48b0984420ae39091a7423093d6c02748f7d6c8171acf478df9fd64c89416390d4ea027718c50b62f480523f3f3c6", @typed={0xc, 0x7, 0x0, 0x0, @u64=0x5}, @generic="2b4a4b11f70d43f6b3252824f86e"]}, @nested={0x2d, 0x51, 0x0, 0x1, [@generic="27d079b406d1ad9ff650028bddad6bde65d1227587e7c318992253680685b249c3", @typed={0x8, 0x3e, 0x0, 0x0, @pid}]}, @generic="546f2dc719ccba58e2b673152dd4dd7deb39f0c82bdb6d0e5f13b92439fa9d7a3876c1f5c4cdaa968b2052fc59a7ab3e980ef1f3c72fd2295ea5764e65ad4c13fba7a34400d8c0adcb665ea38a2979f34451d6529107bb5a2610189bb5e60801aa7123037244498c9cac3c5a14d3bdf8ba2214199bb9c0e57f05a14c34b89beed7b38d68fc485218a219407a14f588b855e320a9e791673a102af16b0b769a8b5176c435d3162da5c666c924bfd1cd", @nested={0x10ea, 0x96, 0x0, 0x1, [@typed={0x4, 0x56}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0x1000}, @typed={0x8, 0x33, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x24, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="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", @typed={0x4, 0x4d}, @generic="1ad57d7839b27797715af8decb0fefd810edaf383f8106693daf95c0658ffc968caed204996b471134ac914966c7cc3442d949110f3f5a22eb0c4778029a7ff2c9b3964f69e66ecf7dc13846373f40c9301136a9a9e5b5441bf9df7bbd031220ab52e9db3841ef6b8c32010d5f453ebe4fb2641d2b41ac63294dea888880693c74f0203e249e0d30372f76431ef49eab542c924144f361995603fe1593068af515877bd5791cf6f163009a58342c804085d831918949e59c720e92cdad78edea60e64250f36b"]}, @typed={0x4, 0x16}, @generic="a6577cfa27b192a2a3c0ea968e996868a993a79568a8ecadbf47f77faa78c0ff0c622ca46f09c483cd778fa116f4eba9d9bda461fc11d2156d5042183fbf1c59488262a60440d78cee3fec4bc1c216138891f5543d15de3e55e17438bffe60f866ddc099bb593f12e624ddd5fb7dd72d58eec462620d7e5fd800aec755b565ee34d2309334b09b5842b42bfc5a0de993093fc94857a4d45f2fcf97914ec7c922d14689894cd1e4de1fe7304b5e501de9ca12", @generic="837e5dcec1d3c330ffcd2d17c0b3873b8f09179ffa100b6781a66b5059534f54878d9af87fcf8279dc9fa9d200029d77af82085a128411e791f33e288caa6c6bd5e5fa6f47925f2ac27f9bc8b9c28ac0167c75"]}, 0x162c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) r4 = io_uring_setup(0x62c, &(0x7f0000000280)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x13, &(0x7f0000000140)=[r6, r5], 0x2) 15:42:46 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) 15:42:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, 0x0, 0x80000001) io_uring_setup(0x62c, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:42:46 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r1, 0x1) r6 = io_uring_setup(0x62c, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x7, 0xeb, 0x6, 0x0, 0x5, 0x40004, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x1, @perf_config_ext={0x3}, 0x1824, 0x0, 0xfac6, 0x2, 0x1f, 0x3f, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x13, &(0x7f0000000140)=[r8, r7], 0x2) 15:42:46 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x109400, 0x4b) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000040)=[r2, r1, r1, r1], 0x4) 15:42:46 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000080)={0xd, 0x0, &(0x7f0000000040)=[r1, r3, r1, r0, r4]}, 0x5) 15:42:46 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = io_uring_setup(0x62c, &(0x7f0000000280)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x33e2}}, './file0\x00'}) finit_module(r6, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x2) io_uring_register$IORING_REGISTER_FILES(r3, 0x13, &(0x7f0000000140)=[r5, r4], 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0xf, 0x0, "b796116a5b25327e9e78dca7ffb807ff697ff7227732b9501e9c939632c222dfa8fff0a0f992ea3c7831ca7bdff4a33c7e34fe0be0b98d23992cc9e1b78b1f2ae2932865976610ba4406d70673377205"}, 0xd8) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:42:46 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0xfffffffd}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000e, 0x12, r1, 0x2afd3000) 15:42:46 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r1, 0x1) r6 = io_uring_setup(0x62c, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x7, 0xeb, 0x6, 0x0, 0x5, 0x40004, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x1, @perf_config_ext={0x3}, 0x1824, 0x0, 0xfac6, 0x2, 0x1f, 0x3f, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x13, &(0x7f0000000140)=[r8, r7], 0x2) 15:42:46 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000080)) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) r7 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r7, 0x8000000) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$notify(r7, 0x402, 0x80000022) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:42:46 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000040)={0x0, 0xdf9e, 0x2, 0x0, 0x15c}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:42:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer, 0x80000001) io_uring_setup(0x62c, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:42:59 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/cpuid', 0x200, 0xb2) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r3, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:42:59 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="aecafa19d0b53dec312c11ef0c58531ccef9f968ad7372fc4c3f9b32d81ec42f4105eda3e06fcd5fa56ebad4364da551fc873b4da159442ef67a94b3c0def2b687424f39714ed9ba856d7727042351f04eb1396df22178392652c953e102ee7c180844801bb992f62d5dbf913526e6277809cbe3692acd27113ecba63d672fd5020521745dce9c7b93f5908dfc90375a928265295a3e48fae7e1f2b072dc5bd21cfa8b5d", 0xa4}, {&(0x7f0000000300)="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", 0xfc}, {&(0x7f0000000400)="bd7df8f3c2ab3e9675889cfdb2167c97ad9078f3dda8fc18c5de0dca0a2ee9752822dac18abff445da1c363b5258c9dd2dac38be03b1b45a82c102c9fc104237d0dc814bf6f9d29a31943acd1633495771abeda889f6bbf889e703db3f96154757462122e7330d430bcd76436f63994b6ef68105fc1909872959c233f096d8adc5cebce58866afdf5350ec9de529155da820d9d581e7", 0x96}, {&(0x7f00000004c0)="bc70c141e63b0ede2737f5941f437aedb8bf13d34d376bbae5841caa2b58f92510ba47060b0e00c68f9afa99df2f4d7f604bdd94436464d2f1a487be086912a378c852d3e5035ee81697c26cef326905c0e63f6daadd2f978bc6b3e776dc52440e0eb7d3a93171f8fd09e35af346ca2a571a5f7a547b45d0e4d0c246a3ae2c128d90e17dced00f8ddaed388412cee2403de7d9ae7359b69d3961a567c727231adc2158b0b0266559c0a1c84cff41ecb5154468f2574e8a31b8be73fc68d52e6d4d8fc52a82fe45a7fff02f94e777932f4e7efa51af82c4e97a83f7c42f488eb4a44784a814a4f65035bd1e707a04ceba7c64d963684a97d52334b69896616642b784099228368b7859bd20d5f439353ef6f7b79c8fb2acb806dae3a13d1cc0c5bf1d22cd77ded5e81084e52769f6e88fd855762391ca5e5d4f14e4ff77c41decfcc2ee5d538504c89c857fe09664587459232e7b13366b1dd442b6316a7900c6f6d89d094a9a17ecd4c2ec5f1ef63e4191fb481195848fdfe1a6dcba5557d71b0d83af506d2a20aabb70ff0d9418e5f077bd96750e5640379572a51c49c69341445df05d99dced03bc6d17a3c755adf083755a3c47ee9e01c4f390ecc4384a54db22a5c2bfed0c082aab801f3aff4bb7094b42dba61aabd520f2cdd890003c723c1889293a24aae7c33b0db7b87522abeadf99dc72f1d2a389f3c0cf25d48790bc4661e9a59f1a73566e2baf6b3093fb7d849b3cdc7fa8366601461690ecc31c42d2374eb2d60af2da28c216af80288d3b028c8667c34dcb6a1681ff30f02042510c450dfc3e902c19359c4aae56186dd99aa71873b02d25a1710766742ca314e51a6414b621149355c9d7d574e467b88509aceb40b655fc70f06c18b7181b4ffcd902541f954b1f7adb40bbeaa3d63866ea17f2b4d1fc114f432f0877a6bc5eb8c9917b786d3e57ce57df954eb2cc532783ca9b3ac97379ca6f548d80199abcfe3b48046eb9e69b0aa84e84328e62a26e3a9df93d04bdf0d8ecf124ce6712d848ebc810abb5a886c35876dfa67341795a16c6fd82f1c1e44969a3d4dedc90ffcd43904a03d74b92455240bf11128a9cd42439b83830d1d232ca6a9485999de18b42ae1e3a2227a72796962e8e231b119b3d23e6d076c08475d1edf15f3e34ccd4bfaba02a5e1383888987fb03ffaa9da62b70ae579313b361cfcd32ac1599cff2e22dcf4ffe2987e2c247fba0aa6b9a0c9db7f3c762da1b6d386a14f234aa26d6a8d723c9159f66815518d50ea0a7f4a473fd931e7df39b335edbb780078fd3fa55486a78b8999897ce23c56dcf1b1582e644a4b1e48a13998588490e4e78c22cc48c153651b5473bb6cf7384bf5b2bb7474cde88fd98c842e762a4db0aaa70261e8a0a245eaf7960d8fa853cb4578996de60d767eced3df86874bfa639b486d64a735fd970f57e52600d6b298ccc1374277fd839a1d91086d63e04f85c6665be7ae6f9a54438fc7db2eaa493d051a72cce1e5538e6f84799f46e262eca96582a24665e0b7b5d83c08389a66681e91fac6e9c1d92fc019d774859add08a9067e30715164e710769218c7f3863401117548e1e094ff7358f8829d9d7e864c6ad6c44eb69cad155b4442f4f1a951ac2e529632e3ee617e1097c025448c62fe2f901ea80f9d1aeaa0cd0cfa98a0e9975696ea16ebb1ba6de3b0a9e3598f111e4012fe6fbfac6c577dfdc715afd2e7507feccd8afcdcb8b4e2538a7ce878ba00e5705ba9b6c74d41d12a382a34c47b242105b3e103edb206ffebd8fe1712cf81310522759d945a644bc95d7fec372728ddb0aa1e6ad284de9bfeea6ee8d84c449cb4fbd2bed911f3de4b8d45a70935affd5a05b7424fd633511e96fd7b80ca6a99993f5deca0be06cbba010d4159a7044f06ff022e950cd60a7ed63576883f681b7633cb9a0f5dd8f46efb7086abf5b26648c1dbf4e461f4439338c2005d200219d5a03ac592b769e5c251e5767fb037661eb902bbbdf8a55cb863121ae58cae797a5d403599cfa9a699303fe574771cc89257198d78de5620bdc9e0255a0a869684b9b71bdba442dc0fd519ad5425dabf19ee7dac25da1e1e41846854d31d89cdda6a3fb79e36af2cf7b507ddd273294b3ca024ebaea676f50707e392454d7853c66a3a989f775b807cce0544e41470e95f696cc0bbdcfb9de411e200c12eb34baa097b61cffde942576bd19734ce0ef01129b9cb4eb2ae77fcb1a78367b3dca25f32a659882addd96e9e3f5136d632f3f77f3cd45b7f81e642414d07a4e4ef61b3ae250fb59464cb207face81f44f0af6dfe214f242ceee151d2ebb01c725c0e5de731665937f1cc2ec1d31b3d624a84e6b7858e53f23be385094458632915ca08651ef37373d0e154e0fd8883042ea930542f296559e9712b2ecb1cfe2d8d9b0903a87e649954f83975cd66595b1bfbdf66aa4c1b4efd4b6e9d729823a080b18368950a493b255251467601b68f3bec540d4e2e291c4746ed2cf98430c0a2c959d4bfc206994744020190947bdca40f3ded45fc42fd5b1c3a60279465f26483e7cf19192d134af954f9c1c4e8219e90192506482a84e03cccc4545a5135b37f5bbae071188083c8b016f67c0e8bd4e2563046941b8f2ab9a25ca55210c81738166d1cd12ebfbb5b43c22d843eddc2a00bd2190784843053a58f68753463d1a59b30bd0a6127fb3a6ea789e4f5bc6fb6141539714c9c8900531c3d63d597fbd3b43494364c5abde5e4825a9e0f67681cb91a83a400497e4fb79a6775b7eb1f94dd0bfe2e774e5e587c9bb56702a083c65cd5089ce068dce8210b761a966b74f19c1a3c3d038534bf9d5413e2486b06af6a961452f2fe97edc573616b9e64f8a639a442d7fdc2c2e0772d127e0b5d993510736228a05cb9f51de236fa9ef27328c8f509219095d96af1440d8bba30b18e62556b4ee33b219c7dcd5e94d271ff790a48ec948ed9a1e7f1d49226cd7a70e02f80968f179f859ad0a3a93bb986ef9b4c90c8e61b771f9787b7a1897681a166a1833dc8be2a5d9f6d35c2fea2e2296ca97733d8f57dd687cf87269d433353e2df550bfbbd0fafe7ec163ae198c26ecef8ba7eb1ac1a75e7ae927d744a189be352f118ffa5ce310027318a0f82eed92bcaee1a494865049ecf547286cab88a7d930e5b124b662fa02b585bc1e96ebed1bd8e4b51c4e2250baa0416b38cd0e05ba92198802f4f68b9c8d1bc771b6e351f14798987c6d3dffccec2fbe47fbd0e290a58cdb831d733ee1f323a009b88e89248c8f1c6b1f544f37aeb488055bafe429f634114608dd147f863dc312c4ae234e6f75fa48a189d72e2f3df05141e5e4386486715b0d6208f04fb58d2e77043dac4df42ad286ed3879c713825185d962d88928d1be376834a07af4c178bdb059925caac5adbf913a2892efabb2041823291afcf5e5de5aaa35c13d177c2f6a2bfadbfc6148c40d8500ee282397d7da4c50f3f5e9a30c6d4284443e48e4c5150b2506fd237bf611984c254c5b8dd458ed4fdd3e5aedd78c8ba2e37d9b6eaac6e25be4008bc4a36909e57a54d418e5914c2f6e70f87fe5df27827e777fc5b78a4a4904d67d4daed355d3c136fbbde837afe29a82d89d1352397973648b3df9f51db34f8874506803fb079d4a93ca12f5f35774155d23f9edd75fef105deebcaac9a5ccb904499a54d7e9c0c56249c32fa4ccafb4a52a321f652e6445f6d6a1cc487e7d92054d873b697bc2769642080b5545e2707e2f9e253f169d37bd7278b865f1281b42db1bcd1749e053b06483d5977ee81098f95fd95916fe7c3cd3d1fca8c8b8e444e37ffcdac77ee3aaef243e6d230444eeda401dbb903a81e4bc06d18f165d8257a01506e5bdff5dd6b0ffdc7f2458e3880620cf086ba954368aaf6b2385c31bceb1cb400883144d52cea4e9f3d7aca4bc5cbea2e8ca48296e603fd180d8d6598aba26435910a955bb204f76c07a5a94d0da31bed6c9ec612e29ab7af45dc33f165eee5c3e2ec19bd036c6a1ce4d9801ac2bb36305b08c59692ab50010cc3b2a31ab454aa878a05b482bfdc1655bbf55bcf94025f065048836182c1420ec654831126731ec525e238df2a7845dee0b591623c1c51d5d9f63804fd1912fe1d4ffdc9d84ed5dedcb253c18215de15b2539624bb82f4d9d87a4657413a62407f3e3583a8337078853eecd7eb8b5350d4e2a3f514588ed297d0c1221f362eabb172e1775c8799783a3bdd36a9568a9183f2e408e0849a760b2c0d59461586fdbce1e9148985bf89a5a55063ba3d3953e81b800ac0c7675c9c02cc98139cfe4ced40eec806943a2d6f26cc1453b8b2274cdbffd972768c89e4ff13981355a9cc7777d10c7ecca0bfb1548ef038298c9d29b1d2dedea79fe21ac5c0a7bfca8fdb34e23c55095bc48800461724ebb022f7f3c34a9168b6dcc27f01f21ffb6480a6a323da36bcc95f9b29c00461e50dbf7bb6e3ee54464a0aa5fb6e96086e7c437ac7680a97e26bccdbaa8332e9344c4e9a3f63122d68b5b4d4cfd2914f8c2ea03ae152a82fc9f8f190e63e9ed29a4b873d3bc980d8a59e9666cce4ac56e4a0134b2a05477c68daf04afa0144f1a2c49a7cc2b965eb59b088f34ba602f4b22fa59d23481095c5c209288b363255869f8d657ec6618f121f171f6169728d7374c9b4e22c69c80a8e63ef3ad6a1beebfa6f2e813c3e82d9d25d4dd58d628c716cba27ff7255f129e0d26c7fb26a2385db57ef4aa00833096f435b44f4cd29e6fa61e8ded6acff82df3fd136efe2aae64f07fa9570a7f83f37d8690aa72c2b1203cda06d9c7efcf5ae47e767cac40707676c264fe0317d42aa25ee614ca2af1994539bafa849dd4a1a3cf6cfb86202627b612cfae23ab5ce22b6d5a14125de493559024ce28dd672034d4eea8465411ba2846c203d223c32290f51e9699021a3ec4a5d91cedab75bc463bc58f5c3c6cf3a8ef3f0cb677398cab0ca312216320ac5c2b7bcb0734e2a3f8f65a59f67950a804557f0b96ccc28caabe1a2c19d839ff8d00c93b44a09b28297ac5e5e415e08d6d59ea786218e109950fbc00c08c0f51a9610a172a38b1a634a8779a2b41bd30c0e4e1ae37b4685c456ed888d1ba0490cc904c133c481c8b8f8f8f095587757205e4a046ee16db6ea2bdbe3f3880637e48bf54b7448ae9c7955478fd6bb7fe3d42b1a8c5d75f17382282cd67b62d75ca123d3ae20eca049e359e742e03ceac8a6317d4d82772884ea0c57cc805021ccf256a60f3737340182aac71bb866119e6c2d5cd59773e68d5ed5bc40ec9460a5ac5927800a63df0581b43911eddb853f63580141701310f1667a5f1aef0e224312a5466bfb5359ef65965b5d640b4a8e4950022adedddbf3ef045f4836eef3c3babb26ba98e926c52a5b8210319427cf27361bc6249cffa848f964910aa5360e1c120fa3ff029a6900d45b0d04fdab959f8768da175dfd3ba366962d8ca7763b88a921863b8931088efce213cae2924fd66247cb32b2d6a0dfd85a626312dbfc10d530766e26ebfc2ad966a285b273f097131d217a072270e9b73ad4f2533cec9dfc2a8cd25eafe245eea7ef40aef8a2a4906e83a663f61f9d4e9edc001a23e53a8f0043fa720a07b4bb3337af2b4660c4fcec26a73f766be9fbb56e47d378255c0c9ae954947994d5363d7704e39bc811c2a917b177b6792b701575c48ce51982ff07a98b4d6d3b3e5d3a178ce160adb44fa03896b1217ca63b37ac8332447fd75bace", 0x1000}], 0x4) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x13, r1, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r0, 0x81, 0x0, 0x3}, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r1], 0x2) signalfd(r3, &(0x7f0000000040)={[0x6]}, 0x8) 15:42:59 executing program 0: io_uring_setup(0x62c, &(0x7f0000000280)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r1, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[0xffffffffffffffff, r0], 0x2) 15:42:59 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r1, 0x1) r6 = io_uring_setup(0x62c, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x7, 0xeb, 0x6, 0x0, 0x5, 0x40004, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x1, @perf_config_ext={0x3}, 0x1824, 0x0, 0xfac6, 0x2, 0x1f, 0x3f, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x13, &(0x7f0000000140)=[r8, r7], 0x2) 15:42:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer, 0x80000001) io_uring_setup(0x62c, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:42:59 executing program 7: r0 = io_uring_setup(0xa45, &(0x7f0000000080)={0x0, 0x800000, 0x0, 0x0, 0xfffffffe}) socket$inet(0x2, 0x806, 0x7fff) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:42:59 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x81100) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:42:59 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) r1 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x25c, 0x0, r0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r2, 0xffffffffffffffff], 0x2) 15:42:59 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200702, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000180)=""/23, 0x17}, {&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f00000001c0)=""/176, 0xb0}], 0x5) [ 1086.820457] audit: type=1400 audit(1712158979.601:12): avc: denied { create } for pid=7443 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 15:42:59 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:42:59 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000040)={0x0, 0x4d1b, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r2, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r1], 0x2) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000002c0)={0x0, 0x2, 0x3cbe}) r4 = dup2(r0, r1) syz_io_uring_setup(0x13eb, &(0x7f0000000180)={0x0, 0xbcf4, 0x2, 0x2, 0x223, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) r5 = io_uring_setup(0x62c, &(0x7f0000000280)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140)=[r7, r6], 0x2) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000000300)={0xf5e, 0x3ff, 0x1}) 15:42:59 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x100, 0x0, &(0x7f0000000040)}, 0x0) 15:42:59 executing program 3: r0 = io_uring_setup(0x5989, &(0x7f0000000280)={0x0, 0x800000, 0x0, 0x0, 0x2fa}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x400000000000015f) 15:42:59 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000040)={0x0, 0x9df7, 0x0, 0x3}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:42:59 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r1, 0x1) io_uring_setup(0x62c, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x7, 0xeb, 0x6, 0x0, 0x5, 0x40004, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x1, @perf_config_ext={0x3}, 0x1824, 0x0, 0xfac6, 0x2, 0x1f, 0x3f, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) 15:42:59 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) fsmount(0xffffffffffffffff, 0x1, 0x9) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:42:59 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x531201, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:42:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer, 0x80000001) io_uring_setup(0x62c, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:43:13 executing program 3: r0 = io_uring_setup(0x59ed, &(0x7f0000000040)={0x0, 0x2038, 0x4, 0x0, 0x105}) r1 = io_uring_setup(0x629, &(0x7f0000000280)={0x0, 0x7a7b, 0x0, 0x0, 0x0, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:43:13 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x40010, r1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:43:13 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800003}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:43:13 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r1, 0x1) io_uring_setup(0x62c, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x7, 0xeb, 0x6, 0x0, 0x5, 0x40004, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x1, @perf_config_ext={0x3}, 0x1824, 0x0, 0xfac6, 0x2, 0x1f, 0x3f, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 15:43:13 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2a8402, 0x42) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x9, 0x4002) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r2, r3, r4, r5, r6], 0x5) 15:43:13 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x0) io_uring_setup(0x62c, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:43:13 executing program 0: io_uring_setup(0x62c, &(0x7f0000000280)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r1, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[0xffffffffffffffff, r0], 0x2) 15:43:13 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x800, 0x8, &(0x7f0000001880)=[{&(0x7f0000000300)="9b6de9fd05a60042ecec291bc522e91c8815c8aa6b7ab5dd4b3233732333e6b79fcbdf8fa3246bd76d4cc7350fc456821b2f5b6c849546b277b86ef426a59837d7ea2e3705feb0918b66728bc04b1cdfec606e1f611a24c829d1b7970b096237093a185ca5cabaa61438061379f21332d617d54611c7c33d83f779046253239cd9e0c1e1269db13c41d17fd4d54d2dd9ef282f3bbb27789ee29056a4c0851662c34feda75687b34336e50313ead7620ae23871991baf4e50f415de9ce3f6fc3a6224b05e10fa823f74af9e1372e97ffeb1f7f9ad9b427047f2a4c491d7842dc740d2b7f10f0e643d2e13ea78c9127b522e4742ecef1e", 0xf6, 0x3f}, {&(0x7f0000000400)="d3c6641d13df00c4bc56854e72f506cafb40d6bc52715576fba32f873bfef506402f0c9f59440b817da16611246f18a6e8be1d29c6b5d3392a2d8d5796e9670f1761021882f89671ae7e8a7db4fe23eaaa196624db9dca9f2213ac7b1aa5858016f4935ceb661f7369b802a4a92961130e4b7afa2c5c772acaf4d1116f94602b49e9114a4a343fdae4beeb90f27d460f881b50fa0f74a690077d856cd4aa3e6cee3618e36581eb82709d5f994304b37957e0cb6186ce8b8d09414714ef755101e437c0ceb5e7d3d87b4d9ae3cfcfc93850d4710adcb425", 0xd7}, {&(0x7f0000000500)="7878cf83c5b1e4d5a0e746b343b82f6ac75f4580cac5e53448561a874e1d1c7d714dbf62a62437bcf6f49b6030abf4e5cfa76fcafc5c75af8cf76e78b4e3f7b4c7ec4b", 0x43, 0x100000000}, {&(0x7f0000000580)="81519c217857c1a7769677a4d3f2724adf0624a4d4d7f205e1d7a9c7c095198a1ae7eeb6e6a20b6617c5fd918ca7c5e86df299dcfa1a861703642a829e0c8b0f3dc8413d8ea2092cbc3dc7651cfcbf9ceb76c7dc0f19b2d92b0a9d51c84e9817bc062134ebe34679457ecedf7bf1519d2de0b697167ee7724988ff0e24381b6def102c1fc71d594ea5384480a6b3ac4155f6a44c67ea8291f92807518832a142485a8ee28984d8fc0d06df7cab115c72c79f4522f3661231955230796562e1ce7ab3a6827052", 0xc6, 0x4}, {&(0x7f0000000680)="3fc9d70ae778b4802a23956d721c6de88c8cff8b6108f3df7c30f8d33f40e60a46e8b13ecc8feae10a0a937a5a6d7031cb6b1d16c855e033c69d42b7bdae1ee9c678358a1329204f4098935f67a5", 0x4e, 0x9}, {&(0x7f0000000700)="d0361f27063a47cec6c7f0adc59cbb5782b68eba6870842ba4fe5648fd4b36dfe7a0a7f65b5cd456d57ff999b0ba9678c73743cfd115cc1582d3e6999e25ad10e5e083f8d8d002f1c0718af37b266e52f0884303444892c7", 0x58, 0xfffffffffffffffa}, {&(0x7f0000000780)="deda82c0984d972526caae474bc8e90ab5b2a0dd11ecaa909f64f3106caee6fe2006607536fd8b26847e7b53267253b8efef0dd36dea46573b1f5690d04803b91d8c327b81632ba5c7d7096cdf663a4f5ee5ee5e8980da1882578ebedc29714dec2c2dd70beef6f440a7faf1cdd4147ad759f4c4b3f0c6882714be859383940e9c582232de7b9e560f920f2dc74aef4b0bcd59034962f39c934f053079bceeb97df17f94c06258459beedc239870a352d64284df89ac5f7e8abcbc8b0df648af3c525efd8465cdf9da30f5c4c1b22e2e93ae8cf2b46a70b0d054058a60320c329940", 0xe2, 0x7fffffff}, {&(0x7f0000000880)="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", 0x1000, 0x100000001}], 0x1808400, &(0x7f0000000240)={[{@cruft}, {@unhide}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001980)=[r0, r2, r3, r0, r0, r0, r0], 0x7) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r0, r4], 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r5, r4], 0x2) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0x100, 0x7, 0x7}) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000040)=""/80) 15:43:13 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1875, &(0x7f0000000140)={0x0, 0x1ffe, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000080)=[r0], 0x1) io_uring_enter(0xffffffffffffffff, 0x20bb, 0x2c05, 0x3, &(0x7f00000000c0)={[0x800]}, 0x8) 15:43:13 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r1, 0x1) io_uring_setup(0x62c, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x7, 0xeb, 0x6, 0x0, 0x5, 0x40004, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x1, @perf_config_ext={0x3}, 0x1824, 0x0, 0xfac6, 0x2, 0x1f, 0x3f, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) 15:43:13 executing program 6: r0 = syz_io_uring_setup(0x6f56, &(0x7f0000000040)={0x0, 0xa35d, 0x4, 0x3, 0x15e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = io_uring_setup(0x10000630, &(0x7f0000000280)={0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:43:13 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_elf64(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x2, 0x9, 0x8, 0x2, 0x6, 0x3, 0x344, 0x40, 0x3e4, 0x3, 0x3, 0x38, 0x2, 0x4, 0xff, 0x8}, [{0x70000002, 0x20, 0x8, 0xa27, 0x5, 0x81, 0x2, 0x7}, {0x7, 0xff, 0xe98, 0xaf, 0x100000001, 0x8, 0x7, 0x1}], "c1606dcd2a9272573e13d57f5d6b245e1ce499ad2698987aa57ddfc7aa09f995a11dc09b3d7335617e27522c1c748712c84f98ca2e6b4b9a50c9cb21177fdc79e2786bfb47d4a2a551d2bde042b0e8b1dd", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x601) 15:43:13 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101202, 0x4) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:43:13 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r1, 0x1) io_uring_setup(0x62c, &(0x7f0000000280)) 15:43:13 executing program 3: r0 = io_uring_setup(0x75d, &(0x7f0000000280)={0x0, 0xf0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:43:13 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x0) io_uring_setup(0x62c, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:43:26 executing program 0: io_uring_setup(0x62c, &(0x7f0000000280)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r1, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[0xffffffffffffffff, r0], 0x2) 15:43:26 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x0) io_uring_setup(0x62c, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:43:26 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r1, 0x1) 15:43:26 executing program 5: r0 = io_uring_setup(0x629, &(0x7f0000000280)={0x0, 0x942d, 0x8, 0x0, 0x82}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r1], 0x2) fallocate(0xffffffffffffffff, 0x10, 0x3, 0x7ff) 15:43:26 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x545d01, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) 15:43:26 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) fcntl$dupfd(r3, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) socket$inet(0x2, 0x6, 0x531) 15:43:26 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[r3, 0xffffffffffffffff], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{&(0x7f00000013c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001440)=""/89, 0x59}], 0x1, &(0x7f0000001500)=""/9, 0x9}, 0x55819f98}, {{&(0x7f0000001540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000002840)=[{&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/124, 0x7c}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/243, 0xf3}], 0x4}, 0x2}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002880)=""/118, 0x76}, {&(0x7f0000002900)=""/207, 0xcf}, {&(0x7f0000002a00)=""/119, 0x77}, {&(0x7f0000002a80)=""/109, 0x6d}, {&(0x7f0000002b00)=""/156, 0x9c}, {&(0x7f0000002bc0)=""/226, 0xe2}], 0x6}, 0xd03}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000002d40)=""/18, 0x12}, {&(0x7f0000002d80)=""/87, 0x57}, {&(0x7f0000002e00)=""/30, 0x1e}, {&(0x7f0000002e40)=""/68, 0x44}, {&(0x7f0000002ec0)=""/227, 0xe3}, {&(0x7f0000002fc0)=""/107, 0x6b}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/37, 0x25}], 0x8, &(0x7f0000004100)=""/192, 0xc0}, 0x2}, {{&(0x7f00000041c0)=@qipcrtr, 0x80, &(0x7f0000004600)=[{&(0x7f0000004240)=""/63, 0x3f}, {&(0x7f0000004280)=""/182, 0xb6}, {&(0x7f0000004340)=""/119, 0x77}, {&(0x7f00000043c0)=""/174, 0xae}, {&(0x7f0000004480)=""/80, 0x50}, {&(0x7f0000004500)=""/240, 0xf0}], 0x6, &(0x7f0000004680)=""/192, 0xc0}, 0x9}, {{&(0x7f0000004740)=@alg, 0x80, &(0x7f0000004b00)=[{&(0x7f00000047c0)=""/42, 0x2a}, {&(0x7f0000004800)=""/13, 0xd}, {&(0x7f0000004840)=""/99, 0x63}, {&(0x7f00000048c0)=""/219, 0xdb}, {&(0x7f00000049c0)=""/190, 0xbe}, {&(0x7f0000004a80)=""/124, 0x7c}], 0x6, &(0x7f0000004b80)=""/214, 0xd6}, 0x8}], 0x6, 0x2062, &(0x7f0000004e00)={0x77359400}) r5 = io_uring_setup(0x62c, &(0x7f0000000280)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140)=[r7, r6], 0x2) r8 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000) io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0) r9 = io_uring_setup(0x62c, &(0x7f0000000280)) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r9, 0x13, &(0x7f0000000140)=[r11, r10], 0x2) io_submit(0x0, 0x6, &(0x7f0000005000)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x2, r1, &(0x7f0000000300)="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", 0x1000, 0x3, 0x0, 0x1, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x1000, 0xffffffffffffffff, &(0x7f0000000180)="afec48c683f4a4756bd0115de79b81320106e008fd87d2a3e6d6a0cd8674dccd458bdc1917c7197bb0480c27bac28c227e4ca321d8a7601fb1014d5a7a0519dd6e0e89429fd0505d3410816b02a9a435d2baaabd5eb0e4eddcd8e32339b800668bd0e7357d", 0x65, 0x2, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000001300)="a8b7188fd9f6df4487562bb7d41cab3d7095f9011b6ba5e9d8e01c34410c8a57c4551308eb79d4bcecd12ff84e6849afe6b4451efbd217e33400f7d3da51c5ed537c6a079b2bba070b583e6e61be1227836ef03dc707a84cf67bb18639e91d3ba4084992af53dbe22a51d8dfe785174ec7a061806cd4bdb4253b8a1200d0617865c646e1f46ed124d7ddc7ab898f26ae54796b8305d6fbb3657f78bf19633c0d418dca2b5a47275788c21d5e0a2d6910", 0xb0}, &(0x7f0000004e80)={0x0, 0x0, 0x0, 0x6, 0x9a6c, r4, &(0x7f0000004e40)="759bbe770f0cf5bac20c72f71351d36da9527cdf13b2dbb67d59520e32a6692ee8e315d0230cc5a403b2a489dc5b16e1a32d5a9b4de43a4693316aba15d59570", 0x40, 0x0, 0x0, 0x0, r6}, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000004ec0)="6f9a4ff1a6d34816b569ee913e6a71a36d1ee79b55da5845fb497e7b0394afb9b20db729b17482e874b484a367a0befb947c7af0f320589063692e7cbbe9bd026150535d60108cab09c5cd2590653619d87b568ad434293d9789e5dd325982f0", 0x60, 0xd723, 0x0, 0x1, r1}, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0xc9cf, r8, &(0x7f0000004f80)="31f72beb65b3e40da9ce60248e1fad", 0xf, 0xffffffffffffff24, 0x0, 0x1, r11}]) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:43:26 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x9e70, 0x1, 0x3, 0x4}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000040)=[r2, r1, r1], 0x3) io_uring_enter(r0, 0x55fc, 0xbaca, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b800000013ffffff000000000000000000000000ff0200000000000000000000ffff00000000000edc00b65621f917d0f1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)="e53bf1c334d78d049f82012e9255b5f2a752d3e403d434d789a4b3ef41eeecd55988607489a6093c60f630d13c115c3e9ea2763660a13d6d0596526ab1a4243464b9f9ff4636a4250a2ddc0490c3f5bc00ebf1c45e69e58275ad6fa0cc284dee2c6976d6d06bff", 0x67}, {&(0x7f00000001c0)="b0a79f4ae1b574650221ded6bf62524471abe001da105f1542f4717768319fbaac63fda4716305bd85", 0x29}, {&(0x7f0000000300)="4d8085b86a95c6f6b3273f2dcbb4afc343f1ba6f66b26c0c09a88f4f3c1f637e5e7a392404cf828d01a465e1722cb28ddca00c512a5c81ddf2055d9cec416c46f3ad725b3537c8f6ab7396e3fbd7cb278c14cbc017eb12fe32147b69b8d51dc72a1710acf11a9a96ae359a81596214acad3ac2052db618774e6172f08f0d1898cc2d58208ccd700aeef91db534d1d5c28bf1a6eab54f7931dfcd5e9f06d86439f49f", 0xa2}], 0x4) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r5}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYBLOB="68020000190030042bbd7000fbdbdf25ac14141a000000000000000000000000ac1414bb0000000000000000000000004e2400034e2103ff0a00400006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fe800000000000000000000000000017000004d232000000000000000000000000000000000000005e070000000000000000000000008001140f0000000000003f0000000000000080000000000000000400000000000000010000000000000001000100000000000002000000000000010400000000000005000000000000007f00000000000000a99c0000000000000100010027bd7000ff3400000a0002cf400000000000000008001f00", @ANYRES32=r5, @ANYBLOB="0a001000010000000000000084000500ffffffff000000000000000000000000000004d43200000002000000fc02000000000000000000000000000001350000000195000000000001000000e54bda60ac1414bb000000000000000000000000000004d33c00000002000000fe8000000000000000000000000000aa0535000002034f0005000000ffffffffff00000010000a00000000002cbd70000100000008001d0000800000"], 0x268}}, 0x4040800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r6 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0x110, r0, 0x8000000) fsetxattr$security_capability(r4, &(0x7f0000000240), &(0x7f00000003c0)=@v3={0x3000000, [{0x561, 0x100}, {0x5, 0xca9}], 0xffffffffffffffff}, 0x18, 0x2) 15:43:26 executing program 3: io_uring_setup(0x62c, &(0x7f0000000280)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x200440, 0x0) r1 = creat(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, &(0x7f0000000100)) openat(r1, &(0x7f0000000240)='./file2\x00', 0x0, 0x180) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x602300, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0x0, 0x8054) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x521000, 0x60) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) [ 1113.636563] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65299 sclass=netlink_xfrm_socket pid=7566 comm=syz-executor.4 [ 1113.663130] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65299 sclass=netlink_xfrm_socket pid=7566 comm=syz-executor.4 15:43:26 executing program 7: r0 = io_uring_setup(0x6330, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/acpi', 0x10100, 0x90) io_uring_setup(0x6cd3, &(0x7f0000000080)={0x0, 0xd379, 0x463073a0da640e65, 0x2, 0x181, 0x0, r1}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:43:26 executing program 6: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x62c, &(0x7f0000000300)={0x0, 0x0, 0x20, 0x1000, 0x0, 0x0, r0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @broadcast}, &(0x7f0000000080)=0xc) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:43:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0x2c}}, 0x10) r2 = io_uring_setup(0x62c, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) 15:43:26 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, 0x0) 15:43:26 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = syz_io_uring_complete(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r1, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:43:26 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) 15:43:26 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x0, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:43:40 executing program 0: io_uring_setup(0x62c, &(0x7f0000000280)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:43:40 executing program 3: r0 = io_uring_setup(0x60c, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x202, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x10000000) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/167, 0xa7}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/100, 0x64}, {&(0x7f0000000400)=""/170, 0xaa}], 0x5) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:43:40 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r4, r1], 0x2) 15:43:40 executing program 7: r0 = io_uring_setup(0x5a30, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x0, 0x2b}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0x40000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x7, 0x8, 0x2010001, 0xfffffff9, 0xfffffffe}, 0xffffffffffffff0a) 15:43:40 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:43:40 executing program 5: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x9, 0xffffffffffffffe8, 0x0, 0x80000000, 0x2, 0x0, {0x0, r6}}, 0x80) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x80800, 0x1, {0x0, r6}}, 0x1f) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="db06b2a40300"]) r8 = io_uring_setup(0x66c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, r7}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = fcntl$dupfd(r0, 0x406, r3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0xffffca49}}, './file0\x00'}) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x4ad1, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r11, 0x80000) io_uring_register$IORING_REGISTER_FILES(r8, 0x13, &(0x7f0000000140)=[r12, r9], 0x2) 15:43:40 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x0, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:43:40 executing program 6: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x44d5, &(0x7f0000000040)={0x0, 0xe24b, 0x8, 0x2, 0x9c, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = io_uring_setup(0x62c, &(0x7f0000000280)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r4, r2], 0x2) 15:43:40 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:43:40 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) 15:43:40 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000080)={0x0, 0x73fd, 0x0, 0x1, 0x3c6}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r7}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r7}, 0x14) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r8, r1], 0x2) 15:43:40 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000040)={0x5, 0x6}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r5, r4], 0x2) 15:43:40 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x9, 0xffffffffffffffe8, 0x0, 0x80000000, 0x2, 0x0, {0x0, r7}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)}, {&(0x7f0000000180)=""/194, 0xc2}], 0x2, &(0x7f0000000340)=""/46, 0x2e}, 0x0, 0x10023, 0x1, {0x0, r7}}, 0x9) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:43:55 executing program 0: io_uring_setup(0x62c, &(0x7f0000000280)) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r1, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r0, 0xffffffffffffffff], 0x2) 15:43:55 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) clock_gettime(0x0, &(0x7f00000020c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f0000001780)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000001300)=""/143, 0x8f}, {&(0x7f00000013c0)=""/151, 0x97}, {&(0x7f0000001480)=""/227, 0xe3}, {&(0x7f0000001580)=""/193, 0xc1}, {&(0x7f0000001680)=""/245, 0xf5}], 0x8, &(0x7f0000001800)=""/165, 0xa5}, 0x7}, {{&(0x7f00000018c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001940)=""/138, 0x8a}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000001a00)=""/187, 0xbb}, {&(0x7f0000001ac0)=""/122, 0x7a}, {&(0x7f0000001b40)=""/61, 0x3d}, {&(0x7f0000001b80)=""/150, 0x96}, {&(0x7f0000001c40)=""/75, 0x4b}], 0x7, &(0x7f0000001d40)=""/84, 0x54}, 0xffffffff}, {{&(0x7f0000001dc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/183, 0xb7}], 0x1, &(0x7f0000001f40)=""/162, 0xa2}, 0x6}], 0x3, 0x10122, &(0x7f0000002100)={r3, r4+10000000}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) r7 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r7, 0x8000000) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000) io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0) r9 = accept4$inet6(r1, &(0x7f0000002140)={0xa, 0x0, 0x0, @private1}, &(0x7f0000002180)=0x1c, 0x800) r10 = io_uring_setup(0x2d09, &(0x7f00000021c0)={0x0, 0x9329, 0x1, 0x3, 0x151}) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002240), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000022c0)={0xf2f, 0x0, &(0x7f0000002280)=[r0, r5, r6, r7, r8, r9, r2, r10, r11, r0]}, 0xa) 15:43:55 executing program 3: alarm(0x1) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x596b, 0x2, 0xfffffffe, 0x20000, 0x0, r0}) alarm(0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000080)={0x1000, {0x13, 0x8000, 0x800, 0x1000, 0x80000001}}) 15:43:55 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r5 = socket$inet6(0xa, 0x80009, 0x3f) r6 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x14ed}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x10010, r7, 0x8000000) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r10, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r4, r5, r6, r0, r7, r10], 0xa) 15:43:55 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x0, &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:43:55 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) 15:43:55 executing program 7: clone3(&(0x7f0000000300)={0x8000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x24}, &(0x7f0000000180)=""/107, 0x6b, &(0x7f0000000200)=""/35, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) write(r0, &(0x7f0000000380)="30f7da5643cb01d4850a115aa090cc176f5e6f0d94dde1edf43f4683b7b19369460e8e9e2a3b1552fd8643d616010bccd3a7ef7f3d01844e997f09591387e852043b67444dd04eafc5df46cb263cfd57df2d13bf4fcaec6d7e5a8077c52de210964fb4ce29a67fdfeb2d5328dc248ccd2710e3e670fb03b22d4a4f741d8a96bc14348c105fd91327f400be2e776223", 0x8f) r1 = io_uring_setup(0x62c, &(0x7f0000000280)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:43:55 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000130001800000000000000000abf600f20200000000000000000000ffff0000001e0000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f079ce10d6ed896c57a71da48cb734bc482b414cb0d0c70e3046f0f99e4d583d914239cf76aad7f89eb1b20cea9f98a73035dbe9410ce0f663f6652092e7283e56219add13da1fb31790c26dbdea62976132c9e065dce0ff5b0f9f931f32715f6fc833c7cb848c596ffbf3c7954ffa925d0bd18140f0dd0d1522c61065d0410d53b4c2e2ee88178268ed134d94628ecc3c750d10ca73e2844a9b9d5aabff204320ac22590d257b49ec65e7fc94aa63ad6e97da483df42a25910193e5e97a8a8b872dfc4d54842fb8e512f5308441003345602e39d7bc8f58d087e34f4674cc73a9af4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x1}, {0x2}, 0x10, 0x0, 0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)="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", 0x173, 0x0, &(0x7f0000000540)={0x2, 0x9a, {0x0, 0xc, 0x33, "149576cd66210794bed9fb1687bcb7e18e23bdae124c6340ef3472943764ec8497c470df6b62e7dd6db88cc1da9596bb37eec7", 0x5a, "a303c055b65324ca97b32079ab2e116b030fa170291147adb2eb375ed6ebc2ecc1e5860b1be71f660c21dc13cf0f27b71b7381a7096b772f8e18f6f29cd107e8246bd9d55d984a11498209b684ff1dc192c0b894ac46dfe8e6fe"}, 0xae, "3923e8f26991c657a46ce8094b2945b27c1d0b420c1b63ca33e4aeabf93bef6bf5dca22fb58b265a362a167154f0b9874b96e60fafbea897654f1af1dcb9216c9764b6bdf7afdc5bffebf8fea98b4d93fdf2245fbcfc7adc587f48582ee87ad6ba309eda6dc3f548b31384ecbfcc078f7963fb1d29b4f61ae780cfd498a901f7803ee44d1fbeab9b42189749c0d3b315dd292879e70c29a606191da6cccfe6df744da842cf19589149e60c714f00"}, 0x154}) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0xd54, 0x5854, 0x1, &(0x7f0000000240)={[0xffffffffffff47b6]}, 0x8) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080), 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r5, r1], 0x2) 15:43:55 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) 15:43:55 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0xcd6a}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0', [{0x20, '/proc/tty/ldiscs\x00'}, {0x20, '\x9a-.}'}, {0x20, '/proc/tty/ldiscs\x00'}, {}, {0x20, '#/'}, {0x20, '/proc/tty/ldiscs\x00'}, {0x20, '\x00'}], 0xa, "99b0bb3ae9a2e0198eba38423832d965df171ebbc04404c82dd0a30558e43fb053eda553f2b60f652c2ed59b0eb382ee4c83454a2d95bd33452091126ec9b1dd8801e647d63738cf1277afc6b5dab707e8334f89667e0b6322e3c7895cc37707100f338aa352f4440937fa7568a8a5a5876ea8fc7dae9a020be8652407847d35a52b6bb77bf69948b8e5c1e6f26fee501fc658c5705e0dfdb3acc6e5697156012b696693c2320a1917ddaa6efbcc402e702efe07626af096f94a8d9b2cc1771ab6cc812973abafa08b57b127650b61a41499d55976a0be135c240641be83c79b0911b3cc6eb934748a767dc930"}, 0x139) 15:43:55 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001480)={'sit0\x00', &(0x7f0000001400)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x85, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x7800, 0x700, 0xfb}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001540)={'syztnl1\x00', &(0x7f00000014c0)={'ip6gre0\x00', r3, 0x4, 0x8a, 0x9, 0xd30f, 0x29, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x80, 0x522, 0x200}}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:43:55 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x1) r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) dup(r0) pipe(&(0x7f0000000040)) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000001c0)=""/103, &(0x7f0000000240)=0x67) fsetxattr$security_capability(r2, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x1ff, 0x401}]}, 0xc, 0x3) 15:43:55 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x10, r2, 0x10000000) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:43:55 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='ceph\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:43:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4f841", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21620028}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@newspdinfo={0x5c, 0x24, 0x10, 0x70bd25, 0x25dfdbff, 0x4, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0x8}}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0xfb}}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd0}, 0x4800) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r2 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x8}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x53, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r4}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1f, 0x0, 0x10, 0x1, 0x0, 0x8, 0xc0c02, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000180), 0xa}, 0x1, 0x1, 0x2, 0x3, 0x5, 0x6b3, 0x1000, 0x0, 0x6, 0x0, 0x20}, r4, 0x9, 0xffffffffffffffff, 0x1) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000300)=[r6, r5, r2, r7, r1], 0x5) 15:44:09 executing program 0: io_uring_setup(0x62c, &(0x7f0000000280)) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r1, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r0, 0xffffffffffffffff], 0x2) 15:44:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x4004084) r2 = io_uring_setup(0x62c, &(0x7f0000000280)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040)=0x8001, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000140)=[r5, r3], 0x2) 15:44:09 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000001340)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = signalfd4(r1, &(0x7f0000000040)={[0x1f]}, 0x8, 0x80000) r3 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001300)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000300)={{r6}, "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"}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r0, r0], 0x5) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x48000}, 0x0) dup3(r6, r8, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r7, r1], 0x2) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r9, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r10, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r10, r5, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17, 0x1}, 0x0) 15:44:09 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:44:09 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0xd8f0, 0xc, 0x2002, 0x351}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r0, r1], 0x2) 15:44:09 executing program 1: add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000300)={'fscrypt:', @auto=[0x64, 0x60, 0x39, 0x63, 0x0, 0x35, 0x33, 0x32, 0x34, 0x63, 0x33, 0x36, 0x33, 0x65, 0x61, 0x32]}, &(0x7f0000000340)={0x0, "2fe89e88b4e7d99510fa72b1d2e2c4c172fc245236bc682725d489064442964ae8ac0ac2eb7ba89882b0d79c5a6e0f6d99be944c03b54fa5752d4601db431677", 0x28}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:44:09 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000380)={0x0, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r8 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000e, 0x40010, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000) io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0) r9 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000e, 0x1010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r9, 0x8000000) io_uring_enter(r9, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x190b, &(0x7f0000000240)={0x0, 0x6fc3, 0x20, 0x2, 0x90, 0x0, r9}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r10, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x1, 0xc2b942a419a4354a}, 0x7) 15:44:09 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000240)=0x1, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000200), 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x6cba, &(0x7f0000000040)={0x0, 0xcb9d, 0x4, 0x0, 0x192}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:44:09 executing program 3: r0 = io_uring_setup(0x2a83, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffff}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = io_uring_setup(0x7790, &(0x7f0000000180)={0x0, 0x9432, 0x2, 0x2, 0x28b, 0x0, r0}) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) 15:44:09 executing program 1: add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:44:09 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x218200) r1 = io_uring_setup(0x62f, &(0x7f0000000280)={0x0, 0x4702, 0x20, 0x0, 0x42, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:44:09 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:44:09 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r3 = io_uring_setup(0x62c, &(0x7f0000000280)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001480)={0x0, 0xfffffffffffffffe, 0x1000, 0x8, @scatter={0x2, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/72, 0x48}, {&(0x7f0000000180)=""/201, 0xc9}]}, &(0x7f0000000340)="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", &(0x7f0000001340)=""/229, 0x10000, 0x24, 0xffffffffffffffff, &(0x7f0000001440)}) r6 = socket$nl_audit(0x10, 0x3, 0x9) readv(r6, &(0x7f0000002900)=[{&(0x7f0000001600)=""/205, 0xcd}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/166, 0xa6}, {&(0x7f00000027c0)=""/47, 0x2f}, {&(0x7f0000002800)=""/202, 0xca}], 0x5) syz_io_uring_setup(0x4b69, &(0x7f0000001500)={0x0, 0xdf2f, 0x1, 0x1, 0x243, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001580), &(0x7f00000015c0)) io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140)=[r5, r3], 0x2) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x1402) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:09 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:44:09 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) ftruncate(r0, 0x326) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040)="640f7b912b468a5f55e323c97c", 0xd, r2}, 0x68) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r1], 0x2) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x2, &(0x7f0000000400)=[{&(0x7f0000000340)="2ac499114b746759f607862d98846205e9d30672192d139a8f8e63cbdd8cca8ff9889e8fda19df6a87de97f3f0e3286974ff14c124825ac481f257dde174b4c8e3cd8c0b9c685ba8ee76448b75616651045dc7162cb14e2cf9073d7d839381ab80dcf7aabebf52c2ebb7281c858c73c1bafc4dee7c55541ee7e070b56f0303c88601882cfd718b3edb972e85a7982644d6f0bd404f85cee8", 0x98}], 0x1, 0x9, 0x1, {0x2, r5}}, 0xfffffc00) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x5ad3, &(0x7f0000000440)={0x0, 0x5942, 0x4, 0x1, 0x235}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000300)) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x6, 0x6, {0x0, r4}, 0x5, 0x6, 0x0, {0x0, r5, r6}}, 0x5746) 15:44:09 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = io_uring_setup(0x62d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) fallocate(r3, 0x4, 0x5, 0x37f) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x81800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f00000000c0)=[r5, r6, r2, r7, r3]}, 0x5) 15:44:10 executing program 0: io_uring_setup(0x62c, &(0x7f0000000280)) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r1, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r0, 0xffffffffffffffff], 0x2) 15:44:10 executing program 4: r0 = io_uring_setup(0x8a2, &(0x7f0000000040)={0x0, 0x2118, 0x2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:10 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:44:10 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) finit_module(r3, &(0x7f0000000040)='),}%:}#$}\x00', 0x3) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:10 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x800) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r6, 0x20, 0x0, 0x7f}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:10 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:44:10 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) readv(r3, &(0x7f00000023c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000080)=""/81, 0x51}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000002300)=""/125, 0x7d}, {&(0x7f0000002380)=""/48, 0x30}], 0x8) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) openat(r2, &(0x7f0000002440)='./file0\x00', 0xd4a03, 0x10) 15:44:10 executing program 1: add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x48, 0xfffffffffffffffd) 15:44:10 executing program 3: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x20004e4e, &(0x7f0000000080)={0x0, 0x9f59, 0x0, 0x0, 0x0, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x2010, r2, 0x9) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$CDROM_GET_MCN(r3, 0x5311, &(0x7f0000000240)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r4, r2], 0x2) 15:44:10 executing program 4: r0 = io_uring_setup(0x62d, &(0x7f0000000280)={0x0, 0x74cf, 0x4}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0xcffb80c0ed7b1183, @fd_index=0x5, 0x32c427e6, 0x0, 0x0, 0x1, 0x0, {0x1, r3}}, 0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r4, r1], 0x2) r5 = io_uring_setup(0x62c, &(0x7f0000000280)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140)=[0xffffffffffffffff, r6], 0x2) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2000, @fd_index=0x4, 0x5d, 0x7, 0x80000000, 0x18, 0x1, {0x2, r3}}, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) pread64(r8, &(0x7f0000000d00)=""/76, 0x4c, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x400, @mcast1, 0x50}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000240)="cb6b6e336445db36c5d6dbcdea20dd15d585", 0x12}, {&(0x7f0000000300)="4c371146bc59ebbc7c555ec605dc71345b4e12bffbcd1f535d9745a8620b4292ca5aa29a0073058a7413a25f81e55e32", 0x30}, {&(0x7f0000000340)="f3f5e14e6473ab13b683cdf66458c8dd9f3ae2e4cb04ee225bf668d27032d2769106348fe4443dc064492e08f9d6bc317ebabdadbba96c6218d043b0fc99e08e6712054c1f9a44f6f4459cac14fa235493d63dfa2dc1b3539f98f481e07e80", 0x5f}, {&(0x7f00000003c0)="bec997c0aae1a5dbd3d66c08ad05d18f22fe317bab896a251e3d218113e43fac4aa7f4329c71a2a9a938352ea8ce9eaf3a98e1885277076852d250163dd9acc415c9186609787e396fe62893ca74f38c4aa85aabd320ffb49628ceb71f06e45806dd2f6d144bfa45a20eb3613e4322f1fa57", 0x72}, {&(0x7f0000000440)="eaa908c4071c9e0e58993018f9c60bd2218198c2161ce1328899", 0x1a}, {&(0x7f0000000480)="c5b13bbf5f72f7aef6cf0cee678c05eccd3f57305d8f307388d538468b8041ee108ad5a10b5492f0e51309ab7266d4dce0e371688f09e7e5606233bef50787c1f9d28ead9bf641b8cdcc70dcd6d709199c06", 0x52}, {&(0x7f0000000500)="1dd593e16d222af114bec2a10d6f46a70a7d279bbfde8d1068008ae132ad8c2abd6b5738974bf58ccc3e2c74215534431cb92d864636cf8074f4ad08ffe4186c2e", 0x41}, {&(0x7f0000000580)="f9f23c629e6e5495002b7943fe0d94dc93674ee5e345886cca782bc6ff3f03b8b8d2b42afc854058dd42bafd089f00110e7e407bed1418e27457b3bca3232f60d25a8d95e8e4e9766f6456f4f758c782a111b34892e472c497af8c5333839aa6148515f9d82304a3d2b9db4d3c39d87360847c4b1569811f93ad29fae3064279bd6c8470c31287aafb52239bccc294b8640cfd1d674e2c0fed9fab27b351c33c1d255067cb5291583641376d6c7b1c41ae75f3b9", 0xb4}], 0x8, &(0x7f00000006c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0xffff}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x2e, 0x16, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x80000001, 0xfff]}}, @generic={0x0, 0x4c, "cc8ed05509829290db8a0b0eddfcc15b2371b2e2ba7e7124b2034277b5893e21b0567562fde9afde3dbe94875a4e68eb8eefdaf720bedfab228fffe7fb2522dd734a1f1d17c4bb811f8138a7"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0x6b, 0x3, [0x658, 0x6, 0x7, 0x61, 0x10001, 0x46, 0x1]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @dstopts={{0x120, 0x29, 0x37, {0x5e, 0x20, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x1ff, [0xfff, 0xff0000000000000, 0x800]}}, @hao={0xc9, 0x10, @mcast1}, @generic={0x6, 0xaf, "29d749b4ebba6d614b75be807fc4189c2a58c3d02f8297fd73370fcd0315eb8c595077a906552fa48f16d697e235abd3e5e006bd5c9b03de0297599661c173ac0bee2d7b5c64e6f4890f0fe49ccf2db00038e5136978f13ebec904e4838255f6005f7db1c02af17f731f4d8d9357beb6251fa31abe43c0abe0bf796e0d2a8d9c5f209e2a3c0746e16d8cf76326acbfa6f8ac48d52f12b9b7cd2e342665163a3d563802034ffe65513f8e94c4c44bf4"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x3, 0xb1, [0x1, 0x1]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0xc0, 0x29, 0x4, {0x11, 0x14, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x2, 0x387a, [0x8001, 0x5, 0x6]}}, @generic={0xf7, 0x27, "5938c16017b159153b44c1055e1707abf0c2d38a82645eb62b7c37866181e7606f97a48468eb56"}, @hao={0xc9, 0x10, @empty}, @pad1, @generic={0x8, 0x24, "3685357e39834b5ab048cfec1014869aa969e0a626087cd280f05367eaffb4c0e48dd060"}, @jumbo={0xc2, 0x4, 0x81}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @private1}]}}}], 0x2e0}}, {{&(0x7f00000009c0)={0xa, 0x4e22, 0x7fffffff, @loopback, 0x20}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000a00)="6e5f544bca95c60d1078f6df4bd12f60d9bd86ea132a1d87aa7eeb54eab0f33b8ffc012fda650b9cc4c5aa2af5828987ec1f10b674280102a8c9f418d2e575a269a7768f19ce57be2ac6fefe8224372400d0674b03b12fc10c0859a076721c56b7ae8a069037552cf634ddc001f37a50fed794fd181fc0c7f384394eee5162432e35467e4b314771df5fee6138c89a7b2a926015d9734efb8987b70d73ed9985987415acd1820c37456f19397f39dfef15358e1b63226b7433ccf9f818e1fab22832e662dc66854269b060f1fd3aeb5ea0ee7271baaef6e64b0f1aeecc7eb23cf937956b02", 0xe5}], 0x1, &(0x7f0000000b40)=[@tclass={{0x14, 0x29, 0x43, 0x81}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x62, 0xc, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x101, [0x1ff, 0x20]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x7f3, [0x8, 0x5, 0x80000000, 0x6, 0x534]}}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x1}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x32, 