000500)=""/12, 0xc}], 0x5, 0x8, 0x1}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0xf8e, 0x4, 0x1}, 0x3) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e3a834080000610100000000000000ffffffff"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)) splice(r2, 0x0, r1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 18:12:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:12:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:12:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:12:14 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d37355"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1541.790659] Bluetooth: hci4: command 0x0409 tx timeout [ 1543.838611] Bluetooth: hci4: command 0x041b tx timeout [ 1545.887586] Bluetooth: hci4: command 0x040f tx timeout [ 1546.582315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.583678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.586314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1546.639158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.640443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.642473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:12:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_open_pts(r1, 0xc000) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:12:36 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:12:36 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d37355"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:12:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1558.966216] FAULT_INJECTION: forcing a failure. [ 1558.966216] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.967427] CPU: 1 PID: 97339 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1558.968063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1558.968822] Call Trace: [ 1558.969076] dump_stack+0x107/0x167 [ 1558.969413] should_fail.cold+0x5/0xa [ 1558.969764] ? create_object.isra.0+0x3a/0xa20 [ 1558.970193] should_failslab+0x5/0x20 [ 1558.970542] kmem_cache_alloc+0x5b/0x310 [ 1558.970918] create_object.isra.0+0x3a/0xa20 [ 1558.971325] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1558.971802] __kmalloc+0x16e/0x390 [ 1558.972137] io_setup_async_rw+0x180/0x580 [ 1558.972524] ? iov_iter_restore+0x195/0x3a0 [ 1558.972926] io_read+0x775/0x11e0 [ 1558.973251] ? kiocb_done+0xc90/0xc90 [ 1558.973605] ? mark_lock+0xf5/0x2df0 [ 1558.973983] ? __lock_acquire+0xbb1/0x5b00 [ 1558.974382] io_issue_sqe+0x2e8a/0x7700 [ 1558.974753] ? find_held_lock+0x2c/0x110 [ 1558.975133] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1558.975624] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1558.976068] ? lock_downgrade+0x6d0/0x6d0 [ 1558.976452] ? io_connect+0x610/0x610 [ 1558.976809] ? lock_acquire+0x197/0x470 [ 1558.977188] ? find_held_lock+0x2c/0x110 [ 1558.977566] ? __fget_files+0x26d/0x4c0 [ 1558.977939] ? lock_downgrade+0x6d0/0x6d0 [ 1558.978333] __io_queue_sqe+0x90/0x9d0 [ 1558.978736] ? io_issue_sqe+0x7700/0x7700 [ 1558.979127] ? io_prep_rw+0x7f5/0x1050 [ 1558.979487] io_submit_sqes+0x4461/0x85c0 [ 1558.979890] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1558.980354] __do_sys_io_uring_enter+0x6b5/0x18c0 18:12:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:12:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14942, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) splice(r1, &(0x7f0000001140)=0x100000000, 0xffffffffffffffff, &(0x7f0000001180)=0x8, 0x1, 0x4) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) write(r3, &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000010c0)='-*{^]%:\x00', &(0x7f0000001100)='./file1\x00', r3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) getdents64(r4, &(0x7f0000001400)=""/53, 0x35) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001e00)={0x0, "3129e095ac54e588e826a21343dadb6f"}) r5 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') fcntl$getown(r5, 0x9) r6 = dup2(0xffffffffffffffff, r4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x15, 0x0, &(0x7f00000002c0)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0xf66f, 0x80000000, 0xa539, 0x8}) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f00000002c0)={{0x1, 0x20}, 0x100, './file0\x00'}) dup(0xffffffffffffffff) unshare(0x48020200) 18:12:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 18:12:36 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1558.980837] ? lock_downgrade+0x6d0/0x6d0 [ 1558.981409] ? find_held_lock+0x2c/0x110 [ 1558.981816] ? io_submit_sqes+0x85c0/0x85c0 [ 1558.982249] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1558.982699] ? wait_for_completion_io+0x270/0x270 [ 1558.983146] ? rcu_read_lock_any_held+0x75/0xa0 [ 1558.983573] ? vfs_write+0x354/0xa70 [ 1558.983924] ? fput_many+0x2f/0x1a0 [ 1558.984262] ? ksys_write+0x1a9/0x260 [ 1558.984618] ? __ia32_sys_read+0xb0/0xb0 [ 1558.985003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1558.985494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1558.985976] do_syscall_64+0x33/0x40 [ 1558.986324] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1558.986804] RIP: 0033:0x7f861f949b19 [ 1558.987153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1558.988846] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1558.989553] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1558.990216] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1558.990881] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1558.991532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1558.992189] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:12:36 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:12:36 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c7"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:12:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:12:36 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:12:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:12:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) [ 1559.356806] FAULT_INJECTION: forcing a failure. [ 1559.356806] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.357892] CPU: 1 PID: 97369 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1559.358438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1559.359089] Call Trace: [ 1559.359308] dump_stack+0x107/0x167 [ 1559.359603] should_fail.cold+0x5/0xa [ 1559.359910] ? __io_queue_sqe+0x666/0x9d0 [ 1559.360243] should_failslab+0x5/0x20 [ 1559.360548] kmem_cache_alloc_trace+0x55/0x320 [ 1559.360918] __io_queue_sqe+0x666/0x9d0 [ 1559.361238] ? io_issue_sqe+0x7700/0x7700 [ 1559.361575] ? io_prep_rw+0x7f5/0x1050 [ 1559.361897] io_submit_sqes+0x4461/0x85c0 [ 1559.362245] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1559.362642] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1559.363036] ? lock_downgrade+0x6d0/0x6d0 [ 1559.363364] ? find_held_lock+0x2c/0x110 [ 1559.363697] ? io_submit_sqes+0x85c0/0x85c0 [ 1559.364052] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1559.364439] ? wait_for_completion_io+0x270/0x270 [ 1559.364832] ? rcu_read_lock_any_held+0x75/0xa0 [ 1559.365204] ? vfs_write+0x354/0xa70 [ 1559.365507] ? fput_many+0x2f/0x1a0 [ 1559.365803] ? ksys_write+0x1a9/0x260 [ 1559.366115] ? __ia32_sys_read+0xb0/0xb0 [ 1559.366445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1559.366865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1559.367285] do_syscall_64+0x33/0x40 [ 1559.367587] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1559.367997] RIP: 0033:0x7f861f949b19 [ 1559.368302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1559.369768] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1559.370379] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1559.370955] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1559.371537] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1559.372138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1559.372720] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:12:36 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c7"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:12:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000a9a8ea21404010654c328060e08e3d7d3a9412b8f9d50e74411b0fbc2bac289af7af87be0b244ea7c420843383c4587948913da02143ed56c299b354f86a0008a1d6331e3e12e2e83a823eb9edd7c683a14dcbeabd8cef69f6e8e2958ef85c93d6eb567c9230e1a2", @ANYRES16=r3, @ANYBLOB="20002cbd7000fbdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8005) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b0b0000000400000000010040001c0002800c000a0000000c00018008000100010000000400dab3c4a1f5517925414bddcca90bababca6d7358d1c147dd60fd279a44752e0a6e2f44379c190501c467585c259b00000000c048ff1fbb42814b9317be232b1447d0c6287ba73ddae46a71d1dfc7ed6ee0afd200f7ed301b468ad78ea92ccfd2341bbed81c20198d6fcbb1daf507f88331cf8eea6994e2fc022884802000"/174], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) [ 1559.392557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1559.412013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1563.999604] Bluetooth: hci4: command 0x0409 tx timeout [ 1564.126573] Bluetooth: hci5: command 0x0409 tx timeout [ 1566.047638] Bluetooth: hci4: command 0x041b tx timeout [ 1566.174574] Bluetooth: hci5: command 0x041b tx timeout [ 1566.555147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.556309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.567502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1566.574489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.575206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.576429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1566.664769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.665530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.666848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1566.692390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.693221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.694376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:12:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:12:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0xe424baa8ac537b0a, 0x80) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 18:12:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c7"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:12:56 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:12:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:12:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:12:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x5, 0xf8, 0x7, 0x0, 0x0, 0xcb6e, 0xcc5ca144f48e4426, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x4, @perf_config_ext={0x0, 0xe72}, 0x40001, 0xa8ad, 0xfffffffb, 0x7, 0x2, 0x6, 0x7, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') 18:12:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) [ 1578.686301] FAULT_INJECTION: forcing a failure. [ 1578.686301] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.687413] CPU: 1 PID: 98305 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1578.688032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1578.688773] Call Trace: [ 1578.689022] dump_stack+0x107/0x167 [ 1578.689353] should_fail.cold+0x5/0xa [ 1578.689704] ? create_object.isra.0+0x3a/0xa20 [ 1578.690140] should_failslab+0x5/0x20 [ 1578.690489] kmem_cache_alloc+0x5b/0x310 [ 1578.690865] create_object.isra.0+0x3a/0xa20 [ 1578.691266] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1578.691738] kmem_cache_alloc_trace+0x151/0x320 [ 1578.692164] __io_queue_sqe+0x666/0x9d0 [ 1578.692534] ? io_issue_sqe+0x7700/0x7700 [ 1578.692922] ? io_prep_rw+0x7f5/0x1050 [ 1578.693283] io_submit_sqes+0x4461/0x85c0 [ 1578.693678] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1578.694142] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1578.694581] ? lock_downgrade+0x6d0/0x6d0 [ 1578.694960] ? find_held_lock+0x2c/0x110 [ 1578.695331] ? io_submit_sqes+0x85c0/0x85c0 [ 1578.695739] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1578.696188] ? wait_for_completion_io+0x270/0x270 [ 1578.696628] ? rcu_read_lock_any_held+0x75/0xa0 [ 1578.697060] ? vfs_write+0x354/0xa70 [ 1578.697398] ? fput_many+0x2f/0x1a0 [ 1578.697735] ? ksys_write+0x1a9/0x260 [ 1578.698088] ? __ia32_sys_read+0xb0/0xb0 [ 1578.698461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1578.698938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1578.699408] do_syscall_64+0x33/0x40 [ 1578.699749] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1578.700216] RIP: 0033:0x7f861f949b19 [ 1578.700558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.702240] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1578.702940] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1578.703592] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1578.704238] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1578.704889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1578.705537] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:12:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:12:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:12:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:12:56 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:12:56 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x108) r0 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r1, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = dup2(r2, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) quotactl(0x2, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) openat$cgroup(r3, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) 18:12:56 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c761"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:12:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 18:12:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) [ 1578.968847] FAULT_INJECTION: forcing a failure. [ 1578.968847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1578.969849] CPU: 1 PID: 98325 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1578.970406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1578.971075] Call Trace: [ 1578.971306] dump_stack+0x107/0x167 [ 1578.971604] should_fail.cold+0x5/0xa [ 1578.971921] _copy_from_user+0x2e/0x1b0 [ 1578.972242] iovec_from_user+0x141/0x400 [ 1578.972586] __import_iovec+0x67/0x590 [ 1578.972913] ? __is_insn_slot_addr+0x123/0x290 [ 1578.973296] ? mark_lock+0xf5/0x2df0 [ 1578.973605] io_import_iovec+0x581/0x1120 [ 1578.973952] ? io_complete_rw+0x230/0x230 [ 1578.974304] ? lock_downgrade+0x6d0/0x6d0 [ 1578.974644] ? mark_lock+0xf5/0x2df0 [ 1578.974950] io_read+0xe14/0x11e0 [ 1578.975227] ? lock_chain_count+0x20/0x20 [ 1578.975569] ? kiocb_done+0xc90/0xc90 [ 1578.975880] ? mark_lock+0xf5/0x2df0 [ 1578.976188] ? lock_chain_count+0x20/0x20 [ 1578.976530] ? __lock_acquire+0x1657/0x5b00 [ 1578.976894] ? __lock_acquire+0xbb1/0x5b00 [ 1578.977242] io_issue_sqe+0x2e8a/0x7700 [ 1578.977571] ? find_held_lock+0x2c/0x110 [ 1578.977903] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1578.978347] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1578.978732] ? lock_downgrade+0x6d0/0x6d0 [ 1578.979073] ? io_connect+0x610/0x610 [ 1578.979385] ? lock_acquire+0x197/0x470 [ 1578.979706] ? find_held_lock+0x2c/0x110 [ 1578.980046] ? __fget_files+0x26d/0x4c0 [ 1578.980370] ? lock_downgrade+0x6d0/0x6d0 [ 1578.980711] __io_queue_sqe+0x90/0x9d0 [ 1578.981036] ? io_issue_sqe+0x7700/0x7700 [ 1578.981374] ? io_prep_rw+0x7f5/0x1050 [ 1578.981699] io_submit_sqes+0x4461/0x85c0 [ 1578.982051] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1578.982469] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1578.982867] ? lock_downgrade+0x6d0/0x6d0 [ 1578.983203] ? find_held_lock+0x2c/0x110 [ 1578.983540] ? io_submit_sqes+0x85c0/0x85c0 [ 1578.983907] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1578.984300] ? wait_for_completion_io+0x270/0x270 [ 1578.984694] ? rcu_read_lock_any_held+0x75/0xa0 [ 1578.985075] ? vfs_write+0x354/0xa70 [ 1578.985382] ? fput_many+0x2f/0x1a0 [ 1578.985679] ? ksys_write+0x1a9/0x260 [ 1578.985991] ? __ia32_sys_read+0xb0/0xb0 [ 1578.986335] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1578.986762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1578.987185] do_syscall_64+0x33/0x40 [ 1578.987489] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1578.987903] RIP: 0033:0x7f861f949b19 [ 1578.988211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.989694] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1578.990328] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1578.990908] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1578.991484] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1578.992058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1578.992640] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 [ 1583.518620] Bluetooth: hci1: command 0x0409 tx timeout [ 1583.646585] Bluetooth: hci4: command 0x0409 tx timeout [ 1583.710566] Bluetooth: hci5: command 0x0409 tx timeout [ 1585.566622] Bluetooth: hci1: command 0x041b tx timeout [ 1585.694549] Bluetooth: hci4: command 0x041b tx timeout [ 1585.758680] Bluetooth: hci5: command 0x041b tx timeout [ 1587.614595] Bluetooth: hci1: command 0x040f tx timeout [ 1587.742556] Bluetooth: hci4: command 0x040f tx timeout [ 1587.806546] Bluetooth: hci5: command 0x040f tx timeout [ 1588.514964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.516282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.518728] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1588.595194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.596433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.599003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1588.795112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.795829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.806406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1588.820949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.821699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.823021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1588.911437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.912543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.925276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1588.935943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.936937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.939058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:13:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 18:13:19 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:13:19 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:13:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:13:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x6) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x80, 0x3f, 0x1, 0x55f8, 0x0, 0x3, 0x8000, 0x3ae, 0x40, 0x1e6, 0x612c, 0x8, 0x38, 0x2, 0x9, 0x7, 0xff}, [{0x6, 0x2, 0x1000, 0x200, 0x0, 0x1, 0x4}, {0x6, 0x0, 0x19df68e2, 0x5, 0x80000001, 0x0, 0x6, 0x401}], "458a3cc3776b31b857995349da4d3cfcdff964d7c4725a58180c479bf6a53efdd34d00ca39f6dde50a93586280598653c00478e8ff9e452589468cfad8b33b32df02362272ab79387e11d8041b91083e1aacf210d7c4c628906aeb29f567768cc5269a0126746c88f47bf83c35d833999682bf20b9b07d241bae30d2e6aa85eae0509d5203710ad96f4c52146dffa70eb5a43a1c5e522e41c44953212fb567d0cff5b7b6782873607bef966041ce99182c06200f52a31f592008d020bd93207f1cd782625df6c5c7e912d8c710967cf95cf337c28c1d114347ab01f107b703acfdecb6dcfa2f975134385f4bf2", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb9d) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum, 0x0, @desc2}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10) 18:13:19 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000280)="ef2308df17caf5ae16265a566b5a317930315ad9e3605d5a09cc96cbcbe354e793e7659a1a4ad4a3ca4ee1c35866005a697051d6bb157a60a9b85f5ea954c8e387ad645ddb198827b219c249a6ab2f20fc60cb97d8e3dad66a9139bbaa3dd34fa8574c9774fba2971103ac1a04d1749bd2a83029db7ad0ead7686dfe5c3553da466c3ab71e1d8023395401bbe8634475cfa0a9d635dee26f6a220912d26ef1f5af2670b422e16717d67749fb60d6994ed2", 0xb1}, {&(0x7f0000000340)="fd66436c61f3d7e181fbca25dace5d97f0d1a6005998176efd3fe813a0047bae43bf76b5426fa8689fc650d9e54055b64100f810eeb5d74b4e39b62b416cc543320c906a4bd2d6be503a7329f51212765895a80e5948db0ad2ba653a9310bc9ebc35df6fc915221ba57da77cf07beaeeadb6a61d6ce11370e0cd14baff3c16d206b0e91c1a", 0x85, 0x100}, {&(0x7f0000000080)="140de65c2272367003f4463ad5d790eb544355a58d2a969ab0cc3457f0871c27982959ec1ea6d829d43a8e93e3", 0x2d, 0xfffffffffffffffd}, {&(0x7f0000000400)="c679d9519a6b4c333195d077be5726590fcf7711ea3de7964ebe55374d0d9b6e11e719c65e64a0cc39c9172a6ce09ead663fcaaee00542b4c29bef68cac64fa5bf2b58c6f0c93e71e61a1bb6fe56edd1701cea746fdc528f96d669f936fef30691d65f94c1e78bf6bf83bb7a984a25f84a15f472d2b7c07367adab3e909a365bdcea4e4c5c3d43f480e90d9007be1048ceae328986768d5f7e091a262f551ca8c4130620216b8e8fa3e90442b946592575bb0d6051b96a67093ad8157e82553bee9b823c080cf5281b13a85b6765c1c98392e1fb85692d18e28f935b6ed6a691405c1822f2174e1aeca185996b69b0fc", 0xf0, 0x3}, {&(0x7f0000000500)="31d4e87982a1f6f0b8e9892c106821f32dfd57ab7afc438ac9492c7a33ba0abd22ee470f312176b7850263975b9898a2457267467ce967cfe515bd163ac2bf2f38a51da3ed95fe1a5957a31319563852da28be3d867acd7269aa919ff39898fa674d60eb068d67c4ec2da66fc4bbdc160aaeb3568c328bffaeeef51ad4636190622c9e662ae4bb5338cab907ea22", 0x8e, 0xb2}], 0x20, &(0x7f0000000640)={[{@gid}, {@mode={'mode', 0x3d, 0x1}}, {@huge_within_size}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_measure}]}) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:13:19 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYBLOB="0852000004d3735500c76146"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:13:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) [ 1602.103247] FAULT_INJECTION: forcing a failure. [ 1602.103247] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.104344] CPU: 0 PID: 99704 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1602.104891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1602.105556] Call Trace: [ 1602.105774] dump_stack+0x107/0x167 [ 1602.106069] should_fail.cold+0x5/0xa [ 1602.106389] ? io_setup_async_rw+0x180/0x580 [ 1602.106745] should_failslab+0x5/0x20 [ 1602.107052] __kmalloc+0x72/0x390 [ 1602.107335] io_setup_async_rw+0x180/0x580 [ 1602.107675] ? iov_iter_restore+0x195/0x3a0 [ 1602.108030] io_read+0x775/0x11e0 [ 1602.108314] ? kiocb_done+0xc90/0xc90 [ 1602.108623] ? mark_lock+0xf5/0x2df0 [ 1602.108944] ? __lock_acquire+0xbb1/0x5b00 [ 1602.109285] io_issue_sqe+0x2e8a/0x7700 [ 1602.109606] ? find_held_lock+0x2c/0x110 [ 1602.109930] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1602.110350] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1602.110734] ? lock_downgrade+0x6d0/0x6d0 [ 1602.111069] ? io_connect+0x610/0x610 [ 1602.111376] ? lock_acquire+0x197/0x470 [ 1602.111698] ? find_held_lock+0x2c/0x110 [ 1602.112034] ? __fget_files+0x26d/0x4c0 [ 1602.112351] ? lock_downgrade+0x6d0/0x6d0 [ 1602.112686] __io_queue_sqe+0x90/0x9d0 [ 1602.113002] ? io_issue_sqe+0x7700/0x7700 [ 1602.113338] ? io_prep_rw+0x7f5/0x1050 [ 1602.113655] io_submit_sqes+0x4461/0x85c0 [ 1602.114002] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1602.114401] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1602.114788] ? lock_downgrade+0x6d0/0x6d0 [ 1602.115125] ? find_held_lock+0x2c/0x110 [ 1602.115453] ? io_submit_sqes+0x85c0/0x85c0 [ 1602.115808] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1602.116194] ? wait_for_completion_io+0x270/0x270 [ 1602.116582] ? rcu_read_lock_any_held+0x75/0xa0 [ 1602.116952] ? vfs_write+0x354/0xa70 [ 1602.117253] ? fput_many+0x2f/0x1a0 [ 1602.117547] ? ksys_write+0x1a9/0x260 [ 1602.117853] ? __ia32_sys_read+0xb0/0xb0 [ 1602.118187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1602.118608] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1602.119024] do_syscall_64+0x33/0x40 [ 1602.119324] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1602.119731] RIP: 0033:0x7f861f949b19 [ 1602.120031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1602.121498] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1602.122109] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1602.122667] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1602.123231] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1602.123797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1602.124367] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:13:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="384aa1d111adf76045a5b5721a2144bb4e42884334bbfa596ec67d24a7d651e8f6d3d745cc9978bc45268f6c29569db3828798e1c5d8fbe7d75a13fa62f8fdf31eb674febff1c4ae2f6d9a32b215397bee7f90ccb75d4fb5fbcfe54f972743fe4944b4f1573e935a444b97390cab132134826d1f1bc702420adacfd722f284c19f2611a157b5d297a96deeea6e948fd85d129128a772655080250e1bae1d22d4b2715a2679034f6c6aaa73234fe1e068e62ad740ad1737fb5cdccd880259dd2b2d1e945c7e23cc84a92eaa4a9f4ffa37e87c50ec67ec6c0f321d7a2612638ae270", 