240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r3 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = signalfd(r3, &(0x7f0000000140), 0x8) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1a, 0x0, 0x80, 0x1, 0x0, 0x47, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x401}, 0x4000, 0x8, 0x5, 0x4, 0x1, 0x4, 0x6}, 0x0, 0x7fffffff, r5, 0x2) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80201, 0xe0) poll(&(0x7f0000000080)=[{r0, 0x2419}, {r1, 0x4100}, {r2, 0x6010}, {r3, 0x1000}, {r4}, {r6, 0x4000}], 0x6, 0xaa) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff7000/0x1000)=nil) 20:38:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r0 = pkey_alloc(0x0, 0x4) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, r0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff7000/0x1000)=nil) syz_io_uring_setup(0x60a1, &(0x7f0000000000)={0x0, 0xff32, 0x20, 0x2, 0x242}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_NOP={0x0, 0x3}, 0x500) 20:38:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:28 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:28 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:28 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0xffffffff}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffff8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) read(r3, &(0x7f0000000240)=""/232, 0xe8) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff7000/0x1000)=nil) 20:38:28 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:28 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:28 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:28 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:28 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:42 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:42 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) stat(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)={{0x1, r0, 0x0, 0x0, 0x0, 0x41, 0xfe04}, 0x8, 0x406, 0x0, 0x0, 0x0, 0x0, 0x7f}) stat(&(0x7f0000000280)='\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r2, 0x0) r3 = getuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r4, 0xffffffffffffffff) fcntl$setstatus(r1, 0x4, 0x2000) setresuid(r2, r0, r3) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) ioprio_set$uid(0x3, r5, 0x4004) setresuid(0xffffffffffffffff, 0x0, 0x0) setresuid(r3, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @private1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fork() 20:38:42 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:38:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:42 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x509}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d9d132f171ffeb74ec1650072"]) r6 = syz_genetlink_get_family_id$batadv(0x0, r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r7 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast1, @in6=@empty, 0x4e23, 0x2, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x33, r8, 0xee00}, {0x4, 0xff, 0xbb6, 0x86, 0xffffffff, 0x0, 0xad4, 0x1ff}, {0x5, 0x9, 0x4, 0x7fff}, 0x7ff, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4d3, 0x6c}, 0xa, @in=@multicast2, 0x3501, 0x3, 0x1, 0x6, 0xffffff04, 0x5, 0xfffffffd}}, 0xe8) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff7000/0x1000)=nil) 20:38:42 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:38:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) stat(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)={{0x1, r0, 0x0, 0x0, 0x0, 0x41, 0xfe04}, 0x8, 0x406, 0x0, 0x0, 0x0, 0x0, 0x7f}) stat(&(0x7f0000000280)='\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r2, 0x0) r3 = getuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r4, 0xffffffffffffffff) fcntl$setstatus(r1, 0x4, 0x2000) setresuid(r2, r0, r3) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) ioprio_set$uid(0x3, r5, 0x4004) setresuid(0xffffffffffffffff, 0x0, 0x0) setresuid(r3, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @private1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fork() 20:38:42 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 20:38:42 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1695.806261] device wlan1 entered promiscuous mode [ 1695.845285] device wlan1 left promiscuous mode 20:38:42 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 20:38:42 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 20:38:42 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 20:38:42 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:42 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 20:38:42 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="e7ffffff0f00000000000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) r6 = syz_genetlink_get_family_id$batadv(0x0, r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x86, 0xd, "f97010a86b5b6bd93a9076"}, @lsrr={0x83, 0x1f, 0x9e, [@dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010102, @empty, @multicast2, @loopback, @multicast1, @remote]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0xc0}, 0x8000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff7000/0x1000)=nil) 20:38:42 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff7000/0x1000)=nil) 20:38:42 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 20:38:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0xd0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r2) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, r2) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff7000/0x1000)=nil) 20:38:42 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1696.403086] device lo entered promiscuous mode 20:38:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff7000/0x1000)=nil) ftruncate(r0, 0x0) 20:38:43 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:38:43 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1696.525184] device lo left promiscuous mode 20:38:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x78}) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup(r1) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)=@getpolicy={0x108, 0x15, 0x2, 0x70bd27, 0x25dfdbff, {{@in=@multicast1, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x87, r2, r3}, 0x6e6bb9, 0x2}, [@algo_aead={0x8c, 0x12, {{'rfc7539esp(cbc-aes-ce,sha224-ce)\x00'}, 0x200, 0x60, "a3f5e69e83c849545068c65e8c08ba2cf68cc0d1cad9a68aea4dea38ab91bac99be493041d0aaa8671adcb31f510f7adb3f57611cf1a30e3d9564f44757ee210"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e21, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @tfcpad={0x8, 0x16, 0x5}, @extra_flags={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) getgroups(0x6, &(0x7f0000000080)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00]) fchown(r1, r3, r4) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x118, 0x23, 0x304, 0x70bd2b, 0x25dfdbfb, {0x5}, [@typed={0x8, 0x65, 0x0, 0x0, @uid=r3}, @generic="f757a0d467c2467cbf03e0d9e10cd91271f28812fca04e2d4e5b43e7a8b361e9c900f81e680bdb11017eb7b5c7ef1ee405eff33b5f246fcd99977243f2512394bc6dd7fefae54bc215dcd39f089ffc2379e6fe8cd26b17660a5ddffd63629ac4eae85f7ce552ec5bfc82cc989bf8254952fa360c0749d6d110f3667b15864072cd2f5f88362191feb0ae09049b21145f8628a9d12a0d4655e7381b48ea86964cc5c955e27359c869b86ff933a9dbe457bde24169ccdd632c1f0fa0b193af493f4d396558372307c65bfec16632ff0ab0bd47354c2f3a83dd", @nested={0x24, 0x63, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0xfffffff7}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x29, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0xfffffff9}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000800) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff7000/0x1000)=nil) 20:38:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="409156585aa8dbfa48931fc20a1542ffd55db5", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) r6 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xe7, 0x4, 0x50, 0x7f, 0x0, 0x7d, 0x5584, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x465, 0x80000001, 0x4, 0x2, 0x1f, 0xe62c, 0x2a8, 0x0, 0xffc, 0x0, 0x7}, 0x0, 0xa, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r7) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x2}) getpid() r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r8) 20:38:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="409156585aa8dbfa48931fc20a1542ffd55db5", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) r6 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xe7, 0x4, 0x50, 0x7f, 0x0, 0x7d, 0x5584, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x465, 0x80000001, 0x4, 0x2, 0x1f, 0xe62c, 0x2a8, 0x0, 0xffc, 0x0, 0x7}, 0x0, 0xa, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r7) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x2}) getpid() r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r8) 20:38:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:38:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:38:56 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7fffdf003000, 0x3, &(0x7f0000ff7000/0x1000)=nil) 20:38:56 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:38:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="409156585aa8dbfa48931fc20a1542ffd55db5", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) r6 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xe7, 0x4, 0x50, 0x7f, 0x0, 0x7d, 0x5584, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x465, 0x80000001, 0x4, 0x2, 0x1f, 0xe62c, 0x2a8, 0x0, 0xffc, 0x0, 0x7}, 0x0, 0xa, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r7) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x2}) getpid() r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r8) 20:38:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ff7000/0x1000)=nil) 20:38:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="17eac6e3aff041010a03327cb2b31dc3a2b66065430bfaaedb8963dc29f8d0b2dc9ceb0451504fc673b4c22a640c86a621cdf3859ae9a340c0a70aa71c22f6a609931bfea1f6504f515fa2944ccab9a8d4186d5ee32de7751ffc35bd8b7c1e4b308cba9af78364f5ffece27213c90744118656086e9a78c53a0a8ed54256cfce3d2dde568952d8fbb999", 0x8a, 0x2}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) splice(r4, &(0x7f0000000040)=0x7ff, r5, &(0x7f0000000300)=0x7, 0x40, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 20:38:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:39:07 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:39:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/ata_device', 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:39:07 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/ata_device', 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:39:07 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:39:07 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/ata_device', 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:39:07 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/ata_device', 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:39:07 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:39:08 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/ata_device', 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:39:08 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:39:08 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/ata_device', 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x2000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180), 0x4) 20:39:08 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:39:08 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xff, 0x9, 0x6, 0x0, 0x0, 0x10020, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x71}, 0x12, 0x8000, 0x3, 0x1, 0x0, 0x8, 0x2, 0x0, 0xa2b80000, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r0, 0x9) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)) lseek(r1, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={0x0, "a66cb98e93196a8dc998d8ebfe459ed0"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) close(r1) 20:39:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(j\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffff000000000010001100000008000300", @ANYRES32], 0x28}}, 0x50) 20:39:08 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25, 0xfffffffffffffffc}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40280, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 20:39:08 executing program 7: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x57, 0x4, 0x6, 0xff, 0x0, 0x2, 0x8014, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x1000, 0x7fff, 0x0, 0x6, 0x5, 0x1000, 0x8, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xa, r1, 0x0) ftruncate(0xffffffffffffffff, 0x8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0xc1b2, 0xfffffffffffffeff, 0xffffffffffffff38, 0x9, 0x5, 0x5, 0x8}, &(0x7f0000001400)={0x0, 0x9, 0x4ffb, 0x7, 0x0, 0x40, 0x6}, &(0x7f0000001440)={0xe5, 0x38c00000, 0x0, 0x6, 0xfffffffffffffffe, 0x401, 0x81, 0x3}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) pipe(&(0x7f0000000180)) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0x0, 0x0) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r4, &(0x7f0000001380)) fchmod(0xffffffffffffffff, 0x30) close_range(r3, r0, 0x0) mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x0, 0xfe2d, 0x0, 0x1d}}) unshare(0x48020200) 20:39:08 