0x4, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}, @pad1, @ra={0x5, 0x2, 0x800}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}]}}}], 0xd0}}], 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x20, 0x36, 0x9, 0x0, 0x0, 0x0, 0x15004, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x40b08, 0xa777, 0x6, 0x9, 0x1d, 0x4000, 0x7, 0x0, 0x0, 0x0, 0x6d40}, 0xffffffffffffffff, 0x2, r4, 0x8) 15:44:10 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:10 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0xa604, 0x8, 0x0, 0x2c0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:25 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:44:25 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/1034], 0x40a) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = inotify_init1(0xc00) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r1, r0, r3, r1, r4, 0xffffffffffffffff, r5, r1], 0x8) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/snd_seq', 0x10141, 0x196) fcntl$setown(r6, 0x8, 0xffffffffffffffff) 15:44:25 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000040)={0x6, 0x1, 0x9, 0x0, @lba=0x4, 0x2}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:25 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:44:25 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x2}) syz_io_uring_setup(0x2f00, &(0x7f0000000040)={0x0, 0x136d, 0x2, 0x3, 0x13e, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) close(r0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:25 executing program 1: add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x48, 0xfffffffffffffffd) 15:44:25 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:25 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000040)=""/156, 0x9c}, {&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000001300)=""/104, 0x68}, {&(0x7f0000001380)=""/206, 0xce}, {&(0x7f0000001480)=""/92, 0x5c}, {&(0x7f0000001500)=""/20, 0x14}, {&(0x7f0000001540)=""/37, 0x25}], 0x8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:44:25 executing program 1: add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x48, 0xfffffffffffffffd) 15:44:25 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x902, 0x0) r5 = dup2(r1, r2) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000000c0)=[r4, r1, r5, r0, r0, r1], 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:25 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 15:44:25 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000160000042dbd7000fbdbdf250b00000040ac3a5e25d3adb38b15d8fcff3cd4a6a72fa6fc1ab34f512c137eae8abf6742d10a48928602b2b48fb6d3fc0c973fbc489c972771e41f90d119c78fa92608b13d14d34e5a78a37dea7666d5d1f753fa1b9341afc644858a2b30f60d05003d0000000000000000007000"/136], 0x8c}, 0x1, 0x0, 0x0, 0x855}, 0x4000000) r3 = open(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x40) r4 = io_uring_setup(0x628, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x400000, 0x2b9, 0x0, r3}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x503680, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r7 = openat$incfs(r6, &(0x7f0000000040)='.pending_reads\x00', 0x220a80, 0x10) io_uring_setup(0x79ae, &(0x7f00000000c0)={0x0, 0x8eb3, 0x20, 0x3, 0x2e7, 0x0, r7}) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x805c0, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x13, &(0x7f0000000140)=[r6, r5], 0x2) 15:44:25 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x13) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000000c0)={0x80000001, 0x0, &(0x7f0000000080)=[r4, r5, r2, r0]}, 0x4) 15:44:25 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0x10080) r1 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:44:25 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:44:25 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x48, 0xfffffffffffffffd) 15:44:38 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000180)={0x1, 0x85, "063099cbf181b0f39e9222340fb6d0f13fef8d4a1e6e5f8404f281d23fbb941f61c1e2918e02e1925280f15bbda15f9ec211a2875d3d1bd90026506f04b409b81132cd99c0d4435b9a51003cae8f46071d66b9262fd604882b57ada5153b426eabc1b135616a7235317e4b7e8566bb72c58b7ed9e640abe75004bf00e9a91f62c0a279e39f"}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) fcntl$dupfd(r2, 0x406, r4) r5 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(r5, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) 15:44:38 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:44:38 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:38 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = dup2(r2, 0xffffffffffffffff) r4 = pidfd_open(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000040)=[r4, r1], 0x2) 15:44:38 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x48, 0xfffffffffffffffd) 15:44:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:44:38 executing program 3: io_uring_setup(0x62c, &(0x7f0000000280)) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) dup(r1) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff00ab3316a2cbc97ad3d30000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1f00005b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734be482", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB="14c52f412f69eaf1ffffffffffffff00", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x40}]}, 0x2c}}, 0x4004805) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000080)=[r1, r0, r3], 0x3) 15:44:38 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x10041, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r0, r0, r2, r0], 0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x70b8, 0xb2ce, 0x1, &(0x7f0000000040)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) 15:44:38 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x8010, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:44:38 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r2, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r1], 0x2) 15:44:52 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x6380, 0x0, 0x0, 0x40000e}) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x1, 0x40) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000100)=0x6e) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r1, 0xffffffffffffffff, r2, r3, r0, r4, r7, 0xffffffffffffffff, r8, r0], 0xa) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20440, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r10, r9], 0x2) 15:44:52 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:44:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:44:52 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = syz_io_uring_setup(0x51b9, &(0x7f00000016c0)={0x0, 0xfdf2, 0x10, 0x1, 0x38b, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000001740)) readahead(r3, 0x80, 0x5) r4 = creat(&(0x7f0000000040)='./file0\x00', 0xb) writev(r4, &(0x7f0000001640)=[{&(0x7f0000000080)="c49f62c4e113ec9170bbdc8c31c4efabfe9278a8b272542dbfcf474b3ed693595558d10fa58d5d1cead61003b3a3941d723c2b", 0x33}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000001300)="338279f67785a1cf78530557d16747ee5e177422f88f6f70057dd33f87acd54e3fe2cdb3375719084f77658ed1ac807db99585403fe1793ae334963fa0e9ba1697e1b82f6b3eb0bb12c53bbffa501441538fd76b7a38fd62721e1eb07be30d3da698d5829cbad2de7a9b9409f9cfc37e3fba40afe6c4bfce5cefd6c57bc6fb42c9e5b422f3eec8429ae8771fea093567289c119558c12fad72006f4ad3b0c6", 0x9f}, {&(0x7f00000013c0)="5f24567b180fdff9e93659c49386e8844d1ed7c00c17636aaf3c8654bbcfc9b0c101984b9117b43a106c85a67a8d66fde3bef7e272f2e90d43449a0c09ee6b3e44ecfa4dd7c85e6567dffbacd88687ae673115e0a3959cf55d0cfbb647d19dc6e47a18d9de5f8250e8d2f4fd708e28931b54e5a1073d184c3e3734177201d63c42bad4f64ebf5d90a2089c40e3c210189f3f5640", 0x94}, {&(0x7f0000001480)="0fff3362d7c8e9370b09253242d22f81a12ab69d0cc93b614c7af81b5da0bddb113ef8978b89553dd45efd22280a2e8ee88fb97bb9f2455d538675e93fa0f9993a53232731a5dc2130c22e3c23665d5f0579178270854bda4e4306d15065e7b1d0f571dd04dfae1b2a0c9a928df4ac199fcd55e617aabd64370dc8098827c4f1782368626cece592570c497fc91e33af4947a7c21cec9f52922ace3bd9ab2598d6d9c7bf88151c871d27105a209d4049416d9f45fe03", 0xb6}, {&(0x7f0000001540)="0dc7a5c67be576768451306dcb1d701ddaeec8076679b6b01be365e498606b8acf83474712a9fec47fec9c5e69336be2eded1c73b3b17592c62a2085f84ae3dcbe5f6ead74a6a65401266971e261e7da52e53988d5a27ee09df4af6fd7efd53b583a733d7278921f3455509cacfdbedb43f17ebc2c1810e1690f5fde", 0x7c}, {&(0x7f00000015c0)="b1f6568d919810ac62281665500832272a07bdcd0348ef70ffc825d0a7af5f72a6700210b65e4a91f64419013c871c2c927daf44810c77aded90efc1f146323ef39587d390f066cb38504838f455515539baa983db66a16086821c3825ea2b9fd307f30e3e987b22850ec36dbd", 0x6d}], 0x8) 15:44:52 executing program 4: r0 = io_uring_setup(0x45fc, &(0x7f0000000180)={0x0, 0x400, 0x4, 0xffffffff}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:52 executing program 7: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = io_uring_setup(0x15a3, &(0x7f0000000280)={0x0, 0x8afa, 0x10, 0x0, 0x267, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r2, 0x200, 0x200, 0x4}) r5 = clone3(&(0x7f0000000a40)={0x40003000, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840), {0xb}, &(0x7f0000000f80)=""/141, 0x8d, &(0x7f0000000940)=""/176, &(0x7f0000000a00)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r3}}, 0x58) recvmsg$unix(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000ac0)=""/195, 0xc3}, {&(0x7f0000000bc0)=""/156, 0x9c}, {&(0x7f0000000c80)=""/65, 0x41}, {&(0x7f0000000d00)=""/35, 0x23}], 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0069ea7caf0daa6bb45a53cd94195bf36072ff2758ec925b59600c594dd2a60db371d77cd60f8e9ccdcefa28aeafacb0f220d2f7c4cc1ffe2a92731517dc0f690f748629ffa62f95c64199c49066bc5d803fe9acf75f4314d3b005eae2654e262c2a51708efcbad3f6", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}, 0x1) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, r7, 0x1000) r8 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x51fe4f7b, 0x681}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r9}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r13, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000880)="39bd8e2dbc7615d76a11f8a5cbbc0e7e61329fa2d6204d9c1ee3d7b85e5d39584cff7c5e43", 0x25}, {&(0x7f00000008c0)="544b5d149ff3004b6689a499887441f744d7edf42c996e7fc3f9acddc92ed29df296f9", 0x23}, {&(0x7f0000001040)="8dcf87057e7157712ceaecfc520e2a7aeeb14bdbc784c3789643844ecfe395a4c92c6509aacb6e15838067c8848094c753c0c669c3a44253a80557796d33877a7cb36b6108c949c5f675baf62a417f3be995e6a7b30483392f59f4389ce04204e10af9c50f4c753a8cc727595ffd2d834145b25de1c02139a864b9bc045fba4980f5ada4460681f80fc59e562b1fbd3ab99339c1ce7aa2400a85225a4a21c0f81dc731f40726638971367c302398a27820e03a42d5d5f700d67e015f242ba01543b81ec6b1fa425713ecf28db0837f5e600b38da83dfc42950aebad5022b0fe8b9473b845dcaaba86c6967cac43e376e14cc93c29bc947c7", 0xf8}, {&(0x7f0000000900)="acd6ae11f58810a27a83ab98acd7f34c64e6e7633cbce1", 0x17}, {&(0x7f0000001140)="0d82e6d21f737186cc950aa5ec037fbd5675e7c19513c08e366f0304ddd5c03c852c5f024fefd214640508547894a5b4eb3a05f2fddf2e6965b8653809bc408640f3494792e1bca8e0edc5aafbba293fd7129dbdc0b1a4c9da1f09c98e26b30864a2a9b5", 0x64}], 0x5}, 0x0, 0x8abb4d2a8b028460}, 0x0) fsync(r6) sendmsg$unix(r4, &(0x7f0000000f40)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000180)="4f1366d624f5ad564b95c58efe2ba91bc54c14fdce748c5b99c1baac783a18b82cca53a8a6dd25ba411e7a6f20bd69541d08cd29bddd06d7a69726b8d73708adfe753022657d2b3f5e60e8a2f595ea0b37bc06ab9f2d9efa42c096e9ea29", 0x5e}, {&(0x7f0000000200)="68233a23ee94465c6cdecd120916075b9de8c62b8f23251ec5dadd4281efab660dea7ad800fec113d2a3287a5e7d6095dcd9949bb6306bd0d512a0fa2826536d8b27f2189e675d384b6a2012db7e547e542ea9f4eba11833de5d5ee4116c14651d42edeed05b6b019be5b2ea17922d6094dce30929d370c15d18a7", 0x7b}, {&(0x7f0000000300)="b3bb357375f71544ac9e03d514a402757fe8cb3c0b", 0x15}, {&(0x7f0000000340)="4832e1fec274de637dfeaa210152eb10604d43bcd6114acd5d5c217328d858e44160ec7c98e1f4641ab015048878d66cb2489417fdc5fafb4443c33f7728fbd4a2994c3b8d68cc41b369f259b8ae87e664471103be17e77e2e79f9529f353b4ddc9273ee0be537f9cda90c07fc6e35504852e44e108079260212f175370c7b6906e8f830124b8a34e63b1946ccace9095b107493a9cc2fbab1519baf1a6c28cbca4d1cdf3cbaff6440aafe0ad990df834f6fdb40629392a5c667fb2599ad7cffb36eea73973a00dd100f994dd12466261f82394e0eaf05ad71c46221339d93e32403bb055c5cea", 0xe7}, {&(0x7f0000000440)="edfd1457aa61aa6a468e6e231ceab3b38bac2a501fe907e71d1cd2f6aab6d005500b05a758da3020fe8fa7f6d814fa69cf6eaff6e134fc88d36e87125d761dc2019d3f8608b778f0efccf9944c45f34c05d214d07adb047a6bff9f654c3a16a4173dd3c2beb0d1bc1ecf6373b17f1adef9fcab61d8f58d257f3d751a0a46ce41dfd07795e39298725802ed378e53be19bd09d671fa91e9090c90c64a983153cd669a1b143136aa24626851d0b5df52ee094203a9b2c0b0f3372d6ae1d5dcb82681be14989867292a35bed4d2a40a9cfdb0aaa9062fdac50f05c42b8b661920", 0xdf}, {&(0x7f0000000540)="498742c25c204cb885a1510739adf8607861488b44e45d1690909fb0137fafddf9349c54f6f6a7e47fbbd94a8029b88199ca8816317f", 0x36}, {&(0x7f0000000580)="974a70583edb7ec5c8b77d2253513e2fad75ff342434f900f149710d0e7e5d74b962ed7918abbd5d7f524c36976d86589ea58bd7b29fe4a769597878d60997e496aaff0128bf7bc92a14277a07507fa4a1dbcb22e2e12320b4a906e3b3bbe04442d72e7dc5fffb4e96713842d1e1564fc0e867a3f0b508a8cf7a24f285eef0e4e19ba903d31d4582ac", 0x89}, {&(0x7f0000000640)="7e200956c145dc75170ddec317e8d4d0f760f0d01d1169484547c1f18b901708c2f6f54452600356b27921f450e574fa9d1840a30ccb71b4a805ad18df57772caa5e1544a4b2692b12a5c242c5f148ab55505f0310d5374352f3c40c626aa49cb97707e2c04a5102af2ec94a210066a213d6e49e7e201af57e349112784ed7850cc0df7a1b3c10d85364742c42c86bec0cc7e8782f8b850ece71051e661868f4475d8c0d7966d4b2dc39df5bf0627750f19ccae34288f26ac4b0b33b51ca04e3bf6577bb01815db28cd5eacbe9131c0e982422764f58abd073", 0xd9}], 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c0000000000c9d861ad0c95cdccd1feab4a75e1dbf850690100000002000000", @ANYRES32=r5, @ANYRESHEX, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r1, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x4000800}, 0x20040000) 15:44:52 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x48, 0xfffffffffffffffd) 15:44:52 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket(0x23, 0x80000, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x17, 0x5, 0x74, 0x7, 0x4, @mcast1, @local, 0x1, 0x80, 0x4, 0x7f}}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:52 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) 15:44:52 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000040)=[r0, r1], 0x2) 15:44:52 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_enter(r0, 0x211a, 0x4154, 0x2, &(0x7f0000000140)={[0x2]}, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140), 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00a1070000000003000000804e9700380066000001299078ac1e0101ac1414aa4420ab100000000500000002000000070094c19dab000200000000030000000894040100"]}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000180)={@private1, r3}, 0x14) 15:44:52 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x3ca}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:44:52 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x254203, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r4], 0x2) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r6, r5], 0x2) openat(r5, &(0x7f0000000040)='./file0\x00', 0xf00, 0x67) 15:44:52 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) 15:44:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:44:52 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xfb, 0x8, 0x80, 0x8c, 0x0, 0x8179, 0x80082, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x2, 0x4}, 0x40322, 0xf92, 0x4, 0x3, 0x8, 0x1, 0x75fd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x8) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000300)={0x0, "02d4c778a25f4e6e5d7decf31e4621b7"}) 15:44:52 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000040)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:45:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x4004084) r2 = io_uring_setup(0x62c, &(0x7f0000000280)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000040)=0x8001, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000140)=[r5, r3], 0x2) 15:45:05 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:45:05 executing program 6: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x62c, &(0x7f0000000080)={0x0, 0xb9d6, 0x20, 0x2, 0x0, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:45:05 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) 15:45:05 executing program 5: io_uring_setup(0x62c, &(0x7f0000000380)={0x0, 0xc832, 0x4, 0x3, 0x7b}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000bc0000000d7a5e0000000000000d07ff00e20ca62e45a081ff6cc35805287e39c26e13a61ea99072473edd8b26c45f3baeab3f79b9a2ad0da3cf9da52d76a57886190a7b76e664202860d804b73fe7ef11e2fb1ef3bdd474539a6774e5a38aff4aedb0cc37b03e1a6ad0754b63e01a726edc0d24e316499c97f676bbcd577587"], 0x14}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x6, 0x7a, 0x0, 0x0, 0x0, 0x5e, 0xa8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x1, 0x4) read(r1, &(0x7f0000000080)=""/65, 0x41) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) fcntl$addseals(r5, 0x409, 0x8) 15:45:05 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000002600)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x101) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r9, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x4, 0xa00, 0x0, 0xfffffff7, 0x5}, 0x80000001) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x20010, r3, 0x10000000) syz_io_uring_submit(r10, r11, &(0x7f00000025c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r2, 0x0, &(0x7f0000002580)={&(0x7f0000000080)=@rc={0x1f, @any, 0xff}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000180)="c428b45fec37caf8263204b49e3a4bc53192b1922571fe43bfaebf1e5a96279618a71208ec4ea0c9798a3da060c9f58e19", 0xfffffffffffffeff}, {&(0x7f0000000240)="191768d75a2fe1676e24b2c1a6ed23b093", 0x11}, {&(0x7f0000000300)="d8e218f9f250e30428ddec8963986195eab45057e176cda1219c410cf864146d440914c155ce0d2f5d859b96c037115c5fad6af51bf5849c2ea26dc58ef059144b47d30aa3aa2ef89b1215a61795a9d1878bb73a0e3ab291f1", 0x59}, {&(0x7f0000000380)="b550648c3905000000000000", 0xc}, {&(0x7f00000003c0)="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", 0x1000}], 0x5, &(0x7f0000001440)=[{0x1010, 0x116, 0x7, "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"}, {0xc0, 0x0, 0x7, "60ae24f83ded8c7634876466638cdd9663043c7e75d456350d9c543ec7fcaa9972555ad65e55cfa44ace897dcd9f37b1487eb0d9002032bc2f13928b017163f3b31bc5ed3057b09aef9af23131702b03c7daba9ec9ad05a530024f5f2922ecf03160b9253f29456f34d7a3638f6b985ff2bd5cfe4c202df92330a098262ee64403f45891336ba42c8b088fc01ad592ddaff61768bd5303a4d68e33503c05204121c9a0bfba54a8b031f387f445ddaf"}, {0x68, 0x115, 0x1, "a998d6287f4fd58f698307d3d34c6b15a30dd7287b683708cfb65bf6a8713ae18fa41ab1fc484a1458386c76cb85ca72736358a11a7bff8eb889fc5d02078f94542341b3a00d136841f18ba850b28064c715"}], 0x1138}, 0x0, 0x20048000, 0x1}, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4010, r3, 0x0) 15:45:05 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x59}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = accept$inet(r2, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:45:05 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = io_uring_setup(0x62c, &(0x7f0000000280)) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/204, 0xcc}], 0x4, 0x9, 0x770) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff1200000000000000000000ffff000200000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001940), 0x100, 0x0) r7 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r7, 0x8000000) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_submit(r3, 0x6, &(0x7f0000001b40)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, r1, &(0x7f0000000500)="744a9feb4c6ee4b0e4ccb5d34b679d145f31b5c703b62a7102240c997da4913e37a1e6b43fd364bdbdc6d06e2ca4d0e221c3ba1fcf12ba098c25fc46e8d098bc939902271f2538dec8bbbaf193f4e9ae4b58d2fe3a47e6a306506cca1e26", 0x5e, 0xcdad, 0x0, 0x1}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f00000005c0)="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", 0xfb, 0x8}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x8, 0x1, r4, &(0x7f00000017c0), 0x0, 0x200, 0x0, 0x1}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x2, 0xff, 0xffffffffffffffff, &(0x7f0000001840)="94412d878afb1f4b0ccbd44615596ab775bf3a54083187992d5eefa598a02d5b943361eb3a80e0e59f2c4556ee6c541920f6aab4d8beb717d84efdde7047b973755d4d77fff9560da7b3cfd6e9b9594f8f1f0f0c756da40a933c2d22782bd487d053f46be658316bf0010889012058fc0abc13fe24b17cfdeda3ad3f9dd643380c373920244ea211bdb707bceadcec5ab92642213fa0c0bd78ad9b3b8c540b0d", 0xa0, 0x3, 0x0, 0x3}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x7, r6, &(0x7f0000001980)="f17776d210f64249fa90c160f004bd40a90e8fb6864b83a187d049970ef6400a97b33889d586f9", 0x27, 0xfffffffeffffffff, 0x0, 0x3}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x1ff, r7, &(0x7f0000001a00)="fe23c09dfbc2210025bcf6fe3bc8aa1918c9f0d3f9d9a12bfc81d5e511612935fa8e9b122ee820715ecc5852ecb9ff11aac39490078c186410c4b6faa6214b3ab79bd478b354da9a0d296f3713b1dec4ae20f8cdef6ff9a58ae1d505500a0a58d44fcac5743f99898772b8fe173f7ce1dfe9bf6f217e1d38c0a81e55f7f96d3c2fd58b5b54140f78e82e78b351d40020a7c1f07c0d7466f1bdf1434378ad1072e982886e67d6dde87ea8e9fe3bdb1ba18875fc5538d08b2818cadcaf1b1162ae27d75c96538c1b6fcf8f3acf121fc9371030c9500aee8fec5c9efcac40d3b020fe9232cda92c39a85a3ad69dec82c02508217081", 0xf4, 0x7}]) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140)=[r9, r8], 0x2) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000040)="f69d682b539eefa8dd8be111a80983eb4514dc024ed2995165d3e274868955e33e8d7afaa8c97d1de768b7a9e5e720b0b2ab2feeda7e191c6bfda7d82abe9b035dd159845086596513bafd78871df6221ada042ae5816d299b75068c589d19fd66284aeba95028b1778e266fcbec64caf937fc57d1f759121204e8a6d91d273602863bac27bceaa02e1177ee29423d89aaa34dad4ee85412605a8aff5d052809", 0xa0, 0x2, 0x0, 0x1, r9}, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:45:05 executing program 2: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)="3082", 0x2, 0xfffffffffffffffb) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:45:05 executing program 1: r0 = io_uring_setup(0x438, &(0x7f0000000180)={0x0, 0xe6db, 0x2}) io_uring_enter(r0, 0x7803, 0xe9a0, 0x3, &(0x7f0000000040)={[0xffffffff7fffffff]}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) io_uring_enter(r2, 0x7a3d, 0x9d16, 0x2, &(0x7f0000000080)={[0xbb]}, 0x8) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:45:05 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file0\x00'}) r3 = accept4(0xffffffffffffffff, &(0x7f0000001640)=@qipcrtr, &(0x7f00000016c0)=0x80, 0x800) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001700)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001740)=0x1c, 0x80000) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001780)=[r2, r0, r0, r0, r3, r4, r0], 0x7) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r6, r5], 0x2) 15:45:06 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4000}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x80}, 0x2002) syz_open_procfs(r3, &(0x7f0000000240)='ns\x00') syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_script(r7, &(0x7f0000000380)={'#! ', './file0', [{0x20, 'ns\x00'}, {}, {0x20, '\x00'}, {0x20, '-.'}, {0x20, 'ns\x00'}, {0x20, '/proc/tty/ldiscs\x00'}], 0xa, "cb2f5d241ae14bd4641c2e78c27122cf5bb00db5aa716422d0473ba57c599f764e4c10c1e817b741eb8e68c32053305aa4f8172085dc9fba1a9c4dda435879350a2eda73c68599091afcde6c52e848308d2b94828511bbef5198bbc617558655ca4a781890c06366da420c7f3d062c6c12d7d6a6c8c11bb9343318aa467264e7bdb73db52b81b6339011e38e798e0868c72c10e0c240f3e692fc4200161ea02e37ddf4b1b0cc19ffe116e0a8a6efde58f19ae3d30aa2c85f693a81e6025740038871e53706b7"}, 0xf1) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) r8 = syz_io_uring_complete(0x0) r9 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r9, 0x8000000) io_uring_enter(r9, 0x58ab, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, r7, &(0x7f00000000c0)={r8, r9}) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) 15:45:06 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller1\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000300)={0x100, 0x9, 0x5, 0x401, 0xa, [{0xf10, 0xba, 0x0, '\x00', 0x1}, {0x96de, 0x200, 0x3660, '\x00', 0x1000}, {0x81, 0x2, 0x100000000, '\x00', 0x100}, {0xffff, 0x0, 0xfffffffffffffff9, '\x00', 0x802}, {0x8, 0x0, 0x7d, '\x00', 0x4}, {0x1, 0x2deb, 0xc83, '\x00', 0x106}, {0x6, 0xd193, 0x81, '\x00', 0x2809}, {0x3f, 0x6, 0xf1, '\x00', 0x1280}, {0x101, 0x0, 0x3}, {0x6, 0x400000000, 0x4, '\x00', 0x280}]}) 15:45:06 executing program 4: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460, 0x27d0301e32bc05f4}, 0x0) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x100010, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r9 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0xe84c1, 0x80) syz_io_uring_submit(r1, r6, &(0x7f0000000980)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10000) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/132, 0x84}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000540)=""/193, 0xc1}], 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e030000d732352cc3d6dacc75166ad5ad361e83ccfdf8835827727cfe00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000740)=""/30, 0x1e}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x3, 0x40, &(0x7f0000000940)={r10, r11+60000000}) r12 = io_uring_setup(0x23af, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2}) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r12, 0x13, &(0x7f0000000140)=[r14, r13], 0x2) 15:45:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000001600)="f5fd10bc1db9c65d7a1ec40b45ac4ba0b692071ed4698a0f40670a892a0f5fd4defcc582dadb047ab90cfb3e731fd7b40a8c03b46d707f0dd8ca9c6cada669ca467831e01d351edcc6650b875d8278b2e89590de30b66fcaa1446485e593e6b90444b3379f6a08717d0a689e6cc63ddc8130ef7e", 0x74, 0x40, 0x1}, 0x2) 15:45:21 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3, 0x3}}, './file0\x00'}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x319802, 0x0) r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r5, r1], 0x2) 15:45:21 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:45:21 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x5, 0x2, 0x502}}) r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r1, 0xffffffffffffffff], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nf_conntrack_irc', 0x10000, 0x80) socket$inet(0x2, 0x4, 0x7293) 15:45:21 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) syz_io_uring_setup(0x6030, &(0x7f0000000040)={0x0, 0xfce0, 0x1, 0x2, 0x2c5, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) r4 = io_uring_setup(0x62c, &(0x7f0000000280)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x13, &(0x7f0000000140)=[r6, r5], 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000dc0200000000000000000000ffff0000000000000000f4ff0900403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4a8673b47e866ee7f8489540593cfbec5d5ae290709916eaed5d41e3177c496d7bb628dbbb8a638795edb99393eb6fa11fcd824b7b887808b42a4becec507f7d6ddb4c80b90082d03fc8111b11841f49a42e6644cd1be22ac5161d9c64e1bea0383fbb4b253c6a109012568", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r5, &(0x7f00000001c0)={0x1}, r7}, 0x8000) 15:45:21 executing program 2: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x561800, 0x109) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x10000}, 0x0, 0xa1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) 15:45:21 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:45:21 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:45:35 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:45:35 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:45:35 executing program 6: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0x6ecd, &(0x7f0000000280)={0x0, 0x220, 0x1, 0x0, 0x178}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) r4 = accept4(r1, &(0x7f00000004c0)=@qipcrtr, &(0x7f0000000540)=0x80, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000300)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2000, @fd_index=0x1, 0x2, 0x5, 0x3, 0x0, 0x1, {0x1, r7}}, 0x1000) fchown(r3, r5, r6) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8, {0xdc76}}, './file0\x00'}) fsmount(r9, 0x1, 0x8) fallocate(0xffffffffffffffff, 0x3e, 0x81, 0x9) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r11 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r11, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r11, 0x8000000) io_uring_enter(r11, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000140)=[r10, r8], 0x2) 15:45:35 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0xfeec}) fsmount(0xffffffffffffffff, 0x0, 0x70) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:45:35 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x4f, 0xef8f, 0x2, &(0x7f0000000040)={[0x1]}, 0x8) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:45:35 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 1) 15:45:35 executing program 2: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x561800, 0x109) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x10000}, 0x0, 0xa1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) 15:45:35 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r2, &(0x7f00000002c0)=ANY=[], 0x10) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r3, &(0x7f0000000280), r3}, 0x0) fallocate(r2, 0x3, 0x900500, 0x30000000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) fcntl$setflags(r4, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r5, r1], 0x2) [ 1242.983657] FAULT_INJECTION: forcing a failure. [ 1242.983657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1242.984648] CPU: 1 PID: 8072 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1242.985204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1242.985893] Call Trace: [ 1242.986129] dump_stack+0x107/0x167 15:45:35 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) write$9p(r2, &(0x7f00000001c0)="c4de401067f50b1e58c4b6af1ab76cf059426d8d7b09de68b07d621a11b3d78b53bed0cf560c201b3d3af52c0be89fd6e9ee8556c89e8a5d6f53a26ea18fdc8c5913b0c7aea41a94299e1ead3d7e8398e5e56d0acf3d85cfd4b966c54464abc250ec17ecb03c4f3689f8932f4fa456073fbe8a4b4e3c41d234ea62f0a7fcf6d01d14e1f3ef1fe5bda2f01a1de2", 0x8d) r3 = io_uring_setup(0x62c, &(0x7f0000000280)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x5, 0x4007, @fd=r4, 0x3, &(0x7f0000000040)="73ac52a851a80922b28db6eb78c2fa0c84e677e859bde2ac3d0332a5a6b32e964fa76664b7fc4eb698a8615007dc4c308e8e984c76f6702889e2ebe121b6c6eb041ed125aef956583ac4e97cfaaa8b37126ba75510a15c7eaf454f1fce08430b3b7ea51fcbf4c02e8123a75ea3436e3ca403c6f908016ed119030fb8e5bdef8c039b83d0b910b5ce825a37aa17d603a343d56c206e8077bf", 0x98, 0x12, 0x1}, 0x4) io_uring_register$IORING_REGISTER_FILES(r3, 0x13, &(0x7f0000000140)=[r5, r4], 0x2) [ 1242.986452] should_fail.cold+0x5/0xa [ 1242.986468] strncpy_from_user+0x34/0x470 [ 1242.986482] __do_sys_add_key+0xa9/0x430 [ 1242.986492] ? __do_sys_request_key+0x3b0/0x3b0 [ 1242.986502] ? ksys_write+0x1a9/0x260 [ 1242.986513] ? __ia32_sys_read+0xb0/0xb0 [ 1242.986527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1242.986537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1242.986550] do_syscall_64+0x33/0x40 [ 1242.986560] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1242.986567] RIP: 0033:0x7ffa6a883b19 [ 1242.986577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 15:45:35 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x4, @none, 0x400, 0x1}, 0xe) [ 1242.986582] RSP: 002b:00007ffa67df9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1242.986594] RAX: ffffffffffffffda RBX: 00007ffa6a996f60 RCX: 00007ffa6a883b19 [ 1242.986599] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 1242.986605] RBP: 00007ffa67df91d0 R08: fffffffffffffffd R09: 0000000000000000 [ 1242.986611] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000001 [ 1242.986617] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 15:45:35 executing program 3: syz_open_dev$rtc(&(0x7f0000000040), 0x1f, 0xc0400) r0 = io_uring_setup(0x62c, &(0x7f0000000380)={0x0, 0x0, 0x2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000080)) fsync(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r1], 0x2) r4 = io_uring_setup(0x62c, &(0x7f0000000280)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x13, &(0x7f0000000140)=[r6, r5], 0x2) accept$unix(r5, &(0x7f0000000180), &(0x7f00000000c0)=0x6e) r7 = openat2(r6, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x40, 0x1}, 0x18) renameat(r5, &(0x7f0000000200)='./file0\x00', r7, &(0x7f0000000340)='./file0\x00') 15:45:35 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 2) [ 1243.075405] FAULT_INJECTION: forcing a failure. [ 1243.075405] name failslab, interval 1, probability 0, space 0, times 1 [ 1243.076392] CPU: 1 PID: 8089 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1243.076967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.077653] Call Trace: [ 1243.077880] dump_stack+0x107/0x167 [ 1243.078195] should_fail.cold+0x5/0xa [ 1243.078532] should_failslab+0x5/0x20 [ 1243.078858] __kmalloc_track_caller+0x79/0x370 [ 1243.079246] ? strndup_user+0x74/0xe0 [ 1243.079563] ? __check_object_size+0xae/0x440 [ 1243.079937] memdup_user+0x22/0xd0 [ 1243.080235] strndup_user+0x74/0xe0 [ 1243.080538] __do_sys_add_key+0x131/0x430 [ 1243.080877] ? __do_sys_request_key+0x3b0/0x3b0 [ 1243.081255] ? ksys_write+0x1a9/0x260 [ 1243.081565] ? __ia32_sys_read+0xb0/0xb0 [ 1243.081901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.082330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.082761] do_syscall_64+0x33/0x40 [ 1243.083067] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1243.083485] RIP: 0033:0x7ffa6a883b19 [ 1243.083788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.085277] RSP: 002b:00007ffa67df9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1243.085902] RAX: ffffffffffffffda RBX: 00007ffa6a996f60 RCX: 00007ffa6a883b19 [ 1243.086487] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 1243.087070] RBP: 00007ffa67df91d0 R08: fffffffffffffffd R09: 0000000000000000 [ 1243.087650] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000001 [ 1243.088227] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 15:45:35 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x91}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:45:35 executing program 2: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x561800, 0x109) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x10000}, 0x0, 0xa1, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) 15:45:35 executing program 7: fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) dup2(0xffffffffffffffff, r0) io_uring_setup(0x62c, &(0x7f0000000280)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x2) r3 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xff, 0x1, 0x80, 0x20, 0x0, 0x0, 0xa6bf15c0de7b40d2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x7f1f}, 0xc229, 0x4, 0x1, 0xb, 0x4220, 0x7ff, 0x1, 0x0, 0xfffffffc, 0x0, 0x10001}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x6) pidfd_getfd(r2, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r5 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140)=[r1, r4], 0x2) 15:45:35 executing program 6: r0 = io_uring_setup(0x63c, &(0x7f0000000280)={0x0, 0x0, 0x2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) [ 1257.781659] FAULT_INJECTION: forcing a failure. [ 1257.781659] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.782799] CPU: 1 PID: 8122 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1257.783463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.784274] Call Trace: [ 1257.784543] dump_stack+0x107/0x167 [ 1257.784903] should_fail.cold+0x5/0xa [ 1257.785280] ? create_object.isra.0+0x3a/0xa20 [ 1257.785725] should_failslab+0x5/0x20 [ 1257.786099] kmem_cache_alloc+0x5b/0x310 [ 1257.786498] create_object.isra.0+0x3a/0xa20 [ 1257.786932] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1257.787427] __kmalloc_track_caller+0x177/0x370 [ 1257.787883] ? strndup_user+0x74/0xe0 [ 1257.788252] ? __check_object_size+0xae/0x440 [ 1257.788691] memdup_user+0x22/0xd0 [ 1257.789039] strndup_user+0x74/0xe0 [ 1257.789396] __do_sys_add_key+0x131/0x430 [ 1257.789796] ? __do_sys_request_key+0x3b0/0x3b0 15:45:50 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:45:50 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2360, 0x6018, 0x1, &(0x7f0000000040)={[0x8000]}, 0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r1], 0x2) 15:45:50 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 15:45:50 executing program 6: r0 = io_uring_setup(0x2bcb, &(0x7f0000000040)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:45:50 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 3) 15:45:50 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) dup3(r2, r0, 0x80000) 15:45:50 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x2) r4 = syz_open_dev$vcsn(&(0x7f0000000400), 0x0, 0x113001) pwrite64(r4, &(0x7f0000000440)="85879391d13c62428494f9a3be2604b91369d8bf8635f920aa2e942e1332bada6a85d1cb81b488101f407bb9399b4fef52e6", 0x32, 0x4) r5 = io_uring_setup(0x62c, &(0x7f0000000280)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000007f00000001010000000000000000000000000000e50c000000000000350000000000000000000000000000000000000000000000000000000000000007000000030000000900000000000000ff03000000000000ff07000000000000ff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff00"/576]) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140)=[r7, r6], 0x2) r8 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x7, 0x0, 0xfb, 0xff, 0x0, 0x1000, 0x840, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x50000, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x20110, 0x9, 0xf64, 0x3, 0x5, 0xfff, 0x289, 0x0, 0x7}, 0x0, 0x2, r6, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x791640, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xd0, 0x0, &(0x7f0000000a40)=[@acquire_done={0x40106309, 0x1}, @clear_death, @free_buffer={0x40086303, r3}, @decrefs={0x40046307, 0x2}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000980)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000940)=""/50, 0x32, 0x0, 0x2c}, @fda={0x66646185, 0x3, 0x2, 0x31}}, &(0x7f0000000a00)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r9}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/80, 0x50, 0x1, 0x14}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x23, 0x0, &(0x7f0000000240)="c08300f7279979285f7638111bf13ff2dca44c2190f93b1c41f3677a26477def797584"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000008c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYBLOB="01040000000000002e2f66696c653000"]) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x0, 0x0) open_by_handle_at(r11, &(0x7f0000000800)=@raw={0xb4, 0x2, {"c4328105a3dfbc75e1b173053005c6cd76c5453e845bf0bef59676d6d696ba7f5f215c456ae9c73031cdf86c8cf5df82cec499036af4ff62db7352b8b779f8e9e33e638130f20068e5b1464a7c0a9ec65c4337fe7207833703811d6d459cc5ee9b343c217defef4222f1030ffd362e9a16cdeadf76f4d0ea0f828ef3f547d51bdcb87f61c7cadddfb496c87a38c9f2dcd76d0b2cc8b48512072b9af433eaefb88323a4a6ae0ba9d448a9bc6404eb1fb8bafa31"}}, 0x800) 15:45:50 executing program 4: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x2010, r0, 0x0) syz_io_uring_setup(0x720b, &(0x7f0000000080)={0x0, 0x65e4, 0x1, 0x1, 0x1ff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000380)=0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) r4 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x10000000}) syz_io_uring_submit(0x0, r2, &(0x7f0000006940)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd, 0x0, 0x0, 0x10001, 0x8}, 0x1f) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000051740)={0x0, 0x0, "175278fb1ba52a9862f527f0371ce129f7d26813375f3a3318f2cd29fa82a9b73c1ae19a66b311378f9f961f5c2d8a7234f05b72c6d652ff4fa2c6707bd064824d7077fc5417a846e772d1e0ea0d3f4f00926d45d41efd551705a43b72a16c17d236c40c7a47546dbf28fce8c4bf2bf4c496435de9939003cee4d511ef2cd7de5ee03ca7720fdac77c57fb69f901ef3f7add14fc4d1edbca2c4ae0076b1b359eaf9a8e16dec9933f9cfc6dbaa71eb6e4d75c3ff8a8dda46328641240123835e7c94302b52095e22818582affd377ffcea7735d04abf6dfa15d7de7f802dc5801b167a21ed596384262534f49eef51f733cf5659556578884e451086cc32fb505", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r8, r7, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052740)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0xfa, "3c4735369ba040"}) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x13, &(0x7f0000000140)=[r14, r13], 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r14, 0x0, r3, 0x2, 0x0, 0x1}, 0x6) r15 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x13, &(0x7f0000000140)=[r16, r15], 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r16, 0x8008f513, &(0x7f0000000300)) [ 1257.790256] ? ksys_write+0x1a9/0x260 [ 1257.790269] ? __ia32_sys_read+0xb0/0xb0 [ 1257.790285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.790297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.790312] do_syscall_64+0x33/0x40 [ 1257.790324] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1257.790332] RIP: 0033:0x7ffa6a883b19 [ 1257.790342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.790349] RSP: 002b:00007ffa67df9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1257.790362] RAX: ffffffffffffffda RBX: 00007ffa6a996f60 RCX: 00007ffa6a883b19 [ 1257.790368] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 15:45:50 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 4) [ 1257.790375] RBP: 00007ffa67df91d0 R08: fffffffffffffffd R09: 0000000000000000 [ 1257.790381] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000001 [ 1257.790388] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 [ 1257.844561] FAULT_INJECTION: forcing a failure. [ 1257.844561] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.846181] CPU: 1 PID: 8114 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1257.846917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.847707] Call Trace: [ 1257.847968] dump_stack+0x107/0x167 [ 1257.848332] should_fail.cold+0x5/0xa [ 1257.848349] should_failslab+0x5/0x20 15:45:50 executing program 3: sysinfo(&(0x7f00000001c0)=""/127) r0 = io_uring_setup(0x62c, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000bf1445a93734b28220950cf30e8077", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00', 0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x3f}}, './file0\x00'}) write$binfmt_elf64(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x9, 0xff, 0xc8, 0x2, 0x3, 0x9, 0x36a, 0x40, 0x6a, 0x3, 0x6, 0x38, 0x1, 0x5a, 0x8, 0xfff}, [{0x4, 0x22, 0x9, 0xfec, 0x1, 0x401, 0x1000, 0x2}], "ff0649241015469d9564a0b8fcf3593f46a27c60d01ec20ba733ddf1a17aba3b2fbc452e8d322860e5fb787814e42500fdd148dc88e7f2d5beceaa5308b63d46fb9aa1d2720dd45f7f3390d064ed7f8b3c4432e1b366c7bb2268c6f929d751e6faa84cd7b869ffa9a02d9a655630a7d214e33b01fd6eafbbcbde2342797a3cb947b671e69850288622ad513f597ee61bfb412f25cc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x70d) [ 1257.848361] kmem_cache_alloc_bulk+0x4b/0x320 [ 1257.848377] io_submit_sqes+0x6f76/0x85c0 [ 1257.848389] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1257.848415] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1257.848426] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1257.848441] ? lock_downgrade+0x6d0/0x6d0 [ 1257.848451] ? find_held_lock+0x2c/0x110 [ 1257.848465] ? io_submit_sqes+0x85c0/0x85c0 [ 1257.848482] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1257.848496] ? wait_for_completion_io+0x270/0x270 15:45:50 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0xc004) fcntl$setstatus(r1, 0x4, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) [ 1257.848510] ? rcu_read_lock_any_held+0x75/0xa0 [ 1257.848520] ? vfs_write+0x354/0xa70 [ 1257.848531] ? fput_many+0x2f/0x1a0 [ 1257.848543] ? ksys_write+0x1a9/0x260 [ 1257.848555] ? __ia32_sys_read+0xb0/0xb0 [ 1257.848569] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 15:45:50 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = io_uring_setup(0x62c, &(0x7f0000000280)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x13, &(0x7f0000000140)=[r5, r4], 0x2) execveat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='&+%:$!-\x00', &(0x7f0000000180)='/dev/vcsa\x00'], &(0x7f0000000340)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000300)=',^\x00'], 0x1000) [ 1257.848580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.848594] do_syscall_64+0x33/0x40 [ 1257.848605] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1257.848612] RIP: 0033:0x7f991b285b19 [ 1257.848623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 15:45:50 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 1257.848629] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1257.848642] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1257.848648] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1257.848655] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1257.848661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.848667] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:45:50 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 5) [ 1257.889874] FAULT_INJECTION: forcing a failure. [ 1257.889874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.889900] CPU: 0 PID: 8140 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1257.889910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.889923] Call Trace: [ 1257.889946] dump_stack+0x107/0x167 [ 1257.889967] should_fail.cold+0x5/0xa [ 1257.889995] _copy_from_user+0x2e/0x1b0 [ 1257.890020] memdup_user+0x65/0xd0 [ 1257.890040] strndup_user+0x74/0xe0 [ 1257.890058] __do_sys_add_key+0x131/0x430 [ 1257.890075] ? __do_sys_request_key+0x3b0/0x3b0 [ 1257.890096] ? ksys_write+0x1a9/0x260 [ 1257.890120] ? __ia32_sys_read+0xb0/0xb0 [ 1257.890148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.890169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.890199] do_syscall_64+0x33/0x40 15:45:50 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 1257.890219] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1257.890232] RIP: 0033:0x7ffa6a883b19 [ 1257.890253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.890266] RSP: 002b:00007ffa67df9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1257.890289] RAX: ffffffffffffffda RBX: 00007ffa6a996f60 RCX: 00007ffa6a883b19 [ 1257.890300] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 1257.890312] RBP: 00007ffa67df91d0 R08: fffffffffffffffd R09: 0000000000000000 [ 1257.890323] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000001 [ 1257.890338] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 [ 1257.949533] FAULT_INJECTION: forcing a failure. [ 1257.949533] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.949553] CPU: 1 PID: 8148 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1257.949560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.949564] Call Trace: [ 1257.949581] dump_stack+0x107/0x167 [ 1257.949593] should_fail.cold+0x5/0xa [ 1257.949609] ? create_object.isra.0+0x3a/0xa20 [ 1257.949623] should_failslab+0x5/0x20 [ 1257.949635] kmem_cache_alloc+0x5b/0x310 15:45:50 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 6) [ 1257.949649] create_object.isra.0+0x3a/0xa20 [ 1257.949665] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1257.949679] kmem_cache_alloc_bulk+0x168/0x320 [ 1257.949696] io_submit_sqes+0x6f76/0x85c0 [ 1257.949707] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1257.949732] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1257.949742] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1257.949759] ? lock_downgrade+0x6d0/0x6d0 [ 1257.949771] ? find_held_lock+0x2c/0x110 [ 1257.949797] ? io_submit_sqes+0x85c0/0x85c0 [ 1257.949822] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1257.949844] ? wait_for_completion_io+0x270/0x270 [ 1257.949866] ? rcu_read_lock_any_held+0x75/0xa0 [ 1257.949882] ? vfs_write+0x354/0xa70 [ 1257.949897] ? fput_many+0x2f/0x1a0 [ 1257.949918] ? ksys_write+0x1a9/0x260 [ 1257.949937] ? __ia32_sys_read+0xb0/0xb0 [ 1257.949954] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.949971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.949991] do_syscall_64+0x33/0x40 [ 1257.950004] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1257.950013] RIP: 0033:0x7f991b285b19 [ 1257.950028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.950038] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1257.950053] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1257.950062] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1257.950070] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1257.950077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.950086] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1257.979410] FAULT_INJECTION: forcing a failure. [ 1257.979410] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1257.979430] CPU: 0 PID: 8151 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1257.979439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.979445] Call Trace: [ 1257.979466] dump_stack+0x107/0x167 [ 1257.979490] should_fail.cold+0x5/0xa [ 1257.979515] __alloc_pages_nodemask+0x182/0x600 [ 1257.979532] ? lock_acquire+0x197/0x470 [ 1257.979548] ? find_held_lock+0x2c/0x110 [ 1257.979566] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1257.979601] kmalloc_large_node+0x55/0x1a0 [ 1257.979623] __kmalloc_node+0x30d/0x420 [ 1257.979650] kvmalloc_node+0xc0/0x170 [ 1257.979669] __do_sys_add_key+0x311/0x430 [ 1257.979685] ? __do_sys_request_key+0x3b0/0x3b0 [ 1257.979703] ? ksys_write+0x1a9/0x260 [ 1257.979722] ? __ia32_sys_read+0xb0/0xb0 [ 1257.979744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.979761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.979783] do_syscall_64+0x33/0x40 [ 1257.979799] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1257.979811] RIP: 0033:0x7ffa6a883b19 [ 1257.979827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.979836] RSP: 002b:00007ffa67df9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1257.979855] RAX: ffffffffffffffda RBX: 00007ffa6a996f60 RCX: 00007ffa6a883b19 [ 1257.979864] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 1257.979874] RBP: 00007ffa67df91d0 R08: fffffffffffffffd R09: 0000000000000000 [ 1257.979883] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000001 [ 1257.979893] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 [ 1258.020797] FAULT_INJECTION: forcing a failure. [ 1258.020797] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.020812] CPU: 1 PID: 8156 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1258.020818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.020822] Call Trace: [ 1258.020838] dump_stack+0x107/0x167 [ 1258.020850] should_fail.cold+0x5/0xa [ 1258.020866] ? create_object.isra.0+0x3a/0xa20 [ 1258.020881] should_failslab+0x5/0x20 [ 1258.020905] kmem_cache_alloc+0x5b/0x310 [ 1258.020936] create_object.isra.0+0x3a/0xa20 [ 1258.020960] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1258.020988] kmem_cache_alloc_bulk+0x168/0x320 [ 1258.021018] io_submit_sqes+0x6f76/0x85c0 [ 1258.021043] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1258.021089] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1258.021111] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1258.021137] ? lock_downgrade+0x6d0/0x6d0 [ 1258.021147] ? find_held_lock+0x2c/0x110 [ 1258.021160] ? io_submit_sqes+0x85c0/0x85c0 [ 1258.021177] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1258.021190] ? wait_for_completion_io+0x270/0x270 [ 1258.021203] ? rcu_read_lock_any_held+0x75/0xa0 [ 1258.021213] ? vfs_write+0x354/0xa70 [ 1258.021223] ? fput_many+0x2f/0x1a0 [ 1258.021234] ? ksys_write+0x1a9/0x260 [ 1258.021245] ? __ia32_sys_read+0xb0/0xb0 [ 1258.021258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1258.021269] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1258.021283] do_syscall_64+0x33/0x40 [ 1258.021293] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1258.021300] RIP: 0033:0x7f991b285b19 [ 1258.021310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.021316] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1258.021329] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1258.021335] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1258.021341] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.021347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.021354] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1258.064695] FAULT_INJECTION: forcing a failure. [ 1258.064695] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.106582] CPU: 1 PID: 8159 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1258.106587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.106590] Call Trace: [ 1258.106602] dump_stack+0x107/0x167 [ 1258.106612] should_fail.cold+0x5/0xa [ 1258.106623] ? create_object.isra.0+0x3a/0xa20 [ 1258.106634] should_failslab+0x5/0x20 [ 1258.106644] kmem_cache_alloc+0x5b/0x310 [ 1258.106657] create_object.isra.0+0x3a/0xa20 [ 1258.106667] ? kasan_unpoison_shadow+0x33/0x50 [ 1258.106679] kmalloc_large_node+0x124/0x1a0 [ 1258.106692] __kmalloc_node+0x30d/0x420 [ 1258.106709] kvmalloc_node+0xc0/0x170 [ 1258.106720] __do_sys_add_key+0x311/0x430 [ 1258.106730] ? __do_sys_request_key+0x3b0/0x3b0 [ 1258.106739] ? ksys_write+0x1a9/0x260 [ 1258.106749] ? __ia32_sys_read+0xb0/0xb0 [ 1258.106763] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1258.106772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1258.106786] do_syscall_64+0x33/0x40 [ 1258.106795] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1258.106802] RIP: 0033:0x7ffa6a883b19 [ 1258.106811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.106816] RSP: 002b:00007ffa67df9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1258.106827] RAX: ffffffffffffffda RBX: 00007ffa6a996f60 RCX: 00007ffa6a883b19 [ 1258.106833] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 1258.106839] RBP: 00007ffa67df91d0 R08: fffffffffffffffd R09: 0000000000000000 [ 1258.106844] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000001 [ 1258.106850] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 [ 1271.461455] FAULT_INJECTION: forcing a failure. [ 1271.461455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.463234] CPU: 1 PID: 8171 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1271.464213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1271.465427] Call Trace: [ 1271.465449] dump_stack+0x107/0x167 [ 1271.465467] should_fail.cold+0x5/0xa [ 1271.465491] _copy_from_user+0x2e/0x1b0 [ 1271.465510] __do_sys_add_key+0x345/0x430 [ 1271.465527] ? __do_sys_request_key+0x3b0/0x3b0 [ 1271.465544] ? ksys_write+0x1a9/0x260 [ 1271.465562] ? __ia32_sys_read+0xb0/0xb0 [ 1271.465584] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1271.465602] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1271.465624] do_syscall_64+0x33/0x40 [ 1271.465641] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1271.465652] RIP: 0033:0x7ffa6a883b19 [ 1271.465668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1271.465677] RSP: 002b:00007ffa67df9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1271.465696] RAX: ffffffffffffffda RBX: 00007ffa6a996f60 RCX: 00007ffa6a883b19 15:46:04 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:46:04 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 15:46:04 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 7) 15:46:04 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x80010, r0, 0x0) r3 = io_uring_setup(0x62c, &(0x7f0000000280)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x13, &(0x7f0000000140)=[r5, r4], 0x2) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250000000008003b00e6581c63e508b79dbf3c24000500290001000100050033ddf1ebb10005002f0000000040060028000100000075414d20e877dfb1eb7b67a2fe2879af5105c950cd63b08fd03d9d0335e74426928521fb79ae272568c42e0eaca0fc025836c964ad76d7d739c595530011389b3a83e4682507e05e06427a316488cb9c53a3d8ccd50ee4ad9433"], 0x44}, 0x1, 0x0, 0x0, 0x6}, 0x90) 15:46:04 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x1a0, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40880}, 0x20000040) r3 = io_uring_setup(0x62c, &(0x7f0000000280)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x13, &(0x7f0000000140)=[r5, r4], 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r3, 0x1, 0xaf0, 0x100000001}) pread64(r6, &(0x7f0000000080)=""/128, 0x80, 0x3) 15:46:04 executing program 4: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x628, &(0x7f0000000280)={0x0, 0x56c3, 0x0, 0x200, 0x86, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:46:04 