0xe1}, {&(0x7f0000000180)="e8d48ae183e1d1405967c06a0023df96d35390d5feeb43b12a2587f050acf0faaaaded1ee7830a59be5a05c7258b918e169ce9bad8b0d66dc9b3758d969b7f84232d20d11de120d63cb31decde9c12d5181a9942f63b037477bcafff33db0deca1c951e3e776a03984a884f7ccd2f2a7ddc228e721dae6d2b0c3ed3d968088cfe664505f8dbf960ee002126cf3b1ba41b67ed99581b8b8202d88a44f", 0x9c}, {&(0x7f0000000240)="07b59e8722fcbb58f3f2d12257a84aabfb82a852259b1a78c75abbe7a4455cbaa0dd4cac81afd25350dff871430468d92bf66eba06e4921dd49f3f7741a9b4c3ef6db338474dfffb27a90b29fee8c13f147855a62fe29ff47234b128c1477ef849495b232f9c502fbe6ebe657ce928089d99d58b66dbb379237492c70c5d163c68361da2593ffc53705699b7a08b9edcc758300b7d0a923f2da8046180b481c9eb22c2d81d78c305a6b6fbf97020bb4a8a80c3013b", 0xb5}, {&(0x7f0000000300)="3913ee93bd8e343be1500e790acc326d78b870420b5e6f468bccef7b94ac58297137ef8abd416da30354d4226d8cd64d00f4f47f3b801ec4bc8ae1bdbe250be33de431ea0940cbf687da2e3a1ebb1025e177cb3b26d7efed7adfb0865e7d0fb5baebefc5410e1d486aed46568292364d2add9436d623d52871fe2c01a7519522ea7822f6bb88b85931698ac9ff527ccc2a80b360acc317d3", 0x98}, {&(0x7f0000000d40)="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", 0x1000}], 0x5, &(0x7f0000000000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x18}, 0x80) sendmmsg$inet6(r0, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="fff906329ab318e5a2af6b156065458447120efe7bddf820ddb5658c1b5b9d7e67171fdad52fbff9264146e167d0b8dfa23f9cc3c44674348c5ae1342b90cd06", 0x40}, {&(0x7f00000007c0)="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", 0x559}], 0x2}}], 0x1, 0x40840) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="03000000000000002e2f183db1e09fa1559fcf66696c65300000"]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x4000010, 0xffffffffffffffff, 0x8000000) 18:13:19 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYBLOB="0852000004d3735500c76146"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:13:19 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:13:19 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYBLOB="0852000004d3735500c76146"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:13:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) [ 1602.345450] FAULT_INJECTION: forcing a failure. [ 1602.345450] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.346694] CPU: 0 PID: 99722 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1602.347218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1602.347845] Call Trace: [ 1602.348054] dump_stack+0x107/0x167 [ 1602.348339] should_fail.cold+0x5/0xa [ 1602.348633] ? create_object.isra.0+0x3a/0xa20 [ 1602.348990] should_failslab+0x5/0x20 [ 1602.349289] kmem_cache_alloc+0x5b/0x310 [ 1602.349618] create_object.isra.0+0x3a/0xa20 [ 1602.349960] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1602.350353] __kmalloc+0x16e/0x390 [ 1602.350640] io_setup_async_rw+0x180/0x580 [ 1602.350978] ? iov_iter_restore+0x195/0x3a0 [ 1602.351309] io_read+0x775/0x11e0 [ 1602.351584] ? kiocb_done+0xc90/0xc90 [ 1602.351893] ? mark_lock+0xf5/0x2df0 [ 1602.352198] ? __lock_acquire+0xbb1/0x5b00 [ 1602.352533] io_issue_sqe+0x2e8a/0x7700 [ 1602.352854] ? find_held_lock+0x2c/0x110 [ 1602.353169] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1602.353576] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1602.353958] ? lock_downgrade+0x6d0/0x6d0 [ 1602.354277] ? io_connect+0x610/0x610 [ 1602.354584] ? lock_acquire+0x197/0x470 [ 1602.354904] ? find_held_lock+0x2c/0x110 [ 1602.355220] ? __fget_files+0x26d/0x4c0 [ 1602.355532] ? lock_downgrade+0x6d0/0x6d0 [ 1602.355866] __io_queue_sqe+0x90/0x9d0 [ 1602.356182] ? io_issue_sqe+0x7700/0x7700 [ 1602.356522] ? io_prep_rw+0x7f5/0x1050 [ 1602.356823] io_submit_sqes+0x4461/0x85c0 [ 1602.357160] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1602.357545] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1602.357932] ? lock_downgrade+0x6d0/0x6d0 [ 1602.358252] ? find_held_lock+0x2c/0x110 [ 1602.358579] ? io_submit_sqes+0x85c0/0x85c0 [ 1602.358937] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1602.359311] ? wait_for_completion_io+0x270/0x270 [ 1602.359704] ? rcu_read_lock_any_held+0x75/0xa0 [ 1602.360067] ? vfs_write+0x354/0xa70 [ 1602.360371] ? fput_many+0x2f/0x1a0 [ 1602.360655] ? ksys_write+0x1a9/0x260 [ 1602.360962] ? __ia32_sys_read+0xb0/0xb0 [ 1602.361281] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1602.361705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1602.362110] do_syscall_64+0x33/0x40 [ 1602.362413] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1602.362807] RIP: 0033:0x7f861f949b19 [ 1602.363100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1602.364550] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1602.365138] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1602.365709] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1602.366278] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1602.366856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1602.367428] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:13:19 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x280000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{r1, r2+10000000}, {r3, r4+10000000}}, &(0x7f0000000180)) 18:13:19 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:13:19 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32, @ANYBLOB="0852000004d3735500c76146"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:13:19 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000000000002e2f6676dd62c9dd1883df696c653200f6b4371731cbf05440d1ed8ce5862d8576839f3ab27ecdae288750c957"]) openat(r1, &(0x7f0000000280)='./file1\x00', 0x701f02, 0x2c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) r2 = dup(r0) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') lseek(r2, 0x0, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000040)={0x0, 0x1fa, [0x0, 0xc8a2, 0x0, 0x386, 0x101, 0x2]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) socket$netlink(0x10, 0x3, 0x13) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="99ffdd527aa304bdb341363cc42306a90c2fab1f6be2d4d8e5c2d56fb76c3c061e86f0856d6f87b84a92b65a8bd64561dd068ce027e3ab1e55", 0x39, 0x40000, &(0x7f0000000400)={0x11, 0x2, 0x0, 0x1, 0x9, 0x6, @random="ef64fa7843e8"}, 0x14) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10) [ 1606.942563] Bluetooth: hci1: command 0x0409 tx timeout [ 1607.134560] Bluetooth: hci5: command 0x0409 tx timeout [ 1607.199542] Bluetooth: hci4: command 0x0409 tx timeout [ 1607.262548] Bluetooth: hci7: command 0x0409 tx timeout [ 1608.990547] Bluetooth: hci1: command 0x041b tx timeout [ 1609.182592] Bluetooth: hci5: command 0x041b tx timeout [ 1609.246549] Bluetooth: hci4: command 0x041b tx timeout [ 1609.310547] Bluetooth: hci7: command 0x041b tx timeout [ 1611.038588] Bluetooth: hci1: command 0x040f tx timeout [ 1611.230554] Bluetooth: hci5: command 0x040f tx timeout [ 1611.294561] Bluetooth: hci4: command 0x040f tx timeout [ 1611.358543] Bluetooth: hci7: command 0x040f tx timeout [ 1612.100042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.101149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.115733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1612.173908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.174768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.176235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1612.272139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.272964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.274531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1612.316310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.317056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.318310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1612.894733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.895454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.896963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1612.922888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.923602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1612.924830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1613.033058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1613.033931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.035322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1613.061213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1613.061925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.063149] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1613.359484] Bluetooth: hci4: command 0x0419 tx timeout 18:13:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 18:13:43 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32, @ANYBLOB="0852000004d3735500c76146"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:13:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:13:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40030602}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xc8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4048000}, 0x2000c000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32, @ANYBLOB="14000400677265746170300000000000000000000800050004000000050053000100"], 0x40}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}, 0x100}, 0x0, 0xffffffffffffffef, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x684, r6, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x238, 0x33, @mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x9}, @broadcast, @broadcast, @from_mac, {0x1, 0x4}}, 0x296, 0x1, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x10, 0x2, 0x4, 0x0, {0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x3195, 0x3f}}, [{0xdd, 0x9, "c871e50d107b24b6ed"}, {0xdd, 0x48, "68d203d02b322c07d694fa6f62b0f17e539e7a56a4f01d06d936ef4b99ebd6e5279704707b600c80545885520505633e8ce8a90c4f47041e8b0d46dcb5b40132bfba3e09a289b618"}, {0xdd, 0x76, "c19e98711132015e2b24d1a9d136e47eb8dce70838e57d5eb4ad5b7a25d266ed38fe35b1f9051f35d673302f658a08fc7d47091e19edf006821901d7c7fb9d13d45cb16fa7fe06de33e09dcd620cb6c032ef06d2b0b1a584513a3264c1a80ddc8457cc9c25ceef54a667ac359858340fb09c047c96e8"}, {0xdd, 0xe, "091413fa9144ecc05503ee6b63b9"}, {0xdd, 0x32, "2af3c5a7414db949d5ff4753adaed1681cd473103196ca2dee80900894f4e19736e28fc85165bd8b12cc8ea7d7a41164dd93"}, {0xdd, 0xdb, "d3efba9046701d9fcda9f370f2a6c88e5a2eb1544824ff6088e499501a4846803a2f9e7a3138748458f9fac39195f57f5a6443c51c4f07355de3fb5fe3a5a8fdcf2bfaa13f2c22b1e44f3cbfe082f5648c1e136732befe2a3d49d11a6b9eb0f7622ea38a7930a8a7a6b2307c1995af9c371b5bb592a32d389a5df91c209dd2d4f037e4704f55be3f131aab0be49d170f70738e5538d313809ffa108d071c24a95fd0eed1d7494be4b2d4a9d627c195a132f4298406b5b979b766b9a94cb23e49e549b513fe80fed3ce42565351713f8b519d93730dda32b36b2b39"}]}}, @NL80211_ATTR_FRAME={0x419, 0x33, @mgmt_frame=@assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6ea3}, @device_a, @broadcast, @from_mac=@device_b, {0x9, 0xc5}}, 0x80, 0x3, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x30}, {0x3, 0x1}]}, @val={0x2d, 0x1a, {0x80, 0x2, 0x3, 0x0, {0x1870, 0x5, 0x0, 0x3e7, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x300, 0x5, 0x9}}, [{0xdd, 0x31, "ac1721133cfd6eee35ee3c20bef31f8cd645e9a5fe3babab18b0a6ece6a30f10fc48b6a46224f0b402d00e0bff676ad471"}, {0xdd, 0xf6, "b95f3e01a2623cb8f60abcc7a999602f23fbfa2882d9312adb7e0cd4ef4f2b97e90fd7bb3bc62d53d32dec710555e8442d1b4c0f5360ad4e031b0ce011e74cc90655ea6b8b5985c67c3a67fc58b429e8af6c487967c3b95adeb3ff963270e8057ee54a1706b1222d79d7ee5b0b876bb73936daf46d66143277f2dac8777e443644ac6f36106e2ac64c4cf7969c9fefc521f98a919f625c8a26e9d71f3abeaabfd8dbd1b7da7324dddd279666b026e902e754de85f3bc6d4c25d02447ccd07581730e8f45711f8444162ae4e7e55d1a32543867c40fd0e2764bb2e5251fa612e4a4d2f2ee489932013d0efb55e9ba404988a3e3a87a43"}, {0xdd, 0xde, "13c6c0f44c847584e41a544120e4753ebe659511bb7ddf3758103663d105c63127b2646d5cc9dc49b9ab965f9e34e6bd7fab446e4d4947b787e1abac73ab9da229eb2b841f01f329cb325b7fc6ef0387d62e8c800bf8d9d0237993cb5c47579dc6854caf2c5eff107102e9ac5ced3e61936d794d982a9151312493fd4f66362bfad6c1294edebe08aa7666450bfa884051258e34a2b83715f97797ccd018b37da3215b8551ea9b658d85c9f42da3eabbcdc7a0a09307f6b1bbd1d23d027066e3f05b1fc8534c254c97d584442345f4c3348fb969d9205b4a69d14426636c"}, {0xdd, 