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd6096153f00082c0020010000000000000000ff0200000000000000000000000000018f00907800"/62], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r0 = fork() r1 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) dup(r1) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'veth0_to_hsr\x00'}) ptrace(0x10, r0) ptrace$cont(0x18, r0, 0x8, 0xb3e) waitid(0x2, r0, &(0x7f0000000040), 0xb, &(0x7f00000000c0)) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000380)) [ 1721.698221] FAULT_INJECTION: forcing a failure. [ 1721.698221] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.699658] CPU: 1 PID: 9776 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1721.700450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1721.701398] Call Trace: [ 1721.701714] dump_stack+0x107/0x167 [ 1721.702091] should_fail.cold+0x5/0xa [ 1721.702499] should_failslab+0x5/0x20 [ 1721.702891] kmem_cache_alloc_bulk+0x4b/0x320 [ 1721.703354] io_submit_sqes+0x6f76/0x85c0 [ 1721.703790] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1721.704294] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1721.704804] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1721.705299] ? lock_downgrade+0x6d0/0x6d0 [ 1721.705727] ? find_held_lock+0x2c/0x110 [ 1721.706144] ? io_submit_sqes+0x85c0/0x85c0 [ 1721.706596] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1721.707091] ? wait_for_completion_io+0x270/0x270 [ 1721.707594] ? rcu_read_lock_any_held+0x75/0xa0 [ 1721.708080] ? vfs_write+0x354/0xa70 [ 1721.708470] ? fput_many+0x2f/0x1a0 [ 1721.708851] ? ksys_write+0x1a9/0x260 [ 1721.709252] ? __ia32_sys_read+0xb0/0xb0 [ 1721.709679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1721.710224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1721.710783] do_syscall_64+0x33/0x40 [ 1721.711193] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1721.711777] RIP: 0033:0x7f15c8c78b19 [ 1721.712188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.714451] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1721.715283] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1721.716081] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1721.716884] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1721.717761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.718694] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:39:08 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:39:08 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)=@getpolicy={0x108, 0x15, 0x2, 0x70bd27, 0x25dfdbff, {{@in=@multicast1, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x87, r1, r2}, 0x6e6bb9, 0x2}, [@algo_aead={0x8c, 0x12, {{'rfc7539esp(cbc-aes-ce,sha224-ce)\x00'}, 0x200, 0x60, "a3f5e69e83c849545068c65e8c08ba2cf68cc0d1cad9a68aea4dea38ab91bac99be493041d0aaa8671adcb31f510f7adb3f57611cf1a30e3d9564f44757ee210"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e21, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @tfcpad={0x8, 0x16, 0x5}, @extra_flags={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) getgroups(0x6, &(0x7f0000000080)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00]) fchown(0xffffffffffffffff, r2, r3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0xfffffffffffffff7, 0x8, &(0x7f0000000900)=[{&(0x7f0000000280)="25408f30f8b92ecd635fb8aa991c66de5c13b5dfbcfa76ac5fdb34afcc25154aaaf0f83aecb18cdb34ac3ff819", 0x2d, 0xfa}, {&(0x7f00000002c0)="c4c42fd1bd509a74f8a78d9ecd8ed00f51a75ceb471d6b0eb590aa0135faab26e33363c86295a2a677916fd355381efd4764d5fbfa101ef8e6f3f823f576fff9a0b76bf1d26f0caab281e4c7fae362885057c54acf405efbda2b63bacae7aa3b178b7e41533b7de83c3ad204d4520ffb595aa565ce569800d18c9f0796b61844b2ab649bb4ae5b27b787b981401c7478031dc0e76e5122765645f44cd967689a794dfb6e35a24ce906854d7f609a0666367e1176d7f9cf66f7ac5f7277bfe21bc812baa5", 0xc4, 0x100}, {&(0x7f00000004c0)="fa374c4f11ab74263f79dd195ffbbc2cdd57ad52682340c076c0b3d0a2cc3e6335cd96329a38b41124bca56af256f13883aff5a6e1abc9f90eee78dd93958e84819f8ad6892a38acb1b677976f341706a4ef0c7ce501837e65bb76fecf2d5c6a7097b84475cdfdd7c5f0b6bbda5dcb19384e00952066c93000cedb6a8b6e72765e9ea7d62535b1bc7b1fbd08a47bdf3ac1b977baac75a3d40488202f95d4155eb5915ea08ae91cfcd429c683aec91c9bbac89d7b77f64a442c859b385cd12c3dc2e5e6", 0xc3, 0x2}, {&(0x7f0000000bc0)="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", 0x125, 0x66}, {&(0x7f00000005c0)="3eac9a42f78904fa35c2422b67336816e4f6a3c8973f70f1b9062fa72fde0bf07cd80ea4bdafc347fe5d1edae044b92e178222545ae2e23b276b0d65a35002ada4ea060165ca550606e9dbdbcacca5c14a26628286143d38eb22626c06f7f30256f017649543486e0ad10a1e1797bdc040123db1da970a0f0adc759203534bb29e7ba1", 0x83, 0x9}, {&(0x7f0000000680)="0f015173f05a62256c8e307fc7a33dbc859e3e8e18c26a8518528a1f5be5f00b426a6d7edb928fab0137446cf482e7f99855afd3f7ad9b7e25674eec303d3e469d1c0ddf02bba1c36f579c1554ca4b7631c09bd6acefae998e4bb8abe4a82f3854ab7057b0ef7cfea432396517b1ad46771fc12633a1f659eac8028dba7f2d7dca71d537a72b52a5a347a26a00c3dc508a54e50d53c6eed79ed75e8e026a2805564052a3044a6959f16da079dca19facb086fd210530ee", 0xb7, 0x7fffffff}, {&(0x7f0000000740)="9da79e5761266a4955f8575702d8b5fb90bd8794c5b4b0c304f5181599bfd875f8eb973ea4a5b8ce888799ac49ed5e174eef1f9b16237bb6100cde36027ba7c320ea60002a11a255367bb5bf9b57a3ba4d2f671aa3f0293d8ff7fca2f62541e593abd4ef4b94e2278dbdcd695a1c9e67c6efe01053df1aafdb970c59cbaa144699233fcccfcbd76102d3306a88eb05dcc2141257232e403dfbcc29c95316af3249ce06ee3487557f3fe7acba39679a42e188b8c287601687df565dd4a2", 0xbd, 0x98}, {&(0x7f0000000800)="8a23d5d225edbc05c3efe544a53a4169c91da2b104b69d3342f187c54b2760c59eb2d6c87beb49c2bbb6b5c682f1fd8c98559f0babebbe879f72726884fdcb7514327f601f06c05cacfc815f77cfdba0d3048c4c825b52389af726f8f0f0aaaaab538b9c35880652c6071c28caa22e207dc77345375cf4484b7cf12e34d9c92da59e0b6beec17229e6b429c43a62adcffca9569c450ac5a1417e9618fc0ddcee178cc0160c3adbe147a35199a3c8f2a185f98c230016d765eda885de869dd093f25761b52e1669d686", 0xc9, 0x5}], 0x1800010, &(0x7f0000000b00)={[{@nr_blocks={'nr_blocks', 0x3d, [0x9676326c31a2dddc]}}, {@uid={'uid', 0x3d, r2}}, {@gid={'gid', 0x3d, 0xee01}}], [{@smackfshat={'smackfshat', 0x3d, '-!$\xb5*:-'}}, {@audit}, {@fowner_lt={'fowner<', r4}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@audit}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) getsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000000c0), &(0x7f0000000180)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f00000000c0)='\x00', 0x3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 20:39:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000080)=0x401, 0x4) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x200}}, './file0\x00'}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @local, 0xfffffff9}, 0x1c) 20:39:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e000040000000000000000000"], 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)=""/270, 0x10e}], 0x1, 0x0, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000001740)={0x2, 0x4e21, @empty}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d2e2c4f4b4861777938e37cc6aa5e6317b632ef4fac2ae3a0bfa05063787f5f99462ff96073b36d0dfeec64c8612182a77458d9f01962ccf1fee60a7f2ca8ce21c049939c62508d63a620f81489d3173a184846ac17b880161bbed8d48d64550cd6802e3ba67c054c9fe640e32a3dbec96f8e7a2ed03feaaabb19f38ae4793f9886a30398e821982c8bb6e37ea10c78eb52c2a5ec2880fe0ebf0945ade0ab3646c04d11e50b13cd13972df1ac7cbe8a99950971"], 0xfdef) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff) r4 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r3}) keyctl$chown(0x4, r3, 0xee01, r4) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x4, 0x3}, 0x6) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$setown(r5, 0x8, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x78}) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x1, 0x4, 0x2, 0x9, 0x0, 0x0, 0x40000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040)}, 0x10000, 0x1, 0x6, 0x7, 0x2, 0x8, 0x97, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xa, 0xffffffffffffffff, 0x8) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000140)={{}, {0x1, 0x1}, [{0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x2, 0xffffffffffffffff}], {0x4, 0x6}, [{}, {0x8, 0x0, r4}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x7}}, 0x4c, 0x2) unshare(0x48020200) 20:39:22 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) close(r0) sendfile(r0, r1, &(0x7f0000000080)=0x7fffffff, 0x7) 20:39:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:39:22 executing program 2: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x57, 0x4, 0x6, 0xff, 0x0, 0x2, 0x8014, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x1000, 0x7fff, 0x0, 0x6, 0x5, 0x1000, 0x8, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xa, r1, 0x0) ftruncate(0xffffffffffffffff, 0x8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0xc1b2, 0xfffffffffffffeff, 0xffffffffffffff38, 0x9, 0x5, 0x5, 0x8}, &(0x7f0000001400)={0x0, 0x9, 0x4ffb, 0x7, 0x0, 0x40, 0x6}, &(0x7f0000001440)={0xe5, 0x38c00000, 0x0, 0x6, 0xfffffffffffffffe, 0x401, 0x81, 0x3}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) pipe(&(0x7f0000000180)) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0x0, 0x0) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r4, &(0x7f0000001380)) fchmod(0xffffffffffffffff, 0x30) close_range(r3, r0, 0x0) mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x0, 0xfe2d, 0x0, 0x1d}}) unshare(0x48020200) 20:39:22 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x208000, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000280)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @random="23bea9b0eeb1"}, 0x40, {0x2, 0x4e24, @private=0xa010101}, 'macvlan1\x00'}) r2 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x140, 0x69, 0x12}, 0x18) ftruncate(r2, 0xfffffffffffffffb) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x0, @remote}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [{0x20, ':!(}[\\,#'}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, 'batadv_slave_1\x00'}], 0xa, "423d6517e6548042"}, 0x32) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, 0xeab299e8c791d6d7, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)='batadv_slave_1\x00', 0x260d, 0xb82c, 0x25c}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) 20:39:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:39:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x51}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x78}) close(r1) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) syz_mount_image$nfs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {r2}}, './file1\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x30, r5, 0x8000000) r6 = socket$inet(0x2, 0x3, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) execveat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='*+#:\x00', &(0x7f00000001c0)='nfs\x00', &(0x7f0000000240)='+\'*\\\x00', &(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='nfs\x00', &(0x7f0000000340)='nfs\x00', &(0x7f0000000380)='nfs\x00'], &(0x7f0000000580)=[&(0x7f0000000440)='\x00', &(0x7f0000000480)='nfs\x00', &(0x7f00000004c0)='nfs\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='+/#\xb9\\/)(*\x00'], 0x100) 20:39:22 executing program 7: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x57, 0x4, 0x6, 0xff, 0x0, 0x2, 0x8014, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x1000, 0x7fff, 0x0, 0x6, 0x5, 0x1000, 0x8, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xa, r1, 0x0) ftruncate(0xffffffffffffffff, 0x8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0xc1b2, 0xfffffffffffffeff, 0xffffffffffffff38, 0x9, 0x5, 0x5, 0x8}, &(0x7f0000001400)={0x0, 0x9, 0x4ffb, 0x7, 0x0, 0x40, 0x6}, &(0x7f0000001440)={0xe5, 0x38c00000, 0x0, 0x6, 0xfffffffffffffffe, 0x401, 0x81, 0x3}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) pipe(&(0x7f0000000180)) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0x0, 0x0) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r4, &(0x7f0000001380)) fchmod(0xffffffffffffffff, 0x30) close_range(r3, r0, 0x0) mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x0, 0xfe2d, 0x0, 0x1d}}) unshare(0x48020200) 20:39:22 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xff, 0x9, 0x6, 0x0, 0x0, 0x10020, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x71}, 0x12, 0x8000, 0x3, 0x1, 0x0, 0x8, 0x2, 0x0, 0xa2b80000, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r0, 0x9) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)) lseek(r1, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={0x0, "a66cb98e93196a8dc998d8ebfe459ed0"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) close(r1) 20:39:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:39:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f0000000280)=ANY=[]) mount$9p_unix(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100840, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d756e69782c63616368653d6d6d61702c61707072616973652c686173682c61756469742c61707072616973652c6d6561737572652c7375626a5f726f6c653d65787434002c61756469742c0065bf9b34001b1d8be5e98a88d8c95be83b6f"]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x22080, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ftruncate(r1, 0x3) r2 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getpeername(r2, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f00000003c0)=0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r3, 