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x51e5ab75283bd6b6, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r8, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r0, r2, r3, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, r8, r9], 0x9) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) 15:46:04 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) dup3(r0, r2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) [ 1271.465706] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 1271.465715] RBP: 00007ffa67df91d0 R08: fffffffffffffffd R09: 0000000000000000 [ 1271.465725] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000001 [ 1271.465735] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 15:46:04 executing program 5: syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r2, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000300)={0x0, 0x3fc, @status={[0x18ec, 0x6, 0x100, 0x9bc, 0x4, 0x7]}, [0xcee1, 0x1ff, 0x8, 0x7, 0x0, 0x7fffffff, 0x20, 0x6, 0x1, 0x4, 0x6, 0x91, 0x100000000, 0x7, 0x9, 0x6f36, 0x8, 0x2, 0x0, 0x3, 0x8001, 0x2, 0x9, 0xff, 0x6, 0x1ff, 0x100000001, 0x101, 0x3, 0x8000, 0x40, 0x4, 0x3, 0x2d8c, 0xfffffffffffffff7, 0x55, 0x7, 0x7, 0x4, 0x7f, 0x398, 0x7fff, 0xfffffffffffffc00, 0x90f9, 0x2, 0x9, 0xa3, 0x4, 0x1000, 0x4, 0x8, 0x3, 0x8, 0xfff, 0x1000, 0x0, 0x0, 0x8, 0x3, 0x3, 0x1, 0x1, 0x80000000000000, 0xb393]}) r3 = io_uring_setup(0x62c, &(0x7f0000000280)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x13, &(0x7f0000000140)=[r5, r4], 0x2) 15:46:04 executing program 7: r0 = io_uring_setup(0x628, &(0x7f0000000040)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:46:04 executing program 6: r0 = io_uring_setup(0x59, &(0x7f0000000040)={0x0, 0xfffffffd, 0x2}) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x110, r1, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) [ 1271.549260] FAULT_INJECTION: forcing a failure. [ 1271.549260] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.551667] CPU: 1 PID: 8169 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1271.552647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1271.553830] Call Trace: [ 1271.554218] dump_stack+0x107/0x167 [ 1271.554761] should_fail.cold+0x5/0xa [ 1271.555318] ? create_object.isra.0+0x3a/0xa20 [ 1271.555976] should_failslab+0x5/0x20 [ 1271.556532] kmem_cache_alloc+0x5b/0x310 [ 1271.557120] ? mark_held_locks+0x9e/0xe0 [ 1271.557715] create_object.isra.0+0x3a/0xa20 [ 1271.558355] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1271.559119] kmem_cache_alloc_bulk+0x168/0x320 [ 1271.559783] io_submit_sqes+0x6f76/0x85c0 [ 1271.560384] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1271.561104] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1271.561820] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1271.562519] ? lock_downgrade+0x6d0/0x6d0 [ 1271.563122] ? find_held_lock+0x2c/0x110 [ 1271.563719] ? io_submit_sqes+0x85c0/0x85c0 [ 1271.564350] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1271.565051] ? wait_for_completion_io+0x270/0x270 [ 1271.565760] ? rcu_read_lock_any_held+0x75/0xa0 [ 1271.565776] ? vfs_write+0x354/0xa70 [ 1271.565793] ? fput_many+0x2f/0x1a0 [ 1271.565811] ? ksys_write+0x1a9/0x260 [ 1271.565829] ? __ia32_sys_read+0xb0/0xb0 [ 1271.565850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 15:46:04 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x240000, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004001}, 0x20000000) r4 = syz_io_uring_setup(0x4083, &(0x7f0000000040)={0x0, 0x5d79, 0x1, 0x2, 0x123, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r5, r1], 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, @in_args={0x1}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x110, r4, 0x0) [ 1271.565867] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1271.565890] do_syscall_64+0x33/0x40 15:46:04 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 8) 15:46:04 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 1271.565906] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1271.565918] RIP: 0033:0x7f991b285b19 [ 1271.565934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1271.565943] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1271.565962] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1271.565972] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1271.565981] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1271.565991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.566001] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1271.611074] FAULT_INJECTION: forcing a failure. [ 1271.611074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1271.611109] CPU: 0 PID: 8200 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1271.611115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1271.611119] Call Trace: [ 1271.611136] dump_stack+0x107/0x167 [ 1271.611148] should_fail.cold+0x5/0xa [ 1271.611163] __alloc_pages_nodemask+0x182/0x600 [ 1271.611176] ? lock_acquire+0x197/0x470 [ 1271.611193] ? key_create_or_update+0x112/0xc30 [ 1271.611206] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1271.611221] ? find_held_lock+0x2c/0x110 [ 1271.611235] alloc_pages_current+0x187/0x280 [ 1271.611250] kmalloc_order+0x35/0x160 [ 1271.611269] kmalloc_order_trace+0x14/0xa0 [ 1271.611280] user_preparse+0x93/0x1b0 [ 1271.611291] ? logon_vet_description+0x50/0x50 [ 1271.611301] key_create_or_update+0x3e0/0xc30 [ 1271.611321] ? key_alloc+0x12c0/0x12c0 15:46:04 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 9) [ 1271.611330] ? join_session_keyring+0x350/0x350 [ 1271.611341] ? exc_page_fault+0xca/0x1a0 [ 1271.611369] ? copy_user_generic_string+0x2c/0x40 [ 1271.611383] __do_sys_add_key+0x215/0x430 [ 1271.611393] ? __do_sys_request_key+0x3b0/0x3b0 [ 1271.611403] ? ksys_write+0x1a9/0x260 [ 1271.611413] ? __ia32_sys_read+0xb0/0xb0 [ 1271.611424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1271.611434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1271.611447] do_syscall_64+0x33/0x40 [ 1271.611457] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1271.611463] RIP: 0033:0x7ffa6a883b19 [ 1271.611472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1271.611478] RSP: 002b:00007ffa67df9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1271.611489] RAX: ffffffffffffffda RBX: 00007ffa6a996f60 RCX: 00007ffa6a883b19 [ 1271.611494] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 1271.611500] RBP: 00007ffa67df91d0 R08: fffffffffffffffd R09: 0000000000000000 [ 1271.611505] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000001 [ 1271.611511] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 [ 1271.658695] FAULT_INJECTION: forcing a failure. [ 1271.658695] name failslab, interval 1, probability 0, space 0, times 0 15:46:04 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 1271.658704] CPU: 0 PID: 8208 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1271.658709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1271.658712] Call Trace: [ 1271.658722] dump_stack+0x107/0x167 [ 1271.658733] should_fail.cold+0x5/0xa [ 1271.658745] ? create_object.isra.0+0x3a/0xa20 [ 1271.658757] should_failslab+0x5/0x20 [ 1271.658768] kmem_cache_alloc+0x5b/0x310 [ 1271.658780] create_object.isra.0+0x3a/0xa20 [ 1271.658790] ? kasan_unpoison_shadow+0x33/0x50 [ 1271.658802] kmalloc_order+0xfe/0x160 [ 1271.658814] kmalloc_order_trace+0x14/0xa0 [ 1271.658824] user_preparse+0x93/0x1b0 [ 1271.658833] ? logon_vet_description+0x50/0x50 [ 1271.658843] key_create_or_update+0x3e0/0xc30 [ 1271.658856] ? key_alloc+0x12c0/0x12c0 [ 1271.658863] ? join_session_keyring+0x350/0x350 [ 1271.658873] ? exc_page_fault+0xca/0x1a0 [ 1271.658893] ? copy_user_generic_string+0x2c/0x40 [ 1271.658905] __do_sys_add_key+0x215/0x430 [ 1271.658917] ? __do_sys_request_key+0x3b0/0x3b0 [ 1271.658926] ? ksys_write+0x1a9/0x260 [ 1271.658936] ? __ia32_sys_read+0xb0/0xb0 [ 1271.658948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1271.658957] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1271.658970] do_syscall_64+0x33/0x40 [ 1271.658978] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1271.658984] RIP: 0033:0x7ffa6a883b19 [ 1271.658993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1271.658998] RSP: 002b:00007ffa67df9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1271.659009] RAX: ffffffffffffffda RBX: 00007ffa6a996f60 RCX: 00007ffa6a883b19 [ 1271.659014] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 1271.659020] RBP: 00007ffa67df91d0 R08: fffffffffffffffd R09: 0000000000000000 [ 1271.659025] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000001 [ 1271.659030] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 [ 1271.773571] FAULT_INJECTION: forcing a failure. [ 1271.773571] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.774659] CPU: 0 PID: 8213 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1271.775310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1271.775932] Call Trace: [ 1271.776150] dump_stack+0x107/0x167 [ 1271.776430] should_fail.cold+0x5/0xa [ 1271.776724] ? create_object.isra.0+0x3a/0xa20 [ 1271.777076] should_failslab+0x5/0x20 [ 1271.777370] kmem_cache_alloc+0x5b/0x310 [ 1271.777686] ? mark_held_locks+0x9e/0xe0 [ 1271.778004] create_object.isra.0+0x3a/0xa20 [ 1271.778375] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1271.778784] kmem_cache_alloc_bulk+0x168/0x320 [ 1271.779145] io_submit_sqes+0x6f76/0x85c0 [ 1271.779493] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1271.779874] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1271.780252] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1271.780655] ? lock_downgrade+0x6d0/0x6d0 [ 1271.780975] ? find_held_lock+0x2c/0x110 [ 1271.781288] ? io_submit_sqes+0x85c0/0x85c0 [ 1271.781658] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1271.782032] ? wait_for_completion_io+0x270/0x270 [ 1271.782455] ? rcu_read_lock_any_held+0x75/0xa0 [ 1271.782822] ? vfs_write+0x354/0xa70 [ 1271.783109] ? fput_many+0x2f/0x1a0 [ 1271.783387] ? ksys_write+0x1a9/0x260 [ 1271.783680] ? __ia32_sys_read+0xb0/0xb0 [ 1271.783992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1271.784433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1271.784850] do_syscall_64+0x33/0x40 [ 1271.785136] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1271.785571] RIP: 0033:0x7f991b285b19 [ 1271.785865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1271.787269] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1271.787849] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1271.788397] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1271.788944] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1271.789490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.790033] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1285.887292] FAULT_INJECTION: forcing a failure. [ 1285.887292] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.888533] CPU: 1 PID: 8237 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1285.889126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.889842] Call Trace: [ 1285.890081] dump_stack+0x107/0x167 [ 1285.890402] should_fail.cold+0x5/0xa [ 1285.890735] ? assoc_array_insert+0xde/0x2aa0 [ 1285.891132] should_failslab+0x5/0x20 [ 1285.891462] kmem_cache_alloc_trace+0x55/0x320 [ 1285.891858] assoc_array_insert+0xde/0x2aa0 [ 1285.892235] ? lock_release+0x680/0x680 [ 1285.892588] ? kmalloc_order+0xfe/0x160 [ 1285.892936] ? assoc_array_cancel_edit+0x90/0x90 [ 1285.893353] ? down_write+0xe0/0x160 [ 1285.893933] ? down_write_killable+0x180/0x180 [ 1285.894507] ? key_free_user_ns+0x130/0x130 [ 1285.894985] __key_link_begin+0xec/0x250 [ 1285.895335] key_create_or_update+0x468/0xc30 [ 1285.895719] ? key_alloc+0x12c0/0x12c0 15:46:18 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 10) 15:46:18 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:46:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 15:46:18 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) io_uring_enter(r0, 0x6566, 0xcbfd, 0x3, &(0x7f0000000040)={[0x4]}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:46:18 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x100) sendfile(r5, r6, &(0x7f0000000080)=0x9b5, 0x7) 15:46:18 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000040)=[r2, r1, r3], 0x3) 15:46:18 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x67c3, 0x4c80, 0x2, &(0x7f0000000080)={[0x7f]}, 0x8) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 15:46:18 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) syz_io_uring_setup(0x1e82, &(0x7f0000000380)={0x0, 0xfffffffe, 0x4, 0x4000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) r6 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r9, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r11 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x9, 0x1000, 0x0, 0x80000000, 0x2, 0x0, {0x0, r14}}, 0x80) r15 = socket$packet(0x11, 0x2, 0x300) fcntl$lock(r15, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffff9}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @rand_addr=0x64010100}, 0xc) [ 1285.896090] ? join_session_keyring+0x350/0x350 [ 1285.896112] ? exc_page_fault+0xca/0x1a0 [ 1285.896135] ? copy_user_generic_string+0x2c/0x40 [ 1285.896149] __do_sys_add_key+0x215/0x430 [ 1285.896159] ? __do_sys_request_key+0x3b0/0x3b0 [ 1285.896169] ? ksys_write+0x1a9/0x260 [ 1285.896180] ? __ia32_sys_read+0xb0/0xb0 [ 1285.896192] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1285.896202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.896216] do_syscall_64+0x33/0x40 [ 1285.896226] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1285.896233] RIP: 0033:0x7ffa6a883b19 [ 1285.896242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1285.896248] RSP: 002b:00007ffa67df9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1285.896260] RAX: ffffffffffffffda RBX: 00007ffa6a996f60 RCX: 00007ffa6a883b19 15:46:18 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) preadv2(r0, &(0x7f0000001500)=[{&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/207, 0xcf}, {&(0x7f0000000040)=""/171, 0xab}, {&(0x7f0000001400)=""/214, 0xd6}], 0x5, 0xf68, 0x6, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) [ 1285.896266] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 15:46:18 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x110, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, 0xffffffffffffffff], 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000100)) epoll_create1(0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000100)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xba) [ 1285.896272] RBP: 00007ffa67df91d0 R08: fffffffffffffffd R09: 0000000000000000 [ 1285.896277] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000002 [ 1285.896283] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 [ 1285.899366] FAULT_INJECTION: forcing a failure. [ 1285.899366] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.899378] CPU: 1 PID: 8240 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1285.899383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.899385] Call Trace: [ 1285.899395] dump_stack+0x107/0x167 [ 1285.899405] should_fail.cold+0x5/0xa [ 1285.899416] ? create_object.isra.0+0x3a/0xa20 [ 1285.899427] should_failslab+0x5/0x20 [ 1285.899436] kmem_cache_alloc+0x5b/0x310 [ 1285.899446] ? mark_held_locks+0x9e/0xe0 [ 1285.899457] create_object.isra.0+0x3a/0xa20 [ 1285.899468] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1285.899481] kmem_cache_alloc_bulk+0x168/0x320 [ 1285.899495] io_submit_sqes+0x6f76/0x85c0 [ 1285.899506] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1285.899528] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1285.899538] __do_sys_io_uring_enter+0x6b5/0x18c0 15:46:18 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 11) [ 1285.899550] ? lock_downgrade+0x6d0/0x6d0 [ 1285.899559] ? find_held_lock+0x2c/0x110 [ 1285.899572] ? io_submit_sqes+0x85c0/0x85c0 [ 1285.899586] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1285.899598] ? wait_for_completion_io+0x270/0x270 [ 1285.899612] ? rcu_read_lock_any_held+0x75/0xa0 [ 1285.899620] ? vfs_write+0x354/0xa70 [ 1285.899630] ? fput_many+0x2f/0x1a0 [ 1285.899646] ? ksys_write+0x1a9/0x260 [ 1285.899656] ? __ia32_sys_read+0xb0/0xb0 [ 1285.899669] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1285.899678] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1285.899691] do_syscall_64+0x33/0x40 [ 1285.899700] entry_SYSCALL_64_after_hwframe+0x62/0xc7 15:46:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1285.899706] RIP: 0033:0x7f991b285b19 [ 1285.899715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1285.899721] RSP: 002b:00007f99187da188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1285.899731] RAX: ffffffffffffffda RBX: 00007f991b399020 RCX: 00007f991b285b19 [ 1285.899737] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1285.899743] RBP: 00007f99187da1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.899748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.899754] R13: 00007ffded4a07af R14: 00007f99187da300 R15: 0000000000022000 [ 1286.048681] FAULT_INJECTION: forcing a failure. [ 1286.048681] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.049782] CPU: 1 PID: 8259 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1286.050356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1286.051037] Call Trace: [ 1286.051261] dump_stack+0x107/0x167 [ 1286.051560] should_fail.cold+0x5/0xa [ 1286.051877] ? create_object.isra.0+0x3a/0xa20 [ 1286.052258] should_failslab+0x5/0x20 [ 1286.052573] kmem_cache_alloc+0x5b/0x310 [ 1286.052909] ? mark_lock+0xf5/0x2df0 [ 1286.053216] create_object.isra.0+0x3a/0xa20 [ 1286.053576] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1286.053997] kmem_cache_alloc_trace+0x151/0x320 [ 1286.054380] assoc_array_insert+0xde/0x2aa0 [ 1286.054734] ? lock_release+0x680/0x680 [ 1286.055070] ? kmalloc_order+0xfe/0x160 [ 1286.055403] ? assoc_array_cancel_edit+0x90/0x90 [ 1286.055797] ? down_write+0xe0/0x160 [ 1286.056104] ? down_write_killable+0x180/0x180 [ 1286.056481] ? key_free_user_ns+0x130/0x130 [ 1286.056840] __key_link_begin+0xec/0x250 [ 1286.057172] key_create_or_update+0x468/0xc30 [ 1286.057543] ? key_alloc+0x12c0/0x12c0 [ 1286.057866] ? join_session_keyring+0x350/0x350 [ 1286.058246] ? exc_page_fault+0xca/0x1a0 [ 1286.058593] ? copy_user_generic_string+0x2c/0x40 [ 1286.059002] __do_sys_add_key+0x215/0x430 [ 1286.059340] ? __do_sys_request_key+0x3b0/0x3b0 [ 1286.059722] ? ksys_write+0x1a9/0x260 [ 1286.060036] ? __ia32_sys_read+0xb0/0xb0 [ 1286.060371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1286.060795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1286.061219] do_syscall_64+0x33/0x40 [ 1286.061521] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1286.061938] RIP: 0033:0x7ffa6a883b19 [ 1286.062241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.063719] RSP: 002b:00007ffa67df9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1286.064339] RAX: ffffffffffffffda RBX: 00007ffa6a996f60 RCX: 00007ffa6a883b19 [ 1286.064920] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 1286.065499] RBP: 00007ffa67df91d0 R08: fffffffffffffffd R09: 0000000000000000 [ 1286.066077] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000002 [ 1286.066652] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 [ 1286.101833] FAULT_INJECTION: forcing a failure. [ 1286.101833] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.103783] CPU: 0 PID: 8258 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1286.104949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1286.104956] Call Trace: [ 1286.104982] dump_stack+0x107/0x167 [ 1286.105001] should_fail.cold+0x5/0xa [ 1286.105022] ? create_object.isra.0+0x3a/0xa20 [ 1286.105042] should_failslab+0x5/0x20 [ 1286.105059] kmem_cache_alloc+0x5b/0x310 [ 1286.105077] ? mark_held_locks+0x9e/0xe0 [ 1286.105098] create_object.isra.0+0x3a/0xa20 [ 1286.105117] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1286.105141] kmem_cache_alloc_bulk+0x168/0x320 [ 1286.105164] io_submit_sqes+0x6f76/0x85c0 [ 1286.105182] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1286.105221] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1286.105237] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1286.105258] ? lock_downgrade+0x6d0/0x6d0 [ 1286.105273] ? find_held_lock+0x2c/0x110 [ 1286.105298] ? io_submit_sqes+0x85c0/0x85c0 [ 1286.116126] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1286.116148] ? wait_for_completion_io+0x270/0x270 [ 1286.116169] ? rcu_read_lock_any_held+0x75/0xa0 [ 1286.116189] ? vfs_write+0x354/0xa70 [ 1286.118447] ? fput_many+0x2f/0x1a0 [ 1286.118978] ? ksys_write+0x1a9/0x260 [ 1286.119535] ? __ia32_sys_read+0xb0/0xb0 [ 1286.120133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1286.120891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1286.121642] do_syscall_64+0x33/0x40 [ 1286.122185] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1286.122931] RIP: 0033:0x7f991b285b19 [ 1286.123472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.126123] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1286.127232] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1286.128262] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1286.129296] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.130323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.131359] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:46:18 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x6107}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:46:18 executing program 6: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5000000, 0x11, r0, 0x0) r1 = io_uring_setup(0x62c, &(0x7f0000000280)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4004, @fd_index=0x8, 0x5b3, 0x0, 0x0, 0x1, 0x0, {0x3}}, 0x80000001) syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x2}, 0x9) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:46:18 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x355}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x3875, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r5, r4, &(0x7f00000001c0), 0x4) 15:46:18 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000080)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x80000000) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:46:18 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r1, 0xffffffffffffffff], 0x2) r2 = accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) r3 = syz_io_uring_setup(0x6be1, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) fcntl$getown(r3, 0x9) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r2, r6, r1, r1, r0], 0x5) 15:46:32 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x1, 0x0, {}, 0x7, 0x2, 0x1, {0x0, 0x0, r7}}, 0xffffff2e) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x100) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r8, r1], 0x2) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000180)) 15:46:32 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x18102, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) dup3(r1, r2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) 15:46:32 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x2000000, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) r4 = io_uring_setup(0x62c, &(0x7f0000000280)) r5 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\xf3:'}, {0x20, '},]\\@*\xa5'}, {0x20, 'veth0_to_team\x00'}, {}, {0x20, '\x00'}], 0xa, "b2dbe047857af6e5e66feb3fe064534d563eba3c722d211535776f79eb6fe73ded53669fa2ae6ad097bfc782fde9a91c003b900cbf60651a74fdd1b032643b74c88924a83c3d90e5c58deceb33355925ed0fd25fb9288d86da8b806a8df0c5903226d67565fa74c69e0a922b2570211d868e68d47c0f22acf2c91ee4ae32abd81a30e4195cc0ab1bf117246d93925c0a14935efa2487428f63ceb19a534562408f2462331485706bb2c6b87570096b66230d7ef789ad4d74bf2c65c26a677cd9336d367be0421d0c88754ad2b80be7"}, 0xf7) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x13, &(0x7f0000000140)=[r7, r6], 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'veth0_to_team\x00', 0x2}, 0x18) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:46:32 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 15:46:32 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) (fail_nth: 12) 15:46:32 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:46:32 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x2010, r1, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/209, 0xd1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r7, 0x8000000) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x0) fcntl$setown(r6, 0x8, 0x0) 15:46:32 executing program 3: r0 = io_uring_setup(0x7b7c, &(0x7f0000000280)={0x0, 0xfffffffc, 0x4}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) io_uring_enter(r3, 0x7d10, 0xbdc3, 0x1, &(0x7f0000000080)={[0x7fc0000000000]}, 0x8) [ 1299.349662] FAULT_INJECTION: forcing a failure. [ 1299.349662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1299.350732] CPU: 0 PID: 8287 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1299.351334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1299.352055] Call Trace: [ 1299.352293] dump_stack+0x107/0x167 [ 1299.352614] should_fail.cold+0x5/0xa [ 1299.352954] _copy_to_user+0x2e/0x180 [ 1299.353292] simple_read_from_buffer+0xcc/0x160 [ 1299.353704] proc_fail_nth_read+0x198/0x230 [ 1299.354092] ? proc_sessionid_read+0x230/0x230 [ 1299.354495] ? security_file_permission+0x24e/0x570 [ 1299.354935] ? perf_trace_initcall_start+0x101/0x380 [ 1299.355397] ? proc_sessionid_read+0x230/0x230 [ 1299.355799] vfs_read+0x228/0x580 [ 1299.356110] ksys_read+0x12d/0x260 [ 1299.356419] ? vfs_write+0xa70/0xa70 [ 1299.356751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1299.357206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1299.357671] do_syscall_64+0x33/0x40 [ 1299.357997] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1299.358457] RIP: 0033:0x7ffa6a83669c [ 1299.358783] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1299.360401] RSP: 002b:00007ffa67df9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1299.361070] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007ffa6a83669c [ 1299.361690] RDX: 000000000000000f RSI: 00007ffa67df91e0 RDI: 0000000000000003 [ 1299.362314] RBP: 00007ffa67df91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1299.362932] R10: 00000000000078bd R11: 0000000000000246 R12: 0000000000000002 [ 1299.363564] R13: 00007fff2f253f0f R14: 00007ffa67df9300 R15: 0000000000022000 15:46:32 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) [ 1299.414133] audit: type=1400 audit(1712159192.194:13): avc: denied { execute } for pid=8285 comm="syz-executor.5" path="pipe:[39960]" dev="pipefs" ino=39960 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 15:46:32 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000040)=""/12, &(0x7f0000000080)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r3, r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:46:32 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) [ 1299.467623] FAULT_INJECTION: forcing a failure. [ 1299.467623] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.468837] CPU: 0 PID: 8298 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1299.469409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1299.470092] Call Trace: [ 1299.470319] dump_stack+0x107/0x167 [ 1299.470624] should_fail.cold+0x5/0xa [ 1299.470946] ? create_object.isra.0+0x3a/0xa20 [ 1299.471335] should_failslab+0x5/0x20 [ 1299.471655] kmem_cache_alloc+0x5b/0x310 [ 1299.472003] ? mark_held_locks+0x9e/0xe0 [ 1299.472349] create_object.isra.0+0x3a/0xa20 [ 1299.472720] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1299.473149] kmem_cache_alloc_bulk+0x168/0x320 [ 1299.473548] io_submit_sqes+0x6f76/0x85c0 [ 1299.473893] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1299.474313] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1299.474734] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1299.475143] ? lock_downgrade+0x6d0/0x6d0 [ 1299.475492] ? find_held_lock+0x2c/0x110 [ 1299.475844] ? io_submit_sqes+0x85c0/0x85c0 [ 1299.476215] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1299.476625] ? wait_for_completion_io+0x270/0x270 [ 1299.477032] ? rcu_read_lock_any_held+0x75/0xa0 [ 1299.477424] ? vfs_write+0x354/0xa70 [ 1299.477740] ? fput_many+0x2f/0x1a0 [ 1299.478052] ? ksys_write+0x1a9/0x260 [ 1299.478372] ? __ia32_sys_read+0xb0/0xb0 [ 1299.478717] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1299.479158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1299.479596] do_syscall_64+0x33/0x40 [ 1299.479909] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1299.480339] RIP: 0033:0x7f991b285b19 [ 1299.480648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1299.482179] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1299.482820] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1299.483443] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1299.484034] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1299.484625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.485214] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:46:32 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup3(r2, r3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r4, r1], 0x2) r5 = dup(0xffffffffffffffff) io_uring_enter(r5, 0x3f33, 0xc1d0, 0x6, &(0x7f0000000080)={[0xffffffffffff0001]}, 0x8) 15:46:32 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xd6542, 0x0) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x200}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) r4 = mq_open(&(0x7f0000000080)='@\x00', 0x800, 0x80, &(0x7f00000000c0)={0x6, 0x100, 0xfffffffffffffffd, 0x5}) syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r6, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0xfffffffd) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0xe, 0x0, r9, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r1, r1, r3, r1, r4, r6, r0, r9, r0], 0x9) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x80010, 0xffffffffffffffff, 0x8000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsmount(r1, 0x1, 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r10, r1], 0x2) 15:46:32 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000040)={0x0, 0x0, 0x10, 0xfffffffe}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000300)={0x0, 0x7, 0x5, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000700)={{r1}, 0x0, 0x14, @inherit={0x58, &(0x7f0000001700)=ANY=[@ANYBLOB="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"]}, @devid=r3}) 15:46:32 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000500)={{0x0, 0x7, 0x3, 0xdc, 0x40, 0xc24, 0x7ff000000, 0x0, 0x1ffc0000, 0x4, 0x7, 0x9, 0x100, 0x7}}) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r4], 0x1) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=@known='security.selinux\x00', &(0x7f0000000240)='\x00', 0x1, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001500)={r2, r3, "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", "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"}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[0xffffffffffffffff, r5], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002580)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd_index=0x7, 0x800, &(0x7f0000002500)="e6bb476892d257f0546adc23fc4c30bcf9f6bb9c4ec204aa641e7c082fe4cefcda66168b98a4fb035121f6a672bb02ccd01b2c6b10a083d77dc4c108591bf26b1517e6b9c714c0747b88333be23d99a74be07cc04314ad304cd3d7fb0ec3a8402cc2657fbdc890f8fdbca059e278eec99ea74e14a125", 0x76, 0x12}, 0xfffffff7) 15:46:32 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1, 0x2}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:46:32 executing program 5: io_uring_setup(0x62c, &(0x7f0000000280)) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000200", @ANYRES16=r3, @ANYBLOB="010000000000000000000300000020000180140002006272696467655f736c6176655f30000008000100", @ANYRES32=r5, @ANYBLOB], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r5, 0x4, 0x8, 0x3, 0x3, 0x4a, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1, 0x10, 0x3ff, 0xffff0000}}) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5a8, 0xceb2, 0x3, &(0x7f0000000040)={[0x5]}, 0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) 15:46:46 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:46:46 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = eventfd2(0xd5, 0x80001) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000080)={{r4}, {@val, @actul_num={@void, 0x20, 0x6d}}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:46:46 executing program 4: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000040)=""/183, 0xb7}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/66, 0x42}, {0xfffffffffffffffe}, {&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000001300)=""/84, 0x54}], 0x6, 0x3ff, 0x530) syz_io_uring_setup(0x3efb, &(0x7f0000001400)={0x0, 0x2fc9, 0x8, 0x3, 0x278, 0x0, r0}, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000001480)) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x2dcc, 0x1, 0x0, 0x40000000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x533e, 0x800, 0x1, &(0x7f0000001540)={[0x8]}, 0x8) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, r6, &(0x7f0000001500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0x1, 0x0, 0x1}, 0x6) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r9, r1], 0x2) 15:46:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 15:46:46 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1, 0x3}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:46:46 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_io_uring_setup(0x3876, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0x13, 0xffffffffffffffff, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000240)={0x4, 0x5, 0x55b, 0x7, 0x54a0199, 0x6c2e}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r4, 0xa16cf000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000140)=[r5, r3], 0x2) write$char_usb(r5, &(0x7f0000000300)="ca93829a55777274c0ecd1114c40cf2571815b58a18a8c2634f584ecd6b0c39b87ea0885c908d286639929b66444d73bd186c2bc66762af947f62cb85d8a4e20caadde25bc2e6ed70ca06cdb1a7f58d35b69c5c61b43e2403a59bf6f011278bf7b3b4154d1f98f04c79d8a90f98d796b33a000d250d945e7d77ea48d774c6878df67bbf69530a9fdf1720eeb62931bfab1f6ff2d80145d439955cb0cde8dd6e09e5eb58605f27aa548f331f50da9b39393d3defc25a44c5ec3c5a5a95611d5c5400996550469d25e135507134da3380e588f87a5be3b26cc0dd2885969ee", 0xde) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000400)={{0x4, 0xfd}, 'port1\x00', 0x20, 0x40000, 0x5b, 0x1000, 0xb, 0x5, 0x1, 0x0, 0x7, 0x1a}) pread64(r6, &(0x7f0000000040)=""/167, 0xa7, 0x8000) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r6, r1], 0x2) 15:46:46 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r4 = creat(&(0x7f0000000500)='./file0\x00', 0x9a68862a53d39c28) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x2010, r3, 0x0) [ 1313.765652] FAULT_INJECTION: forcing a failure. [ 1313.765652] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.767805] CPU: 1 PID: 8352 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1313.768764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1313.769916] Call Trace: [ 1313.770292] dump_stack+0x107/0x167 [ 1313.770802] should_fail.cold+0x5/0xa [ 1313.771369] ? create_object.isra.0+0x3a/0xa20 [ 1313.772011] should_failslab+0x5/0x20 [ 1313.772547] kmem_cache_alloc+0x5b/0x310 [ 1313.773116] ? mark_held_locks+0x9e/0xe0 [ 1313.773689] create_object.isra.0+0x3a/0xa20 [ 1313.774311] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1313.775050] kmem_cache_alloc_bulk+0x168/0x320 [ 1313.775725] io_submit_sqes+0x6f76/0x85c0 [ 1313.776311] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1313.777011] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1313.777708] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1313.778390] ? lock_downgrade+0x6d0/0x6d0 [ 1313.778978] ? find_held_lock+0x2c/0x110 [ 1313.779591] ? io_submit_sqes+0x85c0/0x85c0 [ 1313.780211] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1313.780890] ? wait_for_completion_io+0x270/0x270 [ 1313.781569] ? rcu_read_lock_any_held+0x75/0xa0 [ 1313.782225] ? vfs_write+0x354/0xa70 [ 1313.782751] ? fput_many+0x2f/0x1a0 [ 1313.783292] ? ksys_write+0x1a9/0x260 [ 1313.783829] ? __ia32_sys_read+0xb0/0xb0 [ 1313.784403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1313.785137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1313.785872] do_syscall_64+0x33/0x40 [ 1313.786398] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1313.787113] RIP: 0033:0x7f991b285b19 [ 1313.787675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1313.790223] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1313.791317] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1313.792360] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1313.793398] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1313.794446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.795498] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:46:46 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0, r0, r1, 0xffffffffffffffff, r3, r4, r6], 0x7) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x9, 0xffffffffffffffe8, 0x0, 0x80000000, 0x2, 0x0, {0x0, r12}}, 0x80) syz_io_uring_submit(r2, r5, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index, 0x7, {0x0, r0}, 0x7, 0x2, 0x0, {0x0, r12, r0}}, 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r8, r7], 0x2) 15:46:46 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:46:46 executing program 6: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000700)=""/238, 0xee) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r5 = io_uring_setup(0x62c, &(0x7f0000000280)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140)=[r7, r6], 0x2) sendmsg$nl_generic(r7, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x200400c4}, 0x400) r8 = accept(r4, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x2a) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000001c0)=[r8, r9], 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:46:46 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x10000, 0x20, 0xfffffffc, 0x8f}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040)=[r2, 0xffffffffffffffff, r3], 0x3) 15:46:46 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000e30000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e6a06b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r2, r1, r3, r0, r4, 0xffffffffffffffff, r1], 0x7) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)=@getpolicy={0x1bc, 0x15, 0x2, 0x70bd2b, 0x25dfdbfb, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x5, 0x4e20, 0x5, 0xa, 0x20, 0x20, 0x3b, r6, 0xffffffffffffffff}, 0x6e6bbc, 0x1}, [@mark={0xc, 0x15, {0x35075a, 0x9}}, @lifetime_val={0x24, 0x9, {0xef58, 0x0, 0x6b5, 0x6}}, @algo_auth_trunc={0x111, 0x14, {{'blake2b-512\x00'}, 0x628, 0x0, "36e3329e87aeeeb556cca833b2f771a0dea40168fdf8c70a8a47abaeff5a9296ec2875984f60c107ac967e12247e0590c78d23408487b819f3ccda464024c10aeac7a669804ac7edf1a0d10476e00900d5f17f6353e678014dc511d414e33be588fa2e552429b8a031a22b0aa103b9fbfc3f8f2fc99f9c847a089b31c46f448b0546369283c7a60dddb4b0ebdc1ac361652812e1a2a29205fdbb230d08eea6e9133a2f749dc72d65fb1e35b00507b8ac31bdda71673f538be9860d83d9643569bfb3a45221"}}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0x0, 0x11}}]}, 0x1bc}}, 0x20008001) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r5, r1], 0x2) 15:46:46 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x2, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:46:46 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) copy_file_range(r5, &(0x7f0000000040)=0x2, 0xffffffffffffffff, &(0x7f0000000080)=0x100000001, 0xc7, 0x0) r6 = syz_mount_image$nfs4(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x4, 0x2, &(0x7f0000000f40)=[{&(0x7f0000000d40)="24f63893f9fcd5a4d5e0957dac5a478a735fc477d55a9ecd63b8e689a6ae4ef15d9f3864effa3df9dee690dfce5fcc3b8eb0028ed4bdd9bb72d3797c9dfe88c20de35b489edd75fb5a0156eddc51203b8217ee9a00543aeca1a995a16a3f69ff4a531e8254748ecbe7324d1156d15911deb1f23ff71ed94ed5da19feb5cba8866145206545c2c6cc35e5185a809060b940b39ff02dce43477d87e4ea795027e7ba405744d8b1e1696b69aa0229a032a555dbf55f6c680b8c14324af25a50b4df7c6b73c6b8d71bca66a2494d77543e7fcce47cd576145bc626137271e573f8c32edf07", 0xe3, 0x1}, {&(0x7f0000000e40)="d5280c4aef2e048fa910c2c256f16d55f0ce43dd24f0e0090723f6528b8c9d0a2f9c34d03f6804a21c24a7c2120add5c13369fec44aa38ebd759287c61d9f5f8f9697981c6080da23a414c869ecbac1dbf612ab8b25a1b9490f623c97017646e55471be13737430c6585448622a13f5aa6db7aa9bbd584fdf3334e3bcf7ead7d2484a956582f8fc33127ad4e8f07fa4bc3d7deb502f60a167d31b5db3a0d87b6e96d6251cbdcf86dce572882430d05fe0faa1aedfac0345a46ce94703ee5f1111258ff4ae295e0314ac55462", 0xcc, 0x1}], 0x8, &(0x7f0000000f80)={[{'-\'^/'}, {'^{!]'}, {'('}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) write$binfmt_elf64(r6, &(0x7f0000000fc0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7, 0x7, 0x4, 0xb75f, 0x3, 0x6, 0x2, 0x39d, 0x40, 0x13b, 0x3, 0x79e2, 0x38, 0x2, 0x7, 0xffff, 0x3d}, [{0x70000000, 0x80, 0x5, 0xd0e, 0x4, 0x80000001, 0x8}], "ee097f4d5a579100b1f3b507532c727507f691947fbe6e218b351fe7c8ab90136c650584ded357ed27aeb48924b4713070342625974a445283849afae14f30e69d04e95a34af81bb361ad3865c517b574a9d001735a6d9913b954e1c03971ab51947070dcb", ['\x00']}, 0x1dd) 15:46:46 executing program 4: r0 = io_uring_setup(0x628, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x1}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = signalfd4(r0, &(0x7f00000000c0)={[0x9]}, 0x8, 0x80800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000040)=""/16, &(0x7f0000000080)=0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r4, r1], 0x2) 15:46:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) [ 1314.006226] nfs4: Unknown parameter '-'^/' [ 1314.044838] nfs4: Unknown parameter '-'^/' [ 1314.089372] FAULT_INJECTION: forcing a failure. [ 1314.089372] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.091133] CPU: 0 PID: 8388 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1314.092165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1314.093398] Call Trace: [ 1314.093811] dump_stack+0x107/0x167 [ 1314.094367] should_fail.cold+0x5/0xa [ 1314.094963] should_failslab+0x5/0x20 [ 1314.095554] kmem_cache_alloc_bulk+0x4b/0x320 [ 1314.096225] io_submit_sqes+0x6f76/0x85c0 [ 1314.096864] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1314.097601] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1314.098325] ? lock_downgrade+0x6d0/0x6d0 [ 1314.098944] ? find_held_lock+0x2c/0x110 [ 1314.099566] ? io_submit_sqes+0x85c0/0x85c0 [ 1314.100215] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1314.100936] ? wait_for_completion_io+0x270/0x270 [ 1314.101652] ? rcu_read_lock_any_held+0x75/0xa0 [ 1314.102339] ? vfs_write+0x354/0xa70 [ 1314.102890] ? fput_many+0x2f/0x1a0 [ 1314.103438] ? ksys_write+0x1a9/0x260 [ 1314.103997] ? __ia32_sys_read+0xb0/0xb0 [ 1314.104602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1314.105378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1314.106146] do_syscall_64+0x33/0x40 [ 1314.106692] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1314.107453] RIP: 0033:0x7f991b285b19 [ 1314.108003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1314.110705] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1314.111840] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1314.112890] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1314.113947] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1314.115000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1314.116053] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:47:04 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:47:04 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400800, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r3, r4, r2, r5], 0x4) 15:47:04 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x3, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:47:04 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 15:47:04 executing program 7: pipe(&(0x7f0000000040)) r0 = io_uring_setup(0x4785, &(0x7f0000000280)={0x0, 0xde3c, 0x2, 0x1, 0x271}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x100000000, 0x4, &(0x7f0000000380)=[{&(0x7f0000000180)="db7b54873fe6edc3d5757f478e4e095a5794b55c2a76527014d5d976399635a2dbd8d64da35e09b47488978dce71777211", 0x31, 0x101}, {&(0x7f00000001c0)="3f33eec59a0cb8cb536e21d7ae445131b9cee7ff08da26ff601c5ae416a2af477e5dfc456334610d06184a19d3cb4a2cfc2df0221864d94213127bb1f7c095706357bb7c3a92fd20c55f82de56b4c4fdc22f3c4ccf25fe22d26170da0f2ef9e4ac9b0f148b3d97ffde675370b37aa9d3a2a471a27018cf8519dc", 0x7a, 0x8}, {&(0x7f0000000240)="087272abcc233982db67186a57", 0xd, 0x3}, {&(0x7f0000000300)="2aa14f65f7ef8fba4b6d48607559114499c5e4436e04d2b5f3effff9bf8349169424ba0cfe607a31e9e30c140654a1ef0d66571a162e81b4ca30b42b7f05b04f31162d6dbb2cced4f64fc937df891a9203f5ee2963f1f6a8c447b2d4cf51ac717ec1", 0x62, 0x8}], 0x20805a, &(0x7f0000000480)=ANY=[@ANYBLOB="646f74732c646f74732c6f626a653d2d2a5b292c657569643c4f9bdd364d25625109bf2158b6a95a9526033bed9636fc56217ccf56aa56450715784608c030dfd17792b7abc4d55163c7210a62f14b0351", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) dup(r3) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:47:04 executing program 4: r0 = io_uring_setup(0x5ac, &(0x7f0000000280)={0x0, 0xe24, 0x0, 0x0, 0xffffffff}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:47:04 executing program 3: ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000040)) r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = io_uring_setup(0x62c, &(0x7f0000000280)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x801c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) getdents64(r3, &(0x7f0000000080)=""/39, 0x27) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r5, r1], 0x2) 15:47:04 executing program 6: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "66811f68e0c440bba4bcf609493241b2512dbb6769ef1fdb21219441b9d2937255c56ea8b443729c72bc47cf6386f73b7ce88432ac6f99b63a93b89e7443b46a773671dded77dc24ba79debef1df5ffcd9e2222930e25f8b7e1873aae1853d7d55b7b3b64a43657809e8ea816519bc0c7323593b9e24a473e537db27b2a3ba9b30d958d7ff8d4867d47df99ca9958a196ce0c3c2c20e2a72af42aafe94c107a043d58527121953dfabf2d3ba6f3e7b2f09c47a4a55c3f5a3e68724037035d781567270a828be9bbe626a85ac9fe77bfa461f8903fcd4986a3dcc6fa6ec88fc174630b23dd02e3cf61e2117f78c9d99aa7daf6f8a7d6c4a01ad17f50051be2848", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {0x0, r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) [ 1331.469412] FAULT_INJECTION: forcing a failure. [ 1331.469412] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.470531] CPU: 0 PID: 8418 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1331.471106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.471810] Call Trace: [ 1331.472041] dump_stack+0x107/0x167 [ 1331.472354] should_fail.cold+0x5/0xa [ 1331.472688] should_failslab+0x5/0x20 [ 1331.473014] kmem_cache_alloc_bulk+0x4b/0x320 [ 1331.473396] io_submit_sqes+0x6f76/0x85c0 [ 1331.473749] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1331.474172] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1331.474608] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1331.475032] ? lock_downgrade+0x6d0/0x6d0 [ 1331.475398] ? find_held_lock+0x2c/0x110 [ 1331.475770] ? io_submit_sqes+0x85c0/0x85c0 [ 1331.476163] ? __mutex_unlock_slowpath+0xe1/0x600 ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r4, r3, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004df00)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "f7ae898032b65c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r10, r9, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) [ 1331.476595] ? wait_for_completion_io+0x270/0x270 [ 1331.477106] ? rcu_read_lock_any_held+0x75/0xa0 [ 1331.477506] ? vfs_write+0x354/0xa70 [ 1331.477839] ? fput_many+0x2f/0x1a0 [ 1331.478152] ? ksys_write+0x1a9/0x260 [ 1331.478488] ? __ia32_sys_read+0xb0/0xb0 [ 1331.478853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1331.479338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.479806] do_syscall_64+0x33/0x40 [ 1331.480138] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1331.480592] RIP: 0033:0x7f09e0b8db19 [ 1331.480927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.482639] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1331.483314] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1331.483941] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1331.484548] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.485147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.485746] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r15, r14, "66811f68e0c440bba4bcf609493241b2512dbb6769ef1fdb21219441b9d2937255c56ea8b443729c72bc47cf6386f73b7ce88432ac6f99b63a93b89e7443b46a773671dded77dc24ba79debef1df5ffcd9e2222930e25f8b7e1873aae1853d7d55b7b3b64a43657809e8ea816519bc0c7323593b9e24a473e537db27b2a3ba9b30d958d7ff8d4867d47df99ca9958a196ce0c3c2c20e2a72af42aafe94c107a043d58527121953dfabf2d3ba6f3e7b2f09c47a4a55c3f5a3e68724037035d781567270a828be9bbe626a85ac9fe77bfa461f8903fcd4986a3dcc6fa6ec88fc174630b23dd02e3cf61e2117f78c9d99aa7daf6f8a7d6c4a01ad17f50051be2848", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000004ef00)={{0x0, 0x8f99, 0x7fffffff, 0xffffffff, 0x1f, 0x1ff, 0x2, 0x48, 0x7ff, 0x7, 0x1, 0x1, 0x66e, 0x5, 0xffffffffffff0000}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ef80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f180)={0xec, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r7}, {0x0, r10}, {}, {r14}, {r18}, {}, {0x0, r19}], 0x0, "0508b7c383ce9c"}) r20 = io_uring_setup(0x62c, &(0x7f0000000280)) r21 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r20, 0x3, 0x0, 0x0) r22 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r20, 0x13, &(0x7f0000000140)=[r22, r21], 0x2) 15:47:04 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000040)="6654bdc280dd16c71256576704d599", 0xf) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:47:04 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 15:47:04 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000b00)) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xfa, 0x4, 0x0, 0x1, 0x5, 0x3, 0x5, 0x3f, 0x272, 0x40, 0x2c4, 0x7f, 0x8000, 0x38, 0x1, 0x4, 0xff, 0xff}, [{0x2, 0xaff, 0xd11, 0x6, 0x943, 0x5550, 0x2, 0x7ee}], "2c4f3dd9ed8731a8858e775b5c14aea70f620c1f299a83ae41c5e155b35d92df0f7b5d6f1d3ae2a4fd36bff6a01aaa268e0b38073c2376e51816fbc86e21dbfb4731009e1a7165cc27b26a36506adba8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7c8) [ 1331.518449] FAULT_INJECTION: forcing a failure. [ 1331.518449] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.519742] CPU: 0 PID: 8404 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1331.520309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.520996] Call Trace: [ 1331.521220] dump_stack+0x107/0x167 [ 1331.521526] should_fail.cold+0x5/0xa [ 1331.521843] ? create_object.isra.0+0x3a/0xa20 [ 1331.522226] should_failslab+0x5/0x20 [ 1331.522547] kmem_cache_alloc+0x5b/0x310 [ 1331.522890] create_object.isra.0+0x3a/0xa20 [ 1331.523256] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1331.523685] kmem_cache_alloc_bulk+0x168/0x320 [ 1331.524069] io_submit_sqes+0x6f76/0x85c0 [ 1331.524429] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1331.524845] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1331.525252] ? lock_downgrade+0x6d0/0x6d0 [ 1331.525598] ? find_held_lock+0x2c/0x110 [ 1331.525940] ? io_submit_sqes+0x85c0/0x85c0 [ 1331.526305] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1331.526716] ? wait_for_completion_io+0x270/0x270 [ 1331.527121] ? rcu_read_lock_any_held+0x75/0xa0 [ 1331.527518] ? vfs_write+0x354/0xa70 [ 1331.527830] ? fput_many+0x2f/0x1a0 [ 1331.528136] ? ksys_write+0x1a9/0x260 [ 1331.528450] ? __ia32_sys_read+0xb0/0xb0 [ 1331.528800] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1331.529233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.529668] do_syscall_64+0x33/0x40 [ 1331.529977] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1331.530402] RIP: 0033:0x7f991b285b19 [ 1331.530712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.532232] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1331.532872] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1331.533464] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1331.534054] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.534643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.535233] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:47:04 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 15:47:04 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x8, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:47:04 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) dup3(r1, r0, 0x80000) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) [ 1331.631121] FAULT_INJECTION: forcing a failure. [ 1331.631121] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.632199] CPU: 0 PID: 8440 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1331.632737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.633391] Call Trace: [ 1331.633610] dump_stack+0x107/0x167 [ 1331.633905] should_fail.cold+0x5/0xa [ 1331.634218] ? create_object.isra.0+0x3a/0xa20 [ 1331.634587] should_failslab+0x5/0x20 [ 1331.634893] kmem_cache_alloc+0x5b/0x310 [ 1331.635222] create_object.isra.0+0x3a/0xa20 [ 1331.635587] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1331.635997] kmem_cache_alloc_bulk+0x168/0x320 [ 1331.636372] io_submit_sqes+0x6f76/0x85c0 [ 1331.636711] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1331.637122] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1331.637530] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1331.637931] ? lock_downgrade+0x6d0/0x6d0 [ 1331.638272] ? find_held_lock+0x2c/0x110 [ 1331.638607] ? io_submit_sqes+0x85c0/0x85c0 [ 1331.638965] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1331.639355] ? wait_for_completion_io+0x270/0x270 [ 1331.639754] ? rcu_read_lock_any_held+0x75/0xa0 [ 1331.640135] ? vfs_write+0x354/0xa70 [ 1331.640436] ? fput_many+0x2f/0x1a0 [ 1331.640730] ? ksys_write+0x1a9/0x260 [ 1331.641040] ? __ia32_sys_read+0xb0/0xb0 [ 1331.641376] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1331.641798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.642225] do_syscall_64+0x33/0x40 [ 1331.642528] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1331.642950] RIP: 0033:0x7f09e0b8db19 [ 1331.643249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.644742] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1331.645353] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1331.645934] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1331.646510] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.647086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.647662] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:47:18 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x300, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:47:18 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:47:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 15:47:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 15:47:18 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_targets\x00') r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000800)=0x800) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = dup3(0xffffffffffffffff, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000680)="4391d4fbacf065992e7b59ce882fafe0322957561083c86e6f4aa37580da180b0d7ee985a64045e6b4791bcd49aa84077f67e3e1a390073a986dee27d882dc9224f4bfac91b6ad3ca9701cbfb3fd03148e4c4f35f99e4a3a828a03d636cee62bce13d55989627673cf9c5dd4a4590ba56612c606151ec969c87366cd9dadda6ef7e68c511c14f2907b6cb32d453ff1552dc23f4504c11442148213cf781406c83d8dae3503caddea1ad35e1e1ff2a25657defc6c5d69da", 0xb7}, {&(0x7f0000000740)="8637d1f0847cb2d3a8b1bdaba1f811b68eb62b4c3d52bf6c2435cf946ce3f1a014f57da4035655b7613f3cec62ec26fc8884e7e1a0bd6f188e9bc8a83d6c34dcd62f957cf724b2a0f28263036504821ebd6e3843802aa01e25a6228e8288637729e330c66ccde1fe7d1f45f0f2bc7a642efd80604b394de638d9b84513a56b620b381d7048b6b05113aa31e898a80eeaa199b446a115d185fb3a16684b9ff448dbebdb7c", 0xa4}], 0x2}, 0x0, 0x8abb4d2a8b028460}, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r8, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="40e767492458959aa575fac19888a02f1e6092179a21ee5e8bfb03ce96df62dc13272f3f4568f89fa8ea50acaf1e0c900c93d9663bbd7643756456dc2dfd506899f1e9f0ff19b1d1f0812238fc6c9bcdc0f600afe33bc103023e8b2bb4cc92c738e1fa3f0ffa2211fe5368acf42e0c01babb64703d5fb35ab6d504fdd0a67c311a", 0x81}, {&(0x7f0000000440)="0bec99123e1714961f75e17bb39237611371330d636d435c62281815a6517e6f1b681cd4f6df8dca51a621a363135a67616bb88ea83ac0778b73a4959482bd3ef7ba70261a98", 