0xbf, "17b16e8eaaa1acb441fff3ab753b45d6f7c238a89b5eee0a46a88713abcbf1cc1a0fda0f0e21b67cc3b15c37230b50d412ec4105ceed3b3bfb0a2831eee95bc41ade16f3f46d007c2cb0795eeb7f37d2ee5f7b8f6f06dab7a7e0859cbff3dadd0c828958f247836332fa5b53609141b139e8743ac363181980342b8ed2ee6bf1aba03844d8b2390e241cf607143e615a8d2fe60f5c81fb0b9a84c3dd86c8bc6d675dc9783013a128ed5f5a2aa33a63176bdb1711930cda54bac9c7f35afda3"}, {0xdd, 0xbe, "75806bbf8c006402f0519695eee59f7a10ae3a9a08ae07ec8cad88819ebb63f911899986dcfbd2d7835f2fea3ed14c66a7330a865b278b42eb5956bde79efd0738ad106408b9a0e1b2502ab8d7e096b3505e54cc9b3645e16150359b251cf53280e2677339bfc1201cacf088f38733cb36c311f6759401b76ec98349db751bdebcb78741fbcb816d29ad75051440abff3c312548a567403c805cd536321cf70e068e7414d8cda6ef7ab79efc01d532f53ccaa17beb670bad3d079b8ca407"}, {0xdd, 0x26, "f9b04847326ec2540f0410acd086bd5bb6240f0a494488eefbce466614befb8bafeca53ba7a1"}, {0xdd, 0x1b, "c4444868b2d6aa12c0e89b82d49ad205c745634f42f0fb1805bcd8"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @broadcast}}]}, 0x684}, 0x1, 0x0, 0x0, 0x800}, 0x4005) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_emit_ethernet(0x18f, &(0x7f00000004c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}, 0x0) clone3(&(0x7f0000000200)={0x44005100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) 18:13:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:13:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1626.553299] FAULT_INJECTION: forcing a failure. [ 1626.553299] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.555333] CPU: 0 PID: 101567 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1626.556457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1626.557787] Call Trace: [ 1626.558224] dump_stack+0x107/0x167 [ 1626.558833] should_fail.cold+0x5/0xa [ 1626.559464] ? __io_queue_sqe+0x666/0x9d0 [ 1626.560138] should_failslab+0x5/0x20 [ 1626.560754] kmem_cache_alloc_trace+0x55/0x320 18:13:43 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1626.561504] __io_queue_sqe+0x666/0x9d0 [ 1626.562258] ? io_issue_sqe+0x7700/0x7700 [ 1626.562961] ? io_prep_rw+0x7f5/0x1050 [ 1626.563594] io_submit_sqes+0x4461/0x85c0 [ 1626.564287] ? __do_sys_io_uring_enter+0x6b5/0x18c0 18:13:43 executing program 6: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x4010, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000540)={0x0, 0x404be8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r1, 0x0, &(0x7f0000000280)='./file0\x00', 0x59, 0xe040, 0x31713}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000880), 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r4, 0x0, &(0x7f0000000440)="8ee2309c47995455ec7dced68eb160c46014b839663252e10fdc61f5e2e2fd88054934d706470c49e1ecb5911b279caf9597c38f7138e265a9c0895eb5c08249a2c2fffbb7cf7c5a067a39e016d7a7be11e2a0359da88dd80144d1175f50989065d52c715c0fec711859e0ef0d7a51407b3c7d181c7a613c92ee0fb23ccfcc9ad88560cba56f1d1efc1e673619d9a31f9815bd4010524cce05589faff0ede4bcae4f0a79b2c7bf7721c3abcb4c37089fe8606a8293f7106711070be0505b1fa4c390dd60589e10d91df26fd0e49770", 0xcf, 0x2001, 0x0, {0x0, r5}}, 0x2) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x40, 0xa, 0x1, {0x0, r5}}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0xd3404, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r7, &(0x7f00000000c0)='./file0/../file0\x00', 0x42102, 0x20) [ 1626.565088] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1626.565931] ? lock_downgrade+0x6d0/0x6d0 [ 1626.566621] ? find_held_lock+0x2c/0x110 [ 1626.567312] ? io_submit_sqes+0x85c0/0x85c0 [ 1626.568039] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1626.568814] ? wait_for_completion_io+0x270/0x270 [ 1626.569612] ? rcu_read_lock_any_held+0x75/0xa0 [ 1626.570347] ? vfs_write+0x354/0xa70 [ 1626.570970] ? fput_many+0x2f/0x1a0 [ 1626.571554] ? ksys_write+0x1a9/0x260 [ 1626.572186] ? __ia32_sys_read+0xb0/0xb0 [ 1626.572847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1626.573713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1626.574537] do_syscall_64+0x33/0x40 [ 1626.575155] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1626.575968] RIP: 0033:0x7f861f949b19 [ 1626.576579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1626.579598] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1626.580845] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1626.582020] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1626.583191] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1626.584347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1626.585507] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:13:44 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32, @ANYBLOB="0852000004d3735500c76146"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) 18:13:44 executing program 2: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x3}]}]}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="38000780320000002d267e008f989c4d512a52ffa031982d79783b7fffb527e97a4edf8e19d70c00"/56], 0x54}}, 0x0) 18:13:44 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:13:44 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:13:44 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x2098}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) timerfd_create(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000540)={&(0x7f0000000440)=""/227, 0xe3, 0x81, 0xdd33}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=@polexpire={0xcc, 0x1b, 0x20, 0x70bd2d, 0x25dfdbff, {{{@in6=@remote, @in=@multicast1, 0x4e24, 0x8001, 0x4e24, 0x9, 0xa, 0xa0, 0x0, 0x84, r5, 0xffffffffffffffff}, {0xffffffff, 0x3fca, 0x7, 0x3, 0x1c45, 0x7fffffff, 0x9, 0x3}, {0x0, 0x2, 0x100000001, 0x400}, 0xfffff5c4, 0x6e6bba, 0x2, 0x1}, 0xac}, [@mark={0xc, 0x15, {0x35075d, 0x80e6d8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_create(0x0, 0x0) unshare(0x48020200) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/199, 0xc7, 0x8) 18:13:44 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:13:44 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1631.710553] Bluetooth: hci1: command 0x0409 tx timeout [ 1632.030541] Bluetooth: hci7: command 0x0409 tx timeout [ 1632.030565] Bluetooth: hci5: command 0x0409 tx timeout [ 1632.031076] Bluetooth: hci4: command 0x0409 tx timeout [ 1633.758599] Bluetooth: hci1: command 0x041b tx timeout [ 1634.078610] Bluetooth: hci4: command 0x041b tx timeout [ 1634.079167] Bluetooth: hci5: command 0x041b tx timeout [ 1634.079973] Bluetooth: hci7: command 0x041b tx timeout [ 1635.806587] Bluetooth: hci1: command 0x040f tx timeout [ 1636.126583] Bluetooth: hci7: command 0x040f tx timeout [ 1636.127221] Bluetooth: hci5: command 0x040f tx timeout [ 1636.128044] Bluetooth: hci4: command 0x040f tx timeout [ 1637.854583] Bluetooth: hci1: command 0x0419 tx timeout [ 1638.017696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.018482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1638.042977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1638.097066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.097865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1638.099222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1638.174584] Bluetooth: hci4: command 0x0419 tx timeout [ 1638.175283] Bluetooth: hci5: command 0x0419 tx timeout [ 1638.176013] Bluetooth: hci7: command 0x0419 tx timeout [ 1638.641128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.642060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1638.643770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1638.701978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.702944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1638.704310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1638.999020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.000041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.001488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1639.072653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.073401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.078273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1639.124781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.125600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.127051] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1639.131025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.132063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.133213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:14:10 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:14:10 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:14:10 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x0, 0x0, 0x9a898e323f1e9374}, 0x1000) epoll_create1(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create(0x6) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x20000001}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r5, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r5, &(0x7f0000000100)={0x80000001}, r3, 0x1, 0x0, 0x0, {0x0, r6}}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)={0x40000001}) dup2(r3, r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) epoll_create(0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 18:14:10 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 18:14:10 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:14:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:14:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) [ 1652.901656] audit: type=1400 audit(1712686450.320:19): avc: denied { block_suspend } for pid=103429 comm="syz-executor.2" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 1652.906285] FAULT_INJECTION: forcing a failure. [ 1652.906285] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.908293] CPU: 0 PID: 103433 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1652.909348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1652.910575] Call Trace: [ 1652.911027] dump_stack+0x107/0x167 [ 1652.911580] should_fail.cold+0x5/0xa [ 1652.912151] ? create_object.isra.0+0x3a/0xa20 [ 1652.912832] should_failslab+0x5/0x20 [ 1652.913399] kmem_cache_alloc+0x5b/0x310 [ 1652.914008] create_object.isra.0+0x3a/0xa20 [ 1652.914667] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1652.915459] kmem_cache_alloc_trace+0x151/0x320 [ 1652.916182] __io_queue_sqe+0x666/0x9d0 [ 1652.916797] ? io_issue_sqe+0x7700/0x7700 [ 1652.917432] ? io_prep_rw+0x7f5/0x1050 [ 1652.918034] io_submit_sqes+0x4461/0x85c0 [ 1652.918692] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1652.919460] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1652.920205] ? lock_downgrade+0x6d0/0x6d0 [ 1652.920838] ? find_held_lock+0x2c/0x110 [ 1652.921466] ? io_submit_sqes+0x85c0/0x85c0 [ 1652.922135] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1652.922871] ? wait_for_completion_io+0x270/0x270 [ 1652.923630] ? rcu_read_lock_any_held+0x75/0xa0 [ 1652.924348] ? vfs_write+0x354/0xa70 [ 1652.924925] ? fput_many+0x2f/0x1a0 [ 1652.925482] ? ksys_write+0x1a9/0x260 [ 1652.926064] ? __ia32_sys_read+0xb0/0xb0 [ 1652.926699] do_syscall_64+0x33/0x40 [ 1652.927281] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1652.928068] RIP: 0033:0x7f861f949b19 [ 1652.928646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1652.931436] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1652.932590] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1652.933666] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1652.934743] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.935841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1652.936925] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:14:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x106, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00') 18:14:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x8a) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:14:10 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:10 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r1, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) setresgid(0xffffffffffffffff, 0xee01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000800004727b1c880", @ANYRES32, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="6304d9cd382479de5d49b5881ac12d7f805bc6676ac0c4f4613c15aa551b70844ea21ba53f5740d3acbc4e6fb50a24661675c1ac24d1", 