0x0, 0x20d315) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) [ 1736.447584] FAULT_INJECTION: forcing a failure. [ 1736.447584] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.450131] CPU: 0 PID: 9827 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1736.451527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.453232] Call Trace: [ 1736.453776] dump_stack+0x107/0x167 [ 1736.454526] should_fail.cold+0x5/0xa [ 1736.455304] ? create_object.isra.0+0x3a/0xa20 [ 1736.456265] should_failslab+0x5/0x20 [ 1736.457175] kmem_cache_alloc+0x5b/0x310 [ 1736.458017] create_object.isra.0+0x3a/0xa20 [ 1736.458910] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1736.459968] kmem_cache_alloc_bulk+0x168/0x320 [ 1736.460895] io_submit_sqes+0x6f76/0x85c0 [ 1736.461744] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1736.462742] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1736.463760] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1736.464739] ? lock_downgrade+0x6d0/0x6d0 [ 1736.465572] ? find_held_lock+0x2c/0x110 [ 1736.466400] ? io_submit_sqes+0x85c0/0x85c0 [ 1736.467287] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1736.468286] ? wait_for_completion_io+0x270/0x270 [ 1736.469259] ? rcu_read_lock_any_held+0x75/0xa0 [ 1736.470194] ? vfs_write+0x354/0xa70 [ 1736.470954] ? fput_many+0x2f/0x1a0 [ 1736.471699] ? ksys_write+0x1a9/0x260 [ 1736.472471] ? __ia32_sys_read+0xb0/0xb0 [ 1736.473299] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1736.474356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1736.475399] do_syscall_64+0x33/0x40 [ 1736.476175] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1736.477210] RIP: 0033:0x7f15c8c78b19 [ 1736.477967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.481693] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1736.483230] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1736.484705] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1736.486126] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.487591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.489035] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:39:23 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0xf1, 0x7f, 0x0, 0x0, 0x60, 0x3580, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x430, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xb) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='\x00', 0x0, 0xffffffffffffffff) ioprio_get$pid(0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x322c3, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x78}) close(r1) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x2, 0x6, 0x0, 0xcf, 0x0, 0x3ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000340), 0x6}, 0x1000, 0xfffffffffffffffc, 0x5, 0x9, 0x4, 0x7ff, 0xc1c, 0x0, 0x8, 0x0, 0xac}, 0x0, 0xffffffffffffffff, r1, 0xa) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000000200)='./file0/file0\x00', 0x200040, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000640)=""/4096, &(0x7f0000000180)=0x1000) memfd_create(&(0x7f0000000040)='$:#[*\':-^#\'\x00', 0x0) r2 = creat(&(0x7f0000000480)='./file0\x00', 0xa0) statx(r2, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x80, &(0x7f0000000240)) syz_io_uring_setup(0x4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000380)) setpriority(0x1, 0x0, 0x0) 20:39:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:39:23 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x78}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x78}) close(r2) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x50b302, 0x0) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) read(r4, &(0x7f0000000180)=""/30, 0x1e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x81, 0x7, 0x3d, 0x6, 0x0, 0x7fff, 0x180, 0x13, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0xdfe9, 0x3ff}, 0x400, 0x8001, 0x7, 0x8, 0x5, 0x1, 0x6, 0x0, 0x40000000, 0x0, 0x8}, r5, 0xffffffffffffffff, r0, 0x3) r6 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x800) readv(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1) ftruncate(r6, 0x7f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000004c0)) 20:39:23 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1736.875437] FAULT_INJECTION: forcing a failure. [ 1736.875437] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.878479] CPU: 0 PID: 9845 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1736.879863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.881512] Call Trace: [ 1736.882050] dump_stack+0x107/0x167 [ 1736.882800] should_fail.cold+0x5/0xa [ 1736.883572] ? create_object.isra.0+0x3a/0xa20 [ 1736.884593] should_failslab+0x5/0x20 [ 1736.885356] kmem_cache_alloc+0x5b/0x310 [ 1736.886176] ? mark_held_locks+0x9e/0xe0 [ 1736.886993] create_object.isra.0+0x3a/0xa20 [ 1736.887884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1736.888921] kmem_cache_alloc_bulk+0x168/0x320 [ 1736.889843] io_submit_sqes+0x6f76/0x85c0 [ 1736.890678] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1736.891679] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1736.892683] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1736.893655] ? lock_downgrade+0x6d0/0x6d0 [ 1736.894483] ? find_held_lock+0x2c/0x110 [ 1736.895302] ? io_submit_sqes+0x85c0/0x85c0 [ 1736.896192] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1736.897162] ? wait_for_completion_io+0x270/0x270 [ 1736.898131] ? rcu_read_lock_any_held+0x75/0xa0 [ 1736.899059] ? vfs_write+0x354/0xa70 [ 1736.899818] ? fput_many+0x2f/0x1a0 [ 1736.900547] ? ksys_write+0x1a9/0x260 [ 1736.901333] ? __ia32_sys_read+0xb0/0xb0 [ 1736.902170] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1736.903228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1736.904293] do_syscall_64+0x33/0x40 [ 1736.905051] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1736.906089] RIP: 0033:0x7f15c8c78b19 [ 1736.906842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.910563] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1736.912071] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1736.913493] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1736.914921] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.916359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.917790] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:39:23 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) fgetxattr(r0, 0x0, &(0x7f00000000c0)=""/150, 0x96) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sync_file_range(r1, 0x3, 0x7, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000003c0)=0x101) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}, 0x200000}], 0x7ffff000, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffffffff, &(0x7f0000000380)=0x4, 0x16, 0x0) 20:39:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:39:23 executing program 2: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x10, 0x0, 0x0, 0x5, 0x0, 0x8c7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x9) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) [ 1737.108640] audit: type=1400 audit(1699735163.647:16): avc: denied { create } for pid=9858 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 [ 1737.122008] audit: type=1400 audit(1699735163.660:17): avc: denied { connect } for pid=9858 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 [ 1737.136630] audit: type=1400 audit(1699735163.667:18): avc: denied { ioctl } for pid=9858 comm="syz-executor.1" path="socket:[34154]" dev="sockfs" ino=34154 ioctlcmd=0x9413 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 [ 1737.147649] audit: type=1400 audit(1699735163.668:19): avc: denied { write } for pid=9858 comm="syz-executor.1" laddr=fe80::b lport=55202 faddr=fe80:: scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 [ 1737.191469] FAULT_INJECTION: forcing a failure. [ 1737.191469] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.194248] CPU: 1 PID: 9860 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1737.195641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1737.197318] Call Trace: [ 1737.197996] dump_stack+0x107/0x167 [ 1737.198930] should_fail.cold+0x5/0xa [ 1737.199802] ? create_object.isra.0+0x3a/0xa20 [ 1737.200758] should_failslab+0x5/0x20 [ 1737.201550] kmem_cache_alloc+0x5b/0x310 [ 1737.202384] ? mark_held_locks+0x9e/0xe0 [ 1737.203211] create_object.isra.0+0x3a/0xa20 [ 1737.204137] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1737.205168] kmem_cache_alloc_bulk+0x168/0x320 [ 1737.206199] io_submit_sqes+0x6f76/0x85c0 [ 1737.207185] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1737.208241] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1737.209318] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1737.210306] ? lock_downgrade+0x6d0/0x6d0 [ 1737.211220] ? find_held_lock+0x2c/0x110 [ 1737.212065] ? io_submit_sqes+0x85c0/0x85c0 [ 1737.212954] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1737.213950] ? wait_for_completion_io+0x270/0x270 [ 1737.214931] ? rcu_read_lock_any_held+0x75/0xa0 [ 1737.215930] ? vfs_write+0x354/0xa70 [ 1737.216690] ? fput_many+0x2f/0x1a0 [ 1737.217431] ? ksys_write+0x1a9/0x260 [ 1737.218215] ? __ia32_sys_read+0xb0/0xb0 [ 1737.219043] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1737.220122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1737.221177] do_syscall_64+0x33/0x40 [ 1737.221943] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1737.222984] RIP: 0033:0x7f15c8c78b19 [ 1737.223763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.227500] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1737.229144] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1737.230707] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1737.232244] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.233746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.235318] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 [ 1739.294784] Bluetooth: hci7: command 0x0405 tx timeout 20:39:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0xf1, 0x7f, 0x0, 0x0, 0x60, 0x3580, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x430, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xb) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='\x00', 0x0, 0xffffffffffffffff) ioprio_get$pid(0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x322c3, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x78}) close(r1) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x2, 0x6, 0x0, 0xcf, 0x0, 0x3ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000340), 0x6}, 0x1000, 0xfffffffffffffffc, 0x5, 0x9, 0x4, 0x7ff, 0xc1c, 0x0, 0x8, 0x0, 0xac}, 0x0, 0xffffffffffffffff, r1, 0xa) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000000200)='./file0/file0\x00', 0x200040, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000640)=""/4096, &(0x7f0000000180)=0x1000) memfd_create(&(0x7f0000000040)='$:#[*\':-^#\'\x00', 0x0) r2 = creat(&(0x7f0000000480)='./file0\x00', 0xa0) statx(r2, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x80, &(0x7f0000000240)) syz_io_uring_setup(0x4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000380)) setpriority(0x1, 0x0, 0x0) 20:39:38 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:39:38 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:39:38 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xff, 0x9, 0x6, 0x0, 0x0, 0x10020, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x71}, 0x12, 0x8000, 0x3, 0x1, 0x0, 0x8, 0x2, 0x0, 0xa2b80000, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r0, 0x9) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)) lseek(r1, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={0x0, "a66cb98e93196a8dc998d8ebfe459ed0"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) close(r1) 20:39:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0xf1, 0x7f, 0x0, 0x0, 0x60, 0x3580, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x430, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xb) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='\x00', 0x0, 0xffffffffffffffff) ioprio_get$pid(0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x322c3, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x78}) close(r1) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x2, 0x6, 0x0, 0xcf, 0x0, 0x3ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000340), 0x6}, 0x1000, 0xfffffffffffffffc, 0x5, 0x9, 0x4, 0x7ff, 0xc1c, 0x0, 0x8, 0x0, 0xac}, 0x0, 0xffffffffffffffff, r1, 0xa) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) open(&(0x7f0000000200)='./file0/file0\x00', 0x200040, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000640)=""/4096, &(0x7f0000000180)=0x1000) memfd_create(&(0x7f0000000040)='$:#[*\':-^#\'\x00', 0x0) r2 = creat(&(0x7f0000000480)='./file0\x00', 0xa0) statx(r2, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x80, &(0x7f0000000240)) syz_io_uring_setup(0x4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000380)) setpriority(0x1, 0x0, 0x0) 20:39:38 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1000f40, &(0x7f0000000140)=ANY=[]) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) statfs(&(0x7f0000001c80)='./file0\x00', &(0x7f0000002e00)=""/255) r1 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)={0x40402, 0x32, 0x16}, 