0x46}, {&(0x7f00000004c0)="a37d83e4e70fa94de90abc41bdf4f7595a9004479bbe870a87da482ef94f3421840212aa3eff77264378f1ba68467b8525e1e90f549ed463cbad48c2fa5e971ce5560e64cfed36e9db93d126e19122c949ae8a623e3c1e01cc54c7eee06ff40cf4e35a0be0702041d9b9ef329fd25f84ae911c50279e31a8d2abc6504508a0d45233ab8c6e1f393e60077a6ad795f2b89f6ace1cc8970869f88487c49fd96a41986db2", 0xa3}, {&(0x7f0000000580)="16f1e5fe56f539045b0f3d3c16aba143aa6d9e2e2bb15d6a6f9dbe3e90f2a225db0ddaa0348a03ad0480f2f3060265ab118e32f65fbf0ecebd710efdececebbe19b2478a0f0dc6da6e51d2e99da63428b213ac5f49c46cf8cdea9b82b1f928ebf9f33eddfddef95cf6d1b291acbaf419510c37a154d0e6b15afab9d2c28759222592610ceb501fc92d3c7abcde47eff67243deb42e1a39c030e2a23d6ec73ebb18378aa2121eaa6e12103346652ea9728219798ed678ec974584f0360945cf4a2f86f60ef312b704", 0xc8}], 0x4}, 0x0, 0x8abb4d2a8b028460}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, r5, r8]}, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r10, r9], 0x2) 15:47:18 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = io_uring_setup(0x62c, &(0x7f0000000280)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) r5 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {r6}}, './file0\x00'}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r7, r1], 0x2) 15:47:18 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r1], 0x2) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c00000005304040025bd7000fddb601b0a9b4cf36d2986aca688cfe03ff6df25e0a00fc6573f07c2e8a624cc470217d38c5942819c400022764a68e04c813221f7bfa7e3b402905561d94e6d0f75e5e8ca08a544da2ccd75b84a438e67ebecb04752001575eca588b3ceeeccabb55932184df696b53c99ba66ebcdcefa91aa5ab860c2f430569338ecfcc24dba9c0ca2e0863be24f5f430d6f7be78345cc4b3b3f55089e2750658d24937c6771290f6ab936675fffbb0573e114182213d2133e1777477a61840dd2e6c57dcdc0020000"], 0xc0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = io_uring_setup(0x62c, &(0x7f0000000280)) r5 = inotify_init1(0x800) write$binfmt_elf64(r5, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xaf, 0x7, 0x5, 0xf3d, 0x2, 0x38, 0x1, 0x3bc, 0x40, 0x170, 0x10000, 0x8, 0x38, 0x1, 0x5100, 0x4, 0x1c1}, [{0x5, 0x80, 0x6, 0x20, 0x4, 0x6e8e, 0x8, 0x10001}], "a3648e35170ea3c618ba534c1fc8385f0a9f87a3b2bb0b25aeb90572733360982a46f65414b5e716cdc3aa4aa5d766f17bd9954607f20ab82b77c16bf53e1531a6cc4d98576d69d31a386d70d1637443c340653e14e3956f2eaa78f929041f0b3d7ac5f04853382f3ae74f85c6592d8cf96ce9b0a2a9d06ecd5a892a3a4a7ec50abd1925d608650586e9424881fac319a5bd670f700bf6c3c0966175b3a988a3bfd6f47c4b87bfae153248f4da732c018c7e5125af4c98216e4aa19d4a770c6ec20367c13cb6686be14f88c88cffa832439972da6080f8aa77a8318d566eab0a2f5e3251905135ac2cbca75172dc56cee2cfe3135cd24e20bfd3706b07e5354b846c7ab43e9c7053023fd68fda55e04c2633c1fad322482efaf9c9e4a5e882529452ea4582bb2464c5614ea0adfe4e3b5599275ad8434f848fb1d82e8c2f895d1c239929007dc39082c7a7fdd10078693b935a9aa167d4442df489a9ae4add99ff3f01f671f8687554b7f39e3e007c735e77de33933f123d7fb40304f91f54316247c637a900bc1d83c73362690acf88f442a4e46cce26f3b31e18dc49117ad279c1c7035b63781f4a6c3dea4593e97e6afa261a4cd5dfcc86440e326045d2c677767ce6eac05ceb7de538d80c8af867aea5c0e35ccdc82b95175f88bbe6c1b6113e36fb9709a45ca042b25887ebb1634cd84ba93b3da5e62cd4fe75609a930d359285082f2f6764539e2b1ffec78d62237ea89a97e2f2ab0d664f6d83f6ce65e3e80b72efa4c22c9a790a838814dabba5fc4d1f45890c0d3907fb20daa118fa262a307c460743a3a511d766cb55741f9405e54723ca8e6360ec9b3c6090611ccdc9c971a9442eecff8041a972e6aae73886e3b3b17c1d162e592967d19f98a6ba54ccf3e97b55df0029ffa8dc5f11cf0af88ece29b3b9e894453329a17e3c755542dafb51d6a1412c218ee940bd543e13de00dbe7f0d3a7c9c26566ef649e26f92fea6f6e85051ab3d5cad58c8ed1cc3360261e8fbb2e2a45060f72238a500324c8cb97ecc1d24f14d75fe0837fff6774784da6068ecc64f302b866010f8e713940559631faebba1875c9d8e98d9b1f8c86b83555c751d5aff43c76960a354f658a3fe550ff4dd3fa952fdc6d2c2911ff55c26cf3e84f3ad4cc0761f1341f0a19d74dde707b3538c9e0596efc306ffbc9093e8d4e95270277157ddf4c00a0f98c0eb923e3941e90a2377b769240dd884f8fc49c94f17329e6c865e691f4393f3a23cb656ed6e1e3787dfad6651fdaee40e1aea43638ffe591d9578bd865bd2df3a3228e4ced443cb03c4205291ae77709afdd7b63261acf35b6ca3d341d56547d14d471d44f66285ebd60a4676bd8fd9ed7637dae80c384cfb7dac3f4e0c03414fa97d01f4cd8b2f17869787df2134445c9ad386513b5856d2db3a9f2fe5179293b7ca90a7fae17d130edfdf9ea8ef96b605ba26c11c772ff27a8291dbb541296096da2f5b2b3cebbe7cd48008f71e4f5266e9bb2192be2ea5a1eebc22ee23a5035505a759744ef7c87258e4ca3986be26481891b1561620dc755ba08903ea58e4f126dbdb6f97aa1a2347ba6d962c37734a85005d53f2bf7f2a4ff6c60a6c0705b02b341561e0ea2f04bedfb6bafde3b884210ee7ae31aeb749ed5777d190019715ef5ac7adba4f7694023e14d855132d8eb4558da50a4284b78a3958b36b541d22186c09113194f765f3d24df058fda61c786eef266948188243243ff1292516bcb4cf80360c4aece5fb62205b0ca2da2c8c084d9356df725a20bf7b96868861fc4ff0e0755e2a7fc16f367473c64572917639ade2678d93797dc629811872956cfca28712c7b47c9fc34b8ef888772bd28fc5d24dcf9d5ca59f0d3509296acc0bd5b5d856940ba4a3ba16bc29556b29edc57e842fc38f135ed269ddb15d2ac38fbb38307d079d7d69f3f47a4afcb2c468568350f8ca96fde18cb86dc29c84eb71af95053a83ac026ce112b9571a51633c7f59b9090f2dbaa523d221a75c9b58966b38c24b3adfa44e39b06e779e30a57ffad8ad37d52ba74488c238146115febfcceda766af3dba4c20ae373138545056fb67733baf9e2b45df1315d1e40b2a5c6355dcfd5df127b5f89511ded527400100285f8e8f29d055a381ce032a46e4f3114aec815e5a93a2acb25df317118639a282528d68a98723a4a11be9bba792c9aebb3000685353adbfe483a95af5f8dd47d4aebf6fb32228df01578249c810a8d474936d6ce713f43d6e3e694d85f59f8236f130bd76d6ef32d9fbc3bbe922f47e7d6975ace69df33e7102cd4803208db68c54b79d0a17f00bdfb9cb746d499e97a1be8dd48903c26195af8c01eeebd52cc127b369394de1291400ecfc1db678e3d8de0800d7a00389fe1ba86582e371281c9ed86c07550ffeb2b458c07331dc5bd64844e1ef5eff0ee668645bd46083c02a419a261e580a42e6b8a3384e048b9b00d95415dea2da2595de13b5ac8f5b6b5b041e9c153b151d7076b1e07c3d2f6bc7c619cdf5bdd293b85a231647c59958aeefe6d3e3122ddc0575b9572433aea5bb939422601f7af5e2a174d751b40b389de1995880e5a6c1efd5acde71a2ad9cc80abafa4ca92d9b0f6c543513f4acb11217ea3cef3144a3a904b4f1bf82458072ac4f5b2d384615b75dc2193e8aa92e1c5fd0f330500bb957f21b3fed701d203daf1c6c19a9db4b8ad83232903fd96479ff8e1b312ea2dfa69ed8e6cdfac19b0517bbcf0decf807d54d665825fb7be77808a1972436726d67af68c33912aea968899675e97148f4690db10b84db886faccf02dbdfc0eba76ca8f4f937460018d554d546288b492cfc4dc2f4ab8a83e55419e881c073c6bc473d3abf1e32ea842d964eee405364d57be804f295ec37f808ffab45754a36a4cbccbb4915079286f0059f249e3f32dc1336be0db77b2f0618e743224db5fe9e0bb4857ff1be1761058b4f8a7046de4be3cebad41e82a2d5fc4699d4daa24caf5902869b1a0705e79d937634d081ee06f19c1bd687f934c7e30014f8e240dce731910969ac0829645e1cc83446ee1fe04d015d1128bab7e1defd0edf8e3278ec931d120a5339045df7d75c653f256c010e0fec6edc6d8d088c45c52295ed2fd203a8f94f7b1a79e950eda588251764e37024f77be3b6d93afe1026a08de97d28ae24722e5523633a1e3aa38befa2327156e8aae3d51c72d14098be1e8419a46d3dd939e0bb146e6cc36c1ac021d40db4c7ffa2cd928f6b07130602563350422789c4b8782472480e305dd18a9464591d0d30289fa9a8d7bcd89a3bad7c98721984b67efc1233063fef7d0d21d527db846c1f7a21ff4d297275142754c595544ec2a5bf27114dee6a9c06149f82bd3604f97c28de60b36fa4d784675946fe5de37cbae3300a269ee06b772275086d36cf98a6786b1da730c745f7654919fdafffc5e9dfceb3d6578ffc99f74b78bbcd7848e74225fefffa2665e2143ba673d90515c301abe121fdffb4dba0e26adc02d72fc5b237da2448864931d0e5e820c0bce59b54d4ec00e706da1a7c304a692507f0e067125e2e97dd299c55d4ba8271d9102fdf78eea6a787f90c57cbfb8c2189aa94316fec270be66564f33ef6a431656420b2dbd04138c390b97bfbc78c54bb254ad04d53bcd1e4cd4339a15b801bb5c602296fe5b9b1ad01ade05438c5c56e5757bb1a76a6285a49c80edd959bd422b1a6ce8864e9d14718b40277b82a6ac026c79845134935f76a374b99e9b951f1d1b4c53dd6033a5fba76a8f59879da711a2ab89aab393cb7d7bea9602af6fb32841e166a29351846428581e58fe83983ce80cdfe4166ac43d6966ec1edc55b268adf826c3d04e787b9dc16e4cd847acaa12199899515e9d0ffc9c4833347c33478392f6e300388a6a3017627c3f8111dce42ac8d8f93f2b603d8ea0a72c345c82502eaba5b627c9fa47601850a16938fe90c8ebbe66baf33cdbe3eedb91b6e2522a3e3bc8a66106cc41afd18465b97a18a6b9ca682a97c26e3b75a09e544a502efa7693560b6e6f02f60df19539df162ae70f60e7c589b0235cfbc747ded32f3479148663ee512ebb6648830a1a350ac2264646107cfe0f44d1b0a35c80a51f484ef4fccb76b4776453bc1effe32d65f31fa446ed6adb012f9e624259e0a936f279926daddb1792c34d4d07e98068b6751fe4015b742a78d6a79ea477ad436fc397db7df3c3fd14859fb25f17f13ca44a2a3adf31f9cb9bf0c21356de31b67f7759451a3b034065558123edce06a175beae0a43d1570cace9e185a901573f7d6f79e116053d723ef4ffb1462b6404b9eaf6728e9ba4588e271b8b1a808e32ba952eaa87fddd45b541f6ea099c9bbf28dead4ebbdd0c2fc59ae94f0e54917187d3cef3088b769b046416ff7a4630a4ca5e356b9c763f884108c7545899bd56711828df9d4b523e0840e8d9bb7f0af66dd978901349d3acb7850b9a38ed4e308b4cce53034b2409371adc916c1c21cc5874f652c9389994004c97eed2d6009e8ac515b5a2a28985ac1b0da4a5ceb6378fab6d2a3ad80f61bb2e433b2760a7c394d0e2076a4ff9899b0316ce19271e5a45dc3c1c2db1872273b8fa5850fbad1159c0967e183f659ec6435b516dde7bd8c82123e3f0cecfcebde03f18269d3db9c9b79f15add722db70d54200dda884f07b667b59c62c7002afa85becd02281166c66e31d355ee91cd32ce98ad7f2c83adccdaec744d95c7b54b2de3e1d3e19cf06ac70a431bb159799f6b14ccc4dd5a24d6cfe97cc02caa2fc42f2b6a6a67b8c271a8de110529e09838968dfa4fa03f55501e1139d0305457ae424d7b44d35ec489817b358b9aada79f935dc1f9da7c949310699bc2ee3e67772907c2fc16771fb52ea89a9d5a60897f75989840bb617c971d4769c682c39a80917d4ec83a1e66b09bff48d28293e1c2277c7454196b185ba162818e74d08ce6db4ba2a9acc3da393d039e8a366ff87c7751857332812047965dd6b821b66ce65a59dab4d88b1cb41b49190cce561920b2d4602a605f32fe89ba17121029bb11874e7788bebf4b31341f94d892984874f5aba04c25f266196a1c34e2e2a850d95403f6809a947b23512c9034719c1d0d6d5cb0d23df8e8db5b6b47589c7c2807b7b5b4d238c5312c74d149c0a740997fbf339e20aaa34771e8d1b7cb4aa2c309f148360322cbd8a84ac68107b49bb8771ce2d74500c5ecaf6e6d29065e8707463494331b00f2e9c18250e2432cae84b8d710ac25f6631d030bd87ffe95de8115e4bb22341622730f15072c1efa6347a91e2d354f6790fbfe399d33d61d5e1c327bcafb5937221fe530d1a743cf18523aafe21d64c6625b199e59a718238664b1fb647ef58d2b3d81a2e0780f507c782dc094a6b6184175d396cee6aa02da190d64655a7a96a99c411f006f06aab9d9fc8e68d0e96e530d0ef306eaad4ab9d3d81a7abb6b1d3b9e6f714b903b3cdf0c868e7ad1ee4e27169d6180397d316d7a210effc694adda9452dca638c98653897c37c5903d21308b98e2013400d0c24b1f2e8c45b6321179b5b3bc37a66d17e581929ec75286d088a394bf0416df79e6d65b0ec6c8d20130a3b9a188da6fc826626af159006535d9a9baff110eed5c62a3d4418b13dec8d4b5d12ced99df2e171793ef0ac2636b7291105ee75c73521199e6997208ae2c2a8d697f28ce73c4edaf804db4d5c5cbb5304ecc949572368f7b3272de23ebd61779c228f6f18", ['\x00']}, 0x1178) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x13, &(0x7f0000000140)=[r7, r6], 0x2) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 15:47:18 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1345.687266] FAULT_INJECTION: forcing a failure. [ 1345.687266] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.688347] CPU: 0 PID: 8457 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1345.688957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.688961] Call Trace: [ 1345.688978] dump_stack+0x107/0x167 [ 1345.688990] should_fail.cold+0x5/0xa [ 1345.689004] ? create_object.isra.0+0x3a/0xa20 [ 1345.689018] should_failslab+0x5/0x20 [ 1345.689029] kmem_cache_alloc+0x5b/0x310 [ 1345.689041] ? mark_held_locks+0x9e/0xe0 [ 1345.689054] create_object.isra.0+0x3a/0xa20 [ 1345.689064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1345.689078] kmem_cache_alloc_bulk+0x168/0x320 [ 1345.689094] io_submit_sqes+0x6f76/0x85c0 [ 1345.689105] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1345.689128] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1345.689138] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1345.689151] ? lock_downgrade+0x6d0/0x6d0 [ 1345.689159] ? find_held_lock+0x2c/0x110 15:47:18 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x41ed, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:47:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) [ 1345.689172] ? io_submit_sqes+0x85c0/0x85c0 [ 1345.689189] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1345.689201] ? wait_for_completion_io+0x270/0x270 [ 1345.689215] ? rcu_read_lock_any_held+0x75/0xa0 [ 1345.689224] ? vfs_write+0x354/0xa70 [ 1345.689234] ? fput_many+0x2f/0x1a0 [ 1345.689245] ? ksys_write+0x1a9/0x260 [ 1345.689256] ? __ia32_sys_read+0xb0/0xb0 [ 1345.689268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1345.689279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1345.689293] do_syscall_64+0x33/0x40 [ 1345.689303] entry_SYSCALL_64_after_hwframe+0x62/0xc7 15:47:18 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1345.689310] RIP: 0033:0x7f09e0b8db19 [ 1345.689320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 15:47:18 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0xed41, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:47:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 1345.689326] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1345.689338] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1345.689344] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1345.689350] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.689356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.689362] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1345.706571] FAULT_INJECTION: forcing a failure. [ 1345.706571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1345.706634] CPU: 1 PID: 8462 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1345.706643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.706649] Call Trace: [ 1345.706672] dump_stack+0x107/0x167 [ 1345.706691] should_fail.cold+0x5/0xa [ 1345.706715] _copy_from_user+0x2e/0x1b0 [ 1345.706745] __copy_msghdr_from_user+0x91/0x4b0 [ 1345.706774] ? __ia32_sys_shutdown+0x80/0x80 [ 1345.706811] ? __lock_acquire+0xbb1/0x5b00 [ 1345.706849] sendmsg_copy_msghdr+0xa1/0x160 [ 1345.706875] ? do_recvmmsg+0x6d0/0x6d0 [ 1345.706903] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1345.706950] ___sys_sendmsg+0xc6/0x170 [ 1345.706976] ? sendmsg_copy_msghdr+0x160/0x160 [ 1345.706996] ? __fget_files+0x26d/0x4c0 [ 1345.707013] ? lock_downgrade+0x6d0/0x6d0 [ 1345.707028] ? find_held_lock+0x2c/0x110 [ 1345.707053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1345.707071] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1345.707085] ? trace_hardirqs_on+0x5b/0x180 [ 1345.707103] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1345.707128] ? sockfd_lookup_light+0x112/0x180 [ 1345.707144] ? sockfd_lookup_light+0x140/0x180 [ 1345.707167] __sys_sendmsg+0xe5/0x1b0 [ 1345.707184] ? __sys_sendmsg_sock+0x40/0x40 [ 1345.707217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1345.707234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1345.707247] ? trace_hardirqs_on+0x5b/0x180 [ 1345.707269] do_syscall_64+0x33/0x40 [ 1345.707285] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1345.707296] RIP: 0033:0x7fdda5114b19 [ 1345.707312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.707322] RSP: 002b:00007fdda268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1345.707341] RAX: ffffffffffffffda RBX: 00007fdda5227f60 RCX: 00007fdda5114b19 [ 1345.707351] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1345.707360] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.707370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.707380] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 [ 1345.725519] FAULT_INJECTION: forcing a failure. [ 1345.725519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1345.725532] CPU: 0 PID: 8458 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1345.725537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.725540] Call Trace: [ 1345.725553] dump_stack+0x107/0x167 [ 1345.725564] should_fail.cold+0x5/0xa [ 1345.725579] __alloc_pages_nodemask+0x182/0x600 [ 1345.725592] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1345.725614] alloc_pages_current+0x187/0x280 [ 1345.725626] allocate_slab+0x26f/0x380 [ 1345.725640] ___slab_alloc+0x470/0x700 [ 1345.725654] ? io_submit_sqes+0x6f76/0x85c0 [ 1345.725673] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 1345.725683] kmem_cache_alloc_bulk+0x1ec/0x320 [ 1345.725696] io_submit_sqes+0x6f76/0x85c0 [ 1345.725726] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1345.725736] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1345.725749] ? lock_downgrade+0x6d0/0x6d0 [ 1345.725758] ? find_held_lock+0x2c/0x110 [ 1345.725771] ? io_submit_sqes+0x85c0/0x85c0 [ 1345.725787] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1345.725800] ? wait_for_completion_io+0x270/0x270 [ 1345.725812] ? rcu_read_lock_any_held+0x75/0xa0 [ 1345.725822] ? vfs_write+0x354/0xa70 [ 1345.725832] ? fput_many+0x2f/0x1a0 [ 1345.725842] ? ksys_write+0x1a9/0x260 [ 1345.725853] ? __ia32_sys_read+0xb0/0xb0 [ 1345.725866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1345.725876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1345.725889] do_syscall_64+0x33/0x40 [ 1345.725899] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1345.725905] RIP: 0033:0x7f991b285b19 [ 1345.725915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.725921] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1345.725932] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1345.725941] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1345.725947] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.725952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1345.725958] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1345.801564] FAULT_INJECTION: forcing a failure. [ 1345.801564] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.801597] CPU: 1 PID: 8471 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1345.801608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.801613] Call Trace: [ 1345.801636] dump_stack+0x107/0x167 [ 1345.801654] should_fail.cold+0x5/0xa [ 1345.801674] ? create_object.isra.0+0x3a/0xa20 [ 1345.801694] should_failslab+0x5/0x20 [ 1345.801712] kmem_cache_alloc+0x5b/0x310 [ 1345.801730] ? mark_held_locks+0x9e/0xe0 [ 1345.801756] create_object.isra.0+0x3a/0xa20 [ 1345.801782] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1345.801815] kmem_cache_alloc_bulk+0x168/0x320 [ 1345.801849] io_submit_sqes+0x6f76/0x85c0 [ 1345.801875] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1345.801930] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1345.801955] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1345.801983] ? lock_downgrade+0x6d0/0x6d0 [ 1345.802001] ? find_held_lock+0x2c/0x110 [ 1345.802023] ? io_submit_sqes+0x85c0/0x85c0 [ 1345.802050] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1345.802073] ? wait_for_completion_io+0x270/0x270 [ 1345.802096] ? rcu_read_lock_any_held+0x75/0xa0 [ 1345.802112] ? vfs_write+0x354/0xa70 [ 1345.802128] ? fput_many+0x2f/0x1a0 [ 1345.802150] ? ksys_write+0x1a9/0x260 [ 1345.802171] ? __ia32_sys_read+0xb0/0xb0 [ 1345.802195] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1345.802212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1345.802236] do_syscall_64+0x33/0x40 [ 1345.802257] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1345.802272] RIP: 0033:0x7f09e0b8db19 [ 1345.802290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.802304] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1345.802327] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1345.802339] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1345.802351] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.802362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.802372] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1345.831557] FAULT_INJECTION: forcing a failure. [ 1345.831557] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.831693] CPU: 0 PID: 8474 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1345.881475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.881478] Call Trace: [ 1345.881495] dump_stack+0x107/0x167 [ 1345.881507] should_fail.cold+0x5/0xa [ 1345.881531] should_failslab+0x5/0x20 [ 1345.883868] kmem_cache_alloc_bulk+0x4b/0x320 [ 1345.883884] io_submit_sqes+0x6f76/0x85c0 [ 1345.883910] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1345.885287] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1345.885301] ? lock_downgrade+0x6d0/0x6d0 [ 1345.885318] ? find_held_lock+0x2c/0x110 [ 1345.886681] ? io_submit_sqes+0x85c0/0x85c0 [ 1345.886697] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1345.886715] ? wait_for_completion_io+0x270/0x270 [ 1345.888120] ? rcu_read_lock_any_held+0x75/0xa0 [ 1345.888504] ? vfs_write+0x354/0xa70 [ 1345.888809] ? fput_many+0x2f/0x1a0 [ 1345.889116] ? ksys_write+0x1a9/0x260 [ 1345.889428] ? __ia32_sys_read+0xb0/0xb0 [ 1345.889777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1345.890203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1345.890640] do_syscall_64+0x33/0x40 [ 1345.890949] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1345.891372] RIP: 0033:0x7f991b285b19 [ 1345.891685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.893200] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1345.893825] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1345.894401] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1345.894973] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.895551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1345.896139] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1345.899345] FAULT_INJECTION: forcing a failure. [ 1345.899345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1345.901105] CPU: 1 PID: 8477 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1345.902096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.903308] Call Trace: [ 1345.903722] dump_stack+0x107/0x167 [ 1345.904272] should_fail.cold+0x5/0xa [ 1345.904852] _copy_from_user+0x2e/0x1b0 [ 1345.905449] iovec_from_user+0x141/0x400 [ 1345.906048] __import_iovec+0x67/0x590 15:47:18 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x80000, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) [ 1345.906616] ? __ia32_sys_shutdown+0x80/0x80 [ 1345.907446] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1345.908227] import_iovec+0x83/0xb0 [ 1345.908768] sendmsg_copy_msghdr+0x131/0x160 [ 1345.909409] ? do_recvmmsg+0x6d0/0x6d0 [ 1345.909978] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1345.910735] ? lock_downgrade+0x6d0/0x6d0 [ 1345.911340] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1345.912126] ___sys_sendmsg+0xc6/0x170 [ 1345.912699] ? sendmsg_copy_msghdr+0x160/0x160 [ 1345.913369] ? __fget_files+0x26d/0x4c0 [ 1345.913952] ? lock_downgrade+0x6d0/0x6d0 [ 1345.914562] ? find_held_lock+0x2c/0x110 [ 1345.915173] ? __fget_files+0x296/0x4c0 [ 1345.915766] ? __fget_light+0xea/0x290 [ 1345.916340] __sys_sendmsg+0xe5/0x1b0 [ 1345.916896] ? __sys_sendmsg_sock+0x40/0x40 [ 1345.917525] ? rcu_read_lock_any_held+0x75/0xa0 [ 1345.918199] ? fput_many+0x2f/0x1a0 [ 1345.918731] ? ksys_write+0x1a9/0x260 [ 1345.919293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1345.920066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1345.920808] ? trace_hardirqs_on+0x5b/0x180 [ 1345.921440] do_syscall_64+0x33/0x40 [ 1345.921983] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1345.922722] RIP: 0033:0x7fdda5114b19 [ 1345.923265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.925918] RSP: 002b:00007fdda268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1345.927025] RAX: ffffffffffffffda RBX: 00007fdda5227f60 RCX: 00007fdda5114b19 [ 1345.928061] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1345.929089] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.930116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.931143] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 15:47:18 executing program 7: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x62c, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:47:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 15:47:18 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r4 = signalfd(r1, &(0x7f00000000c0)={[0x7ff]}, 0x8) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[r1, r0, r2, 0xffffffffffffffff, r2], 0x5) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000180)=""/187, 0xbb}) [ 1346.032497] FAULT_INJECTION: forcing a failure. [ 1346.032497] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.034359] CPU: 1 PID: 8489 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1346.035351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1346.036564] Call Trace: [ 1346.036959] dump_stack+0x107/0x167 [ 1346.037491] should_fail.cold+0x5/0xa [ 1346.038057] ? create_object.isra.0+0x3a/0xa20 [ 1346.038726] should_failslab+0x5/0x20 [ 1346.039286] kmem_cache_alloc+0x5b/0x310 [ 1346.039892] ? mark_held_locks+0x9e/0xe0 [ 1346.040494] create_object.isra.0+0x3a/0xa20 [ 1346.041138] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1346.041878] kmem_cache_alloc_bulk+0x168/0x320 [ 1346.042548] io_submit_sqes+0x6f76/0x85c0 [ 1346.043156] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1346.043886] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1346.044608] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1346.045317] ? lock_downgrade+0x6d0/0x6d0 [ 1346.045920] ? find_held_lock+0x2c/0x110 [ 1346.046515] ? io_submit_sqes+0x85c0/0x85c0 [ 1346.047158] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1346.047866] ? wait_for_completion_io+0x270/0x270 [ 1346.048571] ? rcu_read_lock_any_held+0x75/0xa0 [ 1346.049247] ? vfs_write+0x354/0xa70 [ 1346.049789] ? fput_many+0x2f/0x1a0 [ 1346.050331] ? ksys_write+0x1a9/0x260 [ 1346.050886] ? __ia32_sys_read+0xb0/0xb0 [ 1346.051484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1346.052251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.053012] do_syscall_64+0x33/0x40 [ 1346.053557] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1346.054300] RIP: 0033:0x7f09e0b8db19 [ 1346.054842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1346.057497] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1346.058600] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1346.059639] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1346.060670] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.061706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.062745] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:47:32 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 15:47:32 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x440000, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:47:32 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:47:32 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 15:47:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:47:32 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ff0000/0xd000)=nil, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) shmdt(0x0) shmctl$IPC_RMID(r4, 0x0) r5 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ff9000/0x2000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(0x0, &(0x7f0000fef000/0x4000)=nil, 0x3000) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000001100)=""/118) syz_io_uring_setup(0x77c3, &(0x7f0000001180)={0x0, 0xc496, 0x2, 0x3, 0x3bd, 0x0, r3}, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000001080)) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001200)=""/35) 15:47:32 executing program 3: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x38) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000080)=[r4, r5], 0x2) 15:47:32 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0xfeffff, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) [ 1360.052707] FAULT_INJECTION: forcing a failure. [ 1360.052707] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.054534] CPU: 1 PID: 8502 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1360.055547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1360.056773] Call Trace: [ 1360.057174] dump_stack+0x107/0x167 [ 1360.057717] should_fail.cold+0x5/0xa [ 1360.058288] ? create_object.isra.0+0x3a/0xa20 [ 1360.058966] should_failslab+0x5/0x20 [ 1360.059527] kmem_cache_alloc+0x5b/0x310 [ 1360.060132] ? mark_held_locks+0x9e/0xe0 [ 1360.060733] create_object.isra.0+0x3a/0xa20 [ 1360.061381] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1360.062137] kmem_cache_alloc_bulk+0x168/0x320 [ 1360.062815] io_submit_sqes+0x6f76/0x85c0 [ 1360.063429] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1360.064165] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1360.064902] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1360.065614] ? lock_downgrade+0x6d0/0x6d0 [ 1360.065846] FAULT_INJECTION: forcing a failure. [ 1360.065846] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.066217] ? find_held_lock+0x2c/0x110 [ 1360.066240] ? io_submit_sqes+0x85c0/0x85c0 [ 1360.066267] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1360.066288] ? wait_for_completion_io+0x270/0x270 [ 1360.066309] ? rcu_read_lock_any_held+0x75/0xa0 [ 1360.066324] ? vfs_write+0x354/0xa70 [ 1360.066341] ? fput_many+0x2f/0x1a0 [ 1360.066359] ? ksys_write+0x1a9/0x260 [ 1360.066377] ? __ia32_sys_read+0xb0/0xb0 [ 1360.066399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1360.066415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1360.066438] do_syscall_64+0x33/0x40 [ 1360.066454] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1360.066466] RIP: 0033:0x7f09e0b8db19 [ 1360.066482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1360.066491] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1360.066514] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1360.080996] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1360.082028] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1360.083066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.084111] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1360.085172] CPU: 0 PID: 8510 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1360.085761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1360.086463] Call Trace: [ 1360.086690] dump_stack+0x107/0x167 [ 1360.087000] should_fail.cold+0x5/0xa [ 1360.087326] ? create_object.isra.0+0x3a/0xa20 [ 1360.087717] should_failslab+0x5/0x20 [ 1360.088044] kmem_cache_alloc+0x5b/0x310 [ 1360.088391] ? mark_held_locks+0x9e/0xe0 [ 1360.088739] create_object.isra.0+0x3a/0xa20 [ 1360.089116] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1360.089550] kmem_cache_alloc_bulk+0x168/0x320 [ 1360.089947] io_submit_sqes+0x6f76/0x85c0 [ 1360.090316] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1360.090735] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1360.091154] ? lock_downgrade+0x6d0/0x6d0 [ 1360.091508] ? find_held_lock+0x2c/0x110 [ 1360.091863] ? io_submit_sqes+0x85c0/0x85c0 [ 1360.092235] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1360.092644] ? wait_for_completion_io+0x270/0x270 [ 1360.093057] ? rcu_read_lock_any_held+0x75/0xa0 [ 1360.093672] ? vfs_write+0x354/0xa70 [ 1360.093990] ? fput_many+0x2f/0x1a0 [ 1360.094298] ? ksys_write+0x1a9/0x260 [ 1360.094621] ? __ia32_sys_read+0xb0/0xb0 [ 1360.094969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1360.095413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1360.095861] do_syscall_64+0x33/0x40 [ 1360.096174] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1360.096608] RIP: 0033:0x7f991b285b19 [ 1360.096926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1360.098462] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1360.099108] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1360.099706] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1360.100307] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1360.100910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1360.101511] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:47:32 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000300)={0x80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb2, "fe405c5ae609b3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001300)={r3, 0x0, "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", "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"}) 15:47:32 executing program 3: sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4008010) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$dupfd(r1, 0x406, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x202, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="00000000000000000000000000000043db9ea609fcb20db4c23bf741e6e3ce2b34bed82801a33c7214773aea050dc2089c539e2b42dd591edc3ce0048369c5ff241d118f0cc57c68789c28a75de67735d9535b9ff91689adbfbaf94e5a16619e87305110d95b1068529ae7998c230b8e998181a6676130a8730382c98c236e6c2f92223ff422ed03f93da25dbdd84bc834d045aa8e64b802becaabb0f30d585f3c68665cba75960d6b84fc7afb", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x10ce, 0x10500) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000480)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/bus/clocksource', 0x442100, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r3, 0x0) pipe2(&(0x7f0000001740)={0xffffffffffffffff}, 0x80000) syz_io_uring_setup(0x3978, &(0x7f00000017c0)={0x0, 0xe36f, 0x8, 0x0, 0x2a4, 0x0, r4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001840), &(0x7f0000001880)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x240000, 0x11a) recvmsg$unix(r1, &(0x7f0000001780)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000018c0)=""/250, 0xfa}, {&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000005c0)=""/83, 0x53}, {&(0x7f0000000640)=""/112, 0x70}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001740)}, 0x10123) [ 1360.127663] FAULT_INJECTION: forcing a failure. [ 1360.127663] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.129726] CPU: 1 PID: 8515 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1360.130849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1360.132218] Call Trace: [ 1360.132662] dump_stack+0x107/0x167 [ 1360.133265] should_fail.cold+0x5/0xa [ 1360.133894] ? __alloc_skb+0x6d/0x5b0 [ 1360.134529] should_failslab+0x5/0x20 [ 1360.135160] kmem_cache_alloc_node+0x55/0x330 [ 1360.135914] __alloc_skb+0x6d/0x5b0 [ 1360.136523] netlink_sendmsg+0x998/0xdf0 [ 1360.137237] ? netlink_unicast+0x7f0/0x7f0 [ 1360.137938] ? netlink_unicast+0x7f0/0x7f0 [ 1360.138627] __sock_sendmsg+0x154/0x190 [ 1360.139276] ____sys_sendmsg+0x70d/0x870 [ 1360.139956] ? sock_write_iter+0x3d0/0x3d0 [ 1360.140655] ? do_recvmmsg+0x6d0/0x6d0 [ 1360.141297] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1360.142156] ? lock_downgrade+0x6d0/0x6d0 [ 1360.142845] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1360.143706] ___sys_sendmsg+0xf3/0x170 [ 1360.144360] ? sendmsg_copy_msghdr+0x160/0x160 [ 1360.145115] ? lock_downgrade+0x6d0/0x6d0 [ 1360.145798] ? find_held_lock+0x2c/0x110 [ 1360.146473] ? __fget_files+0x296/0x4c0 [ 1360.147136] ? __fget_light+0xea/0x290 [ 1360.147792] __sys_sendmsg+0xe5/0x1b0 [ 1360.148418] ? __sys_sendmsg_sock+0x40/0x40 [ 1360.149071] ? rcu_read_lock_any_held+0x75/0xa0 [ 1360.149757] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1360.150511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1360.151248] ? trace_hardirqs_on+0x5b/0x180 [ 1360.151880] do_syscall_64+0x33/0x40 [ 1360.152421] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1360.153154] RIP: 0033:0x7fdda5114b19 [ 1360.153699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1360.156331] RSP: 002b:00007fdda268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1360.157445] RAX: ffffffffffffffda RBX: 00007fdda5227f60 RCX: 00007fdda5114b19 [ 1360.158466] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1360.159495] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1360.160521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.161552] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 15:47:32 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x1000000, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:47:32 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:47:33 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0, r0, r1], 0x3) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) 15:47:33 executing program 7: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = io_uring_setup(0x62c, &(0x7f0000000280)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x13, &(0x7f0000000140)=[r5, r4], 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000040)) 15:47:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 15:47:33 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:47:33 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x2000000, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:47:33 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 15:47:33 executing program 3: r0 = syz_io_uring_setup(0x36ef, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) listen(r3, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1360.393285] FAULT_INJECTION: forcing a failure. [ 1360.393285] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.395085] CPU: 1 PID: 8542 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1360.396076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1360.397273] Call Trace: [ 1360.397662] dump_stack+0x107/0x167 [ 1360.398200] should_fail.cold+0x5/0xa [ 1360.398759] ? create_object.isra.0+0x3a/0xa20 [ 1360.399427] should_failslab+0x5/0x20 [ 1360.399994] kmem_cache_alloc+0x5b/0x310 [ 1360.400590] ? mark_held_locks+0x9e/0xe0 [ 1360.401184] create_object.isra.0+0x3a/0xa20 [ 1360.401895] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1360.402640] kmem_cache_alloc_bulk+0x168/0x320 [ 1360.403306] io_submit_sqes+0x6f76/0x85c0 [ 1360.403915] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1360.404630] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1360.405357] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1360.406066] ? lock_downgrade+0x6d0/0x6d0 [ 1360.406664] ? find_held_lock+0x2c/0x110 [ 1360.407260] ? io_submit_sqes+0x85c0/0x85c0 [ 1360.407905] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1360.408606] ? wait_for_completion_io+0x270/0x270 [ 1360.409308] ? rcu_read_lock_any_held+0x75/0xa0 [ 1360.409980] ? vfs_write+0x354/0xa70 [ 1360.410520] ? fput_many+0x2f/0x1a0 [ 1360.411056] ? ksys_write+0x1a9/0x260 [ 1360.411618] ? __ia32_sys_read+0xb0/0xb0 [ 1360.412216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1360.412976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1360.413727] do_syscall_64+0x33/0x40 [ 1360.414263] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1360.415005] RIP: 0033:0x7f09e0b8db19 [ 1360.415548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1360.418202] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1360.419299] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1360.420336] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1360.421362] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1360.422393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.423426] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:47:33 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) [ 1360.432185] FAULT_INJECTION: forcing a failure. [ 1360.432185] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.434030] CPU: 1 PID: 8549 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1360.435020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1360.436229] Call Trace: [ 1360.436631] dump_stack+0x107/0x167 [ 1360.437179] should_fail.cold+0x5/0xa [ 1360.437751] ? create_object.isra.0+0x3a/0xa20 [ 1360.438438] should_failslab+0x5/0x20 [ 1360.438997] kmem_cache_alloc+0x5b/0x310 [ 1360.439589] create_object.isra.0+0x3a/0xa20 [ 1360.440240] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1360.440980] kmem_cache_alloc_node+0x169/0x330 [ 1360.441645] __alloc_skb+0x6d/0x5b0 [ 1360.442180] netlink_sendmsg+0x998/0xdf0 [ 1360.442777] ? netlink_unicast+0x7f0/0x7f0 [ 1360.443406] ? netlink_unicast+0x7f0/0x7f0 [ 1360.443678] FAULT_INJECTION: forcing a failure. [ 1360.443678] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.444027] __sock_sendmsg+0x154/0x190 [ 1360.444047] ____sys_sendmsg+0x70d/0x870 [ 1360.444066] ? sock_write_iter+0x3d0/0x3d0 [ 1360.444081] ? do_recvmmsg+0x6d0/0x6d0 [ 1360.444100] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1360.444130] ___sys_sendmsg+0xf3/0x170 [ 1360.444149] ? sendmsg_copy_msghdr+0x160/0x160 [ 1360.444171] ? lock_downgrade+0x6d0/0x6d0 [ 1360.444185] ? find_held_lock+0x2c/0x110 [ 1360.444209] ? clockevents_program_event+0x14b/0x360 [ 1360.444231] ? __fget_files+0x296/0x4c0 [ 1360.444256] ? __fget_light+0xea/0x290 [ 1360.444280] __sys_sendmsg+0xe5/0x1b0 [ 1360.444350] ? __sys_sendmsg_sock+0x40/0x40 [ 1360.454537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1360.455303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1360.456061] ? trace_hardirqs_on+0x5b/0x180 [ 1360.456696] do_syscall_64+0x33/0x40 [ 1360.457242] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1360.457988] RIP: 0033:0x7fdda5114b19 [ 1360.458537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1360.461215] RSP: 002b:00007fdda268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1360.462322] RAX: ffffffffffffffda RBX: 00007fdda5227f60 RCX: 00007fdda5114b19 [ 1360.463357] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1360.464412] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1360.465453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.466495] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 [ 1360.467564] CPU: 0 PID: 8548 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1360.468585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1360.469798] Call Trace: 15:47:33 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x3000000, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) [ 1360.470198] dump_stack+0x107/0x167 [ 1360.470839] should_fail.cold+0x5/0xa [ 1360.471405] ? create_object.isra.0+0x3a/0xa20 [ 1360.472084] should_failslab+0x5/0x20 [ 1360.472642] kmem_cache_alloc+0x5b/0x310 [ 1360.473234] ? mark_held_locks+0x9e/0xe0 [ 1360.473832] create_object.isra.0+0x3a/0xa20 [ 1360.474473] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1360.475214] kmem_cache_alloc_bulk+0x168/0x320 [ 1360.475894] io_submit_sqes+0x6f76/0x85c0 [ 1360.476526] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1360.477256] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1360.477964] ? lock_downgrade+0x6d0/0x6d0 [ 1360.478557] ? find_held_lock+0x2c/0x110 [ 1360.479155] ? io_submit_sqes+0x85c0/0x85c0 [ 1360.479797] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1360.480498] ? wait_for_completion_io+0x270/0x270 [ 1360.481204] ? rcu_read_lock_any_held+0x75/0xa0 [ 1360.481874] ? vfs_write+0x354/0xa70 [ 1360.482419] ? fput_many+0x2f/0x1a0 [ 1360.482950] ? ksys_write+0x1a9/0x260 [ 1360.483504] ? __ia32_sys_read+0xb0/0xb0 [ 1360.484099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1360.484858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1360.485615] do_syscall_64+0x33/0x40 [ 1360.486159] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1360.486900] RIP: 0033:0x7f991b285b19 [ 1360.487431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1360.490072] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1360.491167] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1360.492202] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1360.493229] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1360.494255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1360.495291] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:47:48 executing program 7: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r3, r1], 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x143601, 0x0) 15:47:48 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 15:47:48 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:47:48 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short}, 0x14) bind$802154_dgram(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') connect$802154_dgram(r1, &(0x7f00000000c0)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 15:47:48 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0xed410000, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:47:48 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 15:47:48 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4, 0x6}}, './file0\x00'}) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x5, 0xf0, 0x7, 0xff, 0x0, 0x8, 0x480, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x6, 0x5}, 0x44, 0x7c, 0x4, 0x2, 0x1, 0x7, 0x1, 0x0, 0xfffffff8, 0x0, 0x80}, 0xffffffffffffffff, 0x2, r3, 0x9) r5 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) io_uring_enter(r5, 0x58a7, 0xbfb7, 0x0, 0x0, 0xfffffffffffffd8f) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/dev/block', 0x8840, 0xde) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000480)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "d69a38fd221112"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000001480)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x33, "6427560cb996b4"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000002480)={r7, r8, "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", "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"}) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000180)="485acfb5745567330fe65be4e193c0dc62b7bbbcf8d0ee8294bee89189532f2d1edcb0a545e1a28eaf74f0b8406b8234e055235a1a3cb9b2d6f705c60b8a96990eead36d08d4461a4ba93a86d548d66fde8662d51375506581d395bfcdff0239a7ce46a85a25a4ec7ea5452b7a65a1a32b57c1c9629c23cd23777f03ad12b601cf53e7fd251ba46d37bbd12d54d4b938f5d298c09dc4bee7bc2c0567ace450c8f3af7d263cfcb538456c7cca61990dc1ae85abd8fefa7e8715be783be5eef3f6032a1eeed9c6632fc9ba25468fa4f4abd5564a08f047081b9d", 0xd9}, {&(0x7f0000000300)="258efeea88b5e43bc246ac658ca69db23ce51b211c9dd38bb5ad6a1a02a4584ed5af73523e29849d731bf53ec1b0eed293dcf25e575d4624b9be5c77d0f7fa15ce4011141c0ae037188013e56fdd86407c64ecb0b951473212ae5d25258299c12a7d4d41278b54099edbc0516a45ab22070f885dd57da09610aa6d0dd50ce37051fb10c59e4c99d38659fbd9561900a286ee4d6c00ba911f86e11e7c12bf083486d97c199e18b34a1eeeb057126f524429a9ea08fbef6c16", 0xb8}, {&(0x7f00000003c0)="9b13084aadc0b2822436f28af067bbb7979b627d41ad0980371070e78a775ead43c42a89f23578cca8b4e2266f508b1145cf250f7f9b2eda888b35db6569", 0x3e}], 0x3) [ 1376.061390] FAULT_INJECTION: forcing a failure. [ 1376.061390] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.063221] CPU: 1 PID: 8576 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1376.064224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.065421] Call Trace: [ 1376.065811] dump_stack+0x107/0x167 [ 1376.066343] should_fail.cold+0x5/0xa [ 1376.066903] should_failslab+0x5/0x20 [ 1376.067457] __kmalloc_node_track_caller+0x74/0x3b0 [ 1376.068188] ? netlink_sendmsg+0x998/0xdf0 [ 1376.068804] __alloc_skb+0xb1/0x5b0 [ 1376.069342] netlink_sendmsg+0x998/0xdf0 [ 1376.069940] ? netlink_unicast+0x7f0/0x7f0 [ 1376.070566] ? netlink_unicast+0x7f0/0x7f0 [ 1376.071185] __sock_sendmsg+0x154/0x190 [ 1376.071767] ____sys_sendmsg+0x70d/0x870 [ 1376.072380] ? sock_write_iter+0x3d0/0x3d0 [ 1376.072991] ? do_recvmmsg+0x6d0/0x6d0 [ 1376.073561] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1376.074336] ___sys_sendmsg+0xf3/0x170 [ 1376.074905] ? sendmsg_copy_msghdr+0x160/0x160 [ 1376.075576] ? lock_downgrade+0x6d0/0x6d0 [ 1376.076185] ? find_held_lock+0x2c/0x110 [ 1376.076781] ? clockevents_program_event+0x14b/0x360 [ 1376.077522] ? __fget_files+0x296/0x4c0 [ 1376.078110] ? __fget_light+0xea/0x290 [ 1376.078682] __sys_sendmsg+0xe5/0x1b0 [ 1376.079233] ? __sys_sendmsg_sock+0x40/0x40 [ 1376.079873] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.080643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.081388] ? trace_hardirqs_on+0x5b/0x180 [ 1376.082022] do_syscall_64+0x33/0x40 [ 1376.082564] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1376.083304] RIP: 0033:0x7fdda5114b19 [ 1376.083846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.086486] RSP: 002b:00007fdda268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1376.087585] RAX: ffffffffffffffda RBX: 00007fdda5227f60 RCX: 00007fdda5114b19 [ 1376.088621] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1376.089648] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.090676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.091702] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 15:47:48 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:47:48 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0xfffffe00, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) [ 1376.132363] FAULT_INJECTION: forcing a failure. [ 1376.132363] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.134116] CPU: 1 PID: 8577 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1376.135104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.136302] Call Trace: [ 1376.136695] dump_stack+0x107/0x167 [ 1376.137243] should_fail.cold+0x5/0xa [ 1376.137812] ? create_object.isra.0+0x3a/0xa20 [ 1376.138496] should_failslab+0x5/0x20 [ 1376.139064] kmem_cache_alloc+0x5b/0x310 [ 1376.139669] ? mark_held_locks+0x9e/0xe0 [ 1376.140275] create_object.isra.0+0x3a/0xa20 [ 1376.140921] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1376.141663] kmem_cache_alloc_bulk+0x168/0x320 [ 1376.142339] io_submit_sqes+0x6f76/0x85c0 [ 1376.142942] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1376.143667] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1376.144403] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1376.145109] ? lock_downgrade+0x6d0/0x6d0 [ 1376.145711] ? find_held_lock+0x2c/0x110 [ 1376.146311] ? io_submit_sqes+0x85c0/0x85c0 [ 1376.146955] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1376.147666] ? wait_for_completion_io+0x270/0x270 [ 1376.148382] ? rcu_read_lock_any_held+0x75/0xa0 [ 1376.149049] ? vfs_write+0x354/0xa70 [ 1376.149595] ? fput_many+0x2f/0x1a0 [ 1376.150127] ? ksys_write+0x1a9/0x260 [ 1376.150682] ? __ia32_sys_read+0xb0/0xb0 [ 1376.151275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.152043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.152799] do_syscall_64+0x33/0x40 [ 1376.153346] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1376.154095] RIP: 0033:0x7f09e0b8db19 [ 1376.154639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.157313] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1376.158406] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1376.159415] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1376.160439] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.161461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.162479] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1376.188822] FAULT_INJECTION: forcing a failure. [ 1376.188822] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.191492] CPU: 0 PID: 8572 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1376.192460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.193617] Call Trace: [ 1376.193997] dump_stack+0x107/0x167 [ 1376.194516] should_fail.cold+0x5/0xa [ 1376.195060] ? create_object.isra.0+0x3a/0xa20 [ 1376.195713] should_failslab+0x5/0x20 [ 1376.196267] kmem_cache_alloc+0x5b/0x310 [ 1376.196840] ? mark_held_locks+0x9e/0xe0 [ 1376.197415] create_object.isra.0+0x3a/0xa20 [ 1376.198037] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1376.198748] kmem_cache_alloc+0x159/0x310 [ 1376.199338] xas_alloc+0x336/0x440 [ 1376.199841] xas_create+0x34a/0x10d0 [ 1376.200393] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1376.201135] xas_store+0x8c/0x1c40 [ 1376.201677] __xa_store+0x164/0x2d0 [ 1376.202195] ? xa_delete_node+0x280/0x280 [ 1376.202785] ? trace_hardirqs_on+0x5b/0x180 [ 1376.203398] xa_store+0x31/0x50 [ 1376.203866] __io_uring_add_tctx_node+0x1cf/0x520 [ 1376.204555] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1376.205303] __do_sys_io_uring_enter+0x1489/0x18c0 [ 1376.205991] ? lock_downgrade+0x6d0/0x6d0 [ 1376.206568] ? find_held_lock+0x2c/0x110 [ 1376.207173] ? io_submit_sqes+0x85c0/0x85c0 [ 1376.207791] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1376.208514] ? wait_for_completion_io+0x270/0x270 [ 1376.209195] ? rcu_read_lock_any_held+0x75/0xa0 [ 1376.209877] ? vfs_write+0x354/0xa70 [ 1376.210414] ? fput_many+0x2f/0x1a0 [ 1376.210954] ? ksys_write+0x1a9/0x260 [ 1376.211501] ? __ia32_sys_read+0xb0/0xb0 [ 1376.212123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.212868] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.213633] do_syscall_64+0x33/0x40 [ 1376.214164] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1376.214911] RIP: 0033:0x7f991b285b19 [ 1376.215446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.218135] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1376.219211] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1376.220224] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1376.221228] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.222215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.223212] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:47:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x4000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x2f) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) preadv(r0, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/77, 0x4d}, {&(0x7f0000001c80)=""/209, 0xd1}, {&(0x7f0000001e00)=""/137, 0x89}, {&(0x7f0000001ec0)=""/138, 0x8a}], 0x4, 0x8, 0x0) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1cb) syz_80211_inject_frame(&(0x7f0000001700), &(0x7f0000001740)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @from_mac=@device_b, @device_a, @device_b, {0x5, 0x20}}, @random="27cbc6d82f979dc664ddacbf42a514c39bc449729dd6063fc6170c8f1a03bb88e06c7c6dc82a056a9d5169406bf25450a1712835689cd80373c2576214ebabd949ecf2a1"}, 0x5c) r1 = fork() syz_80211_inject_frame(&(0x7f0000001fc0)=@device_b, &(0x7f0000002000)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7f}, @broadcast, @device_a, @from_mac, {0xf}}, @ver_80211n={0x0, 0x4, 0x0, 0x3, 0x0, 0x1}}, @val={0x0, 0x1f, @random="54df2a8d49633da92cae62f609f27bc06c9c9d31c5e351ac806fa0a59e64ff"}, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x300, 0xad1, 0x0, 0x36a, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x1, 0x1}}, @val={0x72, 0x6}, [{0xdd, 0x9, "a07514c4fb3d8d0ca3"}, {0xdd, 0xd9, "949f6419d879aa0a07974bb58a24aadf95902fb60ff98e29ca9528c75af1f3240822c64c6b74af4c6d1acefff4d8ccdff15d71bca5b6889a0a868f80602ea75246b53f41464ca33850e9501261968bb9476e1c9b2b0c8f73560aaa82e80c5748781b35ab4fb9a2c1dd7a7a24b3c90f9317c74f026ab081c53e3c7ada67caf1215b463c10688c83ca32fcce76e3ab81ade7ce24b93706c011657aa5c72bd185aad90029d2aeff23e95c5825f1d1f5b0a751a350d64fccdf81350d2a04428d88c9e53e554b9b35231d000cf3f120ac2e2b6c4eb12d8d8e3b2d36"}]}, 0x147) r2 = fork() kcmp(r2, r1, 0x2, 0xffffffffffffffff, r0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x40300, 0x0) syz_80211_inject_frame(&(0x7f00000017c0), &(0x7f0000001800)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @broadcast, @device_b, @device_a, {0x6, 0x8}, @device_b}, @a_msdu=[{@device_a, @device_a, 0x6f, "621272100a99792639bc503d7c81c5eacd53c64c24767e0a364cf9adbef59c2d5c9562ac2b1ccaefd25441b76c313efb9b57c6ae21335544502226f2dec4a4a6aa6f738726aa2933af3876eb46cdaf23e24c79112fdf0a5065b918d65639645f08b6c86f52ba40d9f26d8b0348d74e"}, {@device_b, @device_a, 0xdd, "18fb95cc5ccb7bd9694fa9e5e4a27d3333b0b6d50ef5dcbc142a9dd31408fb4505db3396fe3205089047e9f53b8673b54706398e1adde897a4c105f06b249f754c24fdff64b5de3ea5fd029df5881d4878b8b7263625cd11818ae571b7b302b7cb0e71373fa64d518354d64e5f4ff33cc1b4b450d612d61c1d2589de1b174789cc4af8bfca3eb3a5b49e860e053097b47da4401b668d48db6ae8d4fec6b51b2e53a2d992b1e46cb9aaf0a8a088cd2a03dcf9996abfa48a56562a4d924e2985ce405fc2f6aded67e3f02f82df79ab63a7406957f2b55cfd6f4a161b6b1b"}, {@device_b, @device_a, 0x21, "e4722be1945ba3853c857e77e5b5146c562ade8a948059e818e153aad5d9be0c99"}, {@device_a, @device_a, 0xf4, "9589474d27b77953dadbb18ce24561f624885a5a7c78445b8688671830d77e21898e77a1622db53a2d20ae5acc274ffcc383b4d1eededc10fb695a4d2d28e12a0618a01446513046af014f60f673397568e340cdc9c875251fbb0edd9564e678cae2d51c4f2ee3558a08f791257ec65aaa08d963c052bc2779f9a75f051d9042042a6cbe97b11384b4208c400d4f21de2a5f7efe8a79b0f547c5c5bfb214328a85947189fb66d9a3c83a6a94c4d3613df04877706a102555b4e7a333aae33b042fe6619c07c8374f0d8031c8619e8326026224ebe41d33b478b8a44038b7b8dbd276b71bba8acd2d6404c6ba5d98649ee5981f07"}, {@device_b, @broadcast, 0xac, "0138e2d53515d68d2e17ddb40fb0403786ea2964602048364cf5788c2352d11a89fde4e22696841c17671eff2223b3cf0eae12426386b79774d44451851002b33e508d651c8d09149adaed364de793d96abc148d071a4eb50a6177627a6a4b23c8fce42c533eb44ed132e9b2ae6bf258536bc5b2a45ac235de0d72f06437de9a8fe32b2824b0cc623b50c259fbd92fdcc100e0ed1ffb79daa9ec72ae02d6b3f90044893f7205001dcf5d819b"}, {@device_a, @device_b, 0x3e, "c07d7de6e839009c061f57fab219db5b9348dccc047aaf8e739d4dbeca601991769b578481f612214d0ceb7a23e07ed8d9ca29882bdd37ccb700abfaea4e"}, {@device_b, @broadcast}]}, 