0x36}, {&(0x7f00000001c0)="7bf4a57086311a9460e3da9c4fe6dfcc57d27fbf10675bf3a10c88c7ea219386a7450f790ff517977807ef2e67c9cd3b247fd21f4aede8c3360885523ae4", 0x3e}], 0x2}, 0x3400c090) recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getegid() getegid() setgroups(0x2, &(0x7f0000000180)=[0xee00, 0x0]) lchown(&(0x7f0000000040)='./file0\x00', 0xee01, 0x0) 18:14:10 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:14:10 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x20000000, 0x0, 0x0, 0x2000002, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:14:10 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) [ 1657.758536] Bluetooth: hci1: command 0x0409 tx timeout [ 1657.950550] Bluetooth: hci5: command 0x0409 tx timeout [ 1658.014550] Bluetooth: hci4: command 0x0409 tx timeout [ 1658.078540] Bluetooth: hci7: command 0x0409 tx timeout [ 1659.806632] Bluetooth: hci1: command 0x041b tx timeout [ 1659.998554] Bluetooth: hci5: command 0x041b tx timeout [ 1660.062542] Bluetooth: hci4: command 0x041b tx timeout [ 1660.126561] Bluetooth: hci7: command 0x041b tx timeout [ 1661.855650] Bluetooth: hci1: command 0x040f tx timeout [ 1662.047545] Bluetooth: hci5: command 0x040f tx timeout [ 1662.111535] Bluetooth: hci4: command 0x040f tx timeout [ 1662.176095] Bluetooth: hci7: command 0x040f tx timeout [ 1663.902527] Bluetooth: hci1: command 0x0419 tx timeout [ 1664.094556] Bluetooth: hci5: command 0x0419 tx timeout [ 1664.159569] Bluetooth: hci4: command 0x0419 tx timeout [ 1664.222531] Bluetooth: hci7: command 0x0419 tx timeout [ 1664.663168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.664007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.665328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1664.732209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.733001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.734781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1664.875032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.876030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.877325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1664.915421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.916361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.917627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1665.126980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.127771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.130193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1665.169067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.169840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.171148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1665.365757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.366467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.376127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1665.394831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.395503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.396622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:14:34 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x4, 0x4000000000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x1, 0x1, 0x20, 0x6, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_config_ext={0x100000001, 0x4}, 0x40, 0x3, 0x2, 0x0, 0x100000001, 0xfffffa1a, 0x1, 0x0, 0x1, 0x0, 0xea}, 0x0, 0x80, r1, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000002f00)='./file0\x00', 0x0, 0x2192004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() syz_open_procfs(r2, &(0x7f00000000c0)='cgroup\x00') 18:14:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(0x0, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:14:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:14:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(0x0, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) fcntl$getflags(r2, 0x401) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:14:34 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 18:14:34 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:14:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) fork() [ 1677.061791] FAULT_INJECTION: forcing a failure. [ 1677.061791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1677.063744] CPU: 0 PID: 105283 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1677.064785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1677.066010] Call Trace: [ 1677.066413] dump_stack+0x107/0x167 [ 1677.066958] should_fail.cold+0x5/0xa [ 1677.067548] _copy_from_user+0x2e/0x1b0 [ 1677.068151] iovec_from_user+0x141/0x400 [ 1677.068764] __import_iovec+0x67/0x590 [ 1677.069346] ? __is_insn_slot_addr+0x123/0x290 [ 1677.070028] ? mark_lock+0xf5/0x2df0 [ 1677.070578] io_import_iovec+0x581/0x1120 [ 1677.071204] ? io_complete_rw+0x230/0x230 [ 1677.071861] ? lock_downgrade+0x6d0/0x6d0 [ 1677.072480] ? mark_lock+0xf5/0x2df0 [ 1677.073037] io_read+0xe14/0x11e0 [ 1677.073554] ? lock_chain_count+0x20/0x20 [ 1677.074180] ? kiocb_done+0xc90/0xc90 [ 1677.074748] ? mark_lock+0xf5/0x2df0 [ 1677.075310] ? lock_chain_count+0x20/0x20 [ 1677.075934] ? __lock_acquire+0x1657/0x5b00 [ 1677.076597] ? __lock_acquire+0xbb1/0x5b00 [ 1677.077231] io_issue_sqe+0x2e8a/0x7700 [ 1677.077825] ? find_held_lock+0x2c/0x110 [ 1677.078433] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1677.079222] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1677.079935] ? lock_downgrade+0x6d0/0x6d0 [ 1677.080549] ? io_connect+0x610/0x610 [ 1677.081124] ? lock_acquire+0x197/0x470 [ 1677.081716] ? find_held_lock+0x2c/0x110 [ 1677.082338] ? __fget_files+0x26d/0x4c0 [ 1677.082934] ? lock_downgrade+0x6d0/0x6d0 [ 1677.083557] __io_queue_sqe+0x90/0x9d0 [ 1677.084148] ? io_issue_sqe+0x7700/0x7700 [ 1677.084779] ? io_prep_rw+0x7f5/0x1050 [ 1677.085377] io_submit_sqes+0x4461/0x85c0 [ 1677.086036] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1677.086778] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1677.087504] ? lock_downgrade+0x6d0/0x6d0 [ 1677.088115] ? find_held_lock+0x2c/0x110 [ 1677.088713] ? io_submit_sqes+0x85c0/0x85c0 [ 1677.089356] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1677.090072] ? wait_for_completion_io+0x270/0x270 [ 1677.090788] ? rcu_read_lock_any_held+0x75/0xa0 [ 1677.091476] ? vfs_write+0x354/0xa70 [ 1677.092036] ? fput_many+0x2f/0x1a0 [ 1677.092577] ? ksys_write+0x1a9/0x260 [ 1677.093139] ? __ia32_sys_read+0xb0/0xb0 [ 1677.093741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1677.094511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1677.095285] do_syscall_64+0x33/0x40 [ 1677.095882] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1677.096710] RIP: 0033:0x7f861f949b19 [ 1677.097255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1677.099921] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1677.101025] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1677.102066] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1677.103100] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1677.104143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1677.105178] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:14:34 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:34 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:34 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:14:34 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="084dd080"], 0xb8) close(r1) syz_io_uring_setup(0x7a88, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x7, 0x0, &(0x7f0000000340)="a48e489b5d4ebe15d23c854cef1a8bee0f50699b245a22c142b872d2a78820f91d89e371a2fcd5070b12cf1cfd583f58b12bb4720d56fe97e96877d62a6997348d0e51b816807b47fbb7f1d4bab989ad5a4769536221a589b0747782717301d65bb9117ffa6fced6f772dd72976ce7e42eb410be3720f51c7c34", 0x4, 0x0, 0x0, {0x3}}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {r0}}, './file1\x00'}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x1c013, r4, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x1, 0x1, 0x1}, 0x2) syz_io_uring_submit(r2, r5, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x37, 0x0, &(0x7f0000000000)="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", 0x7fff, 0x0, 0x1, {0x2}}, 0x3f) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 18:14:34 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b2", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:34 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:14:34 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b2", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sync_file_range(r1, 0x8, 0x5, 0x2) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r4, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x1, 0x1, 0x1}, 0x2) syz_io_uring_submit(0x0, r5, &(0x7f0000000480)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd_index=0x1, 0xf7d4, &(0x7f0000000440)=[{&(0x7f0000000200)="b5e43ae2b543b36ab81cbc4e2e9cf3405b2e0a703dc4083d3b05f88964576fb69a76f32a22e17fed", 0x28}, {&(0x7f0000000240)="cb6136fad78348361845f1a7272147ef9a0b60166b8f8ddd183f234a7c0145a5f498", 0x22}, {&(0x7f0000000280)="426a3f9caaea9b4abf2356c09a77be875659139f9f9e6e091400ae9f1ff29c49f8a9689758c4daaa1d72ead95f22a61f16c15694cc81b46b3a33923175e7b7c10bb1536c26435b2748cb030f3d196f8f5b8b48136d545606c625eb3692d07a85fe8690064ecbb57be8b6879639f84ac01522c1c91a7fc0ffb29e895b3ecee90eb7ed961817c12a36e60161eeb5a537944749fdb8b6cbe74c", 0x98}, {&(0x7f0000000340)="a5efb1a9d8fd337b33bed878b45e2fd5ea08d729e21e9c1f15e36fbfe902a2d6482754d779d0a00033218859e5270ef0802240a549563dbf23e98e44821024df61dc889829a5626ea01a396cb1b65a51c4cee027fe1e7bef34cd20681c9c48f79bff43b84353e61958f38631979b8024c3c686eb59827878bd82ea31a817d35c44044cb03fd8e4e1f97c3cf052fa2271e74e9f8022e7d1cbc86a10cbff85beb0e7a0133cb257085df9cf9a0aa00fb184a193ddb16bd9dd52c6da7bcb4458a913e49f7e324dc0c8bc7b6b92041dd02998e11097ee799777e26f", 0xd9}], 0x4, 0x1, 0x1, {0x2}}, 0x8) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000, 0x1a2, 0xb}, &(0x7f0000000100)='./file0\x00', 0x18, 0x0, 0x23456}, 0x971c) [ 1681.822839] Bluetooth: hci1: command 0x0409 tx timeout [ 1681.887516] Bluetooth: hci4: command 0x0409 tx timeout [ 1681.950649] Bluetooth: hci5: command 0x0409 tx timeout [ 1682.015525] Bluetooth: hci7: command 0x0409 tx timeout [ 1683.870524] Bluetooth: hci1: command 0x041b tx timeout [ 1683.935521] Bluetooth: hci4: command 0x041b tx timeout [ 1683.999549] Bluetooth: hci5: command 0x041b tx timeout [ 1684.062519] Bluetooth: hci7: command 0x041b tx timeout [ 1685.919789] Bluetooth: hci1: command 0x040f tx timeout [ 1685.982539] Bluetooth: hci4: command 0x040f tx timeout [ 1686.047551] Bluetooth: hci5: command 0x040f tx timeout [ 1686.110610] Bluetooth: hci7: command 0x040f tx timeout [ 1687.967535] Bluetooth: hci1: command 0x0419 tx timeout [ 1688.031517] Bluetooth: hci4: command 0x0419 tx timeout [ 1688.094537] Bluetooth: hci5: command 0x0419 tx timeout [ 1688.159559] Bluetooth: hci7: command 0x0419 tx timeout [ 1688.420445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.421339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.422761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1688.482060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.482858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.484188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1689.366718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.367686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.384649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1689.399742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.400416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.402009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1689.522221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.523287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.537556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1689.572372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.573112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.574450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1689.610678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.611418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.624644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1689.647283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.648287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.649660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:14:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 18:14:58 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:14:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b2", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(0x0, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:14:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffffffffe22, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002500100027bd70d01f072b51726e8e263200000000000000000034067fdd27682418c8629fb26cd1618cad101a6304eb06599700a84d0a0238f919ebb91a4532c1105f5bfa505daf05047c858be8696352099ff5314a4c5862e11767ba9fae5cd66e4be177d595f8771a562c4c0210a598f2f43e720000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f00000001c0)='>') connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) r2 = mq_open(&(0x7f0000000300)='.