0x18) mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x40) 20:39:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x5, 0x8, 0x0, 0x7, 0x1ff, 0x0, 0x7, 0x0, 0x60}, r2, 0x0, r1, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in=@multicast2=0xe0000a00, @in=@multicast1}, {@in=@empty}, @in6=@local}}, 0xf0}}, 0x0) 20:39:39 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000100)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="080100001500020027bd7000ffdbdf25e0000001000000000000000000000000fe8000000000000000000000000000bb4e2000004e2300000a00002087000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="b96b6e00020000008c00120072666337353339657370286362632d6165732d63652c7368613232342d63652900000000000000000000000000000000000000000000000000000000000000000002000060ef0000a3f5e646eff07841eec00ea5d23b9e83c881e1a352c55234d4ba2cb68cc0d1cad9a68aea4dea38878305928e566f071d0aaa8671ad03000000f7adb3f57611cf1a30e3d9564f44757ee2101c000400fdff4e244e210000fe88000000000000000000000000010108001600050000000800180000000000"], 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) getgroups(0x6, &(0x7f0000000080)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00]) fchown(0xffffffffffffffff, r2, r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x30c, 0x25, 0x100, 0x70bd2d, 0x25dfdbfb, {0x20}, [@generic="f05ba4d57864104e71bb3b2ce9601f10aac4753b25c47baf53b361f422421b0652e7c7cb1ddbce42071c59342d8b1f1f4bff15f289ddb2e4a60dbe122980f57dff049e01867b52bd93af3473321ba97da5d7465bc48b753496765c133a5049cbe20c78ed69d329", @typed={0xc, 0x44, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="73049fe3fd4a9f064f6ed0807ba0a2f7", @nested={0x228, 0x34, 0x0, 0x1, [@generic="a8e1719fae0e003c7eb828e0033aa5f7a91e481bbb4b77a3fc7018ae00aa99832287e5ff3ec861a7573cb26502810b1a72680e9212197c74b3c45973d26acd36358a4a55c0f8ab17a3a77b5654954eafddda39ea84116cd07868de0de08873e0aa371fb8b1d3d7b0b7cbc802c55f3416dd9deaa608904661053f4455f7797f528844665c0b9a438ae231ef2088e3e31426199c5b2879cbd9c2871ebcc2a69c7bbb247c6369ae07d32b09010269c1188689b069e15653016a6714c07969be", @generic="994063242d154fc763dec526287885b7060000002e0288d8ee0334aa1a252210c7e2fe9c1e238a43ca16064acef88a88a00a97d13f52b2bacbe93c549cecb7b53b23d15e3567191752342cbaffff7f000000006acde7233e82b6d1f3c1b4774f98eca657057bff", @generic="f5aaad90eeb320151defb92910a52497c1eacfdad720b8fe8bc724683920a9a6897f5bf3f4034f807b83df5992631ba969800a13fefea6b74d4988c2a97527b5c0a130ea251d77fe4e228458749dd69a7ad2e30910b5d05bed45296fd723770a1651283df52bd16a1c8c4eedda2d17ef10d01cfaa60de6bf7027d094dc169fca5a0aaba9a36d1150db7d53b3731088f2011777a58dd83c28bc71000793dc5c697714dc1be53ead082e44d2b9e4d02c39992d187a62ccb5", @generic="e4343a48d87b9b22c18cc94669c35f9870c7cf086132e1fb17b9f9f38f4ce8aa88ce23101107fdea", @typed={0x6, 0x3, 0x0, 0x0, @str='\\\x00'}, @typed={0x8, 0x48, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x16, 0x0, 0x0, @pid}, @typed={0x8, 0x2c, 0x0, 0x0, @uid=r2}]}, @generic="5fe6eba3d12716e1cc828539ab6450fa89796510290c81cf32ad1a00624a794a07ee0d7f5ccf16cd5c20275d747a745ff95408e80f19"]}, 0x30c}, 0x1, 0x0, 0x0, 0x80}, 0x4) [ 1752.516188] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1752.529700] tmpfs: Unknown parameter '' [ 1752.623626] FAULT_INJECTION: forcing a failure. [ 1752.623626] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.626556] CPU: 1 PID: 9889 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1752.627949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.629700] Call Trace: [ 1752.630230] dump_stack+0x107/0x167 [ 1752.630981] should_fail.cold+0x5/0xa [ 1752.631743] ? create_object.isra.0+0x3a/0xa20 [ 1752.632698] should_failslab+0x5/0x20 [ 1752.633463] kmem_cache_alloc+0x5b/0x310 [ 1752.634273] ? mark_held_locks+0x9e/0xe0 [ 1752.635092] create_object.isra.0+0x3a/0xa20 [ 1752.635989] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.637016] kmem_cache_alloc_bulk+0x168/0x320 [ 1752.637933] io_submit_sqes+0x6f76/0x85c0 [ 1752.638781] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1752.639767] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1752.640789] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1752.641755] ? lock_downgrade+0x6d0/0x6d0 [ 1752.642580] ? find_held_lock+0x2c/0x110 [ 1752.643404] ? io_submit_sqes+0x85c0/0x85c0 [ 1752.644284] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1752.645250] ? wait_for_completion_io+0x270/0x270 [ 1752.646215] ? rcu_read_lock_any_held+0x75/0xa0 [ 1752.647142] ? vfs_write+0x354/0xa70 [ 1752.647910] ? fput_many+0x2f/0x1a0 [ 1752.648645] ? ksys_write+0x1a9/0x260 [ 1752.649409] ? __ia32_sys_read+0xb0/0xb0 [ 1752.650226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.651269] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.652317] do_syscall_64+0x33/0x40 [ 1752.653076] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1752.654108] RIP: 0033:0x7f15c8c78b19 [ 1752.654856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.658546] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1752.660052] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1752.661443] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1752.662867] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.664298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.665728] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:39:52 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@abs={0x1}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000000c0)={r2}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ec10ba84232a1a8d4486aa2daea68359e1b23e5b7c0aa316be8bdbb2d76e315a956ebbde64fcd37e6700011714476c7f"], 0x48) socket$netlink(0x10, 0x3, 0x0) mkdirat(r1, &(0x7f0000000200)='./file0/file0\x00', 0x63) unshare(0x48020200) 20:39:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x140) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) lseek(r1, 0x0, 0x2) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000200), &(0x7f0000000240)=@v2={0x3, 0x0, 0xd, 0x1, 0xc0, "adc7b25674fd9caade2dc9e4ca9beefd956128a961de370e6f79af3a5614bd4ca1c414180b5f827903708ed267f7399328cc9277760924492757dd1c64ab0f7a32fa65fb6218deb2820dae7b9b7167bd65e090a1a154614c97974328864cec60b934808b3a82c957a7aad96f813b1654932fd544a41ac0a746c04b63c62cacfe94bc1577978e7fdb71fe5bbade15c37250105332e6b0c373181529d2a2bf246732e61ee26182d3b9e1173906bc4921fb0673e82c86c6fbc65c771ec4645e4d9a"}, 0xc9, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) lseek(r4, 0x0, 0x0) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) 20:39:52 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x1c, 0x2, 0x5, "e94a778c76633ed225f974ca1274fbf1", "2f01e5aa739aaa"}, 0x1c, 0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) close_range(0xffffffffffffffff, r2, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r4 = open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x100) timerfd_create(0x0, 0x0) unshare(0x48020200) dup2(r2, r4) 20:39:52 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000100)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="080100001500020027bd7000ffdbdf25e0000001000000000000000000000000fe8000000000000000000000000000bb4e2000004e2300000a00002087000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="b96b6e00020000008c00120072666337353339657370286362632d6165732d63652c7368613232342d63652900000000000000000000000000000000000000000000000000000000000000000002000060ef0000a3f5e646eff07841eec00ea5d23b9e83c881e1a352c55234d4ba2cb68cc0d1cad9a68aea4dea38878305928e566f071d0aaa8671ad03000000f7adb3f57611cf1a30e3d9564f44757ee2101c000400fdff4e244e210000fe88000000000000000000000000010108001600050000000800180000000000"], 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) getgroups(0x6, &(0x7f0000000080)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00]) fchown(0xffffffffffffffff, r2, r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x30c, 0x25, 0x100, 0x70bd2d, 0x25dfdbfb, {0x20}, [@generic="f05ba4d57864104e71bb3b2ce9601f10aac4753b25c47baf53b361f422421b0652e7c7cb1ddbce42071c59342d8b1f1f4bff15f289ddb2e4a60dbe122980f57dff049e01867b52bd93af3473321ba97da5d7465bc48b753496765c133a5049cbe20c78ed69d329", @typed={0xc, 0x44, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="73049fe3fd4a9f064f6ed0807ba0a2f7", @nested={0x228, 0x34, 0x0, 0x1, [@generic="a8e1719fae0e003c7eb828e0033aa5f7a91e481bbb4b77a3fc7018ae00aa99832287e5ff3ec861a7573cb26502810b1a72680e9212197c74b3c45973d26acd36358a4a55c0f8ab17a3a77b5654954eafddda39ea84116cd07868de0de08873e0aa371fb8b1d3d7b0b7cbc802c55f3416dd9deaa608904661053f4455f7797f528844665c0b9a438ae231ef2088e3e31426199c5b2879cbd9c2871ebcc2a69c7bbb247c6369ae07d32b09010269c1188689b069e15653016a6714c07969be", @generic="994063242d154fc763dec526287885b7060000002e0288d8ee0334aa1a252210c7e2fe9c1e238a43ca16064acef88a88a00a97d13f52b2bacbe93c549cecb7b53b23d15e3567191752342cbaffff7f000000006acde7233e82b6d1f3c1b4774f98eca657057bff", @generic="f5aaad90eeb320151defb92910a52497c1eacfdad720b8fe8bc724683920a9a6897f5bf3f4034f807b83df5992631ba969800a13fefea6b74d4988c2a97527b5c0a130ea251d77fe4e228458749dd69a7ad2e30910b5d05bed45296fd723770a1651283df52bd16a1c8c4eedda2d17ef10d01cfaa60de6bf7027d094dc169fca5a0aaba9a36d1150db7d53b3731088f2011777a58dd83c28bc71000793dc5c697714dc1be53ead082e44d2b9e4d02c39992d187a62ccb5", @generic="e4343a48d87b9b22c18cc94669c35f9870c7cf086132e1fb17b9f9f38f4ce8aa88ce23101107fdea", @typed={0x6, 0x3, 0x0, 0x0, @str='\\\x00'}, @typed={0x8, 0x48, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x16, 0x0, 0x0, @pid}, @typed={0x8, 0x2c, 0x0, 0x0, @uid=r2}]}, @generic="5fe6eba3d12716e1cc828539ab6450fa89796510290c81cf32ad1a00624a794a07ee0d7f5ccf16cd5c20275d747a745ff95408e80f19"]}, 0x30c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 20:39:52 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:39:52 executing program 4: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(0xffffffffffffffff, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20d315) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00e1 \x00'/16]) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x100000001) r4 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) splice(r4, &(0x7f00000000c0)=0x9, r5, &(0x7f0000000240)=0x8001, 0x0, 0x2) 20:39:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x48, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x81, 0x6, 0xfe, 0x1f, 0x0, 0x5, 0x10, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x4, @perf_config_ext={0x5}, 0x0, 0x0, 0x7, 0x0, 0x401, 0x9, 0x0, 0x0, 0x8, 0x0, 0x401}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffe3) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x0, 0x1ee, 0x5, 0x4, 0x0, {0x0, r3}}, 0x7) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, "f2695c43faf79979fcc2000300"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000440)={0x80, 0x6, 0x240, 0xb, 0x30, "07c7d1e000"}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xdf7, &(0x7f0000000340)={0x0, 0x6246, 0x0, 0x2, 0x71}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_MADVISE={0x19, 0x7, 0x0, 0x0, 0x0, &(0x7f0000feb000/0x4000)=nil, 0x4000, 0xc, 0x0, {0x0, r3}}, 0xfa0e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000240)=@IORING_OP_CLOSE={0x13, 0x1}, 0x8) 20:39:52 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1766.495396] FAULT_INJECTION: forcing a failure. [ 1766.495396] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.497862] CPU: 1 PID: 9915 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1766.499239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.500927] Call Trace: [ 1766.501465] dump_stack+0x107/0x167 [ 1766.502212] should_fail.cold+0x5/0xa [ 1766.502989] ? create_object.isra.0+0x3a/0xa20 [ 1766.503916] should_failslab+0x5/0x20 [ 1766.504705] kmem_cache_alloc+0x5b/0x310 [ 1766.505529] ? mark_held_locks+0x9e/0xe0 [ 1766.506344] create_object.isra.0+0x3a/0xa20 [ 1766.507229] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1766.508270] kmem_cache_alloc_bulk+0x168/0x320 [ 1766.509193] io_submit_sqes+0x6f76/0x85c0 [ 1766.510033] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1766.511023] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1766.512022] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1766.512996] ? lock_downgrade+0x6d0/0x6d0 [ 1766.513835] ? io_submit_sqes+0x85c0/0x85c0 [ 1766.514706] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1766.515676] ? wait_for_completion_io+0x270/0x270 [ 1766.516667] ? ksys_write+0x13a/0x260 [ 1766.517432] ? ksys_write+0x144/0x260 [ 1766.518198] ? fput_many+0x2f/0x1a0 [ 1766.518928] ? ksys_write+0x1a9/0x260 [ 1766.519693] ? __ia32_sys_read+0xb0/0xb0 [ 1766.520623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.521703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.522745] do_syscall_64+0x33/0x40 [ 1766.523486] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1766.524538] RIP: 0033:0x7f15c8c78b19 [ 1766.525286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.528980] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1766.530509] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1766.531938] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1766.533380] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.534810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.536257] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:39:53 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:39:53 