0x3d6) readv(r3, &(0x7f0000001680)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/212, 0xd4}], 0x5) 15:47:49 executing program 5: io_uring_setup(0x62d, &(0x7f0000000040)={0x0, 0x301e, 0x8, 0x3, 0x253}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f00000000c0)=[r1, r0, r0, r5, r2], 0x5) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1376.301649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.326104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.339557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.377220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.403674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.711968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 15:48:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:48:02 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce10b09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:48:02 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000001e00)=""/4108, 0x100c}], 0x1) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0xff, 0x3f, 0x9, 0x1, 0x0, 0x4, 0x80001, 0x683b59fe95345e36, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8bb, 0x1, @perf_bp={&(0x7f00000002c0), 0x2}, 0x2002, 0x1, 0x157e, 0x9, 0xed53, 0x5, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r2, &(0x7f0000000180)='attr/keycreate\x00') timer_create(0x4, &(0x7f0000000000)={0x0, 0xb, 0x0, @thr={&(0x7f0000000300)="2d21e4594478de0b982d52b2d191791f29f9f13235a8bc5b33741cd1b3831be5a0b7a0119b06552388457d5e90731b5fbdaf071c5077b14506876dbaafff59df6825072152dbba1752c78a6f7936e7e739", 0xfffffffffffffffc}}, &(0x7f0000000380)=0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x32, 0x4}, &(0x7f0000000140)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f0000000240)) timer_settime(r3, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000016fd0004004645460f8f24ac00aacf9b1219c3bf718e9ea429ffbba67342a095e3ee5d4a7eaa27d7f400000000781e560eac9cf8338fc5d1"], 0x14}}, 0x0) read(r5, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r3, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:48:02 executing program 5: r0 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xffffffff, 0xfffffffe}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) 15:48:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:48:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 15:48:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 15:48:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x40, 0x2, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x54010, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x6, @private0, 0x82}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x6, {{0xa, 0x4e24, 0x7, @empty, 0x1}}, {{0xa, 0x4e21, 0x0, @local, 0x8}}}, 0x108) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@local, r4}, 0x14) chroot(&(0x7f0000000140)='./file2\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) setresuid(0xffffffffffffffff, 0x0, 0x0) 15:48:02 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09310967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) [ 1389.432669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64790 sclass=netlink_route_socket pid=8608 comm=syz-executor.7 [ 1389.466583] FAULT_INJECTION: forcing a failure. [ 1389.466583] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.467655] CPU: 0 PID: 8614 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1389.468233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.468844] Call Trace: [ 1389.469082] dump_stack+0x107/0x167 [ 1389.469402] should_fail.cold+0x5/0xa [ 1389.469737] ? create_object.isra.0+0x3a/0xa20 [ 1389.470138] should_failslab+0x5/0x20 [ 1389.470468] kmem_cache_alloc+0x5b/0x310 [ 1389.470800] ? mark_held_locks+0x9e/0xe0 [ 1389.471142] create_object.isra.0+0x3a/0xa20 [ 1389.471412] FAULT_INJECTION: forcing a failure. [ 1389.471412] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.471471] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1389.471491] kmem_cache_alloc_bulk+0x168/0x320 [ 1389.474168] io_submit_sqes+0x6f76/0x85c0 [ 1389.474503] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1389.474905] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1389.475318] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1389.475708] ? lock_downgrade+0x6d0/0x6d0 [ 1389.476045] ? find_held_lock+0x2c/0x110 [ 1389.476393] ? io_submit_sqes+0x85c0/0x85c0 [ 1389.476727] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1389.477124] ? wait_for_completion_io+0x270/0x270 [ 1389.477486] ? rcu_read_lock_any_held+0x75/0xa0 [ 1389.477870] ? vfs_write+0x354/0xa70 [ 1389.478163] ? fput_many+0x2f/0x1a0 [ 1389.478454] ? ksys_write+0x1a9/0x260 [ 1389.478762] ? __ia32_sys_read+0xb0/0xb0 [ 1389.479099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1389.479494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.479880] do_syscall_64+0x33/0x40 [ 1389.480196] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1389.480609] RIP: 0033:0x7f09e0b8db19 [ 1389.480916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.482402] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1389.482975] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1389.483548] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1389.484142] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.484710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.485245] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1389.485842] CPU: 1 PID: 8616 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1389.487073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.488553] Call Trace: [ 1389.489033] dump_stack+0x107/0x167 [ 1389.489684] should_fail.cold+0x5/0xa [ 1389.490365] ? create_object.isra.0+0x3a/0xa20 [ 1389.491182] should_failslab+0x5/0x20 [ 1389.491862] kmem_cache_alloc+0x5b/0x310 [ 1389.492601] create_object.isra.0+0x3a/0xa20 [ 1389.493396] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1389.494302] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1389.495207] ? netlink_sendmsg+0x998/0xdf0 [ 1389.495968] __alloc_skb+0xb1/0x5b0 [ 1389.496613] netlink_sendmsg+0x998/0xdf0 [ 1389.497353] ? netlink_unicast+0x7f0/0x7f0 [ 1389.498116] ? netlink_unicast+0x7f0/0x7f0 [ 1389.498860] __sock_sendmsg+0x154/0x190 [ 1389.499573] ____sys_sendmsg+0x70d/0x870 [ 1389.500308] ? sock_write_iter+0x3d0/0x3d0 [ 1389.501063] ? do_recvmmsg+0x6d0/0x6d0 [ 1389.501765] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1389.502706] ? lock_downgrade+0x6d0/0x6d0 [ 1389.503456] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1389.504399] ___sys_sendmsg+0xf3/0x170 [ 1389.505103] ? sendmsg_copy_msghdr+0x160/0x160 [ 1389.505937] ? lock_downgrade+0x6d0/0x6d0 [ 1389.506682] ? find_held_lock+0x2c/0x110 [ 1389.507422] ? __fget_files+0x296/0x4c0 [ 1389.508144] ? __fget_light+0xea/0x290 [ 1389.508851] __sys_sendmsg+0xe5/0x1b0 [ 1389.509519] ? __sys_sendmsg_sock+0x40/0x40 [ 1389.510288] ? rcu_read_lock_any_held+0x75/0xa0 [ 1389.511121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1389.512062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.512963] ? trace_hardirqs_on+0x5b/0x180 [ 1389.513744] do_syscall_64+0x33/0x40 [ 1389.514410] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1389.515323] RIP: 0033:0x7fdda5114b19 [ 1389.515977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.518855] RSP: 002b:00007fdda268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1389.519959] RAX: ffffffffffffffda RBX: 00007fdda5227f60 RCX: 00007fdda5114b19 [ 1389.521021] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1389.522075] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.523120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.524193] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 15:48:02 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e02bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:48:02 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syncfs(r0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) recvmsg(r3, &(0x7f00000003c0)={&(0x7f00000000c0)=@tipc=@id, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/173, 0xad}, {&(0x7f0000000240)=""/31, 0x1f}], 0x3, &(0x7f00000002c0)=""/233, 0xe9}, 0x40010021) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x8002) r5 = socket$unix(0x1, 0x1, 0x0) fcntl$setlease(r5, 0x400, 0x1) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x8) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 15:48:02 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e04bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:48:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) r1 = accept4$unix(r0, 0x0, 0x0, 0x80800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000002c0)={0x0, 0x4, 0x20, 0x0, 0x800}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(r2, r3) r4 = syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001240)={[{@name={'name', 0x3d, '/dev/vcsa#\x00'}}, {@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file1'}}, {@name}, {@name={'name', 0x3d, '/dev/ttyS3\x00'}}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}]}) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, @out_args}, './file0/file0\x00'}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, r4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xad}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file1\x00'}) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80010}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1389.585814] FAULT_INJECTION: forcing a failure. [ 1389.585814] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.587233] CPU: 0 PID: 8623 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1389.587922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.588586] Call Trace: [ 1389.588811] dump_stack+0x107/0x167 [ 1389.589089] should_fail.cold+0x5/0xa [ 1389.589402] ? xas_alloc+0x336/0x440 [ 1389.589713] should_failslab+0x5/0x20 [ 1389.590007] kmem_cache_alloc+0x5b/0x310 [ 1389.590344] xas_alloc+0x336/0x440 [ 1389.590615] xas_create+0x34a/0x10d0 [ 1389.590927] ? kernel_text_address+0xf2/0x120 [ 1389.591294] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1389.591691] xas_store+0x8c/0x1c40 [ 1389.591967] __xa_store+0x164/0x2d0 [ 1389.592270] ? xa_delete_node+0x280/0x280 [ 1389.592584] ? trace_hardirqs_on+0x5b/0x180 [ 1389.592937] xa_store+0x31/0x50 [ 1389.593193] __io_uring_add_tctx_node+0x1cf/0x520 [ 1389.593579] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1389.593976] __do_sys_io_uring_enter+0x1489/0x18c0 [ 1389.594374] ? lock_downgrade+0x6d0/0x6d0 [ 1389.594681] ? find_held_lock+0x2c/0x110 [ 1389.595011] ? io_submit_sqes+0x85c0/0x85c0 [ 1389.595345] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1389.595729] ? wait_for_completion_io+0x270/0x270 [ 1389.596093] ? rcu_read_lock_any_held+0x75/0xa0 [ 1389.596469] ? vfs_write+0x354/0xa70 [ 1389.596745] ? fput_many+0x2f/0x1a0 [ 1389.597036] ? ksys_write+0x1a9/0x260 [ 1389.597319] ? __ia32_sys_read+0xb0/0xb0 [ 1389.597645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1389.598033] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.598447] do_syscall_64+0x33/0x40 [ 1389.598720] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1389.599098] RIP: 0033:0x7f991b285b19 [ 1389.599371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.600833] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1389.601391] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1389.601911] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1389.602429] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.602948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1389.603462] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:48:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 15:48:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:48:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:48:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) [ 1389.715469] FAULT_INJECTION: forcing a failure. [ 1389.715469] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.716401] CPU: 0 PID: 8648 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1389.716897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.717552] Call Trace: [ 1389.717770] dump_stack+0x107/0x167 [ 1389.718071] should_fail.cold+0x5/0xa [ 1389.718386] should_failslab+0x5/0x20 [ 1389.718695] kmem_cache_alloc_bulk+0x4b/0x320 [ 1389.719063] io_submit_sqes+0x6f76/0x85c0 [ 1389.719411] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1389.719816] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1389.720191] ? lock_downgrade+0x6d0/0x6d0 [ 1389.720498] ? find_held_lock+0x2c/0x110 [ 1389.720829] ? io_submit_sqes+0x85c0/0x85c0 [ 1389.721155] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1389.721509] ? wait_for_completion_io+0x270/0x270 [ 1389.721865] ? rcu_read_lock_any_held+0x75/0xa0 [ 1389.722208] ? vfs_write+0x354/0xa70 [ 1389.722482] ? fput_many+0x2f/0x1a0 [ 1389.722776] ? ksys_write+0x1a9/0x260 [ 1389.723059] ? __ia32_sys_read+0xb0/0xb0 [ 1389.723359] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1389.723783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.724211] do_syscall_64+0x33/0x40 [ 1389.724489] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1389.724866] RIP: 0033:0x7f09e0b8db19 [ 1389.725141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.726628] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1389.727187] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1389.727761] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1389.728295] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.728873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1389.729399] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1389.773570] FAULT_INJECTION: forcing a failure. [ 1389.773570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1389.774519] CPU: 0 PID: 8651 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1389.775012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.775674] Call Trace: [ 1389.775878] dump_stack+0x107/0x167 [ 1389.776152] should_fail.cold+0x5/0xa [ 1389.776435] _copy_from_iter_full+0x201/0xa60 [ 1389.776798] ? __virt_addr_valid+0x170/0x5c0 [ 1389.777128] ? __check_object_size+0x319/0x440 [ 1389.777468] netlink_sendmsg+0x879/0xdf0 [ 1389.777799] ? netlink_unicast+0x7f0/0x7f0 [ 1389.778119] ? netlink_unicast+0x7f0/0x7f0 [ 1389.778452] __sock_sendmsg+0x154/0x190 [ 1389.778776] ____sys_sendmsg+0x70d/0x870 [ 1389.779083] ? sock_write_iter+0x3d0/0x3d0 [ 1389.779429] ? do_recvmmsg+0x6d0/0x6d0 [ 1389.779721] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1389.780192] ? lock_downgrade+0x6d0/0x6d0 [ 1389.780505] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1389.780936] ___sys_sendmsg+0xf3/0x170 [ 1389.781229] ? sendmsg_copy_msghdr+0x160/0x160 [ 1389.781608] ? lock_downgrade+0x6d0/0x6d0 [ 1389.781923] ? find_held_lock+0x2c/0x110 [ 1389.782261] ? __fget_files+0x296/0x4c0 [ 1389.782592] ? __fget_light+0xea/0x290 [ 1389.782887] __sys_sendmsg+0xe5/0x1b0 [ 1389.783200] ? __sys_sendmsg_sock+0x40/0x40 [ 1389.783524] ? rcu_read_lock_any_held+0x75/0xa0 [ 1389.783908] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1389.784304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.784719] ? trace_hardirqs_on+0x5b/0x180 [ 1389.785044] do_syscall_64+0x33/0x40 [ 1389.785347] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1389.785726] RIP: 0033:0x7fdda5114b19 [ 1389.786030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.787367] RSP: 002b:00007fdda268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1389.787923] RAX: ffffffffffffffda RBX: 00007fdda5227f60 RCX: 00007fdda5114b19 [ 1389.788449] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1389.788975] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.789555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.790132] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 15:48:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 15:48:02 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000005b00), 0x1e82, 0x0) r1 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r7, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x10000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42c00) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r8, r2], 0x2) ioctl$CDROMEJECT(r8, 0x5309) ioctl$DVD_READ_STRUCT(r0, 0x40081271, &(0x7f0000000580)=@physical={0x0, 0x2}) 15:48:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r0) fcntl$setstatus(r2, 0x4, 0x2c00) shutdown(r1, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000300)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x2}, 0x1c5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000100)) 15:48:02 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e05bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:48:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:48:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1389.869441] FAULT_INJECTION: forcing a failure. [ 1389.869441] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.870397] CPU: 0 PID: 8654 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1389.871025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.871692] Call Trace: [ 1389.871911] dump_stack+0x107/0x167 [ 1389.872188] should_fail.cold+0x5/0xa [ 1389.872496] ? create_object.isra.0+0x3a/0xa20 [ 1389.872836] should_failslab+0x5/0x20 [ 1389.873125] kmem_cache_alloc+0x5b/0x310 [ 1389.873455] ? mark_held_locks+0x9e/0xe0 [ 1389.873763] create_object.isra.0+0x3a/0xa20 [ 1389.874122] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1389.874504] kmem_cache_alloc_bulk+0x168/0x320 [ 1389.874884] io_submit_sqes+0x6f76/0x85c0 [ 1389.875210] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1389.875576] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1389.875971] ? lock_downgrade+0x6d0/0x6d0 [ 1389.876286] ? find_held_lock+0x2c/0x110 [ 1389.876618] ? io_submit_sqes+0x85c0/0x85c0 [ 1389.876981] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1389.877341] ? wait_for_completion_io+0x270/0x270 [ 1389.877730] ? rcu_read_lock_any_held+0x75/0xa0 [ 1389.878109] ? vfs_write+0x354/0xa70 [ 1389.878385] ? fput_many+0x2f/0x1a0 [ 1389.878685] ? ksys_write+0x1a9/0x260 [ 1389.878996] ? __ia32_sys_read+0xb0/0xb0 [ 1389.879299] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1389.879725] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.880115] do_syscall_64+0x33/0x40 [ 1389.880424] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1389.880808] RIP: 0033:0x7f991b285b19 [ 1389.881111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.882452] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1389.883074] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1389.883654] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1389.884242] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.884821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1389.885402] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1389.927620] FAULT_INJECTION: forcing a failure. [ 1389.927620] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.928749] CPU: 0 PID: 8667 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1389.929310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.929980] Call Trace: [ 1389.930201] dump_stack+0x107/0x167 [ 1389.930503] should_fail.cold+0x5/0xa [ 1389.930818] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1389.931354] should_failslab+0x5/0x20 [ 1389.931667] __kmalloc+0x72/0x390 [ 1389.931955] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1389.932481] genl_family_rcv_msg_doit+0xda/0x330 [ 1389.932869] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1389.933408] ? cap_capable+0x1cd/0x230 [ 1389.933732] ? security_capable+0x95/0xc0 [ 1389.934079] ? ns_capable+0xe2/0x110 [ 1389.934385] genl_rcv_msg+0x33c/0x5a0 [ 1389.934699] ? genl_get_cmd+0x480/0x480 [ 1389.935030] ? cfg80211_off_channel_oper_allowed+0x190/0x190 [ 1389.935504] ? lock_release+0x680/0x680 [ 1389.935831] ? __lockdep_reset_lock+0x180/0x180 [ 1389.936218] netlink_rcv_skb+0x14b/0x430 [ 1389.936545] ? genl_get_cmd+0x480/0x480 [ 1389.936869] ? netlink_ack+0xab0/0xab0 [ 1389.937192] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1389.937562] ? is_vmalloc_addr+0x7b/0xb0 [ 1389.937894] genl_rcv+0x24/0x40 [ 1389.938166] netlink_unicast+0x549/0x7f0 [ 1389.938499] ? netlink_attachskb+0x870/0x870 [ 1389.938866] netlink_sendmsg+0x90f/0xdf0 [ 1389.939201] ? netlink_unicast+0x7f0/0x7f0 [ 1389.939550] ? netlink_unicast+0x7f0/0x7f0 [ 1389.939897] __sock_sendmsg+0x154/0x190 [ 1389.940225] ____sys_sendmsg+0x70d/0x870 [ 1389.940559] ? sock_write_iter+0x3d0/0x3d0 [ 1389.940902] ? do_recvmmsg+0x6d0/0x6d0 [ 1389.941217] ? perf_trace_lock+0xac/0x490 [ 1389.941559] ? __lockdep_reset_lock+0x180/0x180 [ 1389.941938] ? perf_trace_lock+0xac/0x490 [ 1389.942282] ___sys_sendmsg+0xf3/0x170 [ 1389.942601] ? sendmsg_copy_msghdr+0x160/0x160 [ 1389.942978] ? lock_downgrade+0x6d0/0x6d0 [ 1389.943318] ? find_held_lock+0x2c/0x110 [ 1389.943659] ? __fget_files+0x296/0x4c0 [ 1389.943989] ? __fget_light+0xea/0x290 [ 1389.944317] __sys_sendmsg+0xe5/0x1b0 [ 1389.944630] ? __sys_sendmsg_sock+0x40/0x40 [ 1389.944985] ? rcu_read_lock_any_held+0x75/0xa0 [ 1389.945373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1389.945801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.946218] ? trace_hardirqs_on+0x5b/0x180 [ 1389.946570] do_syscall_64+0x33/0x40 [ 1389.946875] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1389.947290] RIP: 0033:0x7fdda5114b19 [ 1389.947591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.949087] RSP: 002b:00007fdda268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1389.949705] RAX: ffffffffffffffda RBX: 00007fdda5227f60 RCX: 00007fdda5114b19 [ 1389.950278] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1389.950855] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.951431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.952003] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 15:48:16 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:48:16 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 15:48:16 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:48:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000012000101000000000000001080"], 0x14}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000010000", 0x5c, 0x400}, {&(0x7f0000000180)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x20fd}], 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESOCT]) read(r0, &(0x7f0000000240)=""/169, 0xa9) r1 = io_uring_setup(0x62c, &(0x7f0000000280)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r3, r2], 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="c61ab688ac56cd45"}}) 15:48:16 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e06bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:48:16 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 15:48:16 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setns(r0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x3f, 0x0, 0x6f, 0x0, 0x209e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000}, 0xc00, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0) 15:48:16 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f31a0000434ef9bab774bdcab95c000d00", 0x0, 0x8}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r2 = getpgrp(0x0) r3 = pidfd_open(r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r4 = dup(r3) setns(r4, 0x2020000) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x3f, 0x0, 0x3f, 0x0, 0x7, 0xe8087, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040), 0x7}, 0x10000, 0x7, 0x5, 0x9, 0x1df42542, 0x9, 0x2f11, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x8) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DVD_READ_STRUCT(r5, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) dup3(r1, r0, 0x0) 15:48:16 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e07bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) [ 1403.388639] FAULT_INJECTION: forcing a failure. [ 1403.388639] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.389670] CPU: 1 PID: 8691 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1403.390261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1403.390970] Call Trace: [ 1403.391209] dump_stack+0x107/0x167 [ 1403.391528] should_fail.cold+0x5/0xa [ 1403.391864] ? create_object.isra.0+0x3a/0xa20 [ 1403.392260] should_failslab+0x5/0x20 [ 1403.392607] kmem_cache_alloc+0x5b/0x310 [ 1403.392972] create_object.isra.0+0x3a/0xa20 [ 1403.393359] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1403.393810] kmem_cache_alloc_bulk+0x168/0x320 [ 1403.394220] io_submit_sqes+0x6f76/0x85c0 [ 1403.394598] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1403.395038] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1403.395460] ? lock_downgrade+0x6d0/0x6d0 [ 1403.395823] ? find_held_lock+0x2c/0x110 [ 1403.396184] ? io_submit_sqes+0x85c0/0x85c0 [ 1403.396584] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1403.397003] ? wait_for_completion_io+0x270/0x270 [ 1403.397426] ? rcu_read_lock_any_held+0x75/0xa0 [ 1403.397829] ? vfs_write+0x354/0xa70 [ 1403.398163] ? fput_many+0x2f/0x1a0 [ 1403.398486] ? ksys_write+0x1a9/0x260 [ 1403.398820] ? __ia32_sys_read+0xb0/0xb0 [ 1403.399180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1403.399638] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1403.400092] do_syscall_64+0x33/0x40 [ 1403.400427] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1403.400869] RIP: 0033:0x7f09e0b8db19 [ 1403.401200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1403.402776] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1403.403439] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1403.404063] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1403.404688] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.405301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1403.405920] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1403.414838] FAULT_INJECTION: forcing a failure. [ 1403.414838] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.416980] CPU: 0 PID: 8686 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1403.417987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1403.419185] Call Trace: [ 1403.419578] dump_stack+0x107/0x167 [ 1403.420113] should_fail.cold+0x5/0xa [ 1403.420685] ? create_object.isra.0+0x3a/0xa20 [ 1403.421354] should_failslab+0x5/0x20 [ 1403.421912] kmem_cache_alloc+0x5b/0x310 [ 1403.422505] create_object.isra.0+0x3a/0xa20 [ 1403.423145] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1403.423890] __kmalloc+0x16e/0x390 [ 1403.424424] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1403.425348] genl_family_rcv_msg_doit+0xda/0x330 [ 1403.426049] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1403.426999] ? cap_capable+0x1cd/0x230 [ 1403.427578] ? security_capable+0x95/0xc0 [ 1403.428203] ? ns_capable+0xe2/0x110 [ 1403.428755] genl_rcv_msg+0x33c/0x5a0 [ 1403.429319] ? genl_get_cmd+0x480/0x480 [ 1403.429898] ? cfg80211_off_channel_oper_allowed+0x190/0x190 [ 1403.430736] ? lock_release+0x680/0x680 [ 1403.431315] ? netlink_deliver_tap+0xf4/0xcc0 [ 1403.431970] netlink_rcv_skb+0x14b/0x430 [ 1403.432566] ? genl_get_cmd+0x480/0x480 [ 1403.433143] ? netlink_ack+0xab0/0xab0 [ 1403.433718] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1403.434378] ? is_vmalloc_addr+0x7b/0xb0 [ 1403.434971] genl_rcv+0x24/0x40 [ 1403.435448] netlink_unicast+0x549/0x7f0 [ 1403.436048] ? netlink_attachskb+0x870/0x870 [ 1403.436700] netlink_sendmsg+0x90f/0xdf0 [ 1403.437295] ? netlink_unicast+0x7f0/0x7f0 [ 1403.437917] ? netlink_unicast+0x7f0/0x7f0 [ 1403.438527] __sock_sendmsg+0x154/0x190 [ 1403.439106] ____sys_sendmsg+0x70d/0x870 [ 1403.439694] ? sock_write_iter+0x3d0/0x3d0 [ 1403.440316] ? do_recvmmsg+0x6d0/0x6d0 [ 1403.440890] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1403.441657] ? lock_downgrade+0x6d0/0x6d0 [ 1403.442266] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1403.443030] ___sys_sendmsg+0xf3/0x170 [ 1403.443603] ? sendmsg_copy_msghdr+0x160/0x160 [ 1403.444265] ? lock_downgrade+0x6d0/0x6d0 [ 1403.444871] ? find_held_lock+0x2c/0x110 [ 1403.445471] ? __fget_files+0x296/0x4c0 [ 1403.446059] ? __fget_light+0xea/0x290 [ 1403.446633] __sys_sendmsg+0xe5/0x1b0 [ 1403.447184] ? __sys_sendmsg_sock+0x40/0x40 [ 1403.447808] ? rcu_read_lock_any_held+0x75/0xa0 15:48:16 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 1403.448510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1403.449429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1403.450165] ? trace_hardirqs_on+0x5b/0x180 [ 1403.450784] do_syscall_64+0x33/0x40 [ 1403.451316] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1403.452045] RIP: 0033:0x7fdda5114b19 [ 1403.452589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1403.455191] RSP: 002b:00007fdda268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1403.456276] RAX: ffffffffffffffda RBX: 00007fdda5227f60 RCX: 00007fdda5114b19 [ 1403.457396] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1403.458407] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.459420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.460444] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 [ 1403.471150] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1403.497400] EXT4-fs (loop3): Unrecognized mount option "0xffffffffffffffff01777777777777777777777" or missing value [ 1403.544746] FAULT_INJECTION: forcing a failure. [ 1403.544746] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.546686] CPU: 0 PID: 8700 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1403.547645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1403.548794] Call Trace: [ 1403.549175] dump_stack+0x107/0x167 [ 1403.549694] should_fail.cold+0x5/0xa [ 1403.550243] ? create_object.isra.0+0x3a/0xa20 [ 1403.550895] should_failslab+0x5/0x20 [ 1403.551457] kmem_cache_alloc+0x5b/0x310 [ 1403.551513] FAULT_INJECTION: forcing a failure. [ 1403.551513] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.552023] ? mark_held_locks+0x9e/0xe0 [ 1403.552045] create_object.isra.0+0x3a/0xa20 [ 1403.552063] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1403.552086] kmem_cache_alloc_bulk+0x168/0x320 [ 1403.552110] io_submit_sqes+0x6f76/0x85c0 [ 1403.552166] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1403.557072] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1403.557781] ? lock_downgrade+0x6d0/0x6d0 [ 1403.558373] ? find_held_lock+0x2c/0x110 [ 1403.558975] ? io_submit_sqes+0x85c0/0x85c0 [ 1403.559595] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1403.560314] ? wait_for_completion_io+0x270/0x270 [ 1403.560997] ? rcu_read_lock_any_held+0x75/0xa0 [ 1403.561672] ? vfs_write+0x354/0xa70 [ 1403.562197] ? fput_many+0x2f/0x1a0 [ 1403.562736] ? ksys_write+0x1a9/0x260 [ 1403.563277] ? __ia32_sys_read+0xb0/0xb0 [ 1403.563868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1403.564620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1403.565380] do_syscall_64+0x33/0x40 [ 1403.565913] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1403.566660] RIP: 0033:0x7f09e0b8db19 [ 1403.567195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1403.569867] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1403.570926] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1403.571964] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1403.572996] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.574030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1403.575064] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1403.576151] CPU: 1 PID: 8694 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1403.576739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1403.577412] Call Trace: [ 1403.577634] dump_stack+0x107/0x167 [ 1403.577934] should_fail.cold+0x5/0xa [ 1403.578252] should_failslab+0x5/0x20 [ 1403.578563] kmem_cache_alloc_bulk+0x4b/0x320 [ 1403.578945] io_submit_sqes+0x6f76/0x85c0 [ 1403.579312] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1403.579730] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1403.580130] ? lock_downgrade+0x6d0/0x6d0 [ 1403.580474] ? find_held_lock+0x2c/0x110 [ 1403.580809] ? io_submit_sqes+0x85c0/0x85c0 [ 1403.581170] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1403.581565] ? wait_for_completion_io+0x270/0x270 [ 1403.581959] ? rcu_read_lock_any_held+0x75/0xa0 [ 1403.582340] ? vfs_write+0x354/0xa70 [ 1403.582645] ? fput_many+0x2f/0x1a0 [ 1403.582945] ? ksys_write+0x1a9/0x260 [ 1403.583255] ? __ia32_sys_read+0xb0/0xb0 [ 1403.583591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1403.584016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1403.584444] do_syscall_64+0x33/0x40 [ 1403.584746] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1403.585163] RIP: 0033:0x7f991b285b19 [ 1403.585465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1403.586948] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1403.587566] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1403.588141] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1403.588718] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.589287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1403.589856] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:48:16 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:48:16 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e0abcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) [ 1403.623467] FAULT_INJECTION: forcing a failure. [ 1403.623467] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.624550] CPU: 1 PID: 8710 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1403.625108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1403.625767] Call Trace: [ 1403.625983] dump_stack+0x107/0x167 [ 1403.626279] should_fail.cold+0x5/0xa [ 1403.626593] ? cfg80211_mlme_register_mgmt+0x1c6/0x860 [ 1403.627018] should_failslab+0x5/0x20 [ 1403.627323] __kmalloc+0x72/0x390 [ 1403.627610] ? rtnl_is_locked+0x11/0x20 [ 1403.627941] cfg80211_mlme_register_mgmt+0x1c6/0x860 [ 1403.628366] nl80211_register_mgmt+0x303/0x470 [ 1403.628738] ? nl80211_pre_doit+0xa2/0x630 [ 1403.629090] genl_family_rcv_msg_doit+0x22d/0x330 [ 1403.629482] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1403.630014] ? cap_capable+0x1cd/0x230 [ 1403.630337] ? ns_capable+0xe2/0x110 [ 1403.630638] genl_rcv_msg+0x33c/0x5a0 [ 1403.630948] ? genl_get_cmd+0x480/0x480 [ 1403.631269] ? cfg80211_off_channel_oper_allowed+0x190/0x190 [ 1403.631739] ? lock_release+0x680/0x680 [ 1403.632059] ? netlink_deliver_tap+0xf4/0xcc0 [ 1403.632430] netlink_rcv_skb+0x14b/0x430 [ 1403.632757] ? genl_get_cmd+0x480/0x480 [ 1403.633082] ? netlink_ack+0xab0/0xab0 [ 1403.633401] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1403.633766] ? is_vmalloc_addr+0x7b/0xb0 [ 1403.634097] genl_rcv+0x24/0x40 [ 1403.634368] netlink_unicast+0x549/0x7f0 [ 1403.634698] ? netlink_attachskb+0x870/0x870 [ 1403.635064] netlink_sendmsg+0x90f/0xdf0 [ 1403.635399] ? netlink_unicast+0x7f0/0x7f0 [ 1403.635747] ? netlink_unicast+0x7f0/0x7f0 [ 1403.636095] __sock_sendmsg+0x154/0x190 [ 1403.636424] ____sys_sendmsg+0x70d/0x870 [ 1403.636760] ? sock_write_iter+0x3d0/0x3d0 [ 1403.637095] ? do_recvmmsg+0x6d0/0x6d0 [ 1403.637414] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1403.637838] ? lock_downgrade+0x6d0/0x6d0 [ 1403.638179] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1403.638601] ___sys_sendmsg+0xf3/0x170 [ 1403.638918] ? sendmsg_copy_msghdr+0x160/0x160 [ 1403.639285] ? lock_downgrade+0x6d0/0x6d0 [ 1403.639624] ? find_held_lock+0x2c/0x110 [ 1403.639956] ? __fget_files+0x296/0x4c0 [ 1403.640287] ? __fget_light+0xea/0x290 [ 1403.640615] __sys_sendmsg+0xe5/0x1b0 [ 1403.640926] ? __sys_sendmsg_sock+0x40/0x40 [ 1403.641273] ? rcu_read_lock_any_held+0x75/0xa0 [ 1403.641657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1403.642076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1403.642494] ? trace_hardirqs_on+0x5b/0x180 [ 1403.642844] do_syscall_64+0x33/0x40 [ 1403.643149] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1403.643556] RIP: 0033:0x7fdda5114b19 [ 1403.643866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1403.645328] RSP: 002b:00007fdda268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1403.645944] RAX: ffffffffffffffda RBX: 00007fdda5227f60 RCX: 00007fdda5114b19 [ 1403.646511] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1403.647080] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.647647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1403.648216] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 15:48:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 11) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:48:28 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e10bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:48:28 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 1415.871606] FAULT_INJECTION: forcing a failure. [ 1415.871606] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.872541] CPU: 0 PID: 8720 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1415.873087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1415.873749] Call Trace: [ 1415.873966] dump_stack+0x107/0x167 [ 1415.874256] should_fail.cold+0x5/0xa [ 1415.874568] ? create_object.isra.0+0x3a/0xa20 [ 1415.874937] should_failslab+0x5/0x20 [ 1415.875245] kmem_cache_alloc+0x5b/0x310 [ 1415.875575] ? __mutex_lock+0x4fe/0x10b0 [ 1415.875906] create_object.isra.0+0x3a/0xa20 [ 1415.876258] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1415.876681] __kmalloc+0x16e/0x390 [ 1415.876979] cfg80211_mlme_register_mgmt+0x1c6/0x860 [ 1415.877389] nl80211_register_mgmt+0x303/0x470 [ 1415.877754] ? nl80211_pre_doit+0xa2/0x630 [ 1415.878099] genl_family_rcv_msg_doit+0x22d/0x330 [ 1415.878487] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1415.879016] ? cap_capable+0x1cd/0x230 [ 1415.879340] ? ns_capable+0xe2/0x110 [ 1415.879642] genl_rcv_msg+0x33c/0x5a0 [ 1415.879949] ? genl_get_cmd+0x480/0x480 [ 1415.880273] ? cfg80211_off_channel_oper_allowed+0x190/0x190 [ 1415.880747] ? lock_release+0x680/0x680 [ 1415.881064] ? netlink_deliver_tap+0xf4/0xcc0 [ 1415.881425] netlink_rcv_skb+0x14b/0x430 [ 1415.881749] ? genl_get_cmd+0x480/0x480 [ 1415.882072] ? netlink_ack+0xab0/0xab0 [ 1415.882390] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1415.882757] ? is_vmalloc_addr+0x7b/0xb0 [ 1415.883084] genl_rcv+0x24/0x40 [ 1415.883348] netlink_unicast+0x549/0x7f0 [ 1415.883682] ? netlink_attachskb+0x870/0x870 [ 1415.884041] netlink_sendmsg+0x90f/0xdf0 [ 1415.884373] ? netlink_unicast+0x7f0/0x7f0 [ 1415.884720] ? netlink_unicast+0x7f0/0x7f0 [ 1415.885061] __sock_sendmsg+0x154/0x190 [ 1415.885385] ____sys_sendmsg+0x70d/0x870 [ 1415.885712] ? sock_write_iter+0x3d0/0x3d0 [ 1415.886049] ? do_recvmmsg+0x6d0/0x6d0 [ 1415.886364] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1415.886789] ? lock_downgrade+0x6d0/0x6d0 [ 1415.887124] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1415.887547] ___sys_sendmsg+0xf3/0x170 [ 1415.887861] ? sendmsg_copy_msghdr+0x160/0x160 [ 1415.888231] ? lock_downgrade+0x6d0/0x6d0 [ 1415.888574] ? find_held_lock+0x2c/0x110 [ 1415.888917] ? __fget_files+0x296/0x4c0 [ 1415.889249] ? __fget_light+0xea/0x290 [ 1415.889571] __sys_sendmsg+0xe5/0x1b0 [ 1415.889879] ? __sys_sendmsg_sock+0x40/0x40 [ 1415.890228] ? rcu_read_lock_any_held+0x75/0xa0 [ 1415.890612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1415.891034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1415.891449] ? trace_hardirqs_on+0x5b/0x180 [ 1415.891801] do_syscall_64+0x33/0x40 [ 1415.892101] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1415.892519] RIP: 0033:0x7fdda5114b19 [ 1415.892818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1415.894284] RSP: 002b:00007fdda268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1415.894897] RAX: ffffffffffffffda RBX: 00007fdda5227f60 RCX: 00007fdda5114b19 [ 1415.895466] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1415.896035] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1415.896606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1415.897173] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 [ 1415.906622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1415.907450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1415.911514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1415.913397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 15:48:28 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:48:28 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000201050000000000000000000500000204000f8044000180140001100600034000030000060003400004000014000180080001000a01010208000200ac1414aa06000340000300000c0006800800020064010100"/104], 0x68}}, 0x4000080) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000e80)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000101030000000000000000000200000008000840000005cf38e18e784c4422c7a35ee6cfc861ed90a3bf76b654344de6d1db215b7f2c91b3f09d4809272945e78b28055f2671b4ee1161e86a58d3488ada92196a70"], 0x1c}}, 0x0) 15:48:28 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='O']) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1901408, 0x0) 15:48:28 executing program 5: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) fallocate(r3, 0x1, 0xecb, 0x7) unlinkat(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0xe8, 0x5, 0x8, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x48029, 0x400000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x0, 0xfff}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)=ANY=[]) copy_file_range(r5, 0x0, r0, 0x0, 0x200f5ef, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3, 0xff, 0x81, 0x2, 0x0, 0xfffffffffffffff9, 0x14900, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}, 0x1, 0x100000000, 0x1, 0x0, 0x4786, 0x10001, 0x0, 0x0, 0x3}, 0x0, 0x8000, r6, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) dup2(r7, 0xffffffffffffffff) 15:48:28 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 1415.962630] FAULT_INJECTION: forcing a failure. [ 1415.962630] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.964372] CPU: 1 PID: 8733 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1415.965207] FAULT_INJECTION: forcing a failure. [ 1415.965207] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.965376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1415.967457] Call Trace: [ 1415.967848] dump_stack+0x107/0x167 [ 1415.968381] should_fail.cold+0x5/0xa [ 1415.968948] ? create_object.isra.0+0x3a/0xa20 [ 1415.969618] should_failslab+0x5/0x20 [ 1415.970179] kmem_cache_alloc+0x5b/0x310 [ 1415.970768] ? mark_held_locks+0x9e/0xe0 [ 1415.971362] create_object.isra.0+0x3a/0xa20 [ 1415.972008] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1415.972754] kmem_cache_alloc_bulk+0x168/0x320 [ 1415.973425] io_submit_sqes+0x6f76/0x85c0 [ 1415.974054] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1415.974780] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1415.975490] ? lock_downgrade+0x6d0/0x6d0 [ 1415.976091] ? find_held_lock+0x2c/0x110 [ 1415.976689] ? io_submit_sqes+0x85c0/0x85c0 [ 1415.977324] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1415.978037] ? wait_for_completion_io+0x270/0x270 [ 1415.978743] ? rcu_read_lock_any_held+0x75/0xa0 [ 1415.979422] ? vfs_write+0x354/0xa70 [ 1415.979971] ? fput_many+0x2f/0x1a0 [ 1415.980512] ? ksys_write+0x1a9/0x260 [ 1415.981072] ? __ia32_sys_read+0xb0/0xb0 [ 1415.981669] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1415.982438] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1415.983195] do_syscall_64+0x33/0x40 [ 1415.983738] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1415.984491] RIP: 0033:0x7f09e0b8db19 [ 1415.985038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1415.987684] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1415.988801] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1415.989834] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1415.990866] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1415.991903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1415.992945] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1415.994052] CPU: 0 PID: 8721 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1415.994662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1415.995321] Call Trace: [ 1415.995541] dump_stack+0x107/0x167 [ 1415.995831] should_fail.cold+0x5/0xa [ 1415.996141] ? create_object.isra.0+0x3a/0xa20 [ 1415.996512] should_failslab+0x5/0x20 [ 1415.996814] kmem_cache_alloc+0x5b/0x310 [ 1415.997146] create_object.isra.0+0x3a/0xa20 [ 1415.997494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1415.997902] kmem_cache_alloc_bulk+0x168/0x320 [ 1415.998274] io_submit_sqes+0x6f76/0x85c0 [ 1415.998623] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1415.999019] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1415.999412] ? lock_downgrade+0x6d0/0x6d0 [ 1415.999742] ? find_held_lock+0x2c/0x110 [ 1416.000075] ? io_submit_sqes+0x85c0/0x85c0 [ 1416.000428] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1416.000820] ? wait_for_completion_io+0x270/0x270 [ 1416.001210] ? rcu_read_lock_any_held+0x75/0xa0 [ 1416.001577] ? vfs_write+0x354/0xa70 [ 1416.001878] ? fput_many+0x2f/0x1a0 [ 1416.002172] ? ksys_write+0x1a9/0x260 [ 1416.002479] ? __ia32_sys_read+0xb0/0xb0 [ 1416.002803] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1416.003223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1416.003638] do_syscall_64+0x33/0x40 [ 1416.003942] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1416.004345] RIP: 0033:0x7f991b285b19 [ 1416.004649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1416.006100] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1416.006714] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1416.007281] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1416.007846] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1416.008411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1416.008986] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:48:28 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee1079af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:48:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x400000000004]}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x9000000a}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x240, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}, 0x1c) listen(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r4}, {r5, 0x82}, {r0, 0x8109}, {0xffffffffffffffff, 0x4}, {r0, 0x10090}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10, 0x0, 0x2000000, 0xebe, 0xffffffff, 0x1}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x1010, r2, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r1, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000000)=0x80, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x0, 0x800}, 0x4) 15:48:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x5e7270a966ef3db7) r1 = creat(&(0x7f0000000280)='./file0/file0/file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x20, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001380)) openat(r2, &(0x7f0000000300)='./file0\x00', 0x446c84, 0x4a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) openat(0xffffffffffffffff, 0x0, 0x404100, 0x0) write$P9_RREADLINK(r0, &(0x7f0000001680)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB="fe4e6c036a75e557e7058833679325c74cb7acec2defc2021558ebe1b054392accb8e55c8084d90fc20599f6da760f2a5626d44e9a547c3884ff50e0b21e88d772c4e7193f3ec42715", @ANYRES64, @ANYRES16=r3, @ANYRESOCT, @ANYRESHEX=r0], 0x10) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x120) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0xfef) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x101000, 0x2) fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/65) sendfile(r0, r2, 0x0, 0x20d315) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYRESDEC=r4], 0x1c) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}}) [ 1416.052997] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 4294967295 15:48:28 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:48:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (fail_nth: 12) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:48:28 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8100c, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x40000006}, 0x0, 0x4000, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0xffffffffffffffe8, 0x0, 0x80000000, 0x2}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4007, @fd_index, 0xa3d, 0x16, 0xa7d9, 0x10}, 0x417) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) fsync(r1) r2 = fork() r3 = fork() ptrace$cont(0x7, r2, 0x1, 0x5) kcmp(r3, r2, 0x2, 0xffffffffffffffff, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x20, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r4}) ptrace$setregs(0xd, r4, 0x3ff, &(0x7f0000000140)="3cc0265c2043751f8d251896d8b02bf01b04ad49d9485746302e263d77a7dbaf8430d6e22dbffece7e2b053461c1d045f6f0b80e547f4a7aef6b2277b88c3431d316daad9fbe6bf0e061abdc3087febe5d5e2c38fc01ee49de156562815ed3b992a910aba26eb8f0d8792cd035e80ebfa410f1b568b3be81042f97da8fa6c1c3b677623d20051c2e970c69244bba8e343194370be70c3999921d67831d9ce5b987fde5a048e605c7252de285018cab65") perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r5}) ptrace(0x10, r5) [ 1416.143538] FAULT_INJECTION: forcing a failure. [ 1416.143538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1416.144611] CPU: 0 PID: 8753 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1416.145153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1416.145807] Call Trace: [ 1416.146024] dump_stack+0x107/0x167 [ 1416.146315] should_fail.cold+0x5/0xa [ 1416.146625] _copy_to_user+0x2e/0x180 [ 1416.146940] simple_read_from_buffer+0xcc/0x160 [ 1416.147322] proc_fail_nth_read+0x198/0x230 [ 1416.147671] ? proc_sessionid_read+0x230/0x230 [ 1416.148048] ? security_file_permission+0x24e/0x570 [ 1416.148451] ? perf_trace_initcall_start+0x101/0x380 [ 1416.148874] ? proc_sessionid_read+0x230/0x230 [ 1416.149243] vfs_read+0x228/0x580 [ 1416.149530] ksys_read+0x12d/0x260 [ 1416.149819] ? vfs_write+0xa70/0xa70 [ 1416.150124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1416.150549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1416.150972] do_syscall_64+0x33/0x40 [ 1416.151272] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1416.151686] RIP: 0033:0x7fdda50c769c [ 1416.151985] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1416.153463] RSP: 002b:00007fdda268a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1416.154075] RAX: ffffffffffffffda RBX: 0000000000000020 RCX: 00007fdda50c769c [ 1416.154642] RDX: 000000000000000f RSI: 00007fdda268a1e0 RDI: 0000000000000007 [ 1416.155210] RBP: 00007fdda268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1416.155778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1416.156349] R13: 00007ffd6e5689ef R14: 00007fdda268a300 R15: 0000000000022000 15:48:28 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="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"]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r2, 0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0xffc0, 0x6880) dup(r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) unshare(0x48020200) 15:48:28 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, 0x0, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:48:28 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 15:48:28 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 15:48:28 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) [ 1416.214397] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 15:48:29 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x2}, 0x78bd, 0xfffffffffffffffd) 15:48:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:48:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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"], 0x1b8}}, 0x20000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x620200, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00403c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="015e0000017d8502250a0100", @ANYRES32=r0, @ANYBLOB='?