\x00', 0x80, 0x24, &(0x7f0000000340)={0x2, 0x0, 0x40, 0x10000}) dup2(0xffffffffffffffff, r2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x6) r3 = gettid() process_vm_readv(r3, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 18:14:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @multicast1}, &(0x7f0000000140)=0xc) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @can={0x1d, r2}, @can={0x1d, r5}, @nfc={0x27, 0x0, 0x2, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)='vlan0\x00', 0x100000001, 0x1dc, 0x5}) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:14:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(0x0, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1701.130333] FAULT_INJECTION: forcing a failure. 18:14:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(0x0, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) fcntl$getflags(r2, 0x401) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x8, 0x10000, 0x0) [ 1701.130333] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.132735] CPU: 1 PID: 107148 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1701.133716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1701.133723] Call Trace: [ 1701.133746] dump_stack+0x107/0x167 [ 1701.133774] should_fail.cold+0x5/0xa [ 1701.136625] ? io_setup_async_rw+0x180/0x580 [ 1701.137240] should_failslab+0x5/0x20 [ 1701.137776] __kmalloc+0x72/0x390 [ 1701.138281] io_setup_async_rw+0x180/0x580 [ 1701.138881] ? iov_iter_restore+0x195/0x3a0 [ 1701.139484] io_read+0x775/0x11e0 [ 1701.139994] ? kiocb_done+0xc90/0xc90 [ 1701.140534] ? mark_lock+0xf5/0x2df0 [ 1701.141090] ? __lock_acquire+0xbb1/0x5b00 [ 1701.141689] io_issue_sqe+0x2e8a/0x7700 [ 1701.142272] ? find_held_lock+0x2c/0x110 [ 1701.142846] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1701.143589] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1701.144255] ? lock_downgrade+0x6d0/0x6d0 [ 1701.144838] ? io_connect+0x610/0x610 [ 1701.145378] ? lock_acquire+0x197/0x470 [ 1701.145929] ? find_held_lock+0x2c/0x110 [ 1701.146499] ? __fget_files+0x26d/0x4c0 [ 1701.147052] ? lock_downgrade+0x6d0/0x6d0 [ 1701.147652] __io_queue_sqe+0x90/0x9d0 [ 1701.148195] ? io_issue_sqe+0x7700/0x7700 [ 1701.148778] ? io_prep_rw+0x7f5/0x1050 [ 1701.149322] io_submit_sqes+0x4461/0x85c0 [ 1701.149923] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1701.150617] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1701.151292] ? lock_downgrade+0x6d0/0x6d0 [ 1701.151885] ? find_held_lock+0x2c/0x110 [ 1701.152452] ? io_submit_sqes+0x85c0/0x85c0 [ 1701.153058] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1701.153745] ? wait_for_completion_io+0x270/0x270 [ 1701.154420] ? rcu_read_lock_any_held+0x75/0xa0 [ 1701.155070] ? vfs_write+0x354/0xa70 [ 1701.155600] ? fput_many+0x2f/0x1a0 [ 1701.156108] ? ksys_write+0x1a9/0x260 [ 1701.156634] ? __ia32_sys_read+0xb0/0xb0 [ 1701.157205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1701.157939] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1701.158668] do_syscall_64+0x33/0x40 [ 1701.159182] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1701.159911] RIP: 0033:0x7f861f949b19 [ 1701.160441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1701.163001] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1701.164074] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1701.165221] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1701.166216] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1701.167209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1701.168216] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:14:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db98251", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="010000140100000018000000", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000"]) lseek(r2, 0x8, 0x0) ioctl$FITHAW(r1, 0xc0045878) write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:14:58 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:14:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x100, 0x70bd26, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4880) 18:14:58 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) flock(r1, 0x2) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000000c0)) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000340)=""/60, 0x3c}, {&(0x7f0000000380)=""/114, 0xff72}, {&(0x7f0000000480)=""/141, 0x8d}], 0x7, 0xa, 0xffff) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1cf}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(r2, &(0x7f0000000580)={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="9ba495311632"}, 0x14) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x2, {0x0, r0}, 0x6, 0x4, 0x1, {0x0, r3, r1}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r2, 0x0, &(0x7f0000000680)="5ae5e46a71266a3a585fcd0b200948913c75743158c3f70c87393bf3eeee13a0ae920f6da01fe45cf1a260638196789954ae71649ed0d0cbad2eebeef61d38e02f", 0x41, 0x4000000, 0x1}, 0x10000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r1, 0x3f, {}, 0x0, 0x8, 0x0, {0x0, r4}}, 0x9) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffff8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r5, r0, 0x0) 18:14:58 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db98251", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:58 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:14:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) [ 1701.628785] FAULT_INJECTION: forcing a failure. [ 1701.628785] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.630470] CPU: 1 PID: 107166 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1701.631369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1701.632446] Call Trace: [ 1701.632806] dump_stack+0x107/0x167 [ 1701.633277] should_fail.cold+0x5/0xa [ 1701.633788] ? create_object.isra.0+0x3a/0xa20 [ 1701.634378] should_failslab+0x5/0x20 [ 1701.634877] kmem_cache_alloc+0x5b/0x310 [ 1701.635405] create_object.isra.0+0x3a/0xa20 [ 1701.635981] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1701.636640] __kmalloc+0x16e/0x390 [ 1701.637115] io_setup_async_rw+0x180/0x580 [ 1701.637657] ? iov_iter_restore+0x195/0x3a0 [ 1701.638219] io_read+0x775/0x11e0 [ 1701.638683] ? kiocb_done+0xc90/0xc90 [ 1701.639183] ? mark_lock+0xf5/0x2df0 [ 1701.639702] ? __lock_acquire+0xbb1/0x5b00 [ 1701.640261] io_issue_sqe+0x2e8a/0x7700 [ 1701.640780] ? find_held_lock+0x2c/0x110 [ 1701.641308] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1701.641992] ? __io_arm_poll_handler+0x59b/0x9e0 [ 1701.642605] ? lock_downgrade+0x6d0/0x6d0 [ 1701.643142] ? io_connect+0x610/0x610 [ 1701.643643] ? lock_acquire+0x197/0x470 [ 1701.644148] ? find_held_lock+0x2c/0x110 [ 1701.644674] ? __fget_files+0x26d/0x4c0 [ 1701.645186] ? lock_downgrade+0x6d0/0x6d0 [ 1701.645720] __io_queue_sqe+0x90/0x9d0 [ 1701.646218] ? io_issue_sqe+0x7700/0x7700 [ 1701.646756] ? io_prep_rw+0x7f5/0x1050 [ 1701.647261] io_submit_sqes+0x4461/0x85c0 [ 1701.647830] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1701.648462] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1701.649082] ? lock_downgrade+0x6d0/0x6d0 [ 1701.649609] ? find_held_lock+0x2c/0x110 [ 1701.650136] ? io_submit_sqes+0x85c0/0x85c0 [ 1701.650701] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1701.651316] ? wait_for_completion_io+0x270/0x270 [ 1701.651938] ? rcu_read_lock_any_held+0x75/0xa0 [ 1701.652530] ? vfs_write+0x354/0xa70 [ 1701.653012] ? fput_many+0x2f/0x1a0 [ 1701.653479] ? ksys_write+0x1a9/0x260 [ 1701.653969] ? __ia32_sys_read+0xb0/0xb0 [ 1701.654489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1701.655160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1701.655839] do_syscall_64+0x33/0x40 [ 1701.656317] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1701.656972] RIP: 0033:0x7f861f949b19 [ 1701.657452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1701.659771] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1701.660736] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1701.661638] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1701.662541] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1701.663437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1701.664340] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:14:59 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:14:59 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="5b8f49b364cc5b573e000000007ca5926f88ff70aa78c068b465a68d281b79dfb4ea93399dc3750fb0f01cf5c1c571d8b6a5b3fb14df1864b0771ee11bebbf5281bcdb2ade79dda21b73de879fca47d957d3a5ab21905bb0fcc6f94d278ebedfdc829a3ca2ca223461733a04c0037a662c0947a245eb912cb714609bfb242523636ca537de5326008343f72fe93198522b12f9b8a55bff3fb30f00d41bda539c5353c3a2711fec4596178267531c91842f0bae075bd83ff112b5488c18d86b6408b3495905b5841049677fe0819e20eefca7ab5bc0f304d67fe8927599416d90e519b181b506234ba9eef6d45a41522028138ec317c0c7b46cd8da6a36128fb874789e0a19b4870716391f2a254d67ff46773e"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:14:59 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r1, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) copy_file_range(r1, &(0x7f0000000000)=0x62fb, r2, &(0x7f0000000040)=0xf7, 0x0, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000200)=@lstk={0x7, 0x3, "b8cb8aaf88", 0x4, 0x1, 0x1, 0x1}) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/cfg80211', 0x200001, 0x4c) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000000280)={{}, "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"}) write$evdev(0xffffffffffffffff, 0x0, 0x0) [ 1706.335574] Bluetooth: hci1: command 0x0409 tx timeout [ 1706.527524] Bluetooth: hci4: command 0x0409 tx timeout [ 1706.590509] Bluetooth: hci7: command 0x0409 tx timeout [ 1706.654516] Bluetooth: hci5: command 0x0409 tx timeout [ 1708.382543] Bluetooth: hci1: command 0x041b tx timeout [ 1708.574534] Bluetooth: hci4: command 0x041b tx timeout [ 1708.638560] Bluetooth: hci7: command 0x041b tx timeout [ 1708.702563] Bluetooth: hci5: command 0x041b tx timeout [ 1710.430627] Bluetooth: hci1: command 0x040f tx timeout [ 1710.622512] Bluetooth: hci4: command 0x040f tx timeout [ 1710.686649] Bluetooth: hci7: command 0x040f tx timeout [ 1710.750504] Bluetooth: hci5: command 0x040f tx timeout [ 1712.298313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.299119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.300522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1712.361389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.362156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.363638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1712.478527] Bluetooth: hci1: command 0x0419 tx timeout [ 1712.576539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.577286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.578589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1712.634787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.635677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.636862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1712.671117] Bluetooth: hci4: command 0x0419 tx timeout [ 1712.734521] Bluetooth: hci7: command 0x0419 tx timeout [ 1712.791279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.792238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.794976] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1712.809616] Bluetooth: hci5: command 0x0419 tx timeout [ 