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:39:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x140) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) lseek(r1, 0x0, 0x2) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000200), &(0x7f0000000240)=@v2={0x3, 0x0, 0xd, 0x1, 0xc0, "adc7b25674fd9caade2dc9e4ca9beefd956128a961de370e6f79af3a5614bd4ca1c414180b5f827903708ed267f7399328cc9277760924492757dd1c64ab0f7a32fa65fb6218deb2820dae7b9b7167bd65e090a1a154614c97974328864cec60b934808b3a82c957a7aad96f813b1654932fd544a41ac0a746c04b63c62cacfe94bc1577978e7fdb71fe5bbade15c37250105332e6b0c373181529d2a2bf246732e61ee26182d3b9e1173906bc4921fb0673e82c86c6fbc65c771ec4645e4d9a"}, 0xc9, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) lseek(r4, 0x0, 0x0) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 1766.850491] FAULT_INJECTION: forcing a failure. [ 1766.850491] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.853276] CPU: 0 PID: 9939 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1766.854649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.856329] Call Trace: [ 1766.856865] dump_stack+0x107/0x167 [ 1766.857606] should_fail.cold+0x5/0xa [ 1766.858374] ? create_object.isra.0+0x3a/0xa20 [ 1766.859297] should_failslab+0x5/0x20 [ 1766.860068] kmem_cache_alloc+0x5b/0x310 [ 1766.860911] ? mark_held_locks+0x9e/0xe0 [ 1766.861725] create_object.isra.0+0x3a/0xa20 [ 1766.862604] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1766.863644] kmem_cache_alloc_bulk+0x168/0x320 [ 1766.864573] io_submit_sqes+0x6f76/0x85c0 [ 1766.865408] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1766.866403] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1766.867400] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1766.868391] ? lock_downgrade+0x6d0/0x6d0 [ 1766.869228] ? find_held_lock+0x2c/0x110 [ 1766.870048] ? io_submit_sqes+0x85c0/0x85c0 [ 1766.870924] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1766.871895] ? wait_for_completion_io+0x270/0x270 [ 1766.872877] ? rcu_read_lock_any_held+0x75/0xa0 [ 1766.873810] ? vfs_write+0x354/0xa70 [ 1766.874560] ? fput_many+0x2f/0x1a0 [ 1766.875296] ? ksys_write+0x1a9/0x260 [ 1766.876059] ? __ia32_sys_read+0xb0/0xb0 [ 1766.876889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.877941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.878983] do_syscall_64+0x33/0x40 [ 1766.879817] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1766.880876] RIP: 0033:0x7f15c8c78b19 [ 1766.881626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.885343] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1766.886869] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1766.888318] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1766.889747] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.891170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.892618] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:39:53 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xc0f7}, 0x0, 0x800000000000002, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) futex(0x0, 0x8b, 0x0, 0x0, &(0x7f0000000140), 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f00000000c0)={0xd, 0x9}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r2, 0x9e46, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000540)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) fork() 20:39:53 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:39:53 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000100)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="080100001500020027bd7000ffdbdf25e0000001000000000000000000000000fe8000000000000000000000000000bb4e2000004e2300000a00002087000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="b96b6e00020000008c00120072666337353339657370286362632d6165732d63652c7368613232342d63652900000000000000000000000000000000000000000000000000000000000000000002000060ef0000a3f5e646eff07841eec00ea5d23b9e83c881e1a352c55234d4ba2cb68cc0d1cad9a68aea4dea38878305928e566f071d0aaa8671ad03000000f7adb3f57611cf1a30e3d9564f44757ee2101c000400fdff4e244e210000fe88000000000000000000000000010108001600050000000800180000000000"], 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) getgroups(0x6, &(0x7f0000000080)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00]) fchown(0xffffffffffffffff, r2, r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x30c, 0x25, 0x100, 0x70bd2d, 0x25dfdbfb, {0x20}, [@generic="f05ba4d57864104e71bb3b2ce9601f10aac4753b25c47baf53b361f422421b0652e7c7cb1ddbce42071c59342d8b1f1f4bff15f289ddb2e4a60dbe122980f57dff049e01867b52bd93af3473321ba97da5d7465bc48b753496765c133a5049cbe20c78ed69d329", @typed={0xc, 0x44, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="73049fe3fd4a9f064f6ed0807ba0a2f7", @nested={0x228, 0x34, 0x0, 0x1, [@generic="a8e1719fae0e003c7eb828e0033aa5f7a91e481bbb4b77a3fc7018ae00aa99832287e5ff3ec861a7573cb26502810b1a72680e9212197c74b3c45973d26acd36358a4a55c0f8ab17a3a77b5654954eafddda39ea84116cd07868de0de08873e0aa371fb8b1d3d7b0b7cbc802c55f3416dd9deaa608904661053f4455f7797f528844665c0b9a438ae231ef2088e3e31426199c5b2879cbd9c2871ebcc2a69c7bbb247c6369ae07d32b09010269c1188689b069e15653016a6714c07969be", @generic="994063242d154fc763dec526287885b7060000002e0288d8ee0334aa1a252210c7e2fe9c1e238a43ca16064acef88a88a00a97d13f52b2bacbe93c549cecb7b53b23d15e3567191752342cbaffff7f000000006acde7233e82b6d1f3c1b4774f98eca657057bff", @generic="f5aaad90eeb320151defb92910a52497c1eacfdad720b8fe8bc724683920a9a6897f5bf3f4034f807b83df5992631ba969800a13fefea6b74d4988c2a97527b5c0a130ea251d77fe4e228458749dd69a7ad2e30910b5d05bed45296fd723770a1651283df52bd16a1c8c4eedda2d17ef10d01cfaa60de6bf7027d094dc169fca5a0aaba9a36d1150db7d53b3731088f2011777a58dd83c28bc71000793dc5c697714dc1be53ead082e44d2b9e4d02c39992d187a62ccb5", @generic="e4343a48d87b9b22c18cc94669c35f9870c7cf086132e1fb17b9f9f38f4ce8aa88ce23101107fdea", @typed={0x6, 0x3, 0x0, 0x0, @str='\\\x00'}, @typed={0x8, 0x48, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x16, 0x0, 0x0, @pid}, @typed={0x8, 0x2c, 0x0, 0x0, @uid=r2}]}, @generic="5fe6eba3d12716e1cc828539ab6450fa89796510290c81cf32ad1a00624a794a07ee0d7f5ccf16cd5c20275d747a745ff95408e80f19"]}, 0x30c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 20:39:53 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:39:53 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1767.360895] FAULT_INJECTION: forcing a failure. [ 1767.360895] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.363151] CPU: 0 PID: 9962 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1767.364429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1767.365962] Call Trace: [ 1767.366448] dump_stack+0x107/0x167 [ 1767.367127] should_fail.cold+0x5/0xa [ 1767.367828] ? create_object.isra.0+0x3a/0xa20 [ 1767.368663] should_failslab+0x5/0x20 [ 1767.369369] kmem_cache_alloc+0x5b/0x310 [ 1767.370118] ? io_wq_create+0x114/0xc00 [ 1767.370855] create_object.isra.0+0x3a/0xa20 [ 1767.371627] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1767.372534] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1767.373435] io_wq_create+0x6ef/0xc00 [ 1767.374106] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1767.375003] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1767.375868] ? io_apoll_task_func+0x2d0/0x2d0 [ 1767.376663] ? __io_req_find_next+0x300/0x300 [ 1767.377442] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1767.378289] __io_uring_add_tctx_node+0x2c6/0x520 [ 1767.379131] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1767.380071] __do_sys_io_uring_enter+0x14de/0x1920 [ 1767.380944] ? lock_downgrade+0x6d0/0x6d0 [ 1767.381663] ? find_held_lock+0x2c/0x110 [ 1767.382374] ? io_submit_sqes+0x85c0/0x85c0 [ 1767.383137] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1767.383983] ? wait_for_completion_io+0x270/0x270 [ 1767.384840] ? rcu_read_lock_any_held+0x75/0xa0 [ 1767.385653] ? vfs_write+0x354/0xa70 [ 1767.386305] ? fput_many+0x2f/0x1a0 [ 1767.386944] ? ksys_write+0x1a9/0x260 [ 1767.387615] ? __ia32_sys_read+0xb0/0xb0 [ 1767.388342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1767.389269] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1767.390174] do_syscall_64+0x33/0x40 [ 1767.390841] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1767.391740] RIP: 0033:0x7f15c8c78b19 [ 1767.392409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1767.395647] RSP: 002b:00007f15c61cd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1767.397009] RAX: ffffffffffffffda RBX: 00007f15c8d8c020 RCX: 00007f15c8c78b19 [ 1767.398261] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1767.399519] RBP: 00007f15c61cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1767.400802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.402056] R13: 00007ffd17a6232f R14: 00007f15c61cd300 R15: 0000000000022000 20:40:09 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x2809c28, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x300b4e2, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'ip6gretap0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000000, 0x1004}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) socketpair(0x21, 0x5, 0x8, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) 20:40:09 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f0000000100)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="080100001500020027bd7000ffdbdf25e0000001000000000000000000000000fe8000000000000000000000000000bb4e2000004e2300000a00002087000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="b96b6e00020000008c00120072666337353339657370286362632d6165732d63652c7368613232342d63652900000000000000000000000000000000000000000000000000000000000000000002000060ef0000a3f5e646eff07841eec00ea5d23b9e83c881e1a352c55234d4ba2cb68cc0d1cad9a68aea4dea38878305928e566f071d0aaa8671ad03000000f7adb3f57611cf1a30e3d9564f44757ee2101c000400fdff4e244e210000fe88000000000000000000000000010108001600050000000800180000000000"], 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) getgroups(0x6, &(0x7f0000000080)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00]) fchown(0xffffffffffffffff, r2, r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x30c, 0x25, 0x100, 0x70bd2d, 0x25dfdbfb, {0x20}, [@generic="f05ba4d57864104e71bb3b2ce9601f10aac4753b25c47baf53b361f422421b0652e7c7cb1ddbce42071c59342d8b1f1f4bff15f289ddb2e4a60dbe122980f57dff049e01867b52bd93af3473321ba97da5d7465bc48b753496765c133a5049cbe20c78ed69d329", @typed={0xc, 0x44, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="73049fe3fd4a9f064f6ed0807ba0a2f7", @nested={0x228, 0x34, 0x0, 0x1, [@generic="a8e1719fae0e003c7eb828e0033aa5f7a91e481bbb4b77a3fc7018ae00aa99832287e5ff3ec861a7573cb26502810b1a72680e9212197c74b3c45973d26acd36358a4a55c0f8ab17a3a77b5654954eafddda39ea84116cd07868de0de08873e0aa371fb8b1d3d7b0b7cbc802c55f3416dd9deaa608904661053f4455f7797f528844665c0b9a438ae231ef2088e3e31426199c5b2879cbd9c2871ebcc2a69c7bbb247c6369ae07d32b09010269c1188689b069e15653016a6714c07969be", @generic="994063242d154fc763dec526287885b7060000002e0288d8ee0334aa1a252210c7e2fe9c1e238a43ca16064acef88a88a00a97d13f52b2bacbe93c549cecb7b53b23d15e3567191752342cbaffff7f000000006acde7233e82b6d1f3c1b4774f98eca657057bff", @generic="f5aaad90eeb320151defb92910a52497c1eacfdad720b8fe8bc724683920a9a6897f5bf3f4034f807b83df5992631ba969800a13fefea6b74d4988c2a97527b5c0a130ea251d77fe4e228458749dd69a7ad2e30910b5d05bed45296fd723770a1651283df52bd16a1c8c4eedda2d17ef10d01cfaa60de6bf7027d094dc169fca5a0aaba9a36d1150db7d53b3731088f2011777a58dd83c28bc71000793dc5c697714dc1be53ead082e44d2b9e4d02c39992d187a62ccb5", @generic="e4343a48d87b9b22c18cc94669c35f9870c7cf086132e1fb17b9f9f38f4ce8aa88ce23101107fdea", @typed={0x6, 0x3, 0x0, 0x0, @str='\\\x00'}, @typed={0x8, 0x48, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x16, 0x0, 0x0, @pid}, @typed={0x8, 0x2c, 0x0, 0x0, @uid=r2}]}, @generic="5fe6eba3d12716e1cc828539ab6450fa89796510290c81cf32ad1a00624a794a07ee0d7f5ccf16cd5c20275d747a745ff95408e80f19"]}, 0x30c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 20:40:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xffffffffffffff0c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2}, 0x48054, 0x0, 0x2, 0x1, 0x0, 0x0, 0x3a}, 0x0, 0xe, 0xffffffffffffffff, 0x1) unshare(0x42000000) 20:40:09 executing program 0: ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x24) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000002f25000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) openat(r1, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xe4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000100000e200000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xb0}, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x5, 0x8, 0x0, 0x7, 0x1ff, 0x0, 0x7, 0x0, 0x60}, r3, 0x0, r2, 0x2) r4 = perf_event_open(0x0, r3, 0x3, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0x200, 0x70bd2a, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x82, 0x0, 0x0, @u32}]}, 0x1c}}, 0x40000) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2, 0x5, 0x2, 0x6, 0x0, 0x7fffffff, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x4800, 0x401, 0x7, 0x7, 0x545, 0x2, 0x1, 0x0, 0x5, 0x0, 0x7}, 0x0, 0xd, 0xffffffffffffffff, 0x2) 20:40:09 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xc0f7}, 0x0, 0x800000000000002, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) futex(0x0, 