\x00\x00\x00\x00\x00\x00\x00./f0\x00\x00\x00\x00']) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r7, &(0x7f0000000180), &(0x7f00000003c0)=@v2={0x2000000, [{0x1, 0x56c}, {0x24, 0x1}]}, 0x14, 0x1) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000100)) [ 1416.335663] FAULT_INJECTION: forcing a failure. [ 1416.335663] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.337373] CPU: 1 PID: 8761 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1416.338358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1416.339549] Call Trace: [ 1416.339939] dump_stack+0x107/0x167 [ 1416.340482] should_fail.cold+0x5/0xa 15:48:29 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x3}, 0x78bd, 0xfffffffffffffffd) [ 1416.341050] ? create_object.isra.0+0x3a/0xa20 [ 1416.341835] should_failslab+0x5/0x20 [ 1416.342388] kmem_cache_alloc+0x5b/0x310 [ 1416.342979] ? mark_held_locks+0x9e/0xe0 [ 1416.343569] create_object.isra.0+0x3a/0xa20 [ 1416.344202] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1416.344948] kmem_cache_alloc_bulk+0x168/0x320 [ 1416.345613] io_submit_sqes+0x6f76/0x85c0 [ 1416.346236] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1416.346948] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1416.347647] ? lock_downgrade+0x6d0/0x6d0 [ 1416.348245] ? find_held_lock+0x2c/0x110 [ 1416.348839] ? io_submit_sqes+0x85c0/0x85c0 [ 1416.349471] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1416.350170] ? wait_for_completion_io+0x270/0x270 [ 1416.350865] ? rcu_read_lock_any_held+0x75/0xa0 [ 1416.351531] ? vfs_write+0x354/0xa70 [ 1416.352069] ? fput_many+0x2f/0x1a0 [ 1416.352604] ? ksys_write+0x1a9/0x260 [ 1416.353155] ? __ia32_sys_read+0xb0/0xb0 [ 1416.353742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1416.354498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1416.355246] do_syscall_64+0x33/0x40 [ 1416.355784] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1416.356526] RIP: 0033:0x7f991b285b19 [ 1416.357061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1416.359682] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1416.360815] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1416.361849] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1416.362866] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1416.363883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1416.364913] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1416.369690] FAULT_INJECTION: forcing a failure. [ 1416.369690] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.371549] CPU: 1 PID: 8775 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1416.372536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1416.373748] Call Trace: [ 1416.374139] dump_stack+0x107/0x167 [ 1416.374670] should_fail.cold+0x5/0xa [ 1416.375227] ? create_object.isra.0+0x3a/0xa20 [ 1416.375888] should_failslab+0x5/0x20 [ 1416.376444] kmem_cache_alloc+0x5b/0x310 [ 1416.377042] ? mark_held_locks+0x9e/0xe0 [ 1416.377638] create_object.isra.0+0x3a/0xa20 [ 1416.378272] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1416.379030] kmem_cache_alloc_bulk+0x168/0x320 [ 1416.379702] io_submit_sqes+0x6f76/0x85c0 [ 1416.380331] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1416.381059] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1416.381757] ? lock_downgrade+0x6d0/0x6d0 [ 1416.382368] ? find_held_lock+0x2c/0x110 [ 1416.382965] ? io_submit_sqes+0x85c0/0x85c0 [ 1416.383596] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1416.384296] ? wait_for_completion_io+0x270/0x270 [ 1416.385002] ? rcu_read_lock_any_held+0x75/0xa0 [ 1416.385677] ? vfs_write+0x354/0xa70 [ 1416.386228] ? fput_many+0x2f/0x1a0 [ 1416.386755] ? ksys_write+0x1a9/0x260 [ 1416.387321] ? __ia32_sys_read+0xb0/0xb0 [ 1416.387917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 15:48:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000000080)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8a3c3c82258ada10a55123916bfe55f010040", 0x2c, 0x4e0}, {0x0, 0x0, 0x1000000000c01}], 0x0, &(0x7f0000012b00)=ANY=[]) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) mkdirat(r2, &(0x7f00000000c0)='./file0/../file0\x00', 0x68) [ 1416.388694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1416.389604] do_syscall_64+0x33/0x40 [ 1416.390158] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1416.390894] RIP: 0033:0x7f09e0b8db19 [ 1416.391432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1416.394041] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1416.395137] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1416.396162] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1416.397191] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1416.398205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1416.399250] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1416.420982] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1416.422080] EXT4-fs (loop3): unsupported descriptor size 44376 15:48:29 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, 0x0, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:48:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1416.468060] EXT4-fs (loop3): unsupported descriptor size 44376 15:48:41 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 15:48:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:48:41 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x8}, 0x78bd, 0xfffffffffffffffd) 15:48:41 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8856f61a}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x8, 0x4, &(0x7f0000000380)=[{&(0x7f0000000100)="97d2edf97ec2eb227ee235f6224eb0", 0xf, 0x4}, {&(0x7f00000001c0)="d00d4e248a6246df2b2c0dd1525249ce39d090f954d4e69c068382f5", 0x1c, 0x1}, {&(0x7f0000000240)="a67af264988f0cdc7c7c49821a6836810c72e1378a863b6b03249a8d1ee9f8481c93e3", 0x23, 0x7fffffff}, {&(0x7f0000000280)="d3ce63175d577e1a830e869ce62f8702e72f7e41f7fb0acda7f0e2299c8fdf6d489d6498d778ec702d5843c310621336ead52c87e90a34f0c600e93b293749fc3159b713720404835d6e7d8d26fa2005312fafe974c830af3c9914f844e9d3c09f7714da94d12b73191cb90c412d4a84d0e48a1e47a8dd47e65a9fedb08781747badbb7bef382a8d9596b2a86609a77eddf0448328637d055bbd3c9ac9ae1c95172529b65ddd71bb59a2a96e380ed59cec0e275e1ddc960921a3459da8177477e8242bd5a8df6b95430b2b5e227d4a7dc7f71b72553591638c4a4aa2c9ae2fab59e5", 0xe2, 0x3}], 0x20010, &(0x7f0000000680)={[{@uni_xlate}, {@shortname_winnt}], [{@context={'context', 0x3d, 'staff_u'}}, {@seclabel}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r3}}, {@fowner_lt={'fowner<', r4}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@subj_user}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '}:(![,\x1f#^\\*'}}]}) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) 15:48:41 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x401870cb, 0x0) unlinkat(r0, &(0x7f00000003c0)='./file0\x00', 0x200) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffffffffffff8001, 0x7, &(0x7f0000000500)=[{&(0x7f00000000c0)="e729b5b397eb315d769391c7b9faa6609bb98534bdc623aa6cf0bf809111f9a58684600fa2742b96addde54b029ef70af7de1b323132989e5ae877e1f5c42a24e39d8f2db93f88ca", 0x48, 0x2}, {&(0x7f0000000140)="1095cd0e6ff9dec5753dcd8156e6f7eb996437d8d1e52df8ca3e8f5470096a259928f9b5bc0c094c986004bbeef88bd4f2d12b51e0088111", 0x38, 0x6}, {&(0x7f0000000180)="27ef77075a58d9db650511f0bb834bbe3a9c62b06cbe722491bc53fb77122822c3accc58c17efda8dee1740bbcd187c1a838bbff5e015405e027d9a316021cedd4e4accf4888121d163ef74e0d4da33895196bfd7c06f2ab23cb59172188eb4df7337c19e22c82c45a156cb9f976a8678ab566ae3ce5e61591c5162312801b5ed686d76b947f3030c583f8e677b2ce3b34f933", 0x93, 0x1}, {&(0x7f0000000240)="56af2227b95296cdaacb918f14716b2fafb9d6ca02372b2cc66a1e0b484c1dc6dc9723014076bc1cd23112b251a64d7b41a3a4e41e52ed91dac645c59067dbe056dd9c9e67c0b5240215b80c5cadb428861a85b4be081ff1e4e92320d101b4b50497a602ed7adeb4d9910fd1343976d0b299baee92c423d345fe9f2f9c1218e55e9bf3e17631", 0x86}, {&(0x7f0000000300)="15e6138fc096189c285127", 0xb, 0x32f5}, {&(0x7f0000000340)="d292466961611b8f1a2f178c15e77264f0ad06b65d60467678e2199bd150f778d1390c850f688f905bc428d4b08ae4c674c4a42b55cefceced632394541c3cec7a48d3bfed", 0x45, 0x20}, {&(0x7f0000000440)="d3fd514743f003e148c1a64ce1bc171aacfb5c8c66a1250afdd4a550b28d1aa8d59fd27fad31cdfe0a3afc76f5249320ffc70a8238e68315853cad5f12183f0d4fdfa99256bea44687e5aa9e8203c30ed26a5edfc5b2894a5ffa038bb31147d0165d2eb061663ba962255a80884461056b668852b51316d0ff1c545269a00e9d7b799cc6179ec25168bfc910bc040aa53fbb3bc1cad5b9a1536d990e628755b2dff2dad962ca590b1471fd02", 0xac}], 0x0, &(0x7f00000005c0)={[{@nocompress}, {@cruft}, {@dmode={'dmode', 0x3d, 0x6}}, {@map_normal}], [{@dont_appraise}, {@audit}, {@fsname}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise}, {@euid_gt={'euid>', r3}}, {@obj_role={'obj_role', 0x3d, '/'}}]}) 15:48:41 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 15:48:41 executing program 5: syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r2, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) r3 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) poll(&(0x7f0000000000)=[{r2, 0x2002}, {r3, 0x3}, {}, {r6, 0x1a0}, {0xffffffffffffffff, 0x11c}], 0x5, 0x80000000) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x2c, 0x30]}}}}]}) 15:48:41 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, 0x0, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) [ 1429.062795] FAULT_INJECTION: forcing a failure. [ 1429.062795] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.064568] CPU: 0 PID: 8811 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1429.065564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1429.066763] Call Trace: [ 1429.067154] dump_stack+0x107/0x167 [ 1429.067687] should_fail.cold+0x5/0xa [ 1429.068248] ? create_object.isra.0+0x3a/0xa20 [ 1429.068940] should_failslab+0x5/0x20 [ 1429.069507] kmem_cache_alloc+0x5b/0x310 [ 1429.070102] ? mark_held_locks+0x9e/0xe0 [ 1429.070696] create_object.isra.0+0x3a/0xa20 [ 1429.071350] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1429.072100] kmem_cache_alloc_bulk+0x168/0x320 [ 1429.072794] io_submit_sqes+0x6f76/0x85c0 [ 1429.073429] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1429.074162] __do_sys_io_uring_enter+0x6b5/0x18c0 15:48:41 executing program 5: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0xc39, 0x7ff}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0x3ff) unshare(0x48020200) [ 1429.074869] ? lock_downgrade+0x6d0/0x6d0 [ 1429.075606] ? find_held_lock+0x2c/0x110 [ 1429.076201] ? io_submit_sqes+0x85c0/0x85c0 [ 1429.076838] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1429.077532] ? wait_for_completion_io+0x270/0x270 [ 1429.078225] ? rcu_read_lock_any_held+0x75/0xa0 [ 1429.078886] ? vfs_write+0x354/0xa70 [ 1429.079420] ? fput_many+0x2f/0x1a0 [ 1429.079942] ? ksys_write+0x1a9/0x260 [ 1429.080487] ? __ia32_sys_read+0xb0/0xb0 [ 1429.081093] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1429.081841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1429.082580] do_syscall_64+0x33/0x40 [ 1429.083111] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1429.083841] RIP: 0033:0x7f09e0b8db19 [ 1429.084374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1429.086998] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1429.088099] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1429.089139] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1429.090162] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1429.091195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1429.092199] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:48:41 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x300}, 0x78bd, 0xfffffffffffffffd) 15:48:41 executing program 7: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12, 0x0, 0x8f6, 0x0, 0x15b}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) r1 = dup2(0xffffffffffffffff, r0) dup2(r1, r0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='[^.,+\x00', 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='w']) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) flock(r3, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x16, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6=@private0, {0x1}, {0x80000001}, {}, 0x0, 0x0, 0xa, 0x4}}, 0xf0}}, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000140)={0x14, 0x24, 0x14, 0x14, 0x7, 0x80000000, 0x0, 0xdc, 0x1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) dup2(r0, r2) 15:48:41 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) [ 1429.180727] FAULT_INJECTION: forcing a failure. [ 1429.180727] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.183337] CPU: 0 PID: 8819 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1429.184340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1429.185554] Call Trace: [ 1429.185954] dump_stack+0x107/0x167 [ 1429.186491] should_fail.cold+0x5/0xa [ 1429.187057] ? create_object.isra.0+0x3a/0xa20 [ 1429.187731] should_failslab+0x5/0x20 [ 1429.188297] kmem_cache_alloc+0x5b/0x310 [ 1429.188904] ? mark_held_locks+0x9e/0xe0 [ 1429.189505] create_object.isra.0+0x3a/0xa20 [ 1429.190157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1429.190908] kmem_cache_alloc_bulk+0x168/0x320 [ 1429.191571] io_submit_sqes+0x6f76/0x85c0 [ 1429.192211] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1429.192949] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1429.193654] ? lock_downgrade+0x6d0/0x6d0 [ 1429.194264] ? find_held_lock+0x2c/0x110 [ 1429.194866] ? io_submit_sqes+0x85c0/0x85c0 [ 1429.195509] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1429.196224] ? wait_for_completion_io+0x270/0x270 [ 1429.196944] ? rcu_read_lock_any_held+0x75/0xa0 [ 1429.197626] ? vfs_write+0x354/0xa70 [ 1429.198184] ? fput_many+0x2f/0x1a0 [ 1429.198721] ? ksys_write+0x1a9/0x260 [ 1429.199284] ? __ia32_sys_read+0xb0/0xb0 [ 1429.199885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1429.200666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1429.201427] do_syscall_64+0x33/0x40 [ 1429.201976] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1429.202724] RIP: 0033:0x7f991b285b19 [ 1429.203278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1429.205964] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1429.207080] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1429.208121] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1429.209176] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1429.210215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1429.211248] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:48:42 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 15:48:42 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:48:42 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x41ed}, 0x78bd, 0xfffffffffffffffd) 15:48:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@local, r3}, 0x14) stat(&(0x7f0000000200)='mnt/encrypted_dir\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="0500"/28]) setresuid(0xffffffffffffffff, r4, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000400)={'syztnl2\x00', r3, 0x1, 0x40, 0x8000100, 0x56b, {{0x1a, 0x4, 0x0, 0x8, 0x68, 0x67, 0x0, 0xf8, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x37, [@multicast2, @local, @empty]}, @timestamp={0x44, 0xc, 0x28, 0x0, 0x3, [0x3, 0xd8e1]}, @rr={0x7, 0x3, 0x2a}, @noop, @lsrr={0x83, 0xb, 0x21, [@multicast2, @dev={0xac, 0x14, 0x14, 0x26}]}, @rr={0x7, 0xf, 0x68, [@local, @multicast1, @rand_addr=0x64010101]}, @cipso={0x86, 0x1b, 0x3, [{0x2, 0x5, "54a590"}, {0x5, 0x10, "922ad128a61b70d7504713ac746f"}]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000300)={@remote, 0x7, r7}) [ 1429.364305] FAULT_INJECTION: forcing a failure. [ 1429.364305] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.366096] CPU: 0 PID: 8850 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1429.367098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1429.368279] Call Trace: [ 1429.368681] dump_stack+0x107/0x167 [ 1429.369214] should_fail.cold+0x5/0xa [ 1429.369784] ? create_object.isra.0+0x3a/0xa20 [ 1429.370444] should_failslab+0x5/0x20 [ 1429.371010] kmem_cache_alloc+0x5b/0x310 [ 1429.371598] ? mark_held_locks+0x9e/0xe0 [ 1429.372204] create_object.isra.0+0x3a/0xa20 [ 1429.372862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1429.373618] kmem_cache_alloc_bulk+0x168/0x320 [ 1429.374300] io_submit_sqes+0x6f76/0x85c0 [ 1429.374943] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1429.375679] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1429.376414] ? lock_downgrade+0x6d0/0x6d0 [ 1429.377054] ? find_held_lock+0x2c/0x110 [ 1429.377682] ? io_submit_sqes+0x85c0/0x85c0 [ 1429.378355] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1429.379094] ? wait_for_completion_io+0x270/0x270 [ 1429.379834] ? rcu_read_lock_any_held+0x75/0xa0 [ 1429.380544] ? vfs_write+0x354/0xa70 [ 1429.381122] ? fput_many+0x2f/0x1a0 [ 1429.381680] ? ksys_write+0x1a9/0x260 [ 1429.382266] ? __ia32_sys_read+0xb0/0xb0 [ 1429.382890] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1429.383691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1429.384480] do_syscall_64+0x33/0x40 [ 1429.385057] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1429.385837] RIP: 0033:0x7f09e0b8db19 [ 1429.386404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1429.389197] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1429.390356] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1429.391432] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1429.392512] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1429.393599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1429.394677] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:48:57 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 15:48:57 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 15:48:57 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0xed41}, 0x78bd, 0xfffffffffffffffd) 15:48:57 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x52, 0x101}, 0x14}}, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x16fb, 0x2718, 0x2, &(0x7f0000000080)={[0x2]}, 0x8) readahead(0xffffffffffffffff, 0x0, 0x7) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180)) recvmmsg$unix(r0, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x10000, 0x4) 15:48:57 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000840)={0x0, 0xadac}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x9cf0, 0x0, 0x0, 0x1cf}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth1_to_bond\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r2, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/12, 0xc}, {&(0x7f0000000240)=""/91, 0x5b}], 0x2, &(0x7f0000000300)=""/197, 0xc5}, 0x0, 0x2000, 0x1, {0x3}}, 0x9) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/random', 0x8000, 0x81) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000080)) preadv(r4, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00'}) 15:48:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:48:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x141) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="2001000000000000ffcf0391d3ec00000000000000027f00000100000000000002000000000000000000000000000a000000000000008be6f4c205da27eb509d1bc8b8a28e16ca95f123b08733269b3e1063226f44feb256e17ff303e42a5649dce7bb5b8c8378be5c06ae04d25aeafd5c888e8ed26cd0e22d29cf1bea54912223b71ed757b51480841287acbd1d3b325e046e21ae41098364fb076204cab2e5aeada8f1d0", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000800000bc150c330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008000800080000000000b7659a7e9bf9f7650ad8b6a9b387fc8a966537a8c3b25e20"], 0x134}}, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) close_range(r2, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0xfffffffffffffffe, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) r6 = fsopen(&(0x7f00000000c0)='fusectl\x00', 0x0) fcntl$dupfd(r4, 0x0, r6) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000540)={0x0, 0x7, 0x7, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000940)={{}, r7, 0x10, @unused=[0x8000, 0x5, 0x4, 0x6c], @subvolid=0x402}) copy_file_range(r5, 0x0, r1, 0x0, 0x100000000, 0x0) 15:48:57 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) [ 1444.673210] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1444.703489] FAULT_INJECTION: forcing a failure. [ 1444.703489] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.705304] CPU: 0 PID: 8875 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1444.706283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.707467] Call Trace: [ 1444.707861] dump_stack+0x107/0x167 [ 1444.708397] should_fail.cold+0x5/0xa [ 1444.708967] ? create_object.isra.0+0x3a/0xa20 [ 1444.709651] should_failslab+0x5/0x20 [ 1444.710217] kmem_cache_alloc+0x5b/0x310 [ 1444.710815] ? mark_held_locks+0x9e/0xe0 [ 1444.711425] create_object.isra.0+0x3a/0xa20 [ 1444.712230] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1444.712982] kmem_cache_alloc_bulk+0x168/0x320 [ 1444.713654] io_submit_sqes+0x6f76/0x85c0 [ 1444.714296] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1444.715038] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1444.715748] ? lock_downgrade+0x6d0/0x6d0 [ 1444.716500] ? find_held_lock+0x2c/0x110 [ 1444.717114] ? io_submit_sqes+0x85c0/0x85c0 [ 1444.717921] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1444.718641] ? wait_for_completion_io+0x270/0x270 [ 1444.719521] ? rcu_read_lock_any_held+0x75/0xa0 [ 1444.720214] ? vfs_write+0x354/0xa70 [ 1444.720916] ? fput_many+0x2f/0x1a0 [ 1444.721460] ? ksys_write+0x1a9/0x260 [ 1444.722151] ? __ia32_sys_read+0xb0/0xb0 [ 1444.722749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1444.723697] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.724529] do_syscall_64+0x33/0x40 [ 1444.725235] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1444.725984] RIP: 0033:0x7f09e0b8db19 [ 1444.726657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.730001] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1444.731365] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1444.732635] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1444.733937] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.735238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.736527] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:48:57 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x80000}, 0x78bd, 0xfffffffffffffffd) 15:48:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1444.892523] FAULT_INJECTION: forcing a failure. [ 1444.892523] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.894592] CPU: 1 PID: 8874 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1444.895648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.896758] Call Trace: [ 1444.897136] dump_stack+0x107/0x167 [ 1444.897790] should_fail.cold+0x5/0xa [ 1444.898368] ? xas_alloc+0x336/0x440 [ 1444.899107] should_failslab+0x5/0x20 [ 1444.899685] kmem_cache_alloc+0x5b/0x310 [ 1444.900245] xas_alloc+0x336/0x440 [ 1444.900728] xas_create+0x34a/0x10d0 [ 1444.901247] ? kernel_text_address+0xf2/0x120 [ 1444.901849] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1444.902648] xas_store+0x8c/0x1c40 [ 1444.903192] __xa_store+0x164/0x2d0 [ 1444.903688] ? xa_delete_node+0x280/0x280 [ 1444.904332] ? trace_hardirqs_on+0x5b/0x180 [ 1444.905059] xa_store+0x31/0x50 [ 1444.905673] __io_uring_add_tctx_node+0x1cf/0x520 [ 1444.906568] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1444.907285] __do_sys_io_uring_enter+0x1489/0x18c0 [ 1444.908116] ? lock_downgrade+0x6d0/0x6d0 [ 1444.908677] ? find_held_lock+0x2c/0x110 [ 1444.909412] ? io_submit_sqes+0x85c0/0x85c0 [ 1444.910157] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1444.911017] ? wait_for_completion_io+0x270/0x270 [ 1444.911669] ? rcu_read_lock_any_held+0x75/0xa0 [ 1444.912400] ? vfs_write+0x354/0xa70 [ 1444.912972] ? fput_many+0x2f/0x1a0 [ 1444.913470] ? ksys_write+0x1a9/0x260 [ 1444.913982] ? __ia32_sys_read+0xb0/0xb0 [ 1444.914633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1444.915491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.916478] do_syscall_64+0x33/0x40 [ 1444.917075] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1444.917853] RIP: 0033:0x7f991b285b19 [ 1444.918422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.921350] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1444.922433] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1444.923510] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1444.924663] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.925920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.926939] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1445.493971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 15:49:12 executing program 5: clone3(&(0x7f0000000340)={0x20100000, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/201, 0xc9, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x208100, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:49:12 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) write$P9_RREADLINK(r1, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 15:49:12 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:49:12 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0xfeffff}, 0x78bd, 0xfffffffffffffffd) 15:49:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x6, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:49:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 15:49:12 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 15:49:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1460.018570] FAULT_INJECTION: forcing a failure. [ 1460.018570] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.020603] CPU: 1 PID: 8908 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1460.021651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1460.022876] Call Trace: [ 1460.023275] dump_stack+0x107/0x167 [ 1460.023817] should_fail.cold+0x5/0xa [ 1460.024383] ? create_object.isra.0+0x3a/0xa20 [ 1460.025076] should_failslab+0x5/0x20 [ 1460.025640] kmem_cache_alloc+0x5b/0x310 [ 1460.026245] ? mark_held_locks+0x9e/0xe0 [ 1460.026851] create_object.isra.0+0x3a/0xa20 [ 1460.027505] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1460.028264] kmem_cache_alloc_bulk+0x168/0x320 [ 1460.028933] io_submit_sqes+0x6f76/0x85c0 [ 1460.029584] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1460.030326] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1460.031042] ? lock_downgrade+0x6d0/0x6d0 [ 1460.031655] ? find_held_lock+0x2c/0x110 [ 1460.032265] ? io_submit_sqes+0x85c0/0x85c0 [ 1460.032914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1460.033640] ? wait_for_completion_io+0x270/0x270 [ 1460.034363] ? rcu_read_lock_any_held+0x75/0xa0 [ 1460.035051] ? vfs_write+0x354/0xa70 [ 1460.035598] ? fput_many+0x2f/0x1a0 [ 1460.036130] ? ksys_write+0x1a9/0x260 [ 1460.036693] ? __ia32_sys_read+0xb0/0xb0 [ 1460.037302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1460.038085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1460.038850] do_syscall_64+0x33/0x40 [ 1460.039402] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1460.040157] RIP: 0033:0x7f09e0b8db19 [ 1460.040706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1460.043410] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1460.044507] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1460.045572] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1460.046622] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1460.047670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1460.048715] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:49:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:49:12 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x1000000}, 0x78bd, 0xfffffffffffffffd) [ 1460.128644] FAULT_INJECTION: forcing a failure. [ 1460.128644] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.130663] CPU: 0 PID: 8906 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1460.131889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1460.133110] Call Trace: [ 1460.133499] dump_stack+0x107/0x167 [ 1460.134041] should_fail.cold+0x5/0xa [ 1460.134590] ? create_object.isra.0+0x3a/0xa20 [ 1460.135267] should_failslab+0x5/0x20 [ 1460.135822] kmem_cache_alloc+0x5b/0x310 [ 1460.136423] ? mark_held_locks+0x9e/0xe0 [ 1460.137018] create_object.isra.0+0x3a/0xa20 [ 1460.137672] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1460.138418] kmem_cache_alloc+0x159/0x310 [ 1460.139033] xas_alloc+0x336/0x440 [ 1460.139556] xas_create+0x34a/0x10d0 [ 1460.140118] ? kernel_text_address+0xf2/0x120 [ 1460.140772] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1460.141542] xas_store+0x8c/0x1c40 [ 1460.142069] __xa_store+0x164/0x2d0 [ 1460.142606] ? xa_delete_node+0x280/0x280 [ 1460.143224] ? trace_hardirqs_on+0x5b/0x180 [ 1460.143856] xa_store+0x31/0x50 [ 1460.144347] __io_uring_add_tctx_node+0x1cf/0x520 [ 1460.145054] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1460.145831] __do_sys_io_uring_enter+0x1489/0x18c0 [ 1460.146553] ? lock_downgrade+0x6d0/0x6d0 [ 1460.147164] ? find_held_lock+0x2c/0x110 [ 1460.147757] ? io_submit_sqes+0x85c0/0x85c0 [ 1460.148401] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1460.149112] ? wait_for_completion_io+0x270/0x270 [ 1460.149820] ? rcu_read_lock_any_held+0x75/0xa0 [ 1460.150492] ? vfs_write+0x354/0xa70 [ 1460.151045] ? fput_many+0x2f/0x1a0 [ 1460.151579] ? ksys_write+0x1a9/0x260 [ 1460.152135] ? __ia32_sys_read+0xb0/0xb0 [ 1460.152730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1460.153505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1460.154261] do_syscall_64+0x33/0x40 [ 1460.154810] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1460.155563] RIP: 0033:0x7f991b285b19 [ 1460.156101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1460.158767] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1460.159846] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1460.160868] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1460.161929] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1460.162984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1460.163997] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:49:12 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x2000000}, 0x78bd, 0xfffffffffffffffd) 15:49:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x81, 0xf876}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) fcntl$getown(r1, 0x9) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x9, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(r0, 0x1) syz_io_uring_setup(0x3a0e, &(0x7f0000000300)={0x0, 0x198c, 0x8, 0x3, 0xae, 0x0, r2}, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005800)=0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x2c1) unshare(0x48020200) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 15:49:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'sit0\x00'}) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x20, 0xa21, 0x0, 0x0, {0x2, 0x0, 0x7a}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x0) r3 = io_uring_setup(0x62c, &(0x7f0000000280)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x13, &(0x7f0000000140)=[r5, r4], 0x2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) sendmsg$nl_generic(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x66c, 0x2a, 0x20, 0x70bd28, 0x0, {0x18}, [@generic="02f6cb28878c7032f85713c16cd5bb66e403e864bedcc99d63c3571058656429a45a7233f0fecd18085216ee314be41c52e55c262029b3d58430df93cf63ead051c77bc235da29536e584dfbe17426e4fbac47970ff175aa60f6c3ffec3344c031fccf8cabae4126eb1b76bcbe1a39578842ea45f618fcbbaed34127199f098e134db1c8e4f3ff41808d7bc518ce21a4f1268ae7244b4a5caf464090efa917adbb02f161c2dd7a483bce7f8a733d", @generic="53c2b236cb06538ab1d3594281967ca9424b4404c319edd7f2ac2aca458ab636e5d82cda06c98213275c708bd216574cc75c9f38b24b11921059f29163bbef23d56857508b975624a591e48062f1e852b41107a24323667fd30010061d66b90c47cbf44fed9cabc47c85cbce7493e5360c6adf238cb80f67389fa27bdf26c54243c308eb833800f4b718d3dff6a8573426490521a2c5902eda4b1a10ef2a9f4dc62a85d08334c2ebd2bdee9ff0b797a2ae618deaf24de88c1f29b803c21f9459f6edcadd042d70", @generic="f23fc24aab82fd728e5f83e6d408921301a7445527ca4a9ff0468842e7bd79fa565da29bac32550ad48da9e0dcdbbf3889a175979a5a2bacb8d0e8cdeb7f18259f585b00cd5af57d588a2fcf7da03667f04197592d2a8a222e3c495a829f2e0e7dcde53c3033104c50171d4fe7210c9cffb9337fe457a5e55d7c630d2e87d92099a848dfadaa2f77a35522dc24309f370cf564a96ad8ac1d9a65b14d191986707d096ac5c8b552bf58", @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="20f75126b831b8c942bf0a149002fd8a480b4855d7790a13b639ac56405197d3e910009e2d9618efb21241b52c19ff942ac35a569c9a8a121f6ab48fb0ace42f811e68ecc4efcb29dec8ab1c35c2eb72db3e23de9c91df2393b713596a04e826e3659214a6ef460dd5cb6fdbb0", @typed={0x8, 0x24, 0x0, 0x0, @fd=r1}, @nested={0x162, 0x1a, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r0}, @generic="4cef892d56bdf7719c6179ff2d629c8ca8d0e03ae74806a73bf6ab49fd066394d74545a6006de2", @generic="7666d503f9798e8ce052ad24f1215d7f9f250cc5b13bc29320fcae8e7f995e34fce2590b3fe71bc0172686e7e90f3c0bf05cd7f934ff83b2404a8d99101ace5660393594e10aaafd31a88c8a12b6fa5d13d51352a7da0676b9ab7461", @typed={0x8, 0x7c, 0x0, 0x0, @u32=0xffffffc0}, @generic="f6e94b86aa61442d2f08b2d4156100ab11eddbbe52d2e77b13c2dae445357da48844500336d38f32626d19ccdd58ff31c782fdf914cb821b2944ba06d80c13ece060fc56c2e7dc7a8fbe84f4955d9482e33db0e814a6043e358682d39bf7575bf41064e305c5e572f0b81bcc998f64244855097151c9e79bbb836192851a7d3e54bf65eb3d02406a3b669301d69008e12b6222a6bcefd7129f9c7ec66cdd3ed9169d3df43a11e7ba0bdcd0522e6bb8013e531b437f20fec3530cfadf96b7ae1b1eeef6"]}, @nested={0x24b, 0x0, 0x0, 0x1, [@generic="35f792dc48625feb7a043c663daa7a90d96da0d76f53670a54a925786747772c5c84cfb044cb3f6ffe33ba79b96ee19b4805e874227916cbd6808f2a1476e86338576c7dfb87fc5ee7d1f5931f7690ae0f7724ca9b28bef41ed6911ef18cbdf61f1839133671bdc87b5ccbde1e0e2b4bc71628bc6f221eb5", @generic="708c9cc498c48f7e742ad3a06a5be862bc407aca45ceaf8c273884a1d014aa158aae51c260dc37484898da8b6236c5f197086a146453c9e43bd6507ef435717b58886dbe11f37e8aa823380801651eec68e8a0c2e8203706614ea26122e4d8f237f4c9bc2af9fbbe8486375535e72fd6746af69411584742906eaa2c1911036b7cf830ad49808b82b3c9fbd68bb7d2147f5b1e93377f998c6a218d0960585cb2abc3b3115094d2e62f6350a6152e46ca83f7066c83f10dbf924465c7edfd7dcd19aeb6513ba688ec04343aa09cb3bf8fcb3505d2c05c6c56ef30", @generic="f7f8ecc3e980b0c642f081cfc7ccd04a7f308c8b7c0462d148c7f23f8aef1c3129899a6b8d0a88d4ea9278c714afafc8bb1e8d86924f92ade44a3adfb85802a81c30fdc4bcec8bb7208d015f0eb49864abf9f04a0852d907b0df6d1bd8ca3cf97b02a24a963a3297624cdeb0bef179c3af3c49886b754d1e0e494071859ec8c68659b349fd6a83ff99", @typed={0x5, 0x7b, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x67, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r6}, @generic="1fb8a9a4883d49f55926567b42342ca6de1fc990e99dcaaf8d880df7161d5b82e58174353bf944c09e358de09107b9d4e8dd1384c7c9d44031b08107", @typed={0x8, 0x35, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x2f, 0x0, 0x0, @u32=0x101}]}, @typed={0xc, 0x3a, 0x0, 0x0, @u64}]}, 0x66c}, 0x1, 0x0, 0x0, 0x404c451}, 0x120) 15:49:13 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 15:49:13 executing program 3: openat(0xffffffffffffffff, 0x0, 0x480800, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = io_uring_setup(0x162e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8f}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x7, &(0x7f0000000080)=[{0x2, 0x8, 0x0, 0x3ff}, {0x8000, 0x6, 0x2, 0x6}, {0x4, 0x1f, 0x2, 0xd12}, {0x8, 0x1e, 0x1, 0x80000000}, {0x9, 0x4, 0x9, 0xd1}, {0x5, 0x1, 0x5, 0x4}, {0x5, 0x1, 0x2, 0x4}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000240)={'netpci0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYBLOB="010000003fb4900000000000", @ANYRES32=r5, @ANYBLOB="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"]) r7 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0xcedb, 0x2, 0x0, 0x2, 0x0, r0}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x13, &(0x7f0000000140)=[r9, r8], 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000000c0)='/dev/vcsa\x00') connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) 15:49:13 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x3000000}, 0x78bd, 0xfffffffffffffffd) 15:49:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1460.297058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1460.330172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1460.345441] FAULT_INJECTION: forcing a failure. [ 1460.345441] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.347291] CPU: 0 PID: 8936 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1460.348299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1460.349464] Call Trace: [ 1460.349852] dump_stack+0x107/0x167 [ 1460.350369] should_fail.cold+0x5/0xa [ 1460.350938] should_failslab+0x5/0x20 [ 1460.351477] kmem_cache_alloc_bulk+0x4b/0x320 [ 1460.352149] io_submit_sqes+0x6f76/0x85c0 [ 1460.352765] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1460.353499] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1460.354175] ? lock_downgrade+0x6d0/0x6d0 [ 1460.354773] ? find_held_lock+0x2c/0x110 [ 1460.355346] ? io_submit_sqes+0x85c0/0x85c0 [ 1460.355991] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1460.356013] ? wait_for_completion_io+0x270/0x270 [ 1460.356033] ? rcu_read_lock_any_held+0x75/0xa0 [ 1460.356049] ? vfs_write+0x354/0xa70 [ 1460.356066] ? fput_many+0x2f/0x1a0 [ 1460.356084] ? ksys_write+0x1a9/0x260 [ 1460.356102] ? __ia32_sys_read+0xb0/0xb0 [ 1460.356123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1460.356139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1460.356162] do_syscall_64+0x33/0x40 [ 1460.356178] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1460.356189] RIP: 0033:0x7f09e0b8db19 [ 1460.356205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1460.356215] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1460.356234] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1460.356243] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1460.356252] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1460.356262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1460.356272] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:49:26 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 15:49:26 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200001, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="a9ebf5", @ANYRES16=0x0, @ANYBLOB="080026bd7000fddbdf2514000000080011000900000005000c0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4001) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0xb3}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = fsmount(r4, 0x1, 0xf6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x1010, r5, 0x0) r6 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x5fb3, 0x0, 0x0, 0x3de}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x10010, r6, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:49:26 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:49:26 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:49:26 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0xed410000}, 0x78bd, 0xfffffffffffffffd) 15:49:26 executing program 5: syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x2, 0x1, &(0x7f0000000000)=[{0x0}], 0x1c0000, 0x0) 15:49:26 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 15:49:26 executing program 3: openat(0xffffffffffffffff, 0x0, 0x480800, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = io_uring_setup(0x162e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8f}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x7, &(0x7f0000000080)=[{0x2, 0x8, 0x0, 0x3ff}, {0x8000, 0x6, 0x2, 0x6}, {0x4, 0x1f, 0x2, 0xd12}, {0x8, 0x1e, 0x1, 0x80000000}, {0x9, 0x4, 0x9, 0xd1}, {0x5, 0x1, 0x5, 0x4}, {0x5, 0x1, 0x2, 0x4}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000240)={'netpci0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYBLOB="010000003fb4900000000000", @ANYRES32=r5, @ANYBLOB="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"]) r7 = io_uring_setup(0x62c, &(0x7f0000000280)={0x0, 0xcedb, 0x2, 0x0, 0x2, 0x0, r0}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x13, &(0x7f0000000140)=[r9, r8], 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000000c0)='/dev/vcsa\x00') connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) 15:49:26 executing program 3: r0 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x220, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[{0x0}], 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') r1 = getpgrp(r0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) kcmp(0x0, r1, 0x0, r2, r5) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3, 0x7, 0x1, 0x6, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0x2, 0x0, 0x7f9, 0x8, 0x3f, 0x0, 0xfffffffc, 0x0, 0xf1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1473.613415] FAULT_INJECTION: forcing a failure. [ 1473.613415] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.614407] CPU: 0 PID: 8969 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1473.614949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.615600] Call Trace: [ 1473.615819] dump_stack+0x107/0x167 [ 1473.616111] should_fail.cold+0x5/0xa [ 1473.616420] ? create_object.isra.0+0x3a/0xa20 [ 1473.616782] should_failslab+0x5/0x20 [ 1473.617092] kmem_cache_alloc+0x5b/0x310 [ 1473.617438] ? mark_held_locks+0x9e/0xe0 [ 1473.617768] create_object.isra.0+0x3a/0xa20 [ 1473.618119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1473.618530] kmem_cache_alloc_bulk+0x168/0x320 [ 1473.618896] io_submit_sqes+0x6f76/0x85c0 [ 1473.619242] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1473.619638] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1473.620030] ? lock_downgrade+0x6d0/0x6d0 [ 1473.620358] ? find_held_lock+0x2c/0x110 [ 1473.620686] ? io_submit_sqes+0x85c0/0x85c0 [ 1473.621037] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.621439] ? wait_for_completion_io+0x270/0x270 [ 1473.621826] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.622199] ? vfs_write+0x354/0xa70 [ 1473.622495] ? fput_many+0x2f/0x1a0 [ 1473.622788] ? ksys_write+0x1a9/0x260 [ 1473.623093] ? __ia32_sys_read+0xb0/0xb0 [ 1473.623421] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1473.623835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.624245] do_syscall_64+0x33/0x40 [ 1473.624538] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1473.624948] RIP: 0033:0x7f991b285b19 [ 1473.625259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.626716] RSP: 002b:00007f99187da188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1473.626729] RAX: ffffffffffffffda RBX: 00007f991b399020 RCX: 00007f991b285b19 [ 1473.626734] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1473.626739] RBP: 00007f99187da1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.626744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.626749] R13: 00007ffded4a07af R14: 00007f99187da300 R15: 0000000000022000 [ 1473.651654] FAULT_INJECTION: forcing a failure. [ 1473.651654] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.651674] CPU: 1 PID: 8960 Comm: syz-executor.4 Not tainted 5.10.214 #1 15:49:26 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0xfffffe00}, 0x78bd, 0xfffffffffffffffd) [ 1473.651683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 15:49:26 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0xf, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1473.651688] Call Trace: [ 1473.651709] dump_stack+0x107/0x167 [ 1473.651728] should_fail.cold+0x5/0xa [ 1473.651747] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1473.651767] should_failslab+0x5/0x20 [ 1473.651786] __kmalloc_node+0x76/0x420 [ 1473.651812] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1473.651832] memcg_slab_post_alloc_hook+0x1f0/0x430 15:49:26 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1473.651854] ? trace_hardirqs_on+0x5b/0x180 [ 1473.651877] kmem_cache_alloc_bulk+0x182/0x320 [ 1473.651902] io_submit_sqes+0x6f76/0x85c0 [ 1473.651950] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1473.651966] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1473.651988] ? lock_downgrade+0x6d0/0x6d0 [ 1473.652002] ? find_held_lock+0x2c/0x110 [ 1473.652024] ? io_submit_sqes+0x85c0/0x85c0 [ 1473.652049] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.652071] ? wait_for_completion_io+0x270/0x270 [ 1473.652091] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.652106] ? vfs_write+0x354/0xa70 [ 1473.652122] ? fput_many+0x2f/0x1a0 [ 1473.652140] ? ksys_write+0x1a9/0x260 [ 1473.652158] ? __ia32_sys_read+0xb0/0xb0 [ 1473.652179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1473.652195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.652218] do_syscall_64+0x33/0x40 [ 1473.652234] entry_SYSCALL_64_after_hwframe+0x62/0xc7 15:49:26 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) [ 1473.652245] RIP: 0033:0x7f09e0b8db19 [ 1473.652261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.652270] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1473.652289] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1473.652299] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1473.652308] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.652318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.652327] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:49:26 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0xfffff, 0xfffffffffffffffd) [ 1473.829662] FAULT_INJECTION: forcing a failure. [ 1473.829662] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.830650] CPU: 0 PID: 8995 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1473.831192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.831845] Call Trace: [ 1473.832069] dump_stack+0x107/0x167 [ 1473.832361] should_fail.cold+0x5/0xa [ 1473.832669] ? create_object.isra.0+0x3a/0xa20 [ 1473.833043] should_failslab+0x5/0x20 [ 1473.833361] kmem_cache_alloc+0x5b/0x310 [ 1473.833694] ? find_held_lock+0x2c/0x110 [ 1473.834023] create_object.isra.0+0x3a/0xa20 [ 1473.834375] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1473.834790] __kmalloc_node+0x1ae/0x420 [ 1473.835112] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1473.835522] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1473.835935] kmem_cache_alloc_bulk+0x182/0x320 [ 1473.836310] io_submit_sqes+0x6f76/0x85c0 [ 1473.836655] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1473.837053] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1473.837458] ? lock_downgrade+0x6d0/0x6d0 [ 1473.837791] ? find_held_lock+0x2c/0x110 [ 1473.838130] ? io_submit_sqes+0x85c0/0x85c0 [ 1473.838489] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.838882] ? wait_for_completion_io+0x270/0x270 [ 1473.839271] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.839652] ? vfs_write+0x354/0xa70 [ 1473.839954] ? fput_many+0x2f/0x1a0 [ 1473.840246] ? ksys_write+0x1a9/0x260 [ 1473.840553] ? __ia32_sys_read+0xb0/0xb0 [ 1473.840883] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1473.841318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.841736] do_syscall_64+0x33/0x40 [ 1473.842042] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1473.842456] RIP: 0033:0x7f09e0b8db19 [ 1473.842758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.844266] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1473.844877] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1473.845458] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1473.846037] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.846610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.847191] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:49:41 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:49:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() kexec_load(0x0, 0x10, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) kexec_load(0x400, 0x8, &(0x7f00000003c0)=[{&(0x7f0000000100)="61fc4f54925c23d655017af143207b2936a000b2f1ba8299e3e412f7570b12ef043c61e84aa0681a065b2537762c6a80abb0ecee0d23e9b2e2f2b0cb1599b2bc6b3e77239b37e45da1b1e4fb3f84bb0f33e743988a5e28902d8fa511bebf2f052ae5b89a56807b38581b58cb666976ab5059eb807376fce3df893753ce97ecd20f0ac6f74937fb60c84c0398df84be5dcb2e4ca450f8d567f72cc944c692e13abbda22f0ba74d0447c275e7f29ca739a8cd134", 0xb3, 0x7, 0x8}, {&(0x7f0000000040)="43530354d9062d7246bd02c3cefeee5c563234687b03866c61c63c6fbd9521f5f2a67ffd8e0cac6e10980e", 0x2b, 0x1, 0x2b0}, {&(0x7f0000000080)="c8e6d0c7a090801ab80dbea4e527cfcea24e5587934ed948af5603e3b3342b7bb1609406d1ac139d14cfde", 0x2b, 0x2, 0x3}, {&(0x7f00000001c0)="a32670bccace859a8e10618ff41b50718d99594b71af8ffc918010037ec24d46531788a9f2cdcc31f4d73dc8688aa93188e58a0305919940285af63d4efb31f510257ffc864faa9e31fab87d2591dd0d22925e277c4d4cbf8353d674c87a6f59b413170c51df05f4dba9de586af63fa574f634b3ae78712231683de0a8d72b81b70aa1de31c1a61eb4d91a5ecc80a0598a8f2c4716ef9d27f28006bdaf0e2bad376e4585b7a5b86e8a7487c9421f37d531588312d8668e", 0xb7, 0xcc6, 0xffffffffffff7fff}, {&(0x7f0000000280)="5b6c55fe1d9cad162e0f2b18144ce52216829ce41135822c52f53aa4bdcf8913ad69a16f9c7e3a7b32181f8eff0fe599a14b2051628f08430db08c81b5ab112be4f9e144151a64b54604d759633f67160e49", 0x52, 0x400, 0x4}, {&(0x7f0000000700)="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", 0x1000, 0x81, 0x40}, {&(0x7f0000001e00)="8b899ef2b4996a7bb0053f5ad015cad2517b982a4aeb99ab1adc39305d4717ddb130bb4ecd4016225c9fb18a188041b13c80e084eb85aa05d3e853e4c6b5cf6add599543d20201b0ab8dbe9935add7e4f2a5b70030eeace08b2af50ca280e165c8d5462e39898f7724e3063d33ad4ccac223f9f79534218bcd15c2fc7b976d6bbdd79f5d6d282e7e99bb34aafb202073a9905daa2345d5f2b08169e771e7e05f9e1f7dfa043a3f1a190af2d5d73af49368463e6326fe9c0be19968ac2052a5918c78ec47d8066f55c99df4611c3201b2d44643d0f8035d03a9f87b1217cde9456cffbc8d1a2ebbdfc926cd32f5655b87283462b2324d572a1733edaee9b0c38911b35fe6cc709d55defd4585a40adb98808bc50b00af18cc0b24d9b6fc97782d6e26a0885bd7965f95d85f978e674abbeb35a9f31d18fc0e6b59610e9755161c130f6fe4224d7a48619975b7ea80b5495f61afe7ed25287f73460b2a5eee392811ca1d6465480f3d3ec1a8a848374639d2db5548cd1634a2800a5e889fcf07598e157c6ccc9624554d0c5d72937ba2f21b881f39b7b8ab8cc0d6c4684f77aee368d086e2337484bd977f0a2a9fa276bae3203ee2175e9a3b17f9bb8e35690b82a8318e344ab14e9df76f6d464537c0406648dc29708549654df908bc29b7f1566332b43438f3e97a786a15c8193fe591f9130be87831c4de8e7edbc6f308ac3605860687c2d8cf2f2fdab490778199a3bfe5deda0e55cfdba3c34c0d2918d946d80be7fbe3312d12e20838540a1772f002bfad32712726cbd33c5602d2be42b820edc050a7cedb31260b5146365d58e06184495e90c2349b07a203df3c3ae441d2fe53638058a0d885b3a1dc3f28c08ba4aaf5674ffff4291a77f206f05f15f86a8e2a2289e439914232957709e08144d96e9a68f1769cf73ea1f0232863e5804cb1ccf23bb969571a7e6ffa16275ca08820d1b6d0df5410e78c8badaa81073e8f2a4f776ca7d6be1e1d36ef3b8234cda6a12923696b3c1cb2ba6be9ddb3a37e1806a64a529f04e22082a403dd492a9be7c0dcd8790de59afbe25287aff99e83b1760d1023b84cdee88054b300e79c147c43ea2d865fe3b0c99886d4e31c12261bab2db6e07eab9979982568402bcaad8d1bdbe0fe4135d70b5d1a4f22f45ddff0be4dc8612d07eff2a16f4b682d466aec83a0f39dfff9f26514b93af6fae66993c16a15ce2e1712994d28a7ea17d265cc970954139924acfc5f6a9e74b8562fb14533503fe65e8a02790e806d3b1a012e1481473b85f2a5eba3402ccd20fc94534853bcb56bbffe91b358daa3dead45e2fb98ba176439dd9d26a9cee94f4f6e6ba68436ffdf1c92d29035d4e5f1bada1ae5721c8da14a57c97da6d5be43dbc2e3220df6ba8ec08a28102cff6480a6bf07373f5d02fd2cc4b9e5eaf37b8b2d936c6da2104dfeca7c19060df12926b482a4ef59256fbdf363d7a40f891c0c6a44460a7734ded5fddb2037decc0ca35d786ef8d49e3c29e4f89381554e1f31822edf414f14d3e8bbae422125338f088556f3fca7c5f9250c966ecd68625314634bf1f30b63cb6c2e29cd19a431bc909da54f729b796b9e0abbd6e55a51bfc35eaa70b493ec8640ac06b435b374b5e6a959ef5f77a57866b232c7587ce03fb0f33beeee64291616b718b03ce9778925005e199da6e37ee907c6a094939514881f8043365f1912b73cbe913e02e9f7a9dbf318600ed435f409360ac4962534fae925694408fc00c6328d895ef5afb63f87b5317e8aff6c5686fe2b193354634901f270d3297b176c54464328df001ad72bb6b33d2373efa10eb209a4b3b772316444acf466c6cd457c12810d944a0c50d910e5702ee0a01bf1b0958b20bc80af21757f1542273d400c057b378532984acd69eebc1ac921b882b69195a8d52d2d8b36cd010cca7e4604f517c280684af028df8edc2091c3ae1df8c153ee884eceb6b9507d297cf816378453fb4d9a7d8a71ebc64c95922dbc18b763cf84d56912c699183c27d8d28055a4d336a3e40d861ae0bf8fe202280f091c2c6a77e072708f931f83b3751296fca013c83c7dade7edec184d8a72b33764391dfbdc76a14ed98c394bb04dbb937e0bb0184404604efc1839eb8c4381f26b1e30ca8bc2cfb2d4dafe843a406b2c5517b284f4d732108ee3ee098e40df5049f26cecf7c8506a45975c387323520c34e0433e7998a92d0c7e2a1f10f467189c459027e3538ee713bd33f366e86f61a51ac0c18b843d266e28acbe7345246904c5ea652b00bdc6de39d691cc67c7ec359bbd9e86d1fbe2b0302627267b8871a9db9a264c9d74b5346fea0610ff66c08a3d2fa020fb2bab4725b2251b65a5dc0fcb06a84a6cccffb8512d1560687ae96b5ad8890313ddee68b995bf0221fedf16c3713c99f7f871d10cd3cbf2ad6f5638d636d09b33700f16df06bbfd1e131d52d2866e1afb410b925ea1ab3a11b35f3d196ed170915d4aa8c8ecb0f028b46ec645642df984b4548aea079d14a25a380a1c5a1a4115e8cf11ee78a568b92973f3f6ac4519095f5290d2194d22a0f81c0eda306fd5ef722b5e5ef76a0da8175c423ea4d964ad93925375c3321b11ba9aa526a485d79993159c453bbef3d33ff560d134f316eecd3e19dffcd6398ab179b047eeca6646d8e97c9176fa04bc09d59f3e407056f90260275c248ceef4c104842ae92e7158ee4ec51adf18e7b11a58711fc94f5ca0ab4d21c63af54c59a5b2e18a028bdae3b79968a60e47de8221fc9ffdef805e3041692536bba289806702d42d86f1a4e4e7215160e8f45cb55c8c4ffa2a2559e90127c9675c3037f5354ba1a5ced3089886b3f758aa363d68cdcb16a1e8f3a7d9a424e4c0041389c3a809129a7c0811070acf344a79e99f3cb263553787d2fab485786331722b1a7b50251407bfe8c2c7f14d3fa81fa4bfd5d75c552cd60de5763e4bb897aaa7b8c93c9568f357e9dec5fc8fab8c614f769d0326b8d6f02f47a74c67f09aca76fe5eff950c125528ca49ff5c2107e88a1619dafb6b1d33e693b7b11d80d8cae91d57c83db6e27db908ff270fde517c3580550c5d4a1452cd81ff3f020cf90e46015612c07231e155d499c71a75ce85ad3a71c3aa77ccf02d8c98a995d23f38daafa66e57985c9b76525913f19a4b5ee21d12f211dd6e54d28f19991c903b66f9f3c376e6ca7e9a4a208495484c7b8c7795ddd24516a74e1840d4983e04246e0b9fb7513925ee2aeb0684c80cdd7a7f073588a2bfcd84d616000a78dbdb08156c960e93eb3a8b0823056bc49c576aec6f4a2e98a2f89a75d9e404d283abe05459b572351575c4fd469f42c1e613a4489ad06c3702dbcc20506d9219867ab22975f2d0d60e4313f0324430765e56683f332f28d1f28bb9576f322a9c902e3b550b2b0e35e9d69c8c09d506e30f7c7743d89235b30b7c5abbe1669c927a85a28398463bf0b283ef992a661414dc4847b70119414b7291a725f844a2d8e0f972a4be37ecea73f1659657746481262749393c97b87b0d95d8cdf27055ba3a4ebfd84cd6de17763cc79dc52b7d685f3770544daa0d1ce70694cef7ebcbd1b60f8770d9d13b8fb4d0193229fcf76d01e5126c4d8dc1b4f136156f891c48eeed43991c09879d8a77ec54767bfae82bc93cc4fc7122f29be2e664b0610d07928d03b39a24657f793a48c66d7d726ab7c9dc561791c2833e4bb65db7a4204366a6a718b8d25e78764a9d57d5325778624ed0f49bc9b1a5342b45cae5ebe6caa8da8fc8935aaf804de5f94aa119362377db394de015e1036b8b15acaa718013529ba7261ffca2cfcb1cfed3449aa7632b3d06e6f2f9364a62a988741ee1d1b37c057712bdb66018d65884e7cff04243fefae8e2fcbad811e75690254c2a0e258202fff23256945ff632f01392d6f19764998bcbf459a2e33c628a8e941fc46b7f755846b656a4bdcd8e19e8eaa291b2e647859434ab4a94e50781c147bfc1a68d40401ded1bf3fb184d4dd28cc1e32f398939a17b3a1c79ae68e6402705959304bc05a2bdef3598d9666081afd1e5a250df09902b2f0138c58fe197dfae520aa8bbee4a61b64913bc643ae149be29e8504420271fee5a003744ce736dd53cd0543e57e56032d845906eb74deeeb57aa66ff447c38dd884723467f6e24851e09a623bc8da796881618e04f13f349b441fa6540f0c1ef68dad2a6e91f24b12dc0e9a5ef305be4c90c58a5bd79a663114811d26db746edde320a6111db56011aded32c353eee27c90dfbbdf31c2e2130f235fe7a42cac58c486a728cabf5f9728412e93b0e633b959296c05124b8fb33d947c7bc1047cf98ef2f5f363ee02e456993e0b929536c973507d76d1818bb2343ccb489795a84d36f09ae261bc4fc169d69874812ed511933f0ea2f83065282fef33c2c5af067fd5180dffb2f789b9db7595f667a69fc6b91ed95a914c0dba5c00b8dce5a97ee78fe04f379a96a650618d693dd3d30a78be478249844ee67bd689a900253578224742776d268affbf2ea3869b3dfa09d5d02816c0cedec96f0d5d2827ad31f691ac662cf3e06b8138c1ae7a17ef8c21f68df246ffebe517c2a8f0fba998bfa0d8afd379e70a2658d2dba22a19b0111f56d2c1804acb2f58d2492ba0d7a1553cf2a3498106a9d8eae35828ddc24993e6c9457646846d0469c5c9dc119d02d089985f73b1f3470068aaeb0dfbfda7ac6a8e86e47b446052e237143637cc2b6e42b7e7f8c98fcb94227e0a546cba6bcd0eee3c9a1f9c1b8f1b6947b36f5523d6b8f3556957a79c4a2cbbd02734b82e3b09424cbe099c7e5d20a4e83fedef39b25b49050986e56f0d3828133004babbb758bea904b52c5056b4e9540a2103558774d203a4d5e65bf4983fbc225a033bf438d1bfeda88f78239949d42ca41f9de0fa2d622926303eb9b3ea09890c1cddc8a697dd72a9cb088c5e2fcdd5f08c89ee71d20a023f2e26c938d4c7ecd66a0f9bdd2521a6cefec5e8ebd3794b9671dd3df9a3d91729872d0381396cbb6769a21acdbe64315e7245de742f030e8cecde589a74666fe4d886a82735d4642b14a2b12d1a6de9df899dbd317d2c0834c762068a5daf2d059909d074901457099bab1ddad38793c80b52adb721916a4c00e71825c364e3b2ea5b6b2643aa6657104b6780022cc17e79f32bfd6a505c9305ccab24984542a16d7a8131774e163b8084607bdea982706866eabf7c64ee78ac4054049fbf33e726d890282ebffc7ea2223aa918011257de26b12cc81eefe52fa232741de9bddd5b7701dd64cf7a230bb63db7a33c3b73b77c4c741feac265f1b65ca026781caa4461beeccfbd3713d45f945720298c4bb37d1d451f6e60ed0baf87ce2477a913f579b5a81a76ffe6d46be703c9cbefd7f855e6628e9694e314ab98bc6a2481254eedc71745dd7d167c79004f1866bd6fc0cd9e6ad036c01dc3d44399dcfde7c0e9bff6801d1f4611e4e8816d6d1f2f77c0c862a2bdcbc52eaaf0d8008e2d189a71d43d910f5a7f3c85a4dde16b49bb782ffeb520f01fcbf359f0c50fef85eeb4c57a5bc6e8684c5a3ab23729ab8cc08711c06cb855ad85d266eec72853c773024bfc8968c9c0c1a8e4795f424129cedff2a5f4096fe21f41a288eb3e0e7168c9f418536cfcef53a8135abb84c0cbf34a5bb897b6c594bd696cbe1186ccbcc310e2b4b474974fff8d11a91f1b592b3d48faab269830c9de4a696bd4666ad4ff6297a8155cf131b87418ffe", 0x1000, 0x9, 0x7fff}, {&(0x7f0000000300)="f74b5560475f2e22016b219c07c1792a1b0dd423089dcce5c3dcb4bf6e51bce09a05aead2591a95eb8689f67332bd1d3a2d6fb178cb73ccd686d2abca0958b5c7ff12d225367448a694d449ac0f79232ed0c5be9674bf8b9ae040485c941dd76c0aee3f4247db2e93fec825faf5544ae0961b2def6dc955784272abd8f2e0ad03bc413c84d8d8825990e234fcdcbca7118d74c99abfe79f7e54f9a3bafa241cd28ffc9f12b724ecb92b6ddc37a3c6393f9", 0xb1, 0x3, 0x5}], 0xa0000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='{\x00', 0x0, r0) 15:49:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x6) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x9, 0x3, &(0x7f0000000400)=[{&(0x7f0000000280)="8bca08f4e49c1a52182192debd66a2db3af61b9ff11c8b0cbeb00ca49f6f", 0x1e, 0x5}, {&(0x7f0000000340)="73a7aca9f65ee8413cf08965e1dca3ded9270dab78a657a58a375635b11bdc6e861db4acaad6fa750e4e7cba64336bb55845db48c8b01c91f5fcc8", 0x3b, 0x8}, {&(0x7f0000000380)="bf2b3eb0808fee2fcbb6fd05cf31f7f1bf11d187430c77e9e9211e927e194c28568fc247caa7e4b02e46e55639d125200824648a07f3061e6192c0e1c6f22d86507f83e94731c709", 0x48, 0xe82}], 0x4020, &(0x7f0000000640)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c6e6e6f6e756d74e1696c3d312c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c74656275672c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c61707072616973655f747970653d696d617369672c736d61636b6673726f6f743d872d2c00db883c413870047b9daf31ad0a2b79f56b8f2d60d93dcc6e11330496ec69b736e3b9b9b115d60aae6cebb06a144a5355dbb986012d21e56bf0a735cdebe0f042b1a1c401f2ba9ecb1db280c9f33eefe77302220eec8f26942b00291ae8b58ea4d02c842275"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f0000000480)=ANY=[@ANYBLOB="00fb4e0106390a38c4925d75d7901b9bd5522a28c7a9ebdca6282ecb8d7319c632e73ab8695be892fe6367bbf744370ac46859ca61281dcf7f68ef526222e1c4b4e42e9d98c68238fbe380d12f135b5ed2424ad1d0eef291b3ff056f5bf6ff9c21f6fb11f4b74878ea3915ecbcfc369c5a0c4a256a2c5f87a51da357107ed057bd5aa5c7c3aa4b0c932e6c5342b1bbf6df"], 0x4e, 0x1) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1000001, 0x8010, r2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:49:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x101c40, 0x5e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40005, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x6}, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2800, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITE={0x17, 0x5, 0x2007, @fd_index=0x6, 0xe30, &(0x7f00000001c0)="f0fb06ad25e6a99d197a24e682ddb5ae989f8538a9f29e7211f3e7d99813ebb570ebfa7d8d42bb9aa5620b5722b598001a35021ada825435a0bb1ce1", 0x3c, 0x8}, 0x3) write(r3, &(0x7f0000000240)="01", 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x1}}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r1, 0x0) syz_io_uring_complete(r4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x650483, 0x120) r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r5, &(0x7f00000000c0)=""/65) sendfile(r0, r2, 0x0, 0x20d315) 15:49:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:49:41 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 15:49:41 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x2000793d, 0xfffffffffffffffd) 15:49:41 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) [ 1488.679775] FAULT_INJECTION: forcing a failure. [ 1488.679775] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.681629] CPU: 1 PID: 9016 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1488.682614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1488.683841] Call Trace: [ 1488.684231] dump_stack+0x107/0x167 [ 1488.684773] should_fail.cold+0x5/0xa [ 1488.685326] ? create_object.isra.0+0x3a/0xa20 [ 1488.686015] should_failslab+0x5/0x20 [ 1488.686580] kmem_cache_alloc+0x5b/0x310 [ 1488.687168] ? mark_held_locks+0x9e/0xe0 [ 1488.687779] create_object.isra.0+0x3a/0xa20 [ 1488.688439] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1488.688462] kmem_cache_alloc_bulk+0x168/0x320 [ 1488.688486] io_submit_sqes+0x6f76/0x85c0 [ 1488.688530] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1488.688546] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1488.688567] ? lock_downgrade+0x6d0/0x6d0 [ 1488.688582] ? find_held_lock+0x2c/0x110 [ 1488.688603] ? io_submit_sqes+0x85c0/0x85c0 [ 1488.688629] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1488.688651] ? wait_for_completion_io+0x270/0x270 [ 1488.688671] ? rcu_read_lock_any_held+0x75/0xa0 [ 1488.688687] ? vfs_write+0x354/0xa70 [ 1488.688703] ? fput_many+0x2f/0x1a0 [ 1488.688721] ? ksys_write+0x1a9/0x260 [ 1488.688739] ? __ia32_sys_read+0xb0/0xb0 [ 1488.688760] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1488.688777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1488.688800] do_syscall_64+0x33/0x40 [ 1488.688815] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1488.688827] RIP: 0033:0x7f09e0b8db19 15:49:41 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x3d}, 0xfffffffffffffd0d, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$setperm(0x5, 0x0, 0x2020) [ 1488.688843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.688852] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1488.688871] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1488.688881] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1488.688890] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.688899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.688909] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1488.719215] process 'syz-executor.5' launched '/dev/fd/-1' with NULL argv: empty string added [ 1488.757404] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1488.767183] FAULT_INJECTION: forcing a failure. [ 1488.767183] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.767302] CPU: 0 PID: 9017 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1488.767360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1488.767396] Call Trace: [ 1488.767421] dump_stack+0x107/0x167 [ 1488.767441] should_fail.cold+0x5/0xa [ 1488.767463] ? create_object.isra.0+0x3a/0xa20 [ 1488.767485] should_failslab+0x5/0x20 [ 1488.767503] kmem_cache_alloc+0x5b/0x310 [ 1488.767522] ? mark_held_locks+0x9e/0xe0 [ 1488.767549] create_object.isra.0+0x3a/0xa20 [ 1488.767568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1488.767593] kmem_cache_alloc_bulk+0x168/0x320 [ 1488.767618] io_submit_sqes+0x6f76/0x85c0 [ 1488.767664] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1488.767682] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1488.767704] ? lock_downgrade+0x6d0/0x6d0 [ 1488.767720] ? find_held_lock+0x2c/0x110 [ 1488.767743] ? io_submit_sqes+0x85c0/0x85c0 [ 1488.767771] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1488.767794] ? wait_for_completion_io+0x270/0x270 [ 1488.767816] ? rcu_read_lock_any_held+0x75/0xa0 [ 1488.767832] ? vfs_write+0x354/0xa70 [ 1488.767854] ? fput_many+0x2f/0x1a0 [ 1488.767874] ? ksys_write+0x1a9/0x260 [ 1488.767893] ? __ia32_sys_read+0xb0/0xb0 [ 1488.767916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1488.767933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1488.767957] do_syscall_64+0x33/0x40 [ 1488.767974] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1488.767987] RIP: 0033:0x7f991b285b19 [ 1488.768004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.768014] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1488.768036] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1488.768046] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1488.768057] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.768067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.768078] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:49:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 15:49:56 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:49:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = fork() r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xa3, 0x2, 0x7, 0x3, 0x0, 0x4, 0x480, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x100000000, 0x2}, 0x801, 0x7, 0x1, 0x5, 0x101, 0xe08, 0x43, 0x0, 0xfffffffb, 0x0, 0x80000001}, r1, 0x8, 0xffffffffffffffff, 0x2) fcntl$setlease(r0, 0x400, 0x2) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1, 0x1, 0x9a, 0x2, 0x0, 0x1, 0x10004, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000140)}, 0xb20, 0xfffffffffffffa88, 0x1, 0x6, 0x8001, 0x2, 0x2, 0x0, 0xc19, 0x0, 0xffffffff}, r1, 0x3, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r4}) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xff, 0x8, 0x0, 0x12, 0x0, 0xbb, 0x4000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000200), 0x5}, 0x8020, 0x4, 0x400000, 0x0, 0x8000, 0x1, 0x8001, 0x0, 0x9, 0x0, 0x100000001}, r4, 0xa, r2, 0x9) 15:49:56 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 15:49:56 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x1, 0x0, 0x0, 0x61f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff0200000000000000000000ffff000000000000000000000a00403c0000000078630edc00b65621f917d0b1e09eee2edf8be3afc1959d20009f1ce06120723f1ff6c65b0f07dce11d6ed896c57a71da80777802125c2632a4f4e67e6b48cb734bc482b4", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) ioprio_set$uid(0x3, 0x0, 0x4004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)=ANY=[@ANYBLOB="015e007f74878d00009991eb8e89404a27d776e1ed6a075eddca6e0bb7e3d84b4f86e568000a749cdbc83bee8e8a8a669310b56a510596eb705b9626214d42e7c4837ad741f095535fc27772393b45c74e82c5633c095fce26725f43f1762a73d067f64de522bd3c13b18f8607d329785bdd60f25465666194e58529c08d417096fc33e84ae09ef9b07884aaae21053a822e4a7ffbb1f04fac74de4564b6e5e9688b6e31a21efabf1cff6df9fd27336116ff6525cd25c824213876735d1b", @ANYBLOB="47ba592c2d9892a93caaf2b256c221253735ccc512b3a17fb3e629eb1e010000000000000010405e38508b"]) creat(&(0x7f0000000040)='./file0/file0\x00', 0x2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ptrace$setopts(0x840c, 0x0, 0x4, 0x200043) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x5}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000000740000000000000000000000000100000000000000000000000000000003000000008000"/88]) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) creat(&(0x7f0000000100)='./file0/file0\x00', 0x48) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000800)=ANY=[@ANYBLOB="5520cfffae31eac2298c16ef50dbb9abfa792dd756de3194ada38a67597be06a830b415c19266ad9fee644bf8e18f07f77116f28f3ec2810619331e5aa2a0ece9c309e2d83a628c4543fd5d26054c468a36e4b68b046e6f78aaca62ab306d75ed8edd36444ea76fa4b9198d2ec4ac33dabdb9e3fe4286b4b2657e9232bc7f8b082924f913541e9aaeb9c51c9c5573918728ff7438e8882b566b1de1adfd575e1dc520fb079bf2e948453b0f277f0b4531e58d6340807b3842780a01bc2e52def175babb1cb61f330a0117553149e4207d9d92252fefccb2557a7", @ANYRES32, @ANYBLOB="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", @ANYRES16=r2]) sendfile(r4, r5, 0x0, 0xffe3) close_range(r1, 0xffffffffffffffff, 0x0) 15:49:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x24f, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:49:56 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, 0x0) 15:49:56 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x1f, 0x6e, 0x35, 0x0, 0x6, 0xf040, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0x0, 0x6499704d, 0x1, 0xfffffffffffffbff, 0x9, 0x3f, 0x0, 0x28a5, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000100)=0x4, 0x2, 0x4) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="980000002000210c0010000000000000020101acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b501ac995853622f691db5a3bc250ecd3e8cadf086a4042a461095362e1a7f5dcd1783eb255cc953405e0ba35a380c00ff00c8990000000000001800ff800a0015002c5c282d9700000008002d00e1659ceba236894990f8001699c3", @ANYRES32=0x0, @ANYBLOB="fef67d3ef42bc60104000000000000790524f915bffdbc4dbc926fc4ed5a20af993e7bd38e25d38ee308e4433c7253688b5f90b857b9e1328ce644ccfd65e44f3a7ae4ad30ea7f1eacfc836995f64d5203803e2a57142cf7e97fd57520f7c2cedc441e77fc8eb7a4869181aa619b0a22bf54487ad00c1e1aec2598fbc6b343a0eebd647a9f9b56a900abc069923c012721000000"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140)=0x5, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x6, @mcast2, 0xc7}}, 0x0, 0x0, 0x16, 0x0, "4e9b7df2de6d399cca9bb72a6453d68651ad0fde9780843a40f75e7846e8c9564a06f161703016167d0ae171ed83dcc674cb2e03b30023552d433ae366d6d751e85565dcc76d01d96a7a2cee49cc8917"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) sendfile(r1, r0, 0x0, 0x9bbb) 15:49:56 executing program 3: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12, 0x0, 0x8f6, 0x0, 0x15b}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) r1 = dup2(0xffffffffffffffff, r0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='[^.,+\x00', 0x0) openat(r1, &(0x7f0000000240)='./file0\x00', 0x200, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) flock(r3, 0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000004c0)=@migrate={0x11d0, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in6=@private2, @in=@rand_addr=0x64010101, 0x4e20, 0x101, 0x4e24, 0x7fff, 0x2, 0xa0, 0x20, 0x3b, 0x0, r4}, 0x6e6bb4, 0x2}, [@sec_ctx={0x27, 0x8, {0x23, 0x8, 0x0, 0x3, 0x1b, "3dcac2c5dbb3c867534775722021fb8cb8a6bf9ff600904c46c6a5"}}, @user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@empty, 0x0, 0xa}}, @mark={0xc, 0x15, {0x350759, 0xc6}}, @tfcpad={0x8, 0x16, 0x2}, @srcaddr={0x14, 0xd, @in=@empty}, @algo_auth={0x1048, 0x1, {{'sha224-arm64\x00'}, 0x8000, "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"}}, @extra_flags={0x8, 0x18, 0xffff}, @proto={0x5, 0x19, 0xff}, @policy={0xac, 0x7, {{@in=@multicast1, @in6=@loopback, 0x4e23, 0xa840, 0x4e22, 0x1, 0xa, 0x80, 0x80, 0x2c, 0x0, r4}, {0x4785, 0x34c, 0xfffffffffffffff9, 0x100000001, 0x5, 0x3, 0x8, 0x8}, {0x0, 0xffffffff7fffffff, 0x100000001, 0x6}, 0x3, 0x6e6bb6, 0x2, 0x1, 0x2}}]}, 0x11d0}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) flock(r2, 0xf) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 15:49:56 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='0000111122223333', r0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000240)) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r1) [ 1503.799184] FAULT_INJECTION: forcing a failure. [ 1503.799184] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.800316] CPU: 1 PID: 9062 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1503.800921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.801659] Call Trace: [ 1503.801900] dump_stack+0x107/0x167 [ 1503.802227] should_fail.cold+0x5/0xa [ 1503.802571] ? create_object.isra.0+0x3a/0xa20 [ 1503.802963] should_failslab+0x5/0x20 [ 1503.803290] kmem_cache_alloc+0x5b/0x310 [ 1503.803637] ? mark_held_locks+0x9e/0xe0 [ 1503.803987] create_object.isra.0+0x3a/0xa20 [ 1503.804366] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1503.804768] kmem_cache_alloc_bulk+0x168/0x320 [ 1503.805163] io_submit_sqes+0x6f76/0x85c0 [ 1503.805508] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1503.805941] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1503.806357] ? lock_downgrade+0x6d0/0x6d0 [ 1503.806687] ? find_held_lock+0x2c/0x110 [ 1503.807010] ? io_submit_sqes+0x85c0/0x85c0 [ 1503.807357] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1503.807769] ? wait_for_completion_io+0x270/0x270 [ 1503.808186] ? rcu_read_lock_any_held+0x75/0xa0 [ 1503.808561] ? vfs_write+0x354/0xa70 [ 1503.808883] ? fput_many+0x2f/0x1a0 [ 1503.809194] ? ksys_write+0x1a9/0x260 [ 1503.809525] ? __ia32_sys_read+0xb0/0xb0 [ 1503.809906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.810350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1503.810772] do_syscall_64+0x33/0x40 [ 1503.811107] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1503.811512] RIP: 0033:0x7f09e0b8db19 [ 1503.811812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1503.813373] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1503.814009] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1503.814612] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1503.815233] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1503.815792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1503.816395] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:49:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1503.857387] FAULT_INJECTION: forcing a failure. [ 1503.857387] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.859303] CPU: 0 PID: 9048 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1503.860630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.861924] Call Trace: [ 1503.862342] dump_stack+0x107/0x167 [ 1503.862908] should_fail.cold+0x5/0xa [ 1503.863506] ? create_object.isra.0+0x3a/0xa20 [ 1503.864217] should_failslab+0x5/0x20 [ 1503.864810] kmem_cache_alloc+0x5b/0x310 [ 1503.865452] ? mark_held_locks+0x9e/0xe0 [ 1503.866106] create_object.isra.0+0x3a/0xa20 [ 1503.866786] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1503.867568] kmem_cache_alloc+0x159/0x310 [ 1503.868225] xas_alloc+0x336/0x440 [ 1503.868783] xas_create+0x34a/0x10d0 [ 1503.869375] ? kernel_text_address+0xf2/0x120 [ 1503.870085] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1503.870908] xas_store+0x8c/0x1c40 [ 1503.871477] __xa_store+0x164/0x2d0 [ 1503.872056] ? xa_delete_node+0x280/0x280 [ 1503.872710] ? trace_hardirqs_on+0x5b/0x180 [ 1503.873391] xa_store+0x31/0x50 [ 1503.873929] __io_uring_add_tctx_node+0x1cf/0x520 [ 1503.874673] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1503.875494] __do_sys_io_uring_enter+0x1489/0x18c0 [ 1503.876258] ? lock_downgrade+0x6d0/0x6d0 [ 1503.876894] ? find_held_lock+0x2c/0x110 [ 1503.877543] ? io_submit_sqes+0x85c0/0x85c0 [ 1503.878222] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1503.878977] ? wait_for_completion_io+0x270/0x270 [ 1503.879745] ? rcu_read_lock_any_held+0x75/0xa0 [ 1503.880464] ? vfs_write+0x354/0xa70 [ 1503.881057] ? fput_many+0x2f/0x1a0 [ 1503.881636] ? ksys_write+0x1a9/0x260 [ 1503.882232] ? __ia32_sys_read+0xb0/0xb0 [ 1503.882860] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.883670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1503.884471] do_syscall_64+0x33/0x40 [ 1503.885064] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1503.885861] RIP: 0033:0x7f991b285b19 [ 1503.886441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1503.889222] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1503.890410] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1503.891501] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1503.892599] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1503.893726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1503.894823] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1503.987559] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:49:56 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001440)={{r0}, 0x0, 0x2, @unused=[0x1, 0x7ff, 0x9, 0x4], @name="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"}) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1229499c4b2986e0f462994000155874726103003d66642c5e9b69c33be256a79f3aaab8c47ade6bdcfddbce7713804dd0266ad92bed25d8f3fd80f992899a84cce342904310af7448c153a2364d407d0ccc8fbc9b8718f7eda9374a3446f1c32ca144448cde71b2704392c3", @ANYRESHEX, @ANYBLOB="1eb50a13f539bcb2772dc5462c6ce8b54ce8414bf2be60fc6c246d124834048e8e916972ce0a8ab4ccfbd680f654b5d70d913979074be3d4ca60a99ddd3ef66880a0f7302c6e866ad88c3a1d5581f8e3217ff4933336906126d1ec78e08bee9eeafad495227a3756eb24ee7b1b2d0dc2636dc2c355d063d47fe3009145e9caf330b8dbfe3b000000000000000000000000000000b788be0c371acd997310a74bc4c211f2def7e7ba3d811f920c6a2815b00cc468d3345876602955b764240b666f0c934b15a84fcc8c71eba8275ab59535d0b102c63a02895b3005db02456a4e7d4a", @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=loose,\x00']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = pidfd_getfd(r2, r1, 0x0) tee(r3, r0, 0x4, 0x0) fcntl$dupfd(r0, 0x0, r2) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x40010, 0xffffffffffffffff, 0x0) fgetxattr(r4, &(0x7f0000000000)=@random={'btrfs.', '\',{[[(\x00'}, &(0x7f0000000380)=""/234, 0xea) 15:49:56 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 15:49:56 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x48, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) 15:49:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:49:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 15:49:56 executing program 7: r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1504.102643] netlink: 'syz-executor.7': attribute type 27 has an invalid length. [ 1504.148308] FAULT_INJECTION: forcing a failure. [ 1504.148308] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.150027] CPU: 0 PID: 9093 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1504.150527] FAULT_INJECTION: forcing a failure. [ 1504.150527] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.151009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1504.151014] Call Trace: [ 1504.151037] dump_stack+0x107/0x167 [ 1504.151055] should_fail.cold+0x5/0xa [ 1504.151074] ? create_object.isra.0+0x3a/0xa20 [ 1504.151094] should_failslab+0x5/0x20 [ 1504.151111] kmem_cache_alloc+0x5b/0x310 [ 1504.151128] ? mark_held_locks+0x9e/0xe0 [ 1504.151149] create_object.isra.0+0x3a/0xa20 [ 1504.151167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1504.151215] kmem_cache_alloc_bulk+0x168/0x320 [ 1504.159038] io_submit_sqes+0x6f76/0x85c0 [ 1504.159690] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1504.160458] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1504.161201] ? lock_downgrade+0x6d0/0x6d0 [ 1504.161834] ? find_held_lock+0x2c/0x110 [ 1504.162462] ? io_submit_sqes+0x85c0/0x85c0 [ 1504.163131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1504.163865] ? wait_for_completion_io+0x270/0x270 [ 1504.164607] ? rcu_read_lock_any_held+0x75/0xa0 [ 1504.165320] ? vfs_write+0x354/0xa70 [ 1504.165897] ? fput_many+0x2f/0x1a0 [ 1504.166459] ? ksys_write+0x1a9/0x260 [ 1504.167042] ? __ia32_sys_read+0xb0/0xb0 [ 1504.167666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1504.168468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1504.169270] do_syscall_64+0x33/0x40 [ 1504.169842] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1504.170623] RIP: 0033:0x7f09e0b8db19 [ 1504.171193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.173960] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1504.175103] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1504.176174] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1504.177243] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1504.178324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1504.179401] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1504.180513] CPU: 1 PID: 9099 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1504.181228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1504.182045] Call Trace: [ 1504.182321] dump_stack+0x107/0x167 [ 1504.182682] should_fail.cold+0x5/0xa [ 1504.183076] should_failslab+0x5/0x20 [ 1504.183454] kmem_cache_alloc_bulk+0x4b/0x320 [ 1504.183910] io_submit_sqes+0x6f76/0x85c0 [ 1504.184333] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1504.184818] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1504.185287] ? lock_downgrade+0x6d0/0x6d0 [ 1504.185697] ? find_held_lock+0x2c/0x110 [ 1504.186100] ? io_submit_sqes+0x85c0/0x85c0 [ 1504.186530] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1504.187010] ? wait_for_completion_io+0x270/0x270 [ 1504.187488] ? rcu_read_lock_any_held+0x75/0xa0 [ 1504.187945] ? vfs_write+0x354/0xa70 [ 1504.188313] ? fput_many+0x2f/0x1a0 [ 1504.188672] ? ksys_write+0x1a9/0x260 [ 1504.189045] ? __ia32_sys_read+0xb0/0xb0 [ 1504.189448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1504.189961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1504.190475] do_syscall_64+0x33/0x40 [ 1504.190838] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1504.191342] RIP: 0033:0x7f991b285b19 [ 1504.191707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.193477] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1504.194226] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1504.194923] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1504.195628] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1504.196312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1504.197005] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:50:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x88880, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0x80000001, {{0xa, 0xf000, 0x6, @private2, 0x5}}, 0x0, 0x9, [{{0xa, 0x4e22, 0x1, @remote, 0x177}}, {{0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3acb}}, {{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}}, {{0xa, 0x4e22, 0x3, @local, 0x80000001}}, {{0xa, 0x4e23, 0x40, @empty}}, {{0xa, 0x4e22, 0x401, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x0, @loopback, 0x9}}, {{0xa, 0x4e23, 0x7, @loopback, 0x6d5}}]}, 0x510) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000)) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 15:50:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:50:13 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:50:13 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 15:50:13 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 15:50:13 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000140)=0x8, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) r2 = io_uring_setup(0x62c, &(0x7f0000000280)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) open_by_handle_at(r6, &(0x7f0000000240)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0xd96, 0xfff, 0x8, 0x8000}, {0x170ade19, 0x1, 0x2ad2, 0x3}}}, 0x101400) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x9) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000300)={0x1, {{0xa, 0x4e24, 0x9, @private0, 0x3}}}, 0x88) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 15:50:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x77}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0xe8, 0x5, 0x8, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x48029, 0x400000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x0, 0xfff}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x41ae, 0x1, 0x2, 0x2b6e, 0x5, 0x8000}) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYRESDEC=r4]) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 15:50:13 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x1, 0x8) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x3ff, 0x8, 0x0, 0x1, 0x5], 0x5, &(0x7f0000000100)=[{}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) 15:50:13 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x2}, {0x7}, 0x82, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="c618d52b98a125a133f4650f7f470d6fe62c0baf3400a63e4066d81faec98ad2fa4faaa6d78e4200d59232b0d54b0ad7fc9e9cc277138fa719a4da2d19f3958c87d521e63f8032d98d333cc2125dd6754a83f6ddda76f3586b8c71f48ff93b6f623711e81ab26d06b397a43df9dd5d58509fd2f2ca945ae0711e1bd142cc9e71c4c27674d455fbb22dd4d1d0334396ce1f01dab7", 0x94, 0x0, &(0x7f0000000280)={0x2, 0x148, {0x0, 0xc, 0xca, "edac8ace4def5e01ef410f7688079eb0fe3ebbd807ad9476a31995ce4faef187eb84e7c7bc795a342519ec95d5c25b1c22c72098f357c2a672f1a85e4b80e08c7e8556d25031896d20069a9e354aaa36c21d2d9bf81d16ece43c8c5e030b74173321d3efd2f92cef1c2987a5777a1d2a73a9a7c751fa1f8974f72cc0b7198c2700166d231b82561296c8594e5a4e0acebc0be2aed6d705dec762b3f77ba28d2469889050853a31ecacb0df989736308383274e98d1eb0c6eddf984d531eb90c2295ecc97b30b02faab64", 0x71, "b3df63ae09c13ff09cb7f84675e4494eff91415b94971d9a53a37c8d06b4d50b63207fc34c011ca97519c34e0ecb6c7485325d5977bd1becf219d24af1b8ae381259c87b53ee9d70787c034a736a9ed4c67943be87bb8ccc79683d6960a84edb043899478e57ed331580c4b04a8d837429"}, 0x4, "32f7c3de"}, 0x158}) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000480)={{0x3ff, 0x6b}, 0x100, './file0\x00'}) [ 1520.625637] FAULT_INJECTION: forcing a failure. [ 1520.625637] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.627510] CPU: 0 PID: 9110 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1520.628571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.629835] Call Trace: [ 1520.630246] dump_stack+0x107/0x167 [ 1520.630805] should_fail.cold+0x5/0xa [ 1520.631393] ? create_object.isra.0+0x3a/0xa20 [ 1520.632096] should_failslab+0x5/0x20 [ 1520.632692] kmem_cache_alloc+0x5b/0x310 [ 1520.633321] ? mark_held_locks+0x9e/0xe0 [ 1520.633962] create_object.isra.0+0x3a/0xa20 [ 1520.634636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1520.635430] kmem_cache_alloc_bulk+0x168/0x320 [ 1520.636143] io_submit_sqes+0x6f76/0x85c0 [ 1520.636806] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1520.637570] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1520.638323] ? lock_downgrade+0x6d0/0x6d0 [ 1520.638962] ? find_held_lock+0x2c/0x110 [ 1520.639596] ? io_submit_sqes+0x85c0/0x85c0 [ 1520.640273] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1520.641021] ? wait_for_completion_io+0x270/0x270 [ 1520.641776] ? rcu_read_lock_any_held+0x75/0xa0 [ 1520.642487] ? vfs_write+0x354/0xa70 [ 1520.643065] ? fput_many+0x2f/0x1a0 [ 1520.643627] ? ksys_write+0x1a9/0x260 [ 1520.644214] ? __ia32_sys_read+0xb0/0xb0 [ 1520.644854] do_syscall_64+0x33/0x40 [ 1520.645423] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1520.646216] RIP: 0033:0x7f09e0b8db19 [ 1520.646791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1520.649577] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1520.650755] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1520.651847] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1520.652938] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.654039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1520.655150] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:50:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1520.752753] FAULT_INJECTION: forcing a failure. [ 1520.752753] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.754588] CPU: 1 PID: 9116 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1520.755608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.756707] Call Trace: [ 1520.757066] dump_stack+0x107/0x167 [ 1520.757549] should_fail.cold+0x5/0xa [ 1520.758065] ? create_object.isra.0+0x3a/0xa20 [ 1520.758677] should_failslab+0x5/0x20 [ 1520.759192] kmem_cache_alloc+0x5b/0x310 [ 1520.759745] create_object.isra.0+0x3a/0xa20 [ 1520.760347] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1520.761043] kmem_cache_alloc_bulk+0x168/0x320 [ 1520.761671] io_submit_sqes+0x6f76/0x85c0 [ 1520.762312] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1520.762994] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1520.763663] ? lock_downgrade+0x6d0/0x6d0 [ 1520.764239] ? find_held_lock+0x2c/0x110 [ 1520.764801] ? io_submit_sqes+0x85c0/0x85c0 [ 1520.765401] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1520.766072] ? wait_for_completion_io+0x270/0x270 [ 1520.766747] ? rcu_read_lock_any_held+0x75/0xa0 [ 1520.767383] ? vfs_write+0x354/0xa70 [ 1520.767895] ? fput_many+0x2f/0x1a0 [ 1520.768397] ? ksys_write+0x1a9/0x260 [ 1520.768918] ? __ia32_sys_read+0xb0/0xb0 [ 1520.769495] do_syscall_64+0x33/0x40 [ 1520.770015] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1520.770712] RIP: 0033:0x7f991b285b19 [ 1520.771224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1520.773719] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1520.774775] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1520.775745] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1520.776716] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.777684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1520.778662] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:50:13 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x8b4) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) finit_module(r3, &(0x7f0000000280)='&%\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000100)=0x7ff, 0x4) signalfd(r0, &(0x7f0000000380)={[0x800]}, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r5}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x1, @perf_config_ext={0x0, 0xfffffffffffff000}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff}, r5, 0x0, 0xffffffffffffffff, 0x2) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 15:50:13 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/mdio_bus', 0x34f482, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0xffffffff, 0x31, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0xd, 0x0, @fd=r6, 0x6, 0x0, 0x2, 0x0, 0x1, {0x0, r5}}, 0x80000001) syz_io_uring_setup(0x6707, &(0x7f0000000080)={0x0, 0xdccb, 0x4, 0x3, 0x3ac}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x65) 15:50:13 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 15:50:13 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) [ 1520.871198] syz-executor.5 (9120) used greatest stack depth: 23352 bytes left 15:50:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x17, 0x2}) clone3(&(0x7f0000000000)={0x1000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfa29}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0x7, 0x9}) setxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x40010, r2, 0x10000000) syz_io_uring_setup(0x55c0, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000300)) r4 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, r6, &(0x7f0000000380)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) [ 1520.942199] FAULT_INJECTION: forcing a failure. [ 1520.942199] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.944312] CPU: 0 PID: 9140 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1520.945446] FAULT_INJECTION: forcing a failure. [ 1520.945446] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.947151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.947157] Call Trace: [ 1520.947180] dump_stack+0x107/0x167 [ 1520.947200] should_fail.cold+0x5/0xa [ 1520.947221] ? create_object.isra.0+0x3a/0xa20 [ 1520.947242] should_failslab+0x5/0x20 [ 1520.947260] kmem_cache_alloc+0x5b/0x310 [ 1520.947278] ? mark_held_locks+0x9e/0xe0 [ 1520.947300] create_object.isra.0+0x3a/0xa20 [ 1520.947319] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1520.947343] kmem_cache_alloc_bulk+0x168/0x320 [ 1520.947413] io_submit_sqes+0x6f76/0x85c0 [ 1520.955352] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1520.956130] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1520.956878] ? lock_downgrade+0x6d0/0x6d0 [ 1520.957525] ? find_held_lock+0x2c/0x110 [ 1520.958176] ? io_submit_sqes+0x85c0/0x85c0 [ 1520.958858] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1520.959620] ? wait_for_completion_io+0x270/0x270 [ 1520.960383] ? rcu_read_lock_any_held+0x75/0xa0 [ 1520.961111] ? vfs_write+0x354/0xa70 [ 1520.961690] ? fput_many+0x2f/0x1a0 [ 1520.962274] ? ksys_write+0x1a9/0x260 [ 1520.962866] ? __ia32_sys_read+0xb0/0xb0 [ 1520.963510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1520.964330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.965142] do_syscall_64+0x33/0x40 [ 1520.965721] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1520.966531] RIP: 0033:0x7f09e0b8db19 [ 1520.967118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1520.969977] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1520.971152] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1520.972259] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1520.973367] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.974477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1520.975587] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1520.976730] CPU: 1 PID: 9145 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1520.977522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.978475] Call Trace: [ 1520.978786] dump_stack+0x107/0x167 [ 1520.979208] should_fail.cold+0x5/0xa [ 1520.979642] ? create_object.isra.0+0x3a/0xa20 [ 1520.980161] should_failslab+0x5/0x20 [ 1520.980604] kmem_cache_alloc+0x5b/0x310 [ 1520.981075] ? mark_held_locks+0x9e/0xe0 [ 1520.981539] create_object.isra.0+0x3a/0xa20 [ 1520.982048] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1520.982637] kmem_cache_alloc_bulk+0x168/0x320 [ 1520.983160] io_submit_sqes+0x6f76/0x85c0 [ 1520.983653] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1520.984224] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1520.984777] ? lock_downgrade+0x6d0/0x6d0 [ 1520.985246] ? find_held_lock+0x2c/0x110 [ 1520.985711] ? io_submit_sqes+0x85c0/0x85c0 [ 1520.986223] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1520.986781] ? wait_for_completion_io+0x270/0x270 [ 1520.987331] ? rcu_read_lock_any_held+0x75/0xa0 [ 1520.987850] ? vfs_write+0x354/0xa70 [ 1520.988275] ? fput_many+0x2f/0x1a0 [ 1520.988692] ? ksys_write+0x1a9/0x260 [ 1520.989122] ? __ia32_sys_read+0xb0/0xb0 [ 1520.989591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1520.990186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.990776] do_syscall_64+0x33/0x40 [ 1520.991201] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1520.991777] RIP: 0033:0x7f991b285b19 [ 1520.992203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1520.994266] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1520.995122] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1520.995936] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1520.996740] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.997542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1520.998352] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:50:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x900, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:50:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(0xffffffffffffffff, 0x1a, &(0x7f0000000000)={0x3c, 0x7f, 0x4}, 0x0) [ 1521.022572] audit: type=1400 audit(1712159413.803:14): avc: denied { module_load } for pid=9150 comm="syz-executor.5" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1039 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 [ 1521.028180] Module has invalid ELF structures 15:50:13 executing program 1: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = signalfd4(r0, &(0x7f0000000180)={[0x4]}, 0x8, 0x80000) io_uring_enter(r2, 0x502f, 0xe09, 0x0, &(0x7f00000001c0)={[0x40]}, 0x8) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r1, 0xffffffffffffffff], 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="200328bd7000fddbdf2517000000080001007063690011000200303030303a30303a48302e3000000000080003000200000008000b00feffffff0600160002000000050012000000001b080011000200303030303a30303a31302e3000000000087103000200000008000b0005000000060016000002000005001200010000000678c68c78edb88a5c2ff21179d2dcf736ed526c9527f8"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0xfffffffffffffd4f, 0xfffffffffffffffd) 15:50:28 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100, 0x180) lseek(r0, 0xf8, 0x2) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) close(0xffffffffffffffff) dup3(r1, r5, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x3, 0xe0000000}) r6 = syz_open_dev$mouse(&(0x7f00000001c0), 0x80000000, 0x380) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf7, 0x6a, 0x5, 0x6, 0x0, 0x4, 0x42820, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}, 0x100, 0x0, 0x5, 0x1, 0x7fff, 0x9, 0x2, 0x0, 0x10001, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0x0, r6, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="6d1483162c6e33250b06bdb4486b301b0a9d04354b4205e5c1ae6b027f644f12eda78a1463c4188e7c0eb758649260269e8b6e274124ed2391e8e98b44799774faf9df4ba79e7e2ddf8d4d693e1e8d09a23cb02b60ffdf536215b83d52393a071ebbbd243fcb60beff", 0x69}], 0x1) 15:50:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:50:28 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/248, 0xf8}, {&(0x7f0000001400)=""/205, 0xcd}, {&(0x7f0000000100)=""/61, 0x3d}], 0x4, &(0x7f0000001500)=""/121, 0x79}, 0x40000000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x250540, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 15:50:28 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 15:50:28 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="352a26ec53cd85f2a4c36d6355e695876f35e5536c7bcde5afc16d5bdf059174830c1e0abec9796e19bda4d72e6e121f05f42bf550", 0x35, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0xffffffffffffffff) 15:50:28 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 15:50:28 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:50:28 executing program 7: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x5, 0x3, 0xfc01, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r2, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x43}) pidfd_getfd(r0, r2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000640)={{0x0, 0x5, 0x100, 0x6, 0x6, 0x0, 0x4, 0xfffff801, 0xffffffff, 0x7fffffff, 0x100, 0x60, 0x5, 0x40, 0x5}}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffffc]}, 0x8, 0xc0800) fcntl$lock(r1, 0x25, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000240)=""/168) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) fallocate(0xffffffffffffffff, 0xc, 0x0, 0xea5b) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 1535.757659] FAULT_INJECTION: forcing a failure. [ 1535.757659] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.759098] CPU: 1 PID: 9178 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1535.759973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.760827] Call Trace: [ 1535.761122] dump_stack+0x107/0x167 [ 1535.761522] should_fail.cold+0x5/0xa [ 1535.761945] ? xas_alloc+0x336/0x440 [ 1535.762359] should_failslab+0x5/0x20 [ 1535.762782] kmem_cache_alloc+0x5b/0x310 [ 1535.763229] xas_alloc+0x336/0x440 [ 1535.763619] xas_create+0x34a/0x10d0 [ 1535.764039] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1535.764615] xas_store+0x8c/0x1c40 [ 1535.765010] __xa_store+0x164/0x2d0 [ 1535.765407] ? xa_delete_node+0x280/0x280 [ 1535.765859] ? trace_hardirqs_on+0x5b/0x180 [ 1535.766341] xa_store+0x31/0x50 [ 1535.766704] __io_uring_add_tctx_node+0x1cf/0x520 [ 1535.767227] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1535.767806] __do_sys_io_uring_enter+0x1489/0x18c0 [ 1535.768338] ? lock_downgrade+0x6d0/0x6d0 [ 1535.768787] ? find_held_lock+0x2c/0x110 [ 1535.769217] ? io_submit_sqes+0x85c0/0x85c0 [ 1535.769697] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1535.770239] ? wait_for_completion_io+0x270/0x270 [ 1535.770772] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.771284] ? vfs_write+0x354/0xa70 [ 1535.771697] ? fput_many+0x2f/0x1a0 [ 1535.772101] ? ksys_write+0x1a9/0x260 [ 1535.772522] ? __ia32_sys_read+0xb0/0xb0 [ 1535.772974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.773551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.774133] do_syscall_64+0x33/0x40 [ 1535.774576] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1535.775389] RIP: 0033:0x7f991b285b19 [ 1535.775784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.777777] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1535.778636] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1535.779542] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1535.780405] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.781332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.782119] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1535.793682] FAULT_INJECTION: forcing a failure. [ 1535.793682] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.794978] CPU: 1 PID: 9196 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1535.795703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.796589] Call Trace: [ 1535.796874] dump_stack+0x107/0x167 [ 1535.797270] should_fail.cold+0x5/0xa [ 1535.797679] ? create_object.isra.0+0x3a/0xa20 [ 1535.798207] should_failslab+0x5/0x20 [ 1535.798706] kmem_cache_alloc+0x5b/0x310 [ 1535.799147] ? mark_held_locks+0x9e/0xe0 [ 1535.799583] create_object.isra.0+0x3a/0xa20 [ 1535.800052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1535.800604] kmem_cache_alloc_bulk+0x168/0x320 [ 1535.801098] io_submit_sqes+0x6f76/0x85c0 [ 1535.801562] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1535.802081] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1535.802600] ? lock_downgrade+0x6d0/0x6d0 [ 1535.803023] ? find_held_lock+0x2c/0x110 [ 1535.803466] ? io_submit_sqes+0x85c0/0x85c0 [ 1535.803917] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1535.804439] ? wait_for_completion_io+0x270/0x270 [ 1535.804940] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.805432] ? vfs_write+0x354/0xa70 [ 1535.805817] ? fput_many+0x2f/0x1a0 [ 1535.806221] ? ksys_write+0x1a9/0x260 [ 1535.806633] ? __ia32_sys_read+0xb0/0xb0 [ 1535.807076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.807640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.808205] do_syscall_64+0x33/0x40 [ 1535.808603] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1535.809150] RIP: 0033:0x7f09e0b8db19 [ 1535.809550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.811530] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1535.812341] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1535.813104] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1535.813869] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.814639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.815400] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:50:28 executing program 1: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x27}, 0x48, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) 15:50:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x4f02, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:50:28 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) [ 1535.964694] FAULT_INJECTION: forcing a failure. [ 1535.964694] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.966060] CPU: 1 PID: 9206 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1535.966838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.967732] Call Trace: [ 1535.968042] dump_stack+0x107/0x167 [ 1535.968468] should_fail.cold+0x5/0xa [ 1535.968914] should_failslab+0x5/0x20 [ 1535.969347] kmem_cache_alloc_bulk+0x4b/0x320 [ 1535.969832] io_submit_sqes+0x6f76/0x85c0 [ 1535.970329] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1535.970886] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1535.971405] ? lock_downgrade+0x6d0/0x6d0 [ 1535.971869] ? find_held_lock+0x2c/0x110 [ 1535.972323] ? io_submit_sqes+0x85c0/0x85c0 [ 1535.972811] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1535.973359] ? wait_for_completion_io+0x270/0x270 [ 1535.973905] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.974442] ? vfs_write+0x354/0xa70 [ 1535.974847] ? fput_many+0x2f/0x1a0 [ 1535.975259] ? ksys_write+0x1a9/0x260 [ 1535.975667] ? __ia32_sys_read+0xb0/0xb0 [ 1535.976131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.976691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.977277] do_syscall_64+0x33/0x40 [ 1535.977698] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1535.978276] RIP: 0033:0x7f09e0b8db19 [ 1535.978693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.980733] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1535.981556] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1535.982379] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1535.983182] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.983939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.984737] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:50:28 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 15:50:28 executing program 5: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0xebf9, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3875, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x10e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/25, 0x19}], 0x1, 0x8, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) listen(r1, 0x3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = signalfd4(r0, &(0x7f0000000040)={[0x9]}, 0x8, 0x800) connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="080000001d00210c00000000000000000400020014852b68b7b1cdb546c7dba09475f251c743092f5c55cb5f85504797dd9a30f5275091bfe31ff05887f27f62400240695644efe7483d9b93f67dd49a4a67a72bdfe00e5de643dfe11924c9c985eefce5567410c74d4e696593909d142518d13a9b33a12a142f79d068f9373d852b6a6a58d41535a94226b33e54309a782eb331e098f48db1e0cc935931a39e31e204007a88e0d3c0b5d98a0152ab49b4046203bf9782ba13c93aa0548d733e6baf9c"], 0x28}}, 0x0) 15:50:28 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) [ 1536.051691] FAULT_INJECTION: forcing a failure. [ 1536.051691] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.053292] CPU: 1 PID: 9214 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1536.054071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1536.054993] Call Trace: [ 1536.055297] dump_stack+0x107/0x167 [ 1536.055706] should_fail.cold+0x5/0xa [ 1536.056137] ? create_object.isra.0+0x3a/0xa20 [ 1536.056654] should_failslab+0x5/0x20 [ 1536.057089] kmem_cache_alloc+0x5b/0x310 [ 1536.057555] create_object.isra.0+0x3a/0xa20 [ 1536.058060] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1536.058655] kmem_cache_alloc_bulk+0x168/0x320 [ 1536.059378] io_submit_sqes+0x6f76/0x85c0 [ 1536.059899] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1536.060458] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1536.061013] ? io_submit_sqes+0x85c0/0x85c0 [ 1536.061510] ? __kasan_check_read+0x4/0x10 [ 1536.062005] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1536.062553] ? wait_for_completion_io+0x270/0x270 [ 1536.063104] ? rcu_read_lock_any_held+0x75/0xa0 [ 1536.063632] ? vfs_write+0x354/0xa70 [ 1536.064053] ? fput_many+0x2f/0x1a0 [ 1536.064453] ? ksys_write+0x1a9/0x260 [ 1536.064885] ? __ia32_sys_read+0xb0/0xb0 [ 1536.065349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1536.065909] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1536.066517] do_syscall_64+0x33/0x40 [ 1536.066942] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1536.067487] RIP: 0033:0x7f09e0b8db19 [ 1536.067909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1536.069857] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1536.070721] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1536.071519] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1536.072322] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1536.073121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1536.073929] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:50:28 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) [ 1536.159721] FAULT_INJECTION: forcing a failure. [ 1536.159721] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.161019] CPU: 1 PID: 9221 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1536.161711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1536.162556] Call Trace: [ 1536.162831] dump_stack+0x107/0x167 [ 1536.163203] should_fail.cold+0x5/0xa [ 1536.163594] ? create_object.isra.0+0x3a/0xa20 [ 1536.164064] should_failslab+0x5/0x20 15:50:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1536.164456] kmem_cache_alloc+0x5b/0x310 [ 1536.165063] ? mark_held_locks+0x9e/0xe0 [ 1536.165527] create_object.isra.0+0x3a/0xa20 [ 1536.166027] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1536.166590] kmem_cache_alloc_bulk+0x168/0x320 [ 1536.167103] io_submit_sqes+0x6f76/0x85c0 [ 1536.167586] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1536.168141] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1536.168665] ? io_submit_sqes+0x85c0/0x85c0 [ 1536.169152] ? recalibrate_cpu_khz+0x10/0x10 [ 1536.169640] ? ktime_get+0x158/0x1f0 [ 1536.170067] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1536.170552] ? clockevents_program_event+0x131/0x360 15:50:28 executing program 1: request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000001c0)='\x00', 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r0, 0x0) keyctl$invalidate(0x15, r1) [ 1536.171122] ? tick_program_event+0xa8/0x140 [ 1536.171717] ? hrtimer_interrupt+0x771/0x9b0 [ 1536.172217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1536.172804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1536.173388] do_syscall_64+0x33/0x40 [ 1536.173806] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1536.174384] RIP: 0033:0x7f09e0b8db19 [ 1536.174805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1536.176837] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1536.177684] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1536.178488] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1536.179272] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1536.180056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1536.180857] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:50:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x100) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000004c0)={{0x0, 0xf07d, 0x8, 0xfffffffffffffffc, 0x8be4, 0x1, 0x8001, 0xc4, 0x41f7, 0x80, 0x0, 0x2, 0x3, 0xffffffffffffffa1, 0x7}}) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000000c0)) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1536.215629] FAULT_INJECTION: forcing a failure. [ 1536.215629] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.217625] CPU: 0 PID: 9217 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1536.218772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1536.220034] Call Trace: [ 1536.220446] dump_stack+0x107/0x167 [ 1536.221003] should_fail.cold+0x5/0xa [ 1536.221583] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1536.222387] should_failslab+0x5/0x20 [ 1536.222973] __kmalloc_node+0x76/0x420 [ 1536.223572] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1536.224353] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1536.225120] kmem_cache_alloc_bulk+0x182/0x320 [ 1536.225822] io_submit_sqes+0x6f76/0x85c0 [ 1536.226480] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1536.227237] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1536.227976] ? lock_downgrade+0x6d0/0x6d0 [ 1536.228607] ? find_held_lock+0x2c/0x110 [ 1536.229225] ? io_submit_sqes+0x85c0/0x85c0 [ 1536.229886] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1536.230653] ? wait_for_completion_io+0x270/0x270 [ 1536.231394] ? rcu_read_lock_any_held+0x75/0xa0 [ 1536.232099] ? vfs_write+0x354/0xa70 [ 1536.232668] ? fput_many+0x2f/0x1a0 [ 1536.233219] ? ksys_write+0x1a9/0x260 [ 1536.233799] ? __ia32_sys_read+0xb0/0xb0 [ 1536.234428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1536.235221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1536.236011] do_syscall_64+0x33/0x40 [ 1536.236579] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1536.237353] RIP: 0033:0x7f991b285b19 [ 1536.237913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1536.240683] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1536.241837] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1536.242921] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1536.243996] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1536.245068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1536.246151] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 15:50:29 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) [ 1536.313539] FAULT_INJECTION: forcing a failure. [ 1536.313539] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.314904] CPU: 1 PID: 9234 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 1536.315672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1536.316596] Call Trace: [ 1536.316907] dump_stack+0x107/0x167 [ 1536.317317] should_fail.cold+0x5/0xa [ 1536.317748] ? create_object.isra.0+0x3a/0xa20 [ 1536.318273] should_failslab+0x5/0x20 [ 1536.318709] kmem_cache_alloc+0x5b/0x310 [ 1536.319170] ? mark_held_locks+0x9e/0xe0 [ 1536.319629] create_object.isra.0+0x3a/0xa20 15:50:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000f4b4c35399c0c858bcb7418708fd2b941c7725e16624c8aff44d35e018afcbb3066092f01fbe5a589fe462b78ef16f1ace464696bc26d424d914bdcd5fbacf188644d093cba7c171c35bcd5c76669e5b438ed7d095db8bcae66c7377a1de42c086bc5bd294db2c40cd5ce90f46e1b8422056f3e893ffae6b6f0669623d0e150a1fc88a17ba6320e07e1436f52a3f8fae36f17240c04535b35e0eadefa30cebf98ca504e3ec37c99dccc45d6d97d2223f9c0f47b50f835fc25a540043cb1a5001871510c775d472e969172431ac6e9972fec16fe362c3fc1931a0a799ab5628da4c3fbf328cfff252be1cc56e", @ANYRES16=r1, @ANYBLOB="95390000000000000000050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="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"], 0x28}}, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x78bd, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, 0x0, r5, r4, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x1}, 0x48, r5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) [ 1536.320132] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1536.320814] kmem_cache_alloc_bulk+0x168/0x320 [ 1536.321341] io_submit_sqes+0x6f76/0x85c0 [ 1536.321785] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1536.322323] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1536.322817] ? lock_downgrade+0x6d0/0x6d0 [ 1536.323260] ? find_held_lock+0x2c/0x110 [ 1536.323678] ? io_submit_sqes+0x85c0/0x85c0 [ 1536.324147] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1536.324637] ? wait_for_completion_io+0x270/0x270 [ 1536.325154] ? rcu_read_lock_any_held+0x75/0xa0 [ 1536.325624] ? vfs_write+0x354/0xa70 [ 1536.326032] ? fput_many+0x2f/0x1a0 [ 1536.326407] ? ksys_write+0x1a9/0x260 [ 1536.326802] ? __ia32_sys_read+0xb0/0xb0 [ 1536.327239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1536.327768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1536.328324] do_syscall_64+0x33/0x40 [ 1536.328703] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1536.329245] RIP: 0033:0x7f09e0b8db19 [ 1536.329625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1536.331572] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1536.332341] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 [ 1536.333054] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1536.333764] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1536.334502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1536.335217] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 15:50:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000096000000d2c201001203", 0x66, 0x400}, {&(0x7f0000000280)="00ff150419c6219eb80cd6ffffffffff71ff000000efdd78aa70654313ac0cec53e77e65671cffffff7fffffffff15ee65676f4505206b51a27637c150c2eec2053b1e3afd03473a4e2cb82b66afefc76607c129bdd7f6ffb1a0541e4200dfe9a9a7d1667ad0a1b7e1a63be3c1fdaca95d7654e11d8fe84293040ad1b76f244879bfaf786b", 0x85, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x7fc}], 0x0, &(0x7f0000000340)={[], [{@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, '*\x17&'}}, {@euid_lt={'euid<', 0xee01}}]}) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="dab9778b000058bd87cfdd56f36fa255731d38db5842cf5e7a83e8d0ed3363267cba24f1d525b1034192a318063e4c6e8ba257fc64c35ba3815a8d66a80b9faf050a65f433f19286720903388bbb79770ca4bc15596ead8b00"/103], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sockfs\x00', 0x2000080, &(0x7f0000000140)='ext4\x00') 15:50:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000500)={0x1, &(0x7f0000000080)=[{}]}) r2 = io_uring_setup(0x62c, &(0x7f0000000280)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x13, &(0x7f0000000140)=[r4, r3], 0x2) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x11, 0x1f, 0xe5, &(0x7f0000000100)}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) r5 = io_uring_setup(0x62c, &(0x7f0000000280)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x13, &(0x7f0000000140)=[r7, r6], 0x2) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r1, 0x0) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000540)) r9 = syz_io_uring_complete(r8) read(r9, &(0x7f0000000580)=""/205, 0xcd) 15:50:41 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000140)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x2, &(0x7f0000000400)=[{&(0x7f0000000340)="2ac499114b746759f607862d98846205e9d30672192d139a8f8e63cbdd8cca8ff9889e8fda19df6a87de97f3f0e3286974ff14c124825ac481f257dde174b4c8e3cd8c0b9c685ba8ee76448b75616651045dc7162cb14e2cf9073d7d839381ab80dcf7aabebf52c2ebb7281c858c73c1bafc4dee7c55541ee7e070b56f0303c88601882cfd718b3edb972e85a7982644d6f0bd404f85cee8", 0x98}], 0x1, 0x9, 0x1, {0x2, r4}}, 0xfffffc00) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r1, 0xfffffffffffffffb, 0x0, 0x0, 0x7, 0x1, {0x3, r5}}, 0x2) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 15:50:41 executing program 1: syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r2, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000d00)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff030000000000002e570ad315ae832f"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x50}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="e80a000058207936159526b6dc6c4cf6f85467cf607fb57ebd2c6c2d8120f42c8feec3596b62762fe1ff8bf9fe8c1f60b214ed91c38d373afafd2e52", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fbdbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0xae8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 15:50:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x30000, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:50:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = inotify_init1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x884) r6 = inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x2000003) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x59f5ee0a7c70a1ba, 0x0, @fd=r1, 0x3, 0x0, 0x1, 0x0, 0x1, {0x0, r7}}, 0xbd53) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x18) inotify_rm_watch(r5, r6) pwrite64(r8, &(0x7f0000000200)="1eecd93735c44fb403292adf1183b1b37359fc5d952f72f57313fc71da00043824a7a91b66e3c15e690475706eacaa2a11516f6bdae1719641e9ca9ac07109a1c771750aea11c86edd4a2fe38badde5b051700e793ededbbc3e9658668347430b90c87a15deeaa274587570734535ff56936598d90b1bb184947987611e123040b62e1b5021d19c2e5c200"/150, 0x96, 0x0) dup3(r8, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r8, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd=r0, 0x2, 0x1ee, 0x5, 0x4, 0x1, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x48a201, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 15:50:41 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x24, &(0x7f00000000c0), 0x14) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 15:50:41 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20) r1 = syz_mount_image$nfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x30, 0x1, &(0x7f0000001a80)=[{&(0x7f00000004c0)="5ccea5113a6e523a73d9be560f7efeb470e351f5d5752364ab159eea131c8e36ea15247bf8c195f88bfbb90df5ed4f1216d960335e98388ed79c77f0e7ac703f7060abd98e6e47a5824e19f8a46788acfd4bd520dbf9e79f6bb01defedb6d1cc28936b512c6ab615d261a7a9571f04cdcc46427a5e17dea14eb1be579678c332042036ec6edc15586b1920a4c2cfad76e1828b125f3cbb73aec27f0eb9dcf9d35595657845827e2b1813bc74469a9a7f2808fae972", 0xb5, 0x8}], 0x801000, &(0x7f0000001ac0)={[{'\x00'}, {'\x00\x00'}, {'{-*,'}, {'pipefs\x00'}, {'\x00'}, {':$@'}, {'pipefs\x00'}], [{@smackfstransmute}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b40)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, r0, &(0x7f0000000400), r1, 0x1, 0x0, 0x1}, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB], 0xfdef) accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f0000000300)=0x10) io_destroy(0x0) r3 = dup(0xffffffffffffffff) mount$bind(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a8140000120002002cbd7000fbdbdf251800000092140c800400000010d3aeb5224e227974b3ed5ee766d61336753933c496ec21b3b988f8f7ed1e17e27aa82809aa783830ae7f15be438f464fbb9e22a9842bb3f248f18084ceb786b1fd872ba167f1affd4dcb0505f2d1433e5683e8ca9b622242130b3123a2906068dc368a12714a45b8b97c0848ff7c57101323579aa7b103c4acf56e4c85c59818714fbd817b5a3f30bf48397f19b527bd72dc33b0fe632f85fc75f11315b14b2adb9f3d889873c97d85c75cf8f8677ddfe0ebfe56c0ca264948680f9889124194d8cc5259645a1d6368c151a4fcb85a60058ff91694183822c22c2476935d9e39130eb1befa35a1a86dab467a5c575dffe34a854213a1668606ff08d64674af68c2a0f8573472d6c44725c4e0e7fbe0edad8d146066805cd0d1313018850b003a0fd4a980c54fc0020eaeaa6111e02f41fcddc547da8c5b3fe02910122170863a17fc69e10fcb764b1444da4ddae3972d02a62912a2c05f7baae60df06fb7de8f86f4505f5fd14c1b9053807fb5ea8a7b90ebda04ce5441e62b71cb4791314e1d94f86c1a5d77c15406263d76d09b05a84577df6231b4b53b37f4a9c9e09e1d80b67da3d938141d6001fe5e84d9da341528f298c1d17b718cd2f229f72a2b59b3aa4b4b79161024b1ac337a3fc9f230cc52a35b1caa0528ae3bd0e4ab2c4fe6008b0028d0072665efa3e6e537e31aa79eb3718ae38ba810208a3bea9864e0ed444644914681e0de3c7fbc0c0be5bb42da2c08c7588d232c08d494d19fb65fcec585a60889b65c2f627f6dec0d8c7663d548c046f03ed5763b790c36e85c29ef250b3543ff8a262c6cea82825df9db931f6ca35be8f38f70280610a2b69488fa089672b1202041b506a4ff43407d48574cf064fe0bfca9886063c3ab3f6befc4ac2c002abab81a023053f8a2c0ab5f634ef74523beadee7457c6a7103727ddb0fdb9ba2e0838e8206487e71c189fe5ed44454003915fc6610f6546867337507a4e83b98c4f00005a5c4e10260b7f713772cc92b118b0b247ace28cdcf33fa7c8f0f8a11d0883b2616686c0946ee43ff7d91b3202042c2b7e5901609f6efaab6af1606b89fc1fe0fbb5bfad285653decda48815b9ab8fd82167284823042bd00480b3ed29bc02ea28e9d7d821fbe9fc3a6627f06f3e143e6722af35e40e1cc31d9e4d3db9c1c0bc20d74fe330ef2de27bb8aff3e9cc65d7175db42e4e6ae4b4c920c9da8b5116b49eb717fa0857d967a3e238a54cb540b3d4ecc14298174ffe12a96c0d8ab8a25fa07186457b1fec0d293bcdda8a896b6bf40ba1ba2ada9a0c8afd0c88d20b85c94e3a4aca9d0f7864a13bf9a79ffef40edb6c78fed593831015b1ec8bf531607705a5bb34af2b5796db6a596b17ecc777ac87e760859874e99c2db6c1f629270f1341912e769c72bad9403a89392f0440bed4b1cee63e555ef50c361a551d161ad2dc10fbcd9e93e98b96e3afc92c472ed5be4d07001248e35208e978e17c7d84d34e4cb266a1e82bdf3d2a2005426381d0cc4ddd12cc418d8cdf1224fa754b3c56d39780a6a6a8465e5e43fcaa5485b83c277633be28fd988d30698972e2fc18f7087a72ab0d5644f6e35fe5e7535416e6bf8efde2f15a3e6808cb222dc161632518e0d895ef517fe34803c5d848fd9b766a87552f0cb462f946750cedc8ede735da977df5f57d8d7cb0d81c287fe2c245d334822a84c17dafad44fe374f59b4d04ba69f5ee18f2c997614af37349d503cb2d1bc5f69e372990cbe510ed79726dafb7f2d844445635df3f45dd12d5105bf11fb4c5c7fd55adb3ec722a552cee92e0219f2d1779d1bc005727da1c85567952060ca871ce8cdf4d919d70a267b5755e13dbe3e73deda946ab99cbf8e5e0a60c68df47a57998a49e8c0dd826cc923153eb18dd5ebe8738f910c3ea25376acdcc4ce43eb980714d05a7d24f75f1333e0927b550163b1125138bf41abda0b453cfb344a772cc0446db2e54a0ed02b2d38e1a98a3848184aada61c0a8a4f7096473435a3f5333d8f38a409bfe6b097e0cb659869d0e7bba74bc6ac4c234a7d1c35a0be4b4715be5818cec78cbbe096dccb9cac9c260cbc67c964eef8d223109b4ce79aa5b1074d9db752187350a9bbe3cc5c9fdee59a36befd23772a451a795250b4958bb78250cd366979bdac0b771ba3cf895fed98787cf9d932d6fe11cbcda06962ef865588b2ccad9068ae02405b0c51550ff5dfb3c4384d4530c4d19d27de3c41c256b35c7a084b2cafc6e79d724cf2f50391ec1273ca8471fa0c86ad87f8c70d97cb2a4add80c5ab625cb96e4888edbf9be27e8192aab30a47503f8ee8f12e9a7c674946031b3bb0a1bd285ede9388ae9beb6058a08198d2eb8c7152fbfa86bfbb5779d5a52abfcb167fd68cc669deb5db499e7a9bed7ba0b4136b68d40842985792cd8049d7b44f1e2f20637424b0136a589e59b43c77b3aedf0ff67c9c5a9a8f8d804a256f95871bb9338636b42dbf2f94038731e6ba17f0bb4d44314d53b1ceeb99fc3005722f64f23301af2ce8328a81350fcc7e0e85a23c8ecebdeed851b4e4af15272a3dd8692557c69b184708c1d016822128e15cc89d4b527c0dde0db579d9514dd1f79f53085cf778225d6ac6069c16b96efda9fedd17ec5d83473f51826646edb192a6164cdb70dc8a12badf0e69460ae2f3424d2ab1210469e9b846b8cb4b766cc38a146dcb96e3c92eedd9ef4524db6ed5d7702f1c32bfa4207c29f285eaa188427555585595683aab1394a740ed653637fe6e6af582698b3822a07450b24af66ba09814269f4966849899ba43e0d28297f6faf83a659f7058fb8a9619e2c76721c1c27f0b3d2f5e45e5d2d7a6cbf8cb8c9f126a2acacd6ae9d0b563d192bfd5ef7afea1532d0f96e6bd82b6a64148f6b1be52af6f4f374feb3379a03f8e279a469b4082d36a9a599b7477c0a116df8c1835aa8d36f31382b2edbac91eb339734154ad71582e1fd9acbcf34faf974e704821e46d82ae482cb8e92148566a4c23e8ba550a5533902c0da72deafbe340c7e368a42818a81145ed014034971c12b7735bf14f6b0d2d55bff8ad266c9083c3b2f44fe50bf374200bf1438c4bc02c269a849d58cd8e7fb299240d1505f8b525fa3c82dc06dd8e2f4742dfbef21e6d2be2995a27d83e0b574ad3051ef6e35dfd00b3f0d7a30f9077010000e30146fc0e3338b4235718f9281ef4e7ebefb964603a0d4e34d20638b51d013c4cad4bf6b896a21ee9f7f034ac1fc51953dd6d7f3b76a48e6a092735522f3d4f5037f018fd46d0ed7312e474e862558b18faf4ca9f4ef47b50795006f4f32a02f80bc685741433efde146ca74042e281bd505099f48b3210fab5897c728a7ba88c4ce09cc0a0ad13186f31db305f436a575723e95ba88af7e3d81221687ec18cdc00230d7e9f4d8efceeb3c1594daed256b7b844f4143bf93da2e81b0b6374718777b9617a6205fcabdd8316d28ad1f8e0a3052e29cf9862b5452b12c6f1eba7745cf3aa47cc10895d4ce268a0e926514804fc00616e30c40c48dca8f40f918cd06a6c4f21881521bc6d87d8bf64daf04607dcb4d1e6a368d05617bd1aa547e66cd69042a6d68f65a4c93a41e3c8b1a97d3913822db6040d146c607c6ccfbf396a062864ebdb0eb9b509528eb9ebc8f793300a72aff341c828d8b254cde3edeca5fac15ceb601074868ea8ae4cd9c602a8c403921214279e19a8e1d79110f746534f0f25896e8ad36327c52063300d324fce94d64e7ff35c8368a781c664d8e3aae57ebe2ff6e90dcb4e726bbdddf6822df2dfb026b44adac4ef013674460877f109f02c8648c1ad526cc1c1c8c856c4211ec52aaa9c47737e5a26b0cebbac194f4af02816e424a3b7e8d557206e1ed6a3579dbb8daf7139a1065e2855a22a5be86417b474bd607f2f19763268edbcb7f861ee2f0115d7fb2cafe2a7e3b0a8673b0633024f5684fc365fd5c9563eb35dec658bb63ce3586b6b8258698826a8709b9ba73e65c7102ce55377b7c640d4de2f4d6426659ecce65cc499c98fbaebacf8da2d18a5e8a7642040d1da73c1cad9db5e5f2296f9af44468dc65dcc4e1612b0f4babb28b43310950add8ef6562a4b24c1cf4b9c2dfcf4dc8a5d184fa0805d6a3fe6911d1e6d666e68dc8fe41cf0f0de9faf1d0c24713a861c55665fe7dfee8df37854c55aa329ee3197417857c8c5c741a3e4b8b859bb63dce9344c4370e31001bb86cb57b060e3b035560f1226047172334bd1a1dc077bca0a3ed6e2fafad6c6651b5adb3e6d2755c7b77504758012a1a90bc9b0b69e2218348196dc5f442eb2c26992071282d9b0c5b432b4a8880a41345dd2e8b93a4161729cbb42e627badf0fd2834c6cb6b84eeaf853af78f075989c08ad958b1d75c2fc6cc758cca5489b9d85ae7abf8854e39c582e6aaa31b3d58efeff495178bb37fdec80bba836af6ca006f8265e540e80ceaa267df7934bc376e8712dc1487df686495db69094524c25ba27abe6b1fd2f1817031898138e74b296855ee7953f21bdaa72d20895eba0fb9b7e1d98f8c92ecaa14025ea88b290858a69dbf8bdd2d00828526f9d1b14d7672c53428bbce328fc4c645976c0b2a5d80905beb434c88a31fcbae8f6d0e9f0316242bbaea755ee36c71bcc6428edb6778bcfa5b5035c298b3cfd7d7b668a03ce2f548a5d080ae3d9fc4aeca18162f4dd6d05da7b91ddff609470dfcef7d3fb694b42f68b702217b9920bd918897f579a9d82f4860dbc17763f9a7e0b61558c4c10c50d15bb36ebf4645a830fc50637cb9e9b8676eb38368b8009d6d1e637e7d7de55844687d79000542a3318949c3a23dce95091cad666ea57d0ceee932ef202dcaf825aa79cf4ae4d893295c0e1b6728a58f391437597f8a8d1eec491edbb8d577f2dc307d511fb316b3cabe4f34ac291952e61df85908c97f056379b7c6d4cae3f9cfd8ec8af5fff7f7cbac2dde423035a4f37674740404cede5b7e1ff9837f5287225239ca5191518aad9d46f990e3d87b4f634c3ab5595affbbaf21c650a3ce573cea434f36b0393c64343a82de887e7ae46c0e4f4172640bad0b2831e7ba8c4b53a5e4112556fa696e33f6a07463aec1efe073b2d558f7406d4ef50e472f578c061ad6384ceec4410fe1d02fe9816c07bab37d36a6c8a41bac73e78c9a05ea6ad094f9bfeebbd35b15fdc276c44aac60ebe87e94a2cbc97115bd274ac0ca62955074a18c05e3e0749bf632bcafaaf713a9fcf69986175a556d7de5c7e3c2105177ce52612ef27127b2077677cb98da1d1a57e3ed3fd7bec13735a519350bab8f3826f60543ab315e8e9835ef355bedc00e47a854ef8bdb510100c0e029e4aae400134966057446486f94555b12fbc540f086444594f8be7213fc4746a358d5a20acbf638e4c95bb9a836d83a2ef7329de30a0753c1cbd7331e1581b0f593bc9726b2ae9e1417c80b67a82575b28806779e902e8730f10579c67cd2f9b6a88f69ac654f571f4705bd92ec1a5c870429a2ec3bed7eec1cc6abf768921d12eeda01d84b61bac67b777e23b2a335536a538213ee64efc935c9d03a932d790b787a0517fe09ea2dc3895af9bda2a0e498f9aaf63c4618e00f9bc12aa14f078dbc0bd87f6d5ba5dfdbbf9b51bdd15281dd7a77b03b41cb192f9fde461575e3e5a0f11e7587d0f3f2828af05a8109474703a0b4abe58d64bac0b81037b187561cf054036a8806f339c82ef4bd0f2c3818df73e408476cb8f0829332918e700e309afea1816de75408abac89305330f36fccabbbcff324ff0263decf335ffdacf502e10266df950d43c9b392ef3bf3c3e12b38a01dab26a2a2d2f6237977a1b8f5150f38c9c86a8028927bb3171d6663dd9f13ceccf8aff4b07a46c15cb4a27b00456b569d3f8b242f25592ad031eb60958159be7de68ab33d3a7724894be49aefefb5b738080f8a46b39f3804214391ecba3a69e58ba0df431523e6a9eebbf9c04c24ffc5dc649307a4409bb30ad13888e9b3b69bec94027e83e75c1f494a6b586c384b0ca9fb3086fc7ab5dc189c4a3e8211dcf6f42c73cfbbf390ad81cbca11a99901294d619358ab3544166a7e370114140e0051119d0a842d8c7292d70ffa2920fba25aa89bbb71ba453a07f64ba71ab808f9755b172bc77ce3bed56c760f0b4be3e2c60868aa33b25d67694f3308d2d2ff5a1f2474891f2ac493b02c1db89c1f48c357112c26e91b55b7ced2c4b4ba560fbf0e0e0f78d7149fbf5e5419cca3411e9ab32194ce1c33eef824fec16232d34e60a4835ceff658674051e2e104422880611c749ecaf535eeccbec1a712f6574447668f407b4c3d65a4d72afa4a7c13e6cf34e2c02658c2b6c2c44b32fdf9ef113bb34b50afde4048045517e41752fb9c01fda76a7de6021b1ec28e9dc5bbfe5c396189b46650ccb5490991a7c2b89729db00ee4a474916fd4e4022b0630b549f4d6f665192e47c6fe565620be30cec836b6bf6f16c1a2f8f4a53e558ed64a0e126f425b1bb4b5ff06aaffbebec98293d90da695d99a6b7c764b82cb379afcfe7c9702ab3296043ea1efecf6c235ce63d7761026e4ca813d7d3cfe834fd2c701780200011beba1bacd437dd136fa36bd76d965216bb156044e2e051c3e6786f0101bfb223f89cdb674ef5d1e3d443453a2e05a1d716a39947933425d41c4cf2363b87cf2761b128bf667e67b6bc222f110cb1e6b7d2f6ff44831b4b08895e4ae0df7f29933a6d1a2f7b753f4b8859508c40b6d77a75f9092079ffb5ad65711179829ca0d494e50a8b67035d6e8d7b63265448fbd0780588d0e68cab8e620d128cb57bd0215f6b2fc0dc0a49f2fc880b2a6bb1f26df5e3802f6ac69dfaf5a6c3787fff6e758550263ec884bf4dc525bfad8b2224acbe35f12c1906fa3a7dfe751021bd5e29199d37654930824e6d12a0e9353b03735e6eb66a549d25c070475ae68e98fe1ce26a24866aaacfe26e2e18127238cbcb93690f45b4da73742e17ac654cc8bd8dde28092f2a5f6660df325c41c71a186c67bafa32d08e28dac6a7429f59527a2ae631683cf7bf51de602b85b58d5cb3e6008d16d08e39332c711221ee1f1ab15f9ef786aea2e732900420046a46917e5ba7c120c403b770de5049726cd0c9ff9df17286073b6bd9dad3d73a28aa7064d00000071cb56b2db80186e5fa85e3e1b1984c068a2221f285173d37eceb9936ddb702a23c462b948482aab55df142c5761759ec6b876b34f1571284f9b381e91f14e68afd7aeb4a25baaebce3052850110ff7a572208a85b56be0e559c1b1fe489b8c9667cace9bcfc6a918dd6ccac642859a66d701e96eda5ff3bd470f0f4f0697fa7706e36979f5b0b6601c47453d3fb616572495ef6de75710c003b003a580000000000000000"], 0x14a8}, 0x1, 0x0, 0x0, 0x44880}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="440100001a0001000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc02000000000700000000000000000000000000330000007f000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000097dd97c3944b480000000000000000000000000a00000000000000000000004c980b00000000000036000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f0300000000000000000000000000fffeffff0000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0x144}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000e2f4000018000000", @ANYRES32=r4, @ANYBLOB="ff0f0000000000002e2f66696c653000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3, 0x0, 0x8000008000) 15:50:41 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/23, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[r1, r0], 0x2) 15:50:41 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) [ 1549.091074] audit: type=1400 audit(1712159441.849:15): avc: denied { watch_reads } for pid=9262 comm="syz-executor.7" path="/syzkaller-testdir196418684/syzkaller.G6vtrq/205" dev="sda" ino=15985 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 15:50:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x80000, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1549.122064] [ 1549.122413] ====================================================== [ 1549.123475] WARNING: possible circular locking dependency detected [ 1549.124545] 5.10.214 #1 Not tainted [ 1549.125162] ------------------------------------------------------ [ 1549.126236] syz-executor.3/9263 is trying to acquire lock: [ 1549.127180] ffff8880176ecae8 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 1549.128858] [ 1549.128858] but task is already holding lock: [ 1549.129876] ffff8880176ecf40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 1549.131383] [ 1549.131383] which lock already depends on the new lock. [ 1549.131383] [ 1549.132791] [ 1549.132791] the existing dependency chain (in reverse order) is: [ 1549.134090] [ 1549.134090] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 1549.135183] __mutex_lock+0x13d/0x10b0 [ 1549.135935] hci_dev_do_close+0xef/0x1240 [ 1549.136730] hci_rfkill_set_block+0x166/0x1a0 15:50:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0xf0ffff, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1549.141508] rfkill_set_block+0x1fd/0x540 [ 1549.142433] rfkill_fop_write+0x253/0x4b0 [ 1549.143222] vfs_write+0x29a/0xa70 [ 1549.143909] ksys_write+0x1f6/0x260 [ 1549.144612] do_syscall_64+0x33/0x40 [ 1549.145324] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.146276] [ 1549.146276] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 1549.147412] __mutex_lock+0x13d/0x10b0 [ 1549.148158] rfkill_register+0x36/0xa10 [ 1549.148918] hci_register_dev+0x42e/0xc00 [ 1549.149709] __vhci_create_device+0x2c8/0x5c0 [ 1549.150567] vhci_open_timeout+0x38/0x50 [ 1549.151340] process_one_work+0x9a9/0x14b0 [ 1549.152142] worker_thread+0x61d/0x1310 [ 1549.152668] FAULT_INJECTION: forcing a failure. [ 1549.152668] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.152899] kthread+0x38f/0x470 [ 1549.152915] ret_from_fork+0x22/0x30 [ 1549.152921] [ 1549.152921] -> #1 (&data->open_mutex [ 1549.154079] CPU: 0 PID: 9268 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1549.154643] ){+.+.}-{3:3} [ 1549.154967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1549.155818] : [ 1549.156336] Call Trace: [ 1549.156805] __mutex_lock+0x13d/0x10b0 [ 1549.157437] dump_stack+0x107/0x167 [ 1549.157729] vhci_send_frame+0x63/0xa0 [ 1549.157918] should_fail.cold+0x5/0xa [ 1549.158658] hci_send_frame+0x1b9/0x320 [ 1549.158929] ? create_object.isra.0+0x3a/0xa20 [ 1549.159578] hci_tx_work+0x10af/0x1660 [ 1549.159867] should_failslab+0x5/0x20 [ 1549.160527] process_one_work+0x9a9/0x14b0 [ 1549.160874] kmem_cache_alloc+0x5b/0x310 [ 1549.161521] worker_thread+0x61d/0x1310 [ 1549.161803] create_object.isra.0+0x3a/0xa20 [ 1549.162510] kthread+0x38f/0x470 [ 1549.162813] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1549.163477] ret_from_fork+0x22/0x30 [ 1549.163808] kmem_cache_alloc_bulk+0x168/0x320 [ 1549.164375] [ 1549.164375] -> #0 [ 1549.164771] io_submit_sqes+0x6f76/0x85c0 [ 1549.165383] ( [ 1549.165734] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1549.166250] (work_completion)(&hdev->tx_work) [ 1549.166569] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1549.166832] ){+.+.}-{0:0} [ 1549.167213] ? lock_downgrade+0x6d0/0x6d0 [ 1549.167860] : [ 1549.168235] ? __fsnotify_parent+0x488/0x9d0 [ 1549.168644] __lock_acquire+0x29e7/0x5b00 [ 1549.168954] ? io_submit_sqes+0x85c0/0x85c0 [ 1549.169214] lock_acquire+0x197/0x470 [ 1549.169541] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1549.170232] __flush_work+0x105/0xa90 [ 1549.170555] ? wait_for_completion_io+0x270/0x270 [ 1549.171188] hci_dev_do_close+0x131/0x1240 [ 1549.171549] ? vfs_write+0x354/0xa70 [ 1549.172184] hci_rfkill_set_block+0x166/0x1a0 [ 1549.172538] ? fput_many+0x2f/0x1a0 [ 1549.173240] rfkill_set_block+0x1fd/0x540 [ 1549.173516] ? ksys_write+0x1a9/0x260 [ 1549.174258] rfkill_fop_write+0x253/0x4b0 [ 1549.174529] ? __ia32_sys_read+0xb0/0xb0 [ 1549.175215] vfs_write+0x29a/0xa70 [ 1549.175502] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1549.176186] ksys_write+0x1f6/0x260 [ 1549.176482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1549.177084] do_syscall_64+0x33/0x40 [ 1549.177478] do_syscall_64+0x33/0x40 [ 1549.178095] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.178479] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.179094] [ 1549.179094] other info that might help us debug this: [ 1549.179094] [ 1549.179378] RIP: 0033:0x7f991b285b19 [ 1549.180207] Chain exists of: [ 1549.180207] [ 1549.180598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.181780] (work_completion)(&hdev->tx_work) [ 1549.182059] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1549.182758] --> [ 1549.184154] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1549.184169] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1549.184829] rfkill_global_mutex [ 1549.185401] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.185412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.185712] --> [ 1549.186264] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1549.191296] &hdev->req_lock [ 1549.191296] [ 1549.191951] Possible unsafe locking scenario: [ 1549.191951] [ 1549.192839] CPU0 CPU1 [ 1549.193527] ---- ---- [ 1549.194219] lock(&hdev->req_lock); [ 1549.194783] lock(rfkill_global_mutex); [ 1549.195761] lock(&hdev->req_lock); [ 1549.196690] lock((work_completion)(&hdev->tx_work)); [ 1549.197479] [ 1549.197479] *** DEADLOCK *** [ 1549.197479] [ 1549.198386] 2 locks held by syz-executor.3/9263: [ 1549.199094] #0: ffffffff8561a8c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1549.200515] #1: ffff8880176ecf40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 1549.201876] [ 1549.201876] stack backtrace: [ 1549.202568] CPU: 1 PID: 9263 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 1549.203586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1549.204838] Call Trace: [ 1549.205240] dump_stack+0x107/0x167 [ 1549.205798] check_noncircular+0x263/0x2e0 [ 1549.206440] ? register_lock_class+0xbb/0x17b0 [ 1549.207135] ? print_circular_bug+0x470/0x470 [ 1549.207819] ? stack_trace_consume_entry+0x160/0x160 [ 1549.208594] ? alloc_chain_hlocks+0x342/0x5a0 [ 1549.209277] __lock_acquire+0x29e7/0x5b00 [ 1549.209915] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1549.210720] ? rwlock_bug.part.0+0x90/0x90 [ 1549.211359] lock_acquire+0x197/0x470 [ 1549.211938] ? __flush_work+0xdd/0xa90 [ 1549.212536] ? lock_release+0x680/0x680 [ 1549.213143] ? lock_release+0x680/0x680 [ 1549.213746] ? lock_chain_count+0x20/0x20 [ 1549.214391] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1549.215188] ? lock_chain_count+0x20/0x20 [ 1549.215820] ? lock_acquire+0x197/0x470 [ 1549.216426] __flush_work+0x105/0xa90 [ 1549.217004] ? __flush_work+0xdd/0xa90 [ 1549.217601] ? queue_delayed_work_on+0xe0/0xe0 [ 1549.218299] ? hci_dev_do_close+0xef/0x1240 [ 1549.218957] ? __cancel_work_timer+0x2a9/0x4c0 [ 1549.219655] ? mutex_lock_io_nested+0xf30/0xf30 [ 1549.220361] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1549.221152] ? __cancel_work+0x250/0x2b0 [ 1549.221763] ? trace_hardirqs_on+0x5b/0x180 [ 1549.222419] ? __cancel_work+0x1bb/0x2b0 [ 1549.223035] ? try_to_grab_pending+0xe0/0xe0 [ 1549.223705] hci_dev_do_close+0x131/0x1240 [ 1549.224347] ? rfkill_set_block+0x18f/0x540 [ 1549.225006] ? hci_dev_open+0x350/0x350 [ 1549.225608] ? mark_held_locks+0x9e/0xe0 [ 1549.226235] hci_rfkill_set_block+0x166/0x1a0 [ 1549.226920] ? hci_power_off+0x20/0x20 [ 1549.227502] rfkill_set_block+0x1fd/0x540 [ 1549.228133] rfkill_fop_write+0x253/0x4b0 [ 1549.228762] ? rfkill_sync_work+0xa0/0xa0 [ 1549.229394] ? security_file_permission+0x24e/0x570 [ 1549.230157] ? rfkill_sync_work+0xa0/0xa0 [ 1549.230789] vfs_write+0x29a/0xa70 [ 1549.231335] ksys_write+0x1f6/0x260 [ 1549.231890] ? __ia32_sys_read+0xb0/0xb0 [ 1549.232510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1549.233306] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1549.234098] do_syscall_64+0x33/0x40 [ 1549.234668] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.235445] RIP: 0033:0x7fa8dba00b19 [ 1549.236017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.238810] RSP: 002b:00007fa8d8f76188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1549.239959] RAX: ffffffffffffffda RBX: 00007fa8dbb13f60 RCX: 00007fa8dba00b19 [ 1549.241041] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003 [ 1549.242135] RBP: 00007fa8dba5af6d R08: 0000000000000000 R09: 0000000000000000 [ 1549.243210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.244290] R13: 00007ffc1160cd7f R14: 00007fa8d8f76300 R15: 0000000000022000 [ 1549.247787] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:42 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) [ 1549.280486] FAULT_INJECTION: forcing a failure. [ 1549.280486] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.282548] CPU: 1 PID: 9254 Comm: syz-executor.4 Not tainted 5.10.214 #1 15:50:42 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20) r1 = syz_mount_image$nfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x30, 0x1, &(0x7f0000001a80)=[{&(0x7f00000004c0)="5ccea5113a6e523a73d9be560f7efeb470e351f5d5752364ab159eea131c8e36ea15247bf8c195f88bfbb90df5ed4f1216d960335e98388ed79c77f0e7ac703f7060abd98e6e47a5824e19f8a46788acfd4bd520dbf9e79f6bb01defedb6d1cc28936b512c6ab615d261a7a9571f04cdcc46427a5e17dea14eb1be579678c332042036ec6edc15586b1920a4c2cfad76e1828b125f3cbb73aec27f0eb9dcf9d35595657845827e2b1813bc74469a9a7f2808fae972", 0xb5, 0x8}], 0x801000, &(0x7f0000001ac0)={[{'\x00'}, {'\x00\x00'}, {'{-*,'}, {'pipefs\x00'}, {'\x00'}, {':$@'}, {'pipefs\x00'}], [{@smackfstransmute}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b40)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, r0, &(0x7f0000000400), r1, 0x1, 0x0, 0x1}, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB], 0xfdef) accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f0000000300)=0x10) io_destroy(0x0) r3 = dup(0xffffffffffffffff) mount$bind(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14a8}, 0x1, 0x0, 0x0, 0x44880}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="440100001a0001000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc02000000000700000000000000000000000000330000007f000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000097dd97c3944b480000000000000000000000000a00000000000000000000004c980b00000000000036000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f0300000000000000000000000000fffeffff0000000008001f00", @ANYRES32=0x0, @ANYBLOB], 0x144}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000e2f4000018000000", @ANYRES32=r4, @ANYBLOB="ff0f0000000000002e2f66696c653000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3, 0x0, 0x8000008000) [ 1549.283594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1549.285310] Call Trace: [ 1549.285736] dump_stack+0x107/0x167 [ 1549.286303] should_fail.cold+0x5/0xa [ 1549.286884] ? create_object.isra.0+0x3a/0xa20 [ 1549.287581] should_failslab+0x5/0x20 [ 1549.288162] kmem_cache_alloc+0x5b/0x310 [ 1549.288781] create_object.isra.0+0x3a/0xa20 [ 1549.289452] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1549.290233] kmem_cache_alloc_bulk+0x168/0x320 [ 1549.290930] io_submit_sqes+0x6f76/0x85c0 [ 1549.291612] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1549.292370] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1549.293106] ? lock_downgrade+0x6d0/0x6d0 [ 1549.293736] ? __fsnotify_parent+0x488/0x9d0 [ 1549.294414] ? io_submit_sqes+0x85c0/0x85c0 [ 1549.295078] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1549.295811] ? wait_for_completion_io+0x270/0x270 [ 1549.296604] ? vfs_write+0x354/0xa70 [ 1549.297233] ? fput_many+0x2f/0x1a0 15:50:42 executing program 1: r0 = io_uring_setup(0x62c, &(0x7f0000000280)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, &(0x7f0000000140)=[r2, r1], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) [ 1549.297924] ? ksys_write+0x1a9/0x260 [ 1549.298548] ? __ia32_sys_read+0xb0/0xb0 [ 1549.299211] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1549.300071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1549.300988] do_syscall_64+0x33/0x40 sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0xecc, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_TID_CONFIG={0x88, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x51e9}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x43}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x316}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}]}]}, @NL80211_ATTR_TID_CONFIG={0x334, 0x11d, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x26, 0x6, 0x9, 0x1a, 0x24, 0x0, 0x60, 0x24, 0x0, 0x16, 0x16, 0x18, 0x18, 0x5, 0x36, 0x2, 0x5, 0x12, 0x1b, 0x5, 0x14, 0x16, 0x1b, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x1}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0xa}, {0x7, 0xa}, {0x4}, {0x1, 0x6}, {0x4, 0x8}, {0x2}, {0x2, 0x5}, {0x2, 0x7}, {}, {0x7, 0x9}, {0x2, 0xa}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x8}, {0x4}, {0x1, 0x8}, {0x5, 0x5}, {0x5, 0x9}, {0x4, 0x7}, {0x7, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2a}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbf}]}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x3}, {0x6, 0x1}, {0x6, 0x1}, {0x1, 0x8}, {0x4, 0x9}, {0x5, 0x5}, {0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x0, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x7, 0x8}, {}, {0x7, 0x8}, {0x7, 0x5}, {}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0xa}, {0x5, 0x5}, {0x7, 0x8}, {0x5}, {0x7}, {0x4, 0x9}, {0x3, 0x9}, {0x1, 0x2}]}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x16, 0x18, 0x44, 0x6c, 0xb, 0x1b, 0xb, 0x27, 0x12, 0x6c, 0x6c, 0x4, 0x2, 0xb, 0x48, 0x16, 0x1b, 0x6c, 0x2, 0xb, 0x36, 0x12, 0xb, 0x6, 0x12, 0x12, 0x5, 0x60, 0x30, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd7a8, 0x1, 0x8000, 0x3, 0xfff7, 0x4, 0x8, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x27d7, 0x1, 0x4, 0x1, 0xffff, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4767, 0x7, 0x3, 0x8001, 0x2, 0xff47, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0xc, 0x30, 0x6, 0x2, 0x60, 0x30, 0x30, 0x5, 0x48, 0x9, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x1, 0xfffe, 0x1000, 0x2, 0x6, 0x80]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0xa}, {0x6, 0x6}, {0x7, 0x4}, {0x1, 0x7}, {0x2, 0x4}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x0, 0x3}, {0x7, 0x3}, {0x5, 0x2}, {0x6, 0x4}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x8}, {0x0, 0xa}, {}, {0x1, 0x8}, {0x7, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x7, 0x6}, {0x3, 0x9}, {0x7, 0x6}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x4, 0xfff, 0x9a7, 0x3, 0x7, 0x7, 0x5]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x48, 0xb, 0xc, 0x9, 0x0, 0x3f, 0x1, 0x60, 0x3, 0xb, 0xb, 0x5]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x9}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x4}, {}, {0x0, 0x9}, {0x3}, {0x6, 0x3}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x1}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x1}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x9}, {0x4, 0x8}, {0x0, 0x5}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0xa}, {0x7, 0x2}, {0x4, 0x7}, {0x4, 0x5}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x5, 0x3}, {0x5, 0x6}, {0x5, 0xa}, {0x6, 0x5}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x5}, {0x7, 0x9}, {0x4, 0x1}, {0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x8}, {0x5}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x2}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0x5}, {0x4, 0x8}, {0x1, 0x1}, {0x3, 0x9}, {0x2, 0x2}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x1, 0x9}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1f, 0xfff, 0x8000, 0x1f, 0x6, 0x1, 0x1f]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x6, 0x5}, {0x0, 0x3}, {0x0, 0x2}, {0x5, 0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x2}, {0x3, 0x4}, {0x6, 0x7}, {0x6}, {0x4, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0x7}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x7, 0x3}, {0x6, 0x2}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x5f8, 0x11d, 0x0, 0x1, [{0x5f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x5}, {0x5, 0xa}, {0x1, 0x3}, {0x6, 0x7}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x2}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x6}, {0x6, 0x4}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0x9}, {0x7, 0x7}, {0x5, 0x7}, {0x2, 0x4}, {0x7, 0x6}, {0x6, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {}, {0x0, 0xa}, {0x4, 0xa}, {0x5, 0x8}, {0x0, 0x2}, {0x5, 0x4}, {0x4}, {0x4, 0xa}, {}, {0x5, 0xa}, {0x0, 0x8}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x0, 0x48, 0x9, 0x1b, 0x4, 0x5, 0x18, 0x36, 0x9, 0x18, 0xc, 0x48, 0x4, 0x2, 0x3, 0x16, 0xc, 0x6, 0x24, 0x1f, 0x9, 0x1b, 0x48, 0x41, 0x36, 0x36, 0x36, 0xc, 0x5, 0x30, 0x18]}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x4, 0x0, 0x140, 0x6a14, 0x81, 0x7]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x4}, {0x6, 0x8}, {0x4, 0x8}, {0x2, 0x8}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x3}, {}, {0x4, 0x9}, {0x2, 0x8}, {0x4, 0x3}, {0x0, 0x4}, {0x3, 0x8}, {0x5, 0x5}, {0x3, 0x7}, {0x4, 0x7}, {0x4, 0x3}, {0x3, 0x7}, {0x6, 0x8}, {0x2, 0xa}, {0x2, 0x3}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x2}, {0x0, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x8}, {0x4, 0xa}, {0x4, 0x1}, {0x2, 0x7}, {0x2}, {0x6, 0x8}, {0x3, 0x4}, {0x6, 0xa}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x0, 0x6}, {0x2, 0x4}, {0x6, 0x2}, {0x6, 0x4}, {0x5}, {0x7, 0x9}, {0x3, 0x8}, {0x6}, {0x3, 0x5}, {0x7, 0x9}, {0x5, 0x8}, {0x5, 0x4}, {0x5}, {0x6, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x2, 0x9}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0x4}, {0x5, 0x3}, {0x4, 0x4}, {0x2, 0x8}, {0x6, 0x2}, {0x5, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x4}, {0x2, 0x5}, {0x5, 0x7}, {0x5, 0x5}, {0x0, 0x9}, {0x7}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x9}, {0x0, 0x3}, {0x7, 0x1}, {0x6, 0x2}, {0x3, 0x9}, {0x3, 0x3}, {0x6, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x7, 0x2}, {0x7, 0x9}, {0x4, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x2, 0x8}, {0x3, 0x8}, {0x7, 0x8}, {0x5, 0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x6, 0x1}, {0x6, 0x2}, {0x1, 0x4}, {0x4, 0x6}, {0x7, 0x3}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x1}, {0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x5, 0x6}, {0x1}, {0x6, 0x8}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x5}, {0x4, 0x2}, {0x1, 0x6}, {0x4}, {0x7, 0x6}, {0x0, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x4, 0x4}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x5}, {0x1}, {0x6, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x3}, {0x6, 0x6}, {0x6, 0x4}, {0x6, 0xa}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0xfff7, 0x8, 0x101, 0x2, 0x3, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x30, 0xc, 0xc, 0x6, 0x9, 0x6, 0x60, 0x0, 0x3, 0x5, 0x18, 0x2d, 0x60, 0xc, 0x2, 0x16, 0x9, 0x6, 0x36]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x1}, {0x5, 0x7}, {0x4, 0x5}, {0x2, 0xa}, {0x4, 0x6}, {0x7, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x3, 0x7}, {0x3, 0x3}, {0x4, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x2}, {0x2, 0x2}, {0x0, 0x5}, {0x6, 0x5}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x3}, {0x7, 0x2}, {0x1, 0x7}, {}, {0x6, 0x5}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0xa}, {0x1}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x2, 0x9}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x4}, {}, {0x7, 0x7}, {0x0, 0x3}, {0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x3, 0x6}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{}, {0x3, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x3, 0x8}, {0x0, 0x7}, {0x3, 0x6}, {0x1, 0x1}, {0x1, 0x6}, {0x5, 0xa}, {0x2, 0x4}, {0x4}, {0x3, 0x1}, {0x5, 0x7}, {0x1}, {0x1, 0x2}, {0x4, 0x2}, {0x3}, {0x6}, {0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x5, 0x4, 0x60, 0x18, 0x6c, 0xc, 0x6c, 0x16, 0x16, 0x9, 0x5, 0x1e, 0x24, 0x62, 0x24, 0x9, 0x30, 0x12, 0xc, 0x1b, 0x48, 0x1d, 0x3, 0x48, 0x48, 0x30, 0xb, 0x5, 0x36, 0x3]}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x400, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x2, 0x30, 0x4, 0x1, 0xc, 0x48, 0x36, 0x5, 0x16, 0x36, 0x6, 0x1b, 0x1b, 0x48, 0x1b, 0x48, 0x1, 0x16, 0x32, 0x2, 0x2466faedbcc37248, 0x1b, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4b, 0x4, 0x3ff, 0x3, 0x4, 0xffff, 0x7fff, 0x76]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x4}, {0x3, 0x5}, {0x7, 0x9}, {0x6, 0x8}, {0x7, 0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0x2}, {0x2, 0x9}, {0x7, 0x4}, {0x5, 0x8}, {0x6, 0x3}, {0x6, 0x7}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x7}, {0x2, 0x1}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x8}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x8}, {0x4, 0x7}, {0x0, 0x1}, {0x1, 0x4}, {0x7, 0x7}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x3}, {0x7, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x4}, {0x5, 0x4}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x4, 0x7}, {0x1, 0xa}, {0x5, 0x9}, {0x2, 0x6}, {0x5, 0x6}, {0x6, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0x2}, {0x5, 0x6}, {0x3, 0x6}, {0x3, 0x4}, {0x5, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0x7}, {0x2, 0x3}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc48d, 0xf8, 0x51d5, 0xfff, 0x6000, 0x1, 0x81]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0xa}, {0x3, 0x7}, {0x6, 0x9}, {0x1, 0x1}, {0x3, 0x3}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x7}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x6}, {}, {0x4, 0x11}, {0x6, 0x1}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0x8}, {0x0, 0x2}, {0x2, 0x7}, {0x5, 0x5}, {0x5, 0x5}, {0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x1}, {0x2, 0x5}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x1}, {0x7, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x3}, {0x3, 0x1}, {0x5, 0x4}, {0x3, 0x9}, {0x6, 0x1}, {0x7, 0x4}, {0x7, 0x8}, {0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x2}, {0x6, 0x6}, {0x6, 0x6}, {0x0, 0x2}, {0x5, 0x9}, {0x1, 0x7}, {0x4, 0x2}, {0x2}, {0x7, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x5, 0x8}, {0x6, 0x6}, {0x6, 0x8}, {0x0, 0x6}, {0x3, 0xa}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0xa}, {0x4, 0x4}]}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x1}, {0x1}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0x9}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x3}, {0x3, 0x3}, {0x6, 0xa}, {0x5, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0xa}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x4}, {0x0, 0x3}, {0x7, 0x7}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0xa}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x9}, {0x3, 0x6}, {0x3, 0x4}, {0x6, 0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x5}, {0x4, 0x2}, {0x3, 0x1}, {0x2, 0x6}, {}, {0x7, 0x5}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x1}, {0x7, 0x6}, {0x7, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x8}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x9}, {0x1, 0x7}, {0x2, 0x6}, {0x1, 0x9}, {0x5, 0x6}, {0x2, 0x4}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x3, 0x4}, {0x3, 0x2}, {0x6, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x6}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0x3}, {0x3, 0x1}, {}, {0x1, 0x8}, {0x2, 0x8}, {0x7, 0x9}, {0x4, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x3}, {0x1, 0x4}, {0x7, 0x7}, {0x6}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x8}, {0x1}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x9}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x9}, {0x5, 0x1}, {0x7, 0x7}, {0x5, 0x6}, {0x0, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0xa}, {0x2, 0x8}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x6, 0x9}, {0x1, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x7, 0x6}, {0x1, 0x5}, {0x4, 0xa}, {0x4, 0x5}, {0x2, 0x3}, {0x4, 0x4}, {0x7, 0x7}, {}, {0x2, 0x1}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0x7}, {0x7, 0x7}, {0x1, 0x6}, {0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x5}, {0x3, 0x4}, {0x6, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x2, 0x3}, {0x6, 0x9}, {0x5, 0x5}, {0x1, 0x8}, {0x2, 0x4}, {0x7, 0xa}, {0x6, 0x5}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x8}, {0x3, 0x8}, {0x0, 0x1}, {0x1}, {0x5, 0x7}, {0x5, 0x7}, {0x5, 0x9}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x1}, {0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x6, 0x2}, {0x7, 0x5}, {0x6, 0x6}, {0x3, 0xa}, {0x1, 0x7}, {0x5, 0x7}, {0x5, 0x1}, {0x7, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0x6}, {0x7}, {0x3, 0x4}, {0x5, 0x5}, {0x4, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0x7}, {0x2, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x2, 0x5}, {0x1}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x36, 0x18, 0x43, 0x16, 0x0, 0x60, 0x5, 0x9, 0x1b, 0x4, 0x6c, 0x3, 0x12, 0x16, 0x48, 0x6, 0x16, 0x60, 0x77, 0x6d, 0x60, 0x36, 0x1b, 0xb, 0x36, 0x6, 0x36]}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x8, 0x4, 0x7ff, 0x1, 0x4, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x3, 0x1b, 0xc, 0x34, 0x1b, 0x2, 0xc, 0xb, 0xa48945b240de350c, 0x5, 0xb, 0x16, 0x55, 0x6, 0x36, 0x6, 0x60, 0x18, 0x3, 0x3]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x5}, {0x0, 0x5}, {0x4, 0x7}, {0x7, 0x2}, {0x7, 0x9}, {0x6, 0x6}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0x8}, {0x5, 0x1}, {0x1}, {0x4, 0x6}, {0x3, 0x3}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x4}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0xa}, {0x2, 0x5}, {0x6, 0x8}, {0x4, 0x2}, {0x5, 0x6}, {0x3, 0x9}, {0x0, 0x6}, {0x1}, {0x7, 0x4}, {0x0, 0xa}, {0x5, 0x1}, {0x7, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x3, 0x7}, {0x5, 0x3}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x2}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x7}, {0x7}, {0x1, 0x6}, {}, {0x7, 0x2}, {0x4, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x4, 0x16, 0x3, 0xb, 0x6c, 0x2, 0x1, 0x6, 0x4, 0x48, 0x6c]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xc000, 0x3, 0x80, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x4}, {0x6, 0x4}, {0x1, 0x6}, {0x2, 0x9}, {0x2}, {0x1, 0x1}, {0x6, 0x9}, {0x4, 0x9}, {0x4, 0xa}, {0x7, 0x2}, {0x7, 0x3}, {0x5, 0x2}, {}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0xa}, {0x2, 0x9}, {0x2, 0x4}, {0x2}, {0x3, 0x9}, {0x6, 0x7}, {0x1}, {}, {0x1, 0x4}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3}, {0x4, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x7, 0x9}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x1}, {0x3, 0x2}, {0x1, 0x6}, {0x3, 0xa}, {0x0, 0x3}, {0x3, 0xa}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x5, 0x4}, {0x5, 0x4}, {0x7, 0x2}, {0x1, 0x7}, {0x7, 0x8}, {0x1}, {0x3, 0xa}, {0x2}, {0x0, 0x4}, {0x4, 0x8}, {0x4, 0x6}, {0x2, 0x6}, {0x0, 0x8}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0xa}, {0x6, 0x8}, {0x7}, {0x3, 0x5}, {0x1, 0x1f}, {0x6, 0x2}, {0x3, 0x9}, {0x6, 0x4}, {0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x8}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x2}, {0x3, 0x6}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {}, {0x4, 0xa}, {0x6, 0x1}, {0x7, 0x4}, {0x4, 0x4}, {0x1, 0x6}, {0x5, 0x1}, {0x3, 0x2}, {0x5, 0x5}, {0x5, 0x8}, {0x6, 0x1}, {0x7}, {0x1, 0x1}, {0x5, 0x7}, {0x0, 0x3}, {0x6}, {0x1, 0x5}, {0x3, 0x1}, {0x3}, {0x7, 0x4}, {0x3, 0x8}, {0x7, 0x9}, {0x2, 0x5}, {0x5, 0xa}, {0x6, 0xa}, {0x4, 0x9}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x200, 0xe8, 0x5, 0x1, 0xffd1, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0x5}, {0x4, 0x2}, {0x2, 0x2}, {0x7, 0x9}, {0x3}, {0x2, 0x2}, {0x1, 0x4}, {0x3, 0x2}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x2, 0x6}, {0x2, 0x6}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x7}, {0x5, 0x2}, {0x2, 0x9}, {0x4, 0x8}, {0x5, 0x5}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x4, 0x5}, {0x5, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x6, 0xa}, {0x0, 0xa}, {0x2, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x3}, {0x4, 0x7}, {0x0, 0x2}, {0x4, 0x9}, {0x4, 0x7}, {0x2, 0x7}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x4}, {0x5, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6, 0x1f, 0x2, 0xc8f, 0xba, 0xff, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x100, 0x6, 0x6, 0x6, 0x8, 0x1000, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x61}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x480, 0x11d, 0x0, 0x1, [{0x430, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x41c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x6c, 0x48, 0x16, 0x12, 0x59f87a520fea2bdb, 0x3, 0xc, 0x76, 0x16, 0x12, 0x16, 0x1d8a16ffd349cf8e]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x4, 0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x1}, {}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0x5}, {0x6, 0x5}, {0x2, 0x7}, {0x2, 0xa}, {0x6, 0x3}, {0x7, 0x3}, {0x4, 0xa}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x1, 0x3}, {0x3, 0x5}, {0x0, 0x4}, {0x5, 0x2}, {0x1, 0x8}, {0x3}, {0x4, 0x1}, {0x6, 0x5}, {0x2, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0xa}, {0x5, 0x1}, {0x0, 0x6}, {0x4, 0xa}, {0x5, 0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x2}]}]}, @NL80211_BAND_6GHZ={0xe0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x100, 0x80, 0xff, 0x101, 0x7f, 0x8, 0x324]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0xd6, 0x800, 0x6, 0x3f, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x6, 0x5, 0x7f, 0x60, 0xdc81, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc000, 0x1f, 0x81, 0x4, 0x8, 0x7, 0x65e, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xa000, 0x7, 0x1, 0x8b52, 0x401, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x6}, {0x5, 0x5}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x1}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x0, 0x4}, {0x7, 0x5}, {0x5, 0x8}, {0x2, 0x6}, {0x6, 0x1}, {0x1, 0x7}, {0x3, 0x1}, {0x2, 0x5}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x8}, {0x2, 0x3}, {0x6, 0x5}, {0x7, 0x6}, {0x1, 0x2}, {0x1, 0x2}, {0x7}, {0x2, 0x7}, {0x6, 0x7}, {0x0, 0x6}, {0x7, 0x3}, {0x4, 0x6}, {0x2, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x7, 0xa}, {0x4}, {0x1, 0x7}, {0x2, 0x1}, {0x5, 0x8}, {0x1, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x1}, {0x1}, {0x0, 0x9}, {0x5, 0x7}, {0x5}, {0x0, 0x9}, {0x7}, {0x5, 0x7}, {}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x7}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x3}, {}, {0x6, 0x2}, {0x6, 0x2}, {0x7, 0xa}, {0x1}, {0x5, 0x3}, {0x7, 0xa}, {0x2, 0xa}, {0x4, 0x4}, {0x3, 0x8}, {0x0, 0x3}, {0x3, 0x3}, {0x6, 0x5}, {0x2}, {0x5, 0x3}, {0x4, 0x9}, {0x3, 0x6}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x1}, {0x5, 0x2}, {0x0, 0x8}, {0x3}, {0x3, 0x6}, {0x6, 0x3}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x7}, {0x2}, {}, {0x3, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}]}, @NL80211_BAND_6GHZ={0x174, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x24, 0x9, 0x48, 0x6c, 0x4, 0x1, 0x1, 0x5e, 0x60, 0x24, 0x36, 0x6]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x6}, {0x6, 0x8}, {0x3, 0x9}, {0x6, 0x7}, {0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x7, 0x2}, {0x3, 0x4}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x9}, {0x3, 0xa}, {0x2, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x2}, {0x4, 0xa}, {0x6, 0xa}, {0x2, 0x1}, {}, {0x3, 0x4}, {0x3, 0x1}, {0x5, 0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x6, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0xa}, {0x7, 0x3}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0x6}, {0x5, 0x7}, {0x3}, {0x3, 0x7}, {0x4, 0x5}, {0x5, 0x6}, {0x2, 0x5}, {0x6, 0x2}, {0x4}, {0x1, 0x2}, {0x6, 0x4}, {0x6}, {0x4, 0x9}, {0x4, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x7}, {0x7}, {0x0, 0x6}, {0x7, 0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x3}, {0x4, 0x9}, {0x2, 0x7}, {0x1}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x9}, {0x1}, {0x7, 0xa}, {0x1}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x1b, 0x12, 0x1b, 0x30, 0xb, 0x9, 0x6, 0xb, 0x36, 0x1b, 0x48, 0xb, 0x5, 0x6, 0x9, 0x16, 0x6, 0x3, 0x1b, 0x9, 0x6c, 0x1, 0x6, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x5}, {0x3, 0x3}, {0x4, 0x7}, {0x2, 0x2}, {0x6, 0x9}, {0x4, 0xa}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x9}, {0x3, 0x9}, {0x0, 0x5}, {}, {0x2, 0x6}, {0x2, 0xa}, {0x1}, {0x4, 0x8}, {0x4, 0x1}, {0x6, 0x6}, {0x2, 0x1}, {0x3, 0x3}, {0x5, 0x8}, {0x6, 0x5}, {0x7, 0x8}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x6}, {0x1}, {0x2, 0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x1}, {0x3, 0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x6}, {0x4, 0x5}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x3}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x4}, {0x7, 0x2}, {0x5, 0x1}, {0x4, 0x4}, {0x4, 0x4}, {0x7}, {0x4, 0x9}, {0x1, 0x6}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x5}, {0x2, 0x7}, {0x3, 0xa}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0xa}, {0x7}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x9}, {0x4, 0x2}, {0x5, 0xa}, {0x5}, {0x7, 0x5}, {0x1, 0x7}, {0x2, 0xa}, {0x5, 0x2}, {0x5, 0x3}, {0x5}, {0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x5, 0x7}, {0x1, 0x8}, {0x4}, {0x3, 0x3}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x6}, {0x3, 0x4}, {0x4, 0x3}, {0x2}, {0x0, 0x4}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x9}, {0x5, 0x9}, {0x4, 0x9}, {0x5, 0x5}, {0x1}, {0x6, 0x7}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0xa}, {0x4, 0x8}, {0x5, 0x3}, {0x3, 0x4}, {0x2, 0x6}, {0x6}, {0x4, 0x9}, {}, {0x3, 0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x5, 0x4}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x4}, {0x7, 0x9}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0xa}, {0x6, 0x5}, {0x5}, {0x2, 0x6}, {0x3, 0x8}, {0x4, 0x9}, {0x5, 0x1}, {0x5, 0xa}, {0x5, 0x3}, {0x0, 0x5}, {0x5, 0x1}, {0x4, 0x6}, {0x1}, {0x3, 0xa}, {0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x2, 0x3}, {0x6, 0x4}, {0x2, 0xa}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x7}, {0x5, 0x8}, {0x7, 0x9}, {0x0, 0x7}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x2}, {0x3, 0x6}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x1}, {0x3, 0x7}, {0x1}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x3, 0x13}, {0x2, 0x5}, {0x4, 0x3}, {0x3, 0x5}, {0x5, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x3, 0xf4f, 0x81, 0x0, 0x4, 0x80]}}]}, @NL80211_BAND_6GHZ={0x150, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x7}, {0x3, 0x7}, {0x4, 0xa}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x7}, {0x3, 0x4}, {0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x6}, {0x0, 0x8}, {0x3, 0x4}, {0x0, 0x8}, {0x4, 0xa}, {0x6}, {0x5, 0x9}, {0x2}, {0x6, 0x9}, {0x3, 0x3}, {0x5, 0xa}, {0x7, 0x4}, {}, {}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {0x2, 0x4}, {0x0, 0x1}, {0x4}, {0x1, 0xa}, {0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0x2}, {0x2, 0x4}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0xa}, {0x2, 0x9}, {0x5, 0x2}, {0x2, 0x2}, {0x3, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x1}, {0x2, 0x6}, {0x6}, {0x0, 0x5}, {0x2, 0xa}, {}, {0x6, 0x9}, {0x7, 0x5}, {0x3, 0x3}, {0x7, 0x7}, {0x7, 0x2}, {0x7, 0x9}, {0x3, 0x9}, {0x4, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x6, 0x2}, {0x6, 0xa}, {0x4, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0x7}, {0x0, 0x7}, {0x6}, {0x0, 0x3}, {0x4, 0x2}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x7}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x7}, {0x4, 0x1}, {0x7, 0x7}, {0x3, 0x4}, {0x0, 0x6}, {0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x9}, {0x4, 0x7}, {0x5, 0x9}, {0x4, 0x4}, {0x7}, {0x6, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x1}, {0x3, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x3, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x3, 0x1}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x1}, {0x4}, {0x3, 0x7}, {0x3, 0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x9}, {0x5, 0x7}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x2}, {0x1, 0x9}, {0x1, 0x8}, {0x4, 0x7}, {0x1, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0x9}, {0x3, 0x7}, {0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x2}, {0x3, 0x5}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x3}, {0x6, 0x2}, {0x3, 0x8}, {0x1, 0x5}, {0x1, 0x1}, {0x3}, {0x1, 0x2}, {0x3, 0xa}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x7}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x4}, {0x7, 0x7}, {0x3, 0x9}, {0x2, 0xa}, {0x1}, {0x0, 0xa}, {0x5, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x1}, {0x5, 0x6}, {0x5, 0x4}, {0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x3, 0x4}, {0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8001, 0x7a14, 0x1ff, 0x9, 0x7ff, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf3f1, 0x1, 0x20, 0x1f, 0xfffe, 0x8001, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x6}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x7}, {0x3, 0x3}, {0x4, 0x1}, {0x3, 0x9}, {0x7, 0x4}, {0x5, 0x7}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x6, 0x9}, {0x4, 0x8}, {0x0, 0xa}, {0x3, 0x3}, {0x6, 0x1}, {0x6, 0x9}, {0x4, 0x2}, {0x1, 0xa}, {0x3, 0x7}, {0x2, 0x5}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0xa}, {0x4, 0x2}, {0x4, 0x1}, {0x6, 0x9}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x6c, 0x2, 0x3, 0x48, 0x12, 0x12, 0x16, 0x48c84c3b699c687d, 0x18, 0x48, 0x1, 0x2, 0x33, 0x24, 0x18, 0x0, 0x12]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xecc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9"}, 0x48, 0xfffffffffffffffd) [ 1549.301761] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.302636] RIP: 0033:0x7f09e0b8db19 [ 1549.303237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.306213] RSP: 002b:00007f09de103188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1549.307447] RAX: ffffffffffffffda RBX: 00007f09e0ca0f60 RCX: 00007f09e0b8db19 15:50:42 executing program 2: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_setup(0x62c, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) [ 1549.308599] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1549.309809] RBP: 00007f09de1031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.310533] FAULT_INJECTION: forcing a failure. [ 1549.310533] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.310908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.310919] R13: 00007ffe92c8b37f R14: 00007f09de103300 R15: 0000000000022000 [ 1549.313626] CPU: 0 PID: 9296 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 1549.314160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1549.314808] Call Trace: [ 1549.315014] dump_stack+0x107/0x167 [ 1549.315297] should_fail.cold+0x5/0xa [ 1549.315594] ? create_object.isra.0+0x3a/0xa20 [ 1549.315948] should_failslab+0x5/0x20 [ 1549.316243] kmem_cache_alloc+0x5b/0x310 [ 1549.316558] create_object.isra.0+0x3a/0xa20 [ 1549.316897] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1549.317291] kmem_cache_alloc_bulk+0x168/0x320 [ 1549.317642] io_submit_sqes+0x6f76/0x85c0 [ 1549.317968] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1549.318361] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 1549.318737] ? lock_downgrade+0x6d0/0x6d0 [ 1549.319059] ? __fsnotify_parent+0x488/0x9d0 [ 1549.319401] ? io_submit_sqes+0x85c0/0x85c0 [ 1549.319736] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1549.320112] ? wait_for_completion_io+0x270/0x270 [ 1549.320484] ? vfs_write+0x354/0xa70 [ 1549.320773] ? fput_many+0x2f/0x1a0 [ 1549.321055] ? ksys_write+0x1a9/0x260 [ 1549.321350] ? __ia32_sys_read+0xb0/0xb0 [ 1549.321671] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1549.322096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1549.322501] do_syscall_64+0x33/0x40 [ 1549.322789] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.323186] RIP: 0033:0x7f991b285b19 [ 1549.323475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.324897] RSP: 002b:00007f99187fb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1549.325485] RAX: ffffffffffffffda RBX: 00007f991b398f60 RCX: 00007f991b285b19 [ 1549.326037] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1549.326598] RBP: 00007f99187fb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.327152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.327704] R13: 00007ffded4a07af R14: 00007f99187fb300 R15: 0000000000022000 [ 1549.346162] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.5'. 15:50:42 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x2000000, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x0) 15:50:42 executing program 5: timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x19, 0x2}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f00000001c0)) clone3(&(0x7f0000000100)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) VM DIAGNOSIS: 15:50:42 Registers: info registers vcpu 0 RAX=0000000000000017 RBX=0000000000000001 RCX=ffffffff81003c51 RDX=0000000000000017 RSI=ffffffff8595a572 RDI=ffffffff856a77fc RBP=ffffffff856a77fc RSP=ffff888020316c38 R8 =ffffffff8595a572 R9 =ffffffff8595a5fc R10=0000000000032042 R11=1ffff11004062d98 R12=ffffffff856a7854 R13=ffffffff856a77fc R14=ffffffff856a77fc R15=dffffc0000000000 RIP=ffffffff81107a49 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555556a80c58 CR3=0000000044db8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822d05c1 RDI=ffffffff879eb280 RBP=ffffffff879eb240 RSP=ffff8880546f72f0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000033 R13=0000000000000033 R14=ffffffff879eb240 R15=dffffc0000000000 RIP=ffffffff822d0618 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa8d8f76700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d023000 CR3=000000004a8a6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f09e0c747c000007f09e0c747c8 XMM02=00007f09e0c747e000007f09e0c747c0 XMM03=00007f09e0c747c800007f09e0c747c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000