1712.832047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1712.832885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1712.834320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1713.033049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.033868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.035428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1713.062816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.063708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.064846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:15:21 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:15:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') open$dir(&(0x7f0000000000)='./file0/../file0\x00', 0x608100, 0x5e) write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:15:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, 0x0) openat(r3, &(0x7f00000000c0)='./file1\x00', 0x381800, 0x8) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r0, 0x0, 0x7ffffff9) fcntl$setlease(r0, 0x400, 0x1) 18:15:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(0x0, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:15:21 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 18:15:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(0x0, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) fcntl$getflags(r2, 0x401) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:15:21 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(0x0, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:15:21 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1724.370052] FAULT_INJECTION: forcing a failure. [ 1724.370052] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.371988] CPU: 0 PID: 109009 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1724.372997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1724.374181] Call Trace: [ 1724.374573] dump_stack+0x107/0x167 [ 1724.375101] should_fail.cold+0x5/0xa [ 1724.375656] ? __io_queue_sqe+0x666/0x9d0 [ 1724.376271] should_failslab+0x5/0x20 [ 1724.376824] kmem_cache_alloc_trace+0x55/0x320 [ 1724.377488] __io_queue_sqe+0x666/0x9d0 [ 1724.378069] ? io_issue_sqe+0x7700/0x7700 [ 1724.378664] ? io_prep_rw+0x7f5/0x1050 [ 1724.379240] io_submit_sqes+0x4461/0x85c0 [ 1724.379903] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1724.380631] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1724.381329] ? lock_downgrade+0x6d0/0x6d0 [ 1724.381928] ? find_held_lock+0x2c/0x110 [ 1724.382521] ? io_submit_sqes+0x85c0/0x85c0 [ 1724.383147] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1724.383865] ? wait_for_completion_io+0x270/0x270 [ 1724.384558] ? rcu_read_lock_any_held+0x75/0xa0 [ 1724.385215] ? vfs_write+0x354/0xa70 [ 1724.385766] ? fput_many+0x2f/0x1a0 [ 1724.386283] ? ksys_write+0x1a9/0x260 [ 1724.386824] ? __ia32_sys_read+0xb0/0xb0 [ 1724.387409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1724.388158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1724.388898] do_syscall_64+0x33/0x40 [ 1724.389438] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1724.390174] RIP: 0033:0x7f861f949b19 [ 1724.390717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1724.393353] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1724.394469] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1724.395492] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1724.396525] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1724.397551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1724.398573] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:15:21 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:15:21 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, 0x0, 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:15:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0xe3, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@name={'name', 0x3d, 'memory.high\x00'}}]}) [ 1724.471208] cgroup: No subsys list or none specified [ 1724.473443] cgroup: No subsys list or none specified [ 1728.926774] Bluetooth: hci1: command 0x0409 tx timeout [ 1729.182555] Bluetooth: hci4: command 0x0409 tx timeout [ 1729.246500] Bluetooth: hci5: command 0x0409 tx timeout [ 1729.246542] Bluetooth: hci7: command 0x0409 tx timeout [ 1730.974537] Bluetooth: hci1: command 0x041b tx timeout [ 1731.230522] Bluetooth: hci4: command 0x041b tx timeout [ 1731.295586] Bluetooth: hci7: command 0x041b tx timeout [ 1731.296103] Bluetooth: hci5: command 0x041b tx timeout [ 1733.022506] Bluetooth: hci1: command 0x040f tx timeout [ 1733.278505] Bluetooth: hci4: command 0x040f tx timeout [ 1733.342498] Bluetooth: hci5: command 0x040f tx timeout [ 1733.342547] Bluetooth: hci7: command 0x040f tx timeout [ 1735.070540] Bluetooth: hci1: command 0x0419 tx timeout [ 1735.279866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.280675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.282059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1735.326544] Bluetooth: hci4: command 0x0419 tx timeout [ 1735.390540] Bluetooth: hci7: command 0x0419 tx timeout [ 1735.391552] Bluetooth: hci5: command 0x0419 tx timeout [ 1735.400867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.401673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.403872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1735.585515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.586304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.588135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1735.635758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.636937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.638197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1736.615392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.616645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.617968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1736.653322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.654698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.657052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1736.860659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.861444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.863116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1736.912185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.913179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.914293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:15:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x5c, &(0x7f0000000040)=0x2) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') write$evdev(0xffffffffffffffff, 0x0, 0x0) 18:15:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(0x0, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r2, 0x0, 0x0) fcntl$getflags(r2, 0x401) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:15:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="b16608eda69d0da5fb44097ea03f67bee320bc91d159e3b189d07bcc7b06bf8500b24b25fef29d338ab2eab05babbe765f1ae102edf3aa75c51d47fed6c69a51cabc2ea4d2db825fb179e568fcd4495339bde64c2dbd63375812b27522c2bae9a3bc6bc1a2f0278436f1262242ce2b146ba5599682df6f3583c6cea72dbb5ece5cf5fe878506eafed3b43d6b87ef87c28aab2f052476d7d1f9a57f6385f08395d9f1647d7812479867d941b96b647161646f0c5a362c34821af957e35a533376de137cbdc57737c13757293c533de3f777542398281fd88e011efcab147116227d98950019cf1bffdc663b2c13c12ae6399ffe421e910410a93f99002ed5cd30") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) write$evdev(r4, 0x0, 0x0) fcntl$getflags(r4, 0x401) copy_file_range(r3, 0x0, r1, &(0x7f00000002c0)=0x8, 0x10000, 0x0) 18:15:45 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 18:15:45 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:15:45 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, 0x0, 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:15:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(0x0, 0xc1000) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f6465764173bd506b7404c7e791bdcbd4c07264010000809fd5cfc2c181311feba596"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) 18:15:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101401, 0x0) [ 1748.551790] FAULT_INJECTION: forcing a failure. [ 1748.551790] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.553594] CPU: 0 PID: 110854 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1748.554617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1748.555831] Call Trace: [ 1748.556238] dump_stack+0x107/0x167 [ 1748.556780] should_fail.cold+0x5/0xa [ 1748.557342] ? create_object.isra.0+0x3a/0xa20 [ 1748.558021] should_failslab+0x5/0x20 [ 1748.558612] kmem_cache_alloc+0x5b/0x310 [ 1748.559246] create_object.isra.0+0x3a/0xa20 [ 1748.559920] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1748.560708] kmem_cache_alloc_trace+0x151/0x320 [ 1748.561434] __io_queue_sqe+0x666/0x9d0 [ 1748.562050] ? io_issue_sqe+0x7700/0x7700 [ 1748.562688] ? io_prep_rw+0x7f5/0x1050 [ 1748.563288] io_submit_sqes+0x4461/0x85c0 [ 1748.563947] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1748.564714] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1748.565456] ? lock_downgrade+0x6d0/0x6d0 [ 1748.566086] ? find_held_lock+0x2c/0x110 [ 1748.566717] ? io_submit_sqes+0x85c0/0x85c0 [ 1748.567385] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1748.568122] ? wait_for_completion_io+0x270/0x270 [ 1748.568867] ? rcu_read_lock_any_held+0x75/0xa0 [ 1748.569576] ? vfs_write+0x354/0xa70 [ 1748.570144] ? fput_many+0x2f/0x1a0 [ 1748.570702] ? ksys_write+0x1a9/0x260 [ 1748.571282] ? __ia32_sys_read+0xb0/0xb0 [ 1748.571906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1748.572713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1748.573503] do_syscall_64+0x33/0x40 [ 1748.574070] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1748.574846] RIP: 0033:0x7f861f949b19 [ 1748.575415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1748.578196] RSP: 002b:00007f861cebf188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1748.579349] RAX: ffffffffffffffda RBX: 00007f861fa5cf60 RCX: 00007f861f949b19 [ 1748.580433] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1748.581512] RBP: 00007f861cebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1748.582606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1748.583684] R13: 00007ffcfcd8165f R14: 00007f861cebf300 R15: 0000000000022000 18:15:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:15:46 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x1274, 0x0) r5 = dup2(r1, r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001840)=ANY=[@ANYBLOB="010000000100000018000000c38bf9925a0741a0331d04a64377af3dfa874981f69f13387d19adbf1756a8bd337e4ddbbd2a64bb001e391b73a5ca2ebe68c9b9c74d7fd9c36a9070ff34952fa1a249d550001e7a", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000017c0)=@filter={'filter\x00', 0xe, 0x2, 0x1314, [0x0, 0x20000480, 0x20001704, 0x20001734], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffd, 0x2, [{0x11, 0x20, 0x88a8, 'lo\x00', 'veth0_virt_wifi\x00', 'veth0_to_bridge\x00', 'wlan1\x00', @multicast, [0x0, 0xff, 0xb9b8fbaed9fab278, 0xff, 0xff], @random="9cff37a51fd9", [0x0, 0x0, 0x0, 0xff, 0xff], 0x8e6, 0x8e6, 0x916, [@among={{'among\x00', 0x0, 0x850}, {{@offset, @offset, 0x1, {[0x1000000, 0x2, 0x8001, 0xfff, 0xe2f, 0x10001, 0x5, 0x5bba, 0x8, 0x101, 0x2, 0x2, 0x7363c4ac, 0x5, 0x80, 0x9, 0x6, 0x1000, 0xfff, 0x6, 0x1f, 0x9, 0xff, 0x6, 0x3, 0x4, 0x8f, 0x3, 0x5, 0x10000, 0x2, 0x101, 0x7, 0x1, 0x28b7, 0x4, 0x2, 0xfffeffff, 0x1ff, 0x0, 0x1, 0xffffffff, 0x81, 0x3ff, 0x3, 0x400, 0x3ff, 0x4, 0x4, 0x7, 0x2, 0x2, 0x3865, 0x8, 0x6, 0x7ff, 0x14, 0x3c90, 0x1, 0x7ff, 0x7fffffff, 0x7, 0x6, 0x1f, 0x0, 0x70, 0x2, 0x6, 0x1, 0xfffffff9, 0x0, 0x0, 0xffffffff, 0x6f, 0x4, 0x25, 0x3, 0x0, 0x8, 0xc0000000, 0x23ba, 0x5, 0x2, 0x4, 0x1, 0x0, 0xffffffff, 0xe0, 0xfffffffe, 0x8f1, 0x40, 0x4, 0x7, 0x2, 0x7fff, 0x81, 0x4, 0x524, 0x3, 0x800, 0x5266, 0xa487, 0x200, 0x9, 0x7, 0x78dd, 0x0, 0x100, 0x7, 0x2, 0x9, 0xfde, 0x1f, 0x7f, 0x9, 0xfffffffb, 0x0, 0xffff, 0x3f, 0x7f, 0x8d, 0x10000, 0x4, 0x401, 0x3d8000, 0x7ff, 0x1, 0x1, 0x0, 0x5, 0x1, 0x4, 0x3f, 0x5e, 0x39d1, 0x5f5c, 0x9, 0xffffffc6, 0x3ff, 0x5, 0x59, 0x4, 0x6, 0x6, 0x7f, 0x8001, 0x400, 0x0, 0xd2, 0x4, 0x8, 0x955, 0xffffffff, 0x2b8, 0x81, 0x400, 0xffffffff, 0x4, 0x2, 0x400, 0x1, 0x20, 0x249, 0x7, 0x8000, 0x1, 0x2, 0x8a, 0x3, 0x7, 0xe2, 0x5, 0x5, 0x15a, 0x4, 0x820, 0x5, 0x10001, 0xa5, 0xaef, 0x9, 0x9, 0x2, 0xfffffff7, 0x0, 0x4, 0x5, 0x80000001, 0x3, 0x7ff, 0x2, 0xffffffff, 0x7f, 0x95, 0x534, 0xffffdd36, 0x545, 0x7fffffff, 0x100, 0x1a, 0x55, 0x8000, 0x4, 0xd1e, 0x7, 0x3, 0x7, 0x5, 0xff, 