0x8b, 0x0, 0x0, &(0x7f0000000140), 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f00000000c0)={0xd, 0x9}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r2, 0x9e46, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000540)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) fork() 20:40:09 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:40:09 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@abs={0x1}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000000c0)={r2}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ec10ba84232a1a8d4486aa2daea68359e1b23e5b7c0aa316be8bdbb2d76e315a956ebbde64fcd37e6700011714476c7f"], 0x48) socket$netlink(0x10, 0x3, 0x0) mkdirat(r1, &(0x7f0000000200)='./file0/file0\x00', 0x63) unshare(0x48020200) 20:40:09 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:40:09 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:40:09 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@abs={0x1}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000000c0)={r2}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ec10ba84232a1a8d4486aa2daea68359e1b23e5b7c0aa316be8bdbb2d76e315a956ebbde64fcd37e6700011714476c7f"], 0x48) socket$netlink(0x10, 0x3, 0x0) mkdirat(r1, &(0x7f0000000200)='./file0/file0\x00', 0x63) unshare(0x48020200) [ 1783.360900] FAULT_INJECTION: forcing a failure. [ 1783.360900] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.363622] CPU: 0 PID: 9983 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1783.365187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1783.367040] Call Trace: [ 1783.367629] dump_stack+0x107/0x167 [ 1783.368440] should_fail.cold+0x5/0xa [ 1783.369268] ? create_object.isra.0+0x3a/0xa20 [ 1783.370264] should_failslab+0x5/0x20 [ 1783.371085] kmem_cache_alloc+0x5b/0x310 [ 1783.371965] ? mark_held_locks+0x9e/0xe0 [ 1783.372860] create_object.isra.0+0x3a/0xa20 [ 1783.373824] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1783.374930] kmem_cache_alloc_bulk+0x168/0x320 [ 1783.375929] io_submit_sqes+0x6f76/0x85c0 [ 1783.376858] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1783.377931] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1783.379020] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1783.380071] ? lock_downgrade+0x6d0/0x6d0 [ 1783.380976] ? find_held_lock+0x2c/0x110 [ 1783.381862] ? io_submit_sqes+0x85c0/0x85c0 [ 1783.382808] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1783.383862] ? wait_for_completion_io+0x270/0x270 [ 1783.384938] ? rcu_read_lock_any_held+0x75/0xa0 [ 1783.385950] ? vfs_write+0x354/0xa70 [ 1783.386761] ? fput_many+0x2f/0x1a0 [ 1783.387558] ? ksys_write+0x1a9/0x260 [ 1783.388403] ? __ia32_sys_read+0xb0/0xb0 [ 1783.389300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1783.390426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1783.391562] do_syscall_64+0x33/0x40 [ 1783.392399] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1783.393504] RIP: 0033:0x7f15c8c78b19 [ 1783.394312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1783.398348] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1783.400021] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1783.401578] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1783.403137] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1783.404666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1783.406109] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:40:09 executing program 2: futex(0x0, 0x8, 0x0, 0x0, 0x0, 0xff600000) 20:40:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:40:10 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:40:10 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x9}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000280)={0x5, 0x80, 0x9, 0x1, 0x0, 0x31, 0x0, 0x5, 0x800, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5c, 0x1, @perf_bp={&(0x7f0000000240), 0x6}, 0x11000, 0x3, 0x5, 0x9, 0x0, 0x2, 0x4000, 0x0, 0x4, 0x0, 0xd15}) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) read(r2, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) capset(&(0x7f0000000100)={0x0, 0xffffffffffffffff}, &(0x7f0000000140)={0x40, 0x0, 0x0, 0xc4a6, 0x2, 0x91b}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000e5ff2e2f66696c003000"]) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:40:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0xff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xffffffff810013a0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x2112, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) [ 1783.784646] FAULT_INJECTION: forcing a failure. [ 1783.784646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1783.787269] CPU: 0 PID: 10007 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1783.788775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1783.790508] Call Trace: [ 1783.791060] dump_stack+0x107/0x167 [ 1783.791820] should_fail.cold+0x5/0xa [ 1783.792622] _copy_from_user+0x2e/0x1b0 [ 1783.793494] __copy_msghdr_from_user+0x91/0x4b0 [ 1783.794446] ? __ia32_sys_shutdown+0x80/0x80 [ 1783.795388] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1783.796469] ? mark_lock+0xf5/0x2df0 [ 1783.797266] __io_recvmsg_copy_hdr+0xac/0x2f0 [ 1783.798187] ? find_held_lock+0x2c/0x110 [ 1783.799071] ? __io_compat_recvmsg_copy_hdr+0x360/0x360 [ 1783.800151] ? lock_chain_count+0x20/0x20 [ 1783.801013] ? __is_insn_slot_addr+0x123/0x290 [ 1783.801959] ? lock_downgrade+0x6d0/0x6d0 [ 1783.802822] io_recvmsg+0xae8/0xd70 [ 1783.803603] ? io_sendmsg+0x830/0x830 [ 1783.804409] ? mark_lock+0xf5/0x2df0 [ 1783.805169] ? lock_chain_count+0x20/0x20 [ 1783.806037] ? lock_chain_count+0x20/0x20 [ 1783.806919] ? stack_trace_save+0x8c/0xc0 [ 1783.807789] ? stack_trace_consume_entry+0x160/0x160 [ 1783.808823] ? lock_acquire+0x197/0x470 [ 1783.809644] ? lock_acquire+0x197/0x470 [ 1783.810446] ? __lock_acquire+0xbb1/0x5b00 [ 1783.811342] io_issue_sqe+0x3bd6/0x7700 [ 1783.812160] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1783.813245] ? lock_chain_count+0x20/0x20 [ 1783.814086] ? __is_insn_slot_addr+0x14c/0x290 [ 1783.815066] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1783.816124] ? io_connect+0x610/0x610 [ 1783.816946] ? lock_acquire+0x197/0x470 [ 1783.817773] ? find_held_lock+0x2c/0x110 [ 1783.818599] ? __fget_files+0x26d/0x4c0 [ 1783.819448] ? lock_downgrade+0x6d0/0x6d0 [ 1783.820287] __io_queue_sqe+0x90/0x9d0 [ 1783.821135] ? io_issue_sqe+0x7700/0x7700 [ 1783.822058] io_submit_sqes+0x4461/0x85c0 [ 1783.823038] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1783.824054] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1783.825091] ? lock_downgrade+0x6d0/0x6d0 [ 1783.825946] ? find_held_lock+0x2c/0x110 [ 1783.826784] ? io_submit_sqes+0x85c0/0x85c0 [ 1783.827741] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1783.828833] ? wait_for_completion_io+0x270/0x270 [ 1783.829892] ? rcu_read_lock_any_held+0x75/0xa0 [ 1783.830864] ? vfs_write+0x354/0xa70 [ 1783.831622] ? fput_many+0x2f/0x1a0 [ 1783.832378] ? ksys_write+0x1a9/0x260 [ 1783.833184] ? __ia32_sys_read+0xb0/0xb0 [ 1783.834099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1783.835176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1783.836217] do_syscall_64+0x33/0x40 [ 1783.837031] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1783.838170] RIP: 0033:0x7f15c8c78b19 [ 1783.839009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1783.842975] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1783.844644] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1783.846159] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1783.847722] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1783.849301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1783.850855] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:40:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:40:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xffffffffffffff0c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2}, 0x48054, 0x0, 0x2, 0x1, 0x0, 0x0, 0x3a}, 0x0, 0xe, 0xffffffffffffffff, 0x1) unshare(0x42000000) 20:40:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:40:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x600000, 0x1b2) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) fallocate(r1, 0x3, 0x52, 0x6) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x41) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080), 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x950) r4 = syz_open_dev$vcsa(&(0x7f0000000840), 0x401, 0x28180) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000880)=0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x7f, 0x9, 0x0, 0x0, 0x2947, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffff046, 0x2}, 0x0, 0x7, 0xfc9, 0x2, 0x2, 0x7, 0x0, 0x0, 0x10001, 0x0, 0x5}, 0x0, 0xe, r1, 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r6, &(0x7f00000000c0)="041a3a4985d424bdce9675f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f80000", 0x5e, 0x3ff03) 20:40:10 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@abs={0x1}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000000c0)={r2}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ec10ba84232a1a8d4486aa2daea68359e1b23e5b7c0aa316be8bdbb2d76e315a956ebbde64fcd37e6700011714476c7f"], 0x48) socket$netlink(0x10, 0x3, 0x0) mkdirat(r1, &(0x7f0000000200)='./file0/file0\x00', 0x63) unshare(0x48020200) 20:40:10 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:40:10 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@abs={0x1}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000000c0)={r2}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ec10ba84232a1a8d4486aa2daea68359e1b23e5b7c0aa316be8bdbb2d76e315a956ebbde64fcd37e6700011714476c7f"], 0x48) socket$netlink(0x10, 0x3, 0x0) mkdirat(r1, &(0x7f0000000200)='./file0/file0\x00', 0x63) unshare(0x48020200) 20:40:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1784.526428] FAULT_INJECTION: forcing a failure. [ 1784.526428] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.528592] CPU: 1 PID: 10033 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1784.529838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.531376] Call Trace: [ 1784.531889] dump_stack+0x107/0x167 [ 1784.532567] should_fail.cold+0x5/0xa [ 1784.533230] ? io_setup_async_msg+0xda/0x2d0 [ 1784.533991] should_failslab+0x5/0x20 [ 1784.534643] __kmalloc+0x72/0x390 [ 1784.535312] io_setup_async_msg+0xda/0x2d0 [ 1784.536159] io_recvmsg+0xc26/0xd70 [ 1784.536835] ? io_sendmsg+0x830/0x830 [ 1784.537513] ? mark_lock+0xf5/0x2df0 [ 1784.538270] ? stack_trace_consume_entry+0x160/0x160 [ 1784.539186] ? lock_acquire+0x197/0x470 [ 1784.539940] ? __lock_acquire+0xbb1/0x5b00 [ 1784.540735] io_issue_sqe+0x3bd6/0x7700 [ 1784.541457] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1784.542464] ? lock_chain_count+0x20/0x20 [ 1784.543204] ? __is_insn_slot_addr+0x14c/0x290 [ 1784.544060] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1784.545020] ? io_connect+0x610/0x610 [ 1784.545683] ? lock_acquire+0x197/0x470 [ 1784.546447] ? find_held_lock+0x2c/0x110 [ 1784.547214] ? __fget_files+0x26d/0x4c0 [ 1784.547954] ? lock_downgrade+0x6d0/0x6d0 [ 1784.548717] __io_queue_sqe+0x90/0x9d0 [ 1784.549417] ? io_issue_sqe+0x7700/0x7700 [ 1784.550255] io_submit_sqes+0x4461/0x85c0 [ 1784.551027] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1784.551892] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1784.552781] ? lock_downgrade+0x6d0/0x6d0 [ 1784.553513] ? find_held_lock+0x2c/0x110 [ 1784.554318] ? io_submit_sqes+0x85c0/0x85c0 [ 1784.555084] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1784.555943] ? wait_for_completion_io+0x270/0x270 [ 1784.556811] ? rcu_read_lock_any_held+0x75/0xa0 [ 1784.557688] ? vfs_write+0x354/0xa70 [ 1784.558380] ? fput_many+0x2f/0x1a0 [ 1784.559025] ? ksys_write+0x1a9/0x260 [ 1784.559703] ? __ia32_sys_read+0xb0/0xb0 [ 1784.560435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.561366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.562321] do_syscall_64+0x33/0x40 [ 1784.562984] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1784.563921] RIP: 0033:0x7f15c8c78b19 [ 1784.564640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.567915] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1784.569314] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1784.570578] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1784.571836] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1784.573120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.574354] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:40:26 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0xff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xffffffff810013a0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x2112, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) 20:40:26 executing program 2: getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)={'mangle\x00', 0x0, [0x0, 0x0, 0x5, 0x7]}, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x2000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000, 0x0, 0x400, 0x0, 0x0, 0x2}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/189]) 20:40:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x6) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000480)={0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x9, 