0x1, 0x401, 0x1, 0x10000, 0xffffffff, 0x3f, 0x80, 0x401, 0xa1, 0x3bb7, 0x1, 0x80000, 0x1, 0xfffffe0b, 0x3ff, 0x4, 0x9d1, 0x2, 0x3f, 0x8, 0x0, 0x2, 0x1a1, 0x6, 0x400000, 0x100, 0x51f, 0x8, 0xc8, 0x4f4, 0x1, 0x8, 0xffffffff, 0x2, 0x2, 0x8, 0x9, 0x5, 0x7f, 0x7, 0x0, 0x8, 0x0, 0x9, 0x60, 0x3, 0x0, 0x9], 0x3, [{[0x51965811, 0x9], @multicast1}, {[0x40000, 0x2], @broadcast}, {[0x9], @private=0xa010102}]}, {[0x2, 0x3, 0x3, 0x1, 0x1000, 0x3, 0x80, 0x4, 0x67f, 0x94, 0x3, 0x3ce71299, 0x9, 0x7fffffff, 0x1ff, 0x9, 0x100, 0x80000000, 0x4, 0x8, 0x4, 0x4e42, 0xb3ba, 0x571c, 0x1, 0xfffff12c, 0x4, 0x401, 0x1, 0x5, 0x1f, 0xfffe000, 0xf0000000, 0x7, 0x1ff, 0x800, 0x4, 0x80000001, 0x5, 0x81, 0xff, 0x3, 0x5, 0x7ff, 0xffffff81, 0x1000, 0x1, 0xaf0b, 0xfffffc00, 0x1f, 0x90, 0x6, 0x1, 0x200, 0x80, 0x41, 0x4, 0x0, 0x1, 0x8, 0x9, 0xff, 0xffff, 0x1ff, 0x9, 0x3, 0x8001, 0x1, 0xffff867b, 0x0, 0x800, 0x3, 0x7fff, 0x7fffffff, 0x1, 0x7fff, 0x9, 0x9, 0x7, 0xdb, 0x8, 0x6, 0x1, 0x383, 0x2, 0x1000, 0x6, 0x7, 0x9c, 0xffff, 0x4, 0x6, 0x5, 0x7ff, 0x81, 0xed7, 0x9, 0x975d, 0x9, 0x10000, 0x3ff, 0x0, 0x5, 0x7fffffff, 0x1000, 0xffffffff, 0x0, 0x80000000, 0x4, 0x8000, 0x81, 0x200020, 0x80000000, 0x3, 0x0, 0x5, 0x0, 0x1, 0x1, 0x8000, 0x8001, 0x1, 0x3ba, 0xfffffffb, 0x9, 0x5, 0x3ff, 0x5, 0x8, 0x1f, 0xd69, 0xc4, 0x2, 0x4cda, 0x1, 0xe107, 0x1, 0x0, 0x8a, 0x2, 0x5, 0x1ff, 0x4, 0x1, 0x80, 0x0, 0x4, 0xfffffff9, 0x800, 0xffff, 0x10001, 0xfff, 0x800, 0x80, 0x1ff, 0x3, 0x6, 0x4, 0x800000, 0x2, 0x7, 0x0, 0x42bda6af, 0x10001, 0x2, 0x5, 0x7, 0x8, 0x7ff, 0x20, 0x5, 0x0, 0x5, 0x9, 0x5, 0x3, 0x100, 0x8, 0x6, 0x80000000, 0x7e2, 0xfffffffb, 0x2, 0xa50, 0x1, 0x5, 0x70, 0x1c70, 0x3, 0x0, 0x1, 0x6, 0x6, 0x6, 0x759f, 0x0, 0x8, 0x89, 0x9, 0x1, 0x0, 0x8, 0xc51f, 0xd0, 0x6, 0xd1, 0x3, 0x7fffffff, 0x2, 0x40, 0x7, 0x0, 0x8cd, 0x101, 0xfffffff9, 0x0, 0x4, 0x6, 0x3, 0x8001, 0x2, 0x7, 0x80000000, 0x8, 0x8, 0x3ff, 0x8, 0xfffffffa, 0x1f, 0x10000, 0x0, 0x3ff, 0x8, 0x5, 0x1, 0x60, 0x22, 0x2, 0x0, 0x2, 0x53, 0x0, 0x8, 0x7, 0x4, 0x8bf, 0x775, 0x1, 0x1, 0x1, 0x7, 0x8, 0x8, 0x81, 0x81, 0x80000001, 0x1], 0x1, [{[0x9, 0x7], @empty}]}}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}, {0x3, 0x20, 0x60, 'tunl0\x00', 'rose0\x00', 'ipvlan1\x00', 'syz_tun\x00', @random="f5b3b3c87063", [0x0, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0x200b715cac38f28b, 0x0, 0xff], 0x8ee, 0x8ee, 0x93e, [@among={{'among\x00', 0x0, 0x858}, {{@zero, @zero, 0x2, {[0x3, 0xe29, 0x0, 0x1, 0x1, 0x9, 0x401, 0x3, 0x9, 0x7, 0x4, 0xffffffff, 0x8001, 0x6, 0xfff, 0x0, 0x7, 0x5, 0x5, 0x7ff, 0x2, 0x7, 0x4, 0x800, 0x5, 0x3f, 0x834, 0x4, 0x8, 0x4, 0x8, 0x400, 0xc00, 0xe6, 0x4, 0x400, 0x1f, 0x3, 0x9, 0x3ff, 0x6, 0x0, 0x9, 0x5, 0x1ff, 0x0, 0x9, 0x1, 0xde, 0x97, 0x5, 0x6, 0x271c, 0xba66, 0x5, 0x5, 0x8, 0x2, 0x3, 0x3, 0x9, 0x7, 0x9, 0x5, 0xfffffff8, 0x4f9, 0x9, 0x0, 0x468, 0x3, 0x4, 0x7ff, 0x2, 0xff, 0x7, 0x5, 0xf4, 0x5, 0x401, 0x3, 0xfff, 0x6, 0xffffffff, 0x5, 0x9, 0x1, 0x65cd, 0x800, 0x80000001, 0x9, 0xfffffe01, 0x3, 0x9, 0x6, 0x1, 0x6, 0x6c6, 0x2, 0x3, 0x6, 0x0, 0x5, 0x6, 0x1, 0x8, 0x4, 0x1, 0x85, 0x10001, 0xff, 0x4, 0xae9, 0x7, 0xa3, 0x9, 0x400, 0xffff, 0x1, 0x4, 0xf285, 0x6, 0x5, 0x1, 0x0, 0x8, 0x6, 0x7, 0x59, 0x0, 0x3, 0x80000000, 0x2, 0x1, 0xf93, 0x7, 0x0, 0x4, 0x3, 0x3, 0xe7, 0x3, 0xffffff7f, 0x7, 0x0, 0x40, 0x400, 0x1568, 0x1, 0x983, 0x6, 0x0, 0x1, 0xf98d, 0x401, 0x5b, 0x777a, 0x9, 0x8, 0x7, 0x2, 0x5, 0x6, 0x10000, 0x7fff, 0x3, 0x5, 0x4, 0x856b, 0x7fff, 0x3, 0x1, 0x0, 0x7, 0x10000, 0x7, 0x4e7, 0x100, 0xfffffffe, 0x9, 0x2, 0x7f, 0x4977, 0xb5, 0x4, 0x1, 0xffffffff, 0xffffffff, 0x5cf, 0xfffffffb, 0x9, 0x1000, 0x800, 0x8, 0x100, 0x3d, 0x82e, 0x1000, 0x9, 0x0, 0x3f, 0x3, 0x7fffffff, 0x81, 0x20, 0x3ff, 0x8001, 0x80, 0x800, 0x4, 0x2, 0x0, 0x40, 0x3, 0x2, 0x401, 0x0, 0x800, 0x8000, 0x5, 0x6, 0x8, 0x7, 0x7fffffff, 0x100, 0x5, 0x4, 0x2, 0x5, 0x0, 0x6, 0x6, 0x400, 0xffffffff, 0x10000, 0x9, 0x36, 0x1, 0x5, 0x80000000, 0x3, 0x2, 0x40, 0x7f, 0x81, 0x9, 0x1f, 0x10000, 0x7ff, 0x4, 0x8, 0x8a, 0x3, 0x5, 0x0, 0x0, 0x7f, 0x9], 0x3, [{[0x1f, 0xf587], @broadcast}, {[0x9, 0xff], @multicast1}, {[0x67c1, 0xffff0000], @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {[0xfffffffc, 0x5, 0x1, 0x6, 0x5, 0x4, 0x7, 0x8, 0xfffffff9, 0x6, 0x3, 0x3, 0x41, 0x6d, 0x0, 0xff, 0xfffffe01, 0xaaf, 0x5, 0xfff, 0xffffffff, 0x9, 0x10000, 0x6, 0xfffff000, 0x8000, 0x10, 0x7ff, 0x8, 0x100, 0x2, 0xc14, 0x7, 0x800, 0x4, 0xab1, 0x5, 0x9, 0x810, 0x10c0000, 0x8, 0x0, 0x9, 0x4, 0x0, 0x370, 0x2, 0x7, 0xffffffff, 0x18000, 0x10000, 0x8, 0xb9c6, 0x10000, 0x100, 0x1000, 0x3, 0x6, 0x3, 0x101, 0x7fffffff, 0x3f, 0x7, 0xffff, 0x80000000, 0x6, 0x8001, 0x6, 0xe4, 0x199a3d7b, 0x10001, 0xfff, 0x5, 0x80000000, 0x6, 0x2, 0xfff, 0xdd, 0x20, 0x9b, 0x1ff, 0x1, 0x6, 0x3, 0x5c, 0x4, 0x100, 0x0, 0x1ff, 0x101, 0x4602, 0xfffffff8, 0x6, 0xfff, 0x40, 0x2, 0x80, 0x4, 0xa34, 0x6fd66c85, 0x611, 0xd71, 0x0, 0x0, 0x200, 0x0, 0x7, 0xffffffd5, 0x8, 0x10000, 0x5, 0x1, 0x2, 0xf8000, 0xffffe475, 0x0, 0x80000000, 0xffff, 0x3, 0x447d, 0x1, 0x2, 0x7fff, 0x0, 0x2, 0x8340, 0x9, 0x5, 0x216a7cc7, 0x5, 0x42, 0x1, 0x1, 0x101, 0x9d, 0x2, 0x56ae97f6, 0x7ff, 0xa352, 0x10000, 0x1, 0xffffffff, 0xffffff9c, 0xfffffff8, 0x0, 0x5, 0x7fffffff, 0x9, 0x7f, 0x0, 0x10, 0x1, 0x9, 0x80000000, 0x3, 0x200, 0x1, 0x4, 0x7fffffff, 0x7, 0x3, 0x2, 0x1, 0xffffffff, 0x6, 0x1000, 0x1, 0x69, 0x8, 0x1, 0x101, 0x8, 0x400, 0x8, 0x7, 0x80, 0x2, 0x0, 0x9, 0x8, 0x9, 0xf3c, 0x8, 0x4, 0x3, 0x400, 0x9, 0x8a28, 0x8, 0x0, 0x9, 0x6, 0x9, 0x8000, 0x0, 0x1000, 0xe5, 0x1eb120, 0x5, 0x5bd, 0x1000, 0x9, 0x6c, 0x3, 0x41d5, 0x4, 0x5, 0x34, 0x9, 0x8, 0xff, 0x7f, 0x1, 0x8001, 0xff, 0x101, 0x1ff, 0xffff, 0x99, 0x6, 0x8, 0x1, 0x7ff, 0x2, 0x400, 0x0, 0x9, 0x3, 0x4, 0x10000, 0x7, 0x8, 0x8, 0x1, 0xf3f, 0x401, 0xfffffff7, 0x0, 0x8, 0xa86, 0x1, 0x8, 0x3, 0x0, 0x7, 0x2ba9c670, 0x1281, 0xb1, 0x7fff, 0x4, 0x2, 0x6, 0x2, 0x20000, 0x2, 0x8000, 0xfffffffc], 0x2, [{[0x4, 0x401], @private=0xa010101}, {[0x40, 0xfffffffc], @loopback}]}}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x2}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x138c) r7 = syz_io_uring_complete(0x0) r8 = io_uring_setup(0x1b33, &(0x7f00000003c0)={0x0, 0xc7e7, 0x0, 0x3, 0x175, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0184e55636c0d3000800b3c300000000000000", @ANYRES32=r8, @ANYBLOB="01003eb4ff416f57d5300000000000002e2f66696c653000"]) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, 0xffffffffffffffff, r5, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x7) clone3(&(0x7f0000000200)={0x451a6100, &(0x7f00000000c0), 0x0, &(0x7f0000000100), {0x16}, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x58) 18:15:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db9", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:15:46 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400, 0x400, &(0x7f0000000740)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) lstat(&(0x7f0000000180)='./file1\x00', 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x180) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, 0x0, 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES16, @ANYBLOB="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"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000185b29ae6a2ecacb7dc81e674542299918616996155ef8c427fb0dd59b457451f2fc2bb165d09a86c73cd189a5a002abdab6d1687e7ef35cf20e1a4a97660743db5d28f65f48"], 0x1c}}, 0x0) 18:15:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db982", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:15:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db982", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:15:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db982", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) 18:15:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x8}}, './file1\x00'}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000240)={0x1f, 0xffffffff, 0x1, 0x2}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x10000000) readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5e965b7e109b9f4de9d5e0cea6d18e3b27e753db98251", @ANYRES32=r1, @ANYBLOB="0852000004d3735500c76146"]) r4 = openat(0xffffffffffffff9c, 0x0, 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = epoll_create(0x7ffd) readv(r6, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) getpid() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r7) [ 1753.246624] Bluetooth: hci1: command 0x0409 tx timeout [ 1753.374511] Bluetooth: hci4: command 0x0409 tx timeout [ 1753.438495] Bluetooth: hci5: command 0x0409 tx timeout [ 1753.566567] Bluetooth: hci7: command 0x0409 tx timeout [ 1755.295494] Bluetooth: hci1: command 0x041b tx timeout [ 1755.422492] Bluetooth: hci4: command 0x041b tx timeout [ 1755.487495] Bluetooth: hci5: command 0x041b tx timeout [ 1755.614538] Bluetooth: hci7: command 0x041b tx timeout [ 1757.342492] Bluetooth: hci1: command 0x040f tx timeout [ 1757.470540] Bluetooth: hci4: command 0x040f tx timeout [ 1757.534537] Bluetooth: hci5: command 0x040f tx timeout [ 1757.662535] Bluetooth: hci7: command 0x040f tx timeout [ 1758.767880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.769517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.781989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1758.814643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.815906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.818021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1759.390523] Bluetooth: hci1: command 0x0419 tx timeout [ 1759.518575] Bluetooth: hci4: command 0x0419 tx timeout [ 1759.582514] Bluetooth: hci5: command 0x0419 tx timeout [ 1759.680468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.681955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.684185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1759.754894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.756203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.758411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1759.907035] audit: type=1400 audit(1712686557.327:20): avc: denied { map } for pid=112600 comm="syz-executor.1" path="pipe:[101683]" dev="pipefs" ino=101683 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 1760.181119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.182210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.183768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1760.245648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.246383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.247683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1760.913180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.914847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.942967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1760.959236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.960772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.964105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready VM DIAGNOSIS: 18:20:54 Registers: info registers vcpu 0 RAX=ffffffff83e68b60 RBX=0000000000000000 RCX=ffffffff83e5094c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e69168 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85673a48 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e68b6e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4ea8341010 CR3=000000000e0ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000006000000030000000200000000 XMM02=20726f747563657865110a0100010101 XMM03=66206365786509007374726174736572 XMM04=65676169727420636578650b007a7a75 XMM05=00657a696d696e696d20636578650d00 XMM06=6578650a006873616d7320636578650a XMM07=6f7420636578650a0073746e69682063 XMM08=650900737472617473657220726f7475 XMM09=7420636578650b007a7a756620636578 XMM10=696e696d20636578650d006567616972 XMM11=6873616d7320636578650a00657a696d XMM12=78650a0073746e696820636578650a00 XMM13=67206365786508006c61746f74206365 XMM14=616469646e616320636578650e006e65 XMM15=0000736465657320636578650a006574 info registers vcpu 1 RAX=ffffffff83e68b60 RBX=0000000000000001 RCX=ffffffff83e5094c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e69168 RBP=ffffed1001130000 RSP=ffff88800898fe70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85673a48 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e68b6e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff0ee97e48 CR3=000000000e0ce000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041512ce400000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000