0x3, &(0x7f0000000400)=[{&(0x7f0000000280)="8bca08f4e49c1a52182192debd66a2db3af61b9ff11c8b0cbeb00ca49f6f", 0x1e, 0x5}, {&(0x7f0000000340)="73a7aca9f65ee8413cf08965e1dca3ded9270dab78a657a58a375635b11bdc6e861db4acaad6fa750e4e7cba64336bb55845db48c8b01c91f5fcc8", 0x3b, 0x8}, {&(0x7f0000000380)="bf2b3eb0808fee2fcbb6fd05cf31f7f1bf11d187430c77e9e9211e927e194c28568fc247caa7e4b02e46e55639d125200824648a07f3061e6192c0e1c6f22d86507f83e94731c709", 0x48, 0xe82}], 0x4020, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1000001, 0x8010, r2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f00000002c0), 0x0, 0x4) openat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 20:40:26 executing program 7: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d51, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') syz_io_uring_submit(r3, r2, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r5, 0x0, &(0x7f00000002c0)="44deb7167ca5940c602174da05dbe6b07a9d310b42f42fcb2ca9d14db3e91bc1c95d0297cba0fc7ad463c627ba", 0x2d, 0x4000080, 0x1}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x3}, 0x710, 0x0, 0xffff8001, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x80, 0x10, 0x9}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456}, 0x9) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:40:26 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:40:26 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:40:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r4 = syz_io_uring_complete(r1) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x60, 0xa8, 0x5, 0x6, 0x0, 0x3, 0x11, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x4, 0xffffffff, 0x8, 0x3, 0x81, 0x8, 0x80, 0x0, 0x80, 0x0, 0x4}, r3, 0x0, r4, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 20:40:26 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x20002, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x66, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x8, 0x4000004, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000280), 0xfd0f, 0x482180) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) read(0xffffffffffffffff, &(0x7f0000000180)=""/156, 0x9c) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x454080, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x5) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x3, &(0x7f0000000800)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f00000005c0)="119c71ad717f0217e90c851cfec717e38afe4edd98734b2649a6d7f65c5538891a43090fa82d17aa5baa8cc33e0876e2c517df6dca84933cb618a9a1f9f1fe250e0574a357", 0x45, 0x7716, 0x0, 0x2, r3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0xf739, r1, &(0x7f0000000680)="b55757b439d8920f386d6560cfba3c8c82b08583a7be330a9fd0a4b78bbe539b8df89f8b4798bd0b345252bd0c33832282c4105bfca4e755050960eac3a0c17f6d7655082e91abb37c576ce2dd2abc836497bedc129321a954890166d85cd3f4feaf2d3ff0d74c9447e679a6192e81f77e177676a85db547d5c83303aa53853ea10f23c42b744746e30e5d6fc3a4", 0x8e, 0x0, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000000780)="21c1069cd37e864f9e4f", 0xa, 0xce7, 0x0, 0x1, r3}]) io_destroy(r4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x101401, 0x140, 0x18}, 0x18) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) [ 1800.446244] serio: Serial port tty23 20:40:27 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1800.512586] FAULT_INJECTION: forcing a failure. [ 1800.512586] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.516336] CPU: 1 PID: 10057 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1800.518004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1800.520017] Call Trace: [ 1800.520666] dump_stack+0x107/0x167 [ 1800.521577] should_fail.cold+0x5/0xa [ 1800.522435] ? create_object.isra.0+0x3a/0xa20 [ 1800.523639] should_failslab+0x5/0x20 [ 1800.524599] kmem_cache_alloc+0x5b/0x310 [ 1800.525494] create_object.isra.0+0x3a/0xa20 [ 1800.526491] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1800.527600] __kmalloc+0x16e/0x390 [ 1800.528407] io_setup_async_msg+0xda/0x2d0 [ 1800.529348] io_recvmsg+0xc26/0xd70 [ 1800.530148] ? io_sendmsg+0x830/0x830 [ 1800.531022] ? mark_lock+0xf5/0x2df0 [ 1800.531885] ? stack_trace_consume_entry+0x160/0x160 [ 1800.533054] ? lock_acquire+0x197/0x470 [ 1800.533947] ? __lock_acquire+0xbb1/0x5b00 [ 1800.534900] io_issue_sqe+0x3bd6/0x7700 [ 1800.535795] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1800.536966] ? lock_chain_count+0x20/0x20 [ 1800.537881] ? __is_insn_slot_addr+0x14c/0x290 [ 1800.538987] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1800.540363] ? io_connect+0x610/0x610 [ 1800.541249] ? lock_acquire+0x197/0x470 [ 1800.542144] ? find_held_lock+0x2c/0x110 [ 1800.543063] ? __fget_files+0x26d/0x4c0 [ 1800.543946] ? lock_downgrade+0x6d0/0x6d0 [ 1800.544901] __io_queue_sqe+0x90/0x9d0 [ 1800.545784] ? io_issue_sqe+0x7700/0x7700 [ 1800.546724] io_submit_sqes+0x4461/0x85c0 [ 1800.547687] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1800.548814] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1800.549977] ? lock_downgrade+0x6d0/0x6d0 [ 1800.551071] ? find_held_lock+0x2c/0x110 [ 1800.551980] ? io_submit_sqes+0x85c0/0x85c0 [ 1800.553051] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1800.554210] ? wait_for_completion_io+0x270/0x270 [ 1800.555359] ? rcu_read_lock_any_held+0x75/0xa0 [ 1800.556495] ? vfs_write+0x354/0xa70 [ 1800.557346] ? fput_many+0x2f/0x1a0 [ 1800.558156] ? ksys_write+0x1a9/0x260 [ 1800.558995] ? __ia32_sys_read+0xb0/0xb0 [ 1800.559887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1800.561040] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1800.562171] do_syscall_64+0x33/0x40 [ 1800.562993] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1800.564115] RIP: 0033:0x7f15c8c78b19 20:40:27 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x2) openat(0xffffffffffffffff, &(0x7f0000000040)='./mnt\x00', 0x900, 0x20) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x3870000, 0x0) getdents(r0, &(0x7f0000000180)=""/174, 0xae) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x78}) close(r1) mknodat(r1, &(0x7f0000000240)='./mnt\x00', 0x10, 0xc) umount2(&(0x7f0000000140)='./mnt\x00', 0x0) r2 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000002c0)={0xb9f2, 0x28, '\x00', 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) [ 1800.564944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1800.569092] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1800.570763] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1800.572327] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1800.574023] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1800.575687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1800.577407] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:40:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/fscreate\x00') r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000006}, 0x20048885) r2 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72656c61746976653a300d2c000558d9d01b339ec521954a9b373fc9616bed2f75514ac910a1273960b41228dd3dc008d3daf24a4afe4cd3c64a9cf7498eb5"]) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x1, '\x00', @b}) 20:40:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x90040, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x2000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20100, 0x1b8) 20:40:39 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:40:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r4 = syz_io_uring_complete(r1) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x60, 0xa8, 0x5, 0x6, 0x0, 0x3, 0x11, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x4, 0xffffffff, 0x8, 0x3, 0x81, 0x8, 0x80, 0x0, 0x80, 0x0, 0x4}, r3, 0x0, r4, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 20:40:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x8, 0x0, "f5deea3adf327ff1ffef81fc7a775bff70e4f1"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001040)=0xa) 20:40:39 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:40:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x6) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000480)={0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x9, 0x3, &(0x7f0000000400)=[{&(0x7f0000000280)="8bca08f4e49c1a52182192debd66a2db3af61b9ff11c8b0cbeb00ca49f6f", 0x1e, 0x5}, {&(0x7f0000000340)="73a7aca9f65ee8413cf08965e1dca3ded9270dab78a657a58a375635b11bdc6e861db4acaad6fa750e4e7cba64336bb55845db48c8b01c91f5fcc8", 0x3b, 0x8}, {&(0x7f0000000380)="bf2b3eb0808fee2fcbb6fd05cf31f7f1bf11d187430c77e9e9211e927e194c28568fc247caa7e4b02e46e55639d125200824648a07f3061e6192c0e1c6f22d86507f83e94731c709", 0x48, 0xe82}], 0x4020, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1000001, 0x8010, r2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f00000002c0), 0x0, 0x4) openat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 20:40:39 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10800, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xd, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:40:39 executing program 7: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1745db000000140098c170", @ANYRES16=0x0], 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='limits\x00') r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) clock_gettime(0x0, &(0x7f0000001940)) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001700)='net/ip_mr_vif\x00') preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000200)=""/135, 0x87}], 0x1, 0x0, 0x0) accept4$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0x0, 0x0) pipe2(0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000b00)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000a80)={0x4480, 0x88, 0x4}, &(0x7f0000000ac0)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0x8) dup2(r5, 0xffffffffffffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:40:39 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x46e0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x80) pwrite64(r2, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000190c0), 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000580)={r6, r5, "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", "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"}) r9 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r8}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r8}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) mq_timedsend(r9, &(0x7f0000001e00)="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", 0x1000, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000002e00)={r10, 0x6}) mq_timedsend(r9, &(0x7f0000001200), 0x0, 0x3, &(0x7f00000012c0)) mq_timedreceive(r9, &(0x7f0000000300)=""/112, 0x70, 0x7, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={0x0, r8, "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", "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"}) [ 1813.353249] FAULT_INJECTION: forcing a failure. [ 1813.353249] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.354823] CPU: 1 PID: 10101 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1813.355671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1813.356699] Call Trace: [ 1813.357047] dump_stack+0x107/0x167 [ 1813.357495] should_fail.cold+0x5/0xa [ 1813.357968] ? __io_queue_sqe+0x666/0x9d0 [ 1813.358484] should_failslab+0x5/0x20 [ 1813.358946] kmem_cache_alloc_trace+0x55/0x320 [ 1813.359504] __io_queue_sqe+0x666/0x9d0 [ 1813.359991] ? io_issue_sqe+0x7700/0x7700 [ 1813.360512] io_submit_sqes+0x4461/0x85c0 [ 1813.361052] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1813.361668] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1813.362271] ? lock_downgrade+0x6d0/0x6d0 [ 1813.362786] ? find_held_lock+0x2c/0x110 [ 1813.363316] ? io_submit_sqes+0x85c0/0x85c0 [ 1813.363877] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1813.364494] ? wait_for_completion_io+0x270/0x270 [ 1813.365129] ? rcu_read_lock_any_held+0x75/0xa0 [ 1813.365718] ? vfs_write+0x354/0xa70 [ 1813.366206] ? fput_many+0x2f/0x1a0 [ 1813.366636] ? ksys_write+0x1a9/0x260 [ 1813.367128] ? __ia32_sys_read+0xb0/0xb0 [ 1813.367642] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1813.368306] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1813.368972] do_syscall_64+0x33/0x40 [ 1813.369456] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1813.370093] RIP: 0033:0x7f15c8c78b19 [ 1813.370560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1813.372840] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1813.373936] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1813.374899] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1813.375964] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1813.376839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1813.377729] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:40:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x6) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000480)={0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x9, 0x3, &(0x7f0000000400)=[{&(0x7f0000000280)="8bca08f4e49c1a52182192debd66a2db3af61b9ff11c8b0cbeb00ca49f6f", 0x1e, 0x5}, {&(0x7f0000000340)="73a7aca9f65ee8413cf08965e1dca3ded9270dab78a657a58a375635b11bdc6e861db4acaad6fa750e4e7cba64336bb55845db48c8b01c91f5fcc8", 0x3b, 0x8}, {&(0x7f0000000380)="bf2b3eb0808fee2fcbb6fd05cf31f7f1bf11d187430c77e9e9211e927e194c28568fc247caa7e4b02e46e55639d125200824648a07f3061e6192c0e1c6f22d86507f83e94731c709", 0x48, 0xe82}], 0x4020, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1000001, 0x8010, r2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f00000002c0), 0x0, 0x4) openat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 20:40:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f16148af9adeee57001000000000000000b0000000002", 0x5a, 0x2}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="6e096212226f6febc33df50dfab8df80dfc9c7689cce3efa811601d4b7cdf025e3c8289f6bcff87607fde4870d5ce32bbb657367e9b66c87beac35d85ec76434ab8c52363c2c4b5ed159881517fba37ddee0525922acced8d887bb7467c69b0a95644fdc309a32e7d5d9ad03942bec3db2812d6caecb56c0d5b825e1728f00000000000000"]) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000280)={0x0, 0xfb, 0x103, 0x0, 0x1, "5aadddf919c3fce44eaca6b15dc67928", "95825fc843115d6261f1840583ec189c4703f7467a8fb9e5bbc47268003138e8017603b8fc5a94a3a72b8edfaad428d0286f2d1a2940ba1e446bd3c73b5646bbf4cd82526f233a52e684ec176077b4378f749883d27e977b81fea4f1ef222018eb6c1448d0ae1932de1654bb780fa53b260489035cb2ab6c116034fb16694cdb298af3285c2da751f0cca301fc123efe91d857b994bc23ec4bb2e6de59105dbb865a4c768ae03850278cb000f6358d014b1903252aab88e08199e7130e1efb022b432f7df346294c15e6687c8c341b0453140612fd889a4ad9883e5edb57167049f2e667c5b730cae3e3aa988824"}, 0x103, 0x0) 20:40:39 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10800, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xd, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:40:39 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:40:39 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:40:40 executing program 4: syz_mount_image$iso9660(0x0, 0x0, 0x4, 0x0, &(0x7f0000001600), 0x48000, 0x0) getpgid(0x0) wait4(0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff}) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, 0x0) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:unconfined_exec_t:s0\x00', 0x27) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40a685, 0x0) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x4, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x2342, 0x4) clone3(&(0x7f0000003940)={0x0, &(0x7f0000003780), 0x0, &(0x7f0000003800), {0x20}, &(0x7f0000003840)=""/92, 0x5c, 0x0, &(0x7f0000003900)=[0x0], 0x1}, 0x58) 20:40:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r4 = syz_io_uring_complete(r1) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x60, 0xa8, 0x5, 0x6, 0x0, 0x3, 0x11, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x4, 0xffffffff, 0x8, 0x3, 0x81, 0x8, 0x80, 0x0, 0x80, 0x0, 0x4}, r3, 0x0, r4, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 1813.637991] FAULT_INJECTION: forcing a failure. [ 1813.637991] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.639283] CPU: 1 PID: 10130 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1813.640022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1813.640933] Call Trace: [ 1813.641237] dump_stack+0x107/0x167 [ 1813.641649] should_fail.cold+0x5/0xa [ 1813.642079] ? io_setup_async_msg+0xda/0x2d0 [ 1813.642572] should_failslab+0x5/0x20 [ 1813.643003] __kmalloc+0x72/0x390 [ 1813.643378] io_setup_async_msg+0xda/0x2d0 [ 1813.643828] io_recvmsg+0xc26/0xd70 [ 1813.644225] ? io_sendmsg+0x830/0x830 [ 1813.644638] ? __is_insn_slot_addr+0x14c/0x290 [ 1813.645149] ? lock_chain_count+0x20/0x20 [ 1813.645593] ? mark_lock+0xf5/0x2df0 [ 1813.645990] ? register_lock_class+0xbb/0x17b0 [ 1813.646484] ? arch_stack_walk+0x99/0xf0 [ 1813.646936] ? __lock_acquire+0x1657/0x5b00 [ 1813.647402] ? __lock_acquire+0xbb1/0x5b00 [ 1813.647856] io_issue_sqe+0x3bd6/0x7700 [ 1813.648275] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1813.648833] ? lock_chain_count+0x20/0x20 [ 1813.649277] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1813.649840] ? io_connect+0x610/0x610 [ 1813.650250] ? lock_acquire+0x197/0x470 [ 1813.650683] ? find_held_lock+0x2c/0x110 [ 1813.651120] ? __fget_files+0x26d/0x4c0 [ 1813.651537] ? lock_downgrade+0x6d0/0x6d0 [ 1813.651977] __io_queue_sqe+0x90/0x9d0 [ 1813.652399] ? io_issue_sqe+0x7700/0x7700 [ 1813.652863] io_submit_sqes+0x4461/0x85c0 [ 1813.653335] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1813.653863] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1813.654391] ? lock_downgrade+0x6d0/0x6d0 [ 1813.654836] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1813.655418] ? io_submit_sqes+0x85c0/0x85c0 [ 1813.655882] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1813.656387] ? vfs_write+0x881/0xa70 [ 1813.656797] ? wait_for_completion_io+0x270/0x270 [ 1813.657304] ? rcu_read_lock_any_held+0x75/0xa0 [ 1813.657796] ? vfs_write+0x354/0xa70 [ 1813.658193] ? fput_many+0x2f/0x1a0 [ 1813.658571] ? ksys_write+0x1a9/0x260 [ 1813.658975] ? __ia32_sys_read+0xb0/0xb0 [ 1813.659400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1813.659953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1813.660510] do_syscall_64+0x33/0x40 [ 1813.660916] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1813.661461] RIP: 0033:0x7f15c8c78b19 [ 1813.661849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1813.663776] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1813.664583] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1813.665354] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1813.666106] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1813.666861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1813.667606] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:40:52 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10800, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xd, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:40:52 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x60048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x89c0, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0xf88c) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1a7) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000040)) close(0xffffffffffffffff) creat(&(0x7f00000001c0)='./file0\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000001140)=""/134, 0x86}], 0x1) pipe2(&(0x7f0000001200), 0x80800) 20:40:52 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:40:52 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:40:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r4 = syz_io_uring_complete(r1) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x60, 0xa8, 0x5, 0x6, 0x0, 0x3, 0x11, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x4, 0xffffffff, 0x8, 0x3, 0x81, 0x8, 0x80, 0x0, 0x80, 0x0, 0x4}, r3, 0x0, r4, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 20:40:52 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1e, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) 20:40:52 executing program 4: r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x65, 0x54d6]}, &(0x7f00000000c0)=0x44) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xdc800, 0xd4, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c110100000000000000000113000000002200170100000000011700080000000008007809140b2a3a08020000010000010100002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000730079007a006b0061006c006c006500720020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000470045004e00490053004f0049004d004100470045002000490053004f00200039003600360030005f004800460053002000460049004c004500530059005300540045004d002000430052004500410054004f005200200028004300290020003100390039003300200045002e0059004f0055004e004700440041004c004500660069006c0065003300200020002000200020002000200020002000200020002000200000660069006c0065003100200020002000200020002000200020002000200020002000200000660069006c0065003200200020002000200020002000200020002000200020002000200032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="0042454130310100"/32, 0x20, 0x9800}, {&(0x7f0000010e00)="004e535230320100"/32, 0x20, 0xa000}, {&(0x7f0000010f00)="0054454130310100"/32, 0x20, 0xa800}, {&(0x7f0000011000)="010002007c000000d890f001200000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303132454500000000000000", 0x60, 0x10000}, {&(0x7f0000011100)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x100c0}, {&(0x7f0000011200)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x10160}, {&(0x7f0000011300)="04000200e60000001faff0012100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x10800}, {&(0x7f0000011400)="000000000000000000000000000000000000000600"/32, 0x20, 0x108e0}, {&(0x7f0000011500)='\x00*genisoimage\x00'/32, 0x20, 0x10960}, {&(0x7f0000011600)="0500020062000000a8a0f001220000000200000001000000022b4e5352303200", 0x20, 0x11000}, {&(0x7f0000011700)="000000000000000000000000000000000000000000000000010000000101000022000000002a67656e69736f696d61676500"/64, 0x40, 0x110a0}, {&(0x7f0000011800)="060002004f0000006411ae012300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x11800}, {&(0x7f0000011900)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x118c0}, {&(0x7f0000011a00)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x119a0}, {&(0x7f0000011b00)="07000200b10000006d0f0800240000000400"/32, 0x20, 0x12000}, {&(0x7f0000011c00)="08000200200000000000f0012500"/32, 0x20, 0x12800}, {&(0x7f0000011d00)="010002005d0000006fcaf001300000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303133323500000000000000", 0x60, 0x18000}, {&(0x7f0000011e00)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x180c0}, {&(0x7f0000011f00)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x18160}, {&(0x7f0000012000)="04000200f60000001faff0013100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x18800}, {&(0x7f0000012100)="000000000000000000000000000000000000000600"/32, 0x20, 0x188e0}, {&(0x7f0000012200)='\x00*genisoimage\x00'/32, 0x20, 0x18960}, {&(0x7f0000012300)="0500020072000000a8a0f001320000000200000001000000022b4e5352303200", 0x20, 0x19000}, {&(0x7f0000012400)="000000000000000000000000000000000000000000000000010000000101000022000000002a67656e69736f696d61676500"/64, 0x40, 0x190a0}, {&(0x7f0000012500)="060002005f0000006411ae013300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x19800}, {&(0x7f0000012600)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x198c0}, {&(0x7f0000012700)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x199a0}, {&(0x7f0000012800)="07000200c10000006d0f0800340000000400"/32, 0x20, 0x1a000}, {&(0x7f0000012900)="08000200300000000000f0013500"/32, 0x20, 0x1a800}, {&(0x7f0000012a00)="09000200dc00000082997600400000007810e40709140b2a3a0000000100000000000000000000000d01000000000000000000000000000000000000000000000000000000000000010000002e0000000000000022000000002a67656e69736f696d61676500000000000000000000000000000000000000060000000200000002010201020100"/160, 0xa0, 0x20000}, {&(0x7f0000012b00)="080002003c0000000000f0014100"/32, 0x20, 0x20800}, {&(0x7f0000012c00)="02000200ce00000001d7f0010001000000800000200000000080000030000000", 0x20, 0x80000}, {&(0x7f0000012d00)="0001020032000000e559f001000000007810e40709140b2a3a0000000300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d00"/128, 0x80, 0x80800}, {&(0x7f0000012e00)="00000000000000000000000000000006004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000600"/128, 0x80, 0x808e0}, {&(0x7f0000012f00)="0000000000000000000000000000000000080000020000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000201030000000000", 0x40, 0x80980}, {&(0x7f0000013000)="08000200fc0000000000f0010100"/32, 0x20, 0x81000}, {&(0x7f0000013100)="050102008e0000007c60a8000200000000000000040000000100000400000000000030020000000000000000a51400000200000000000000080100000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000000000000000000000000000008000000080100000300"/192, 0xc0, 0x81800}, {&(0x7f0000013200)="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"/288, 0x120, 0x82000}, {&(0x7f0000013400)="0501020065000000a50ca8000400000000000000040000000100000400000000000030020000000000000000a51400000100000000000000800000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000005010000000000000000000008000000800000000500"/192, 0xc0, 0x82800}, {&(0x7f0000013500)="01010200ca000000476218000500000001000a00000800000200000000000000000000000000000001010200d2000000affe1c000500000001000006000800000a000000000000000b01000000000866696c6530010102006e00000076d31c000500000001000006000800000b000000000000000c01000000000866696c6531", 0x80, 0x83000}, {&(0x7f0000013600)="050102009d00000045a2a8000600000000000000040000000100000500000000000030020000000000000000841000000100000000000000640000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000007010000000000000000000008000000640000001900"/192, 0xc0, 0x83800}, {&(0x7f0000013700)="0501020028000000442da80007000000000000000400000001000005000000000000300200000000000000008410000001000000000000000a0000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d61676500000000000000000000000000000000000000080100000000000000000000080000000a0000001a00"/192, 0xc0, 0x84000}, {&(0x7f0000013800)="05010200010000002524a8000800000000000000040000000100000500000000000030020000000000000000841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000009010000000000000000000008000000282300001b00"/192, 0xc0, 0x84800}, {&(0x7f0000013900)="0501020056000000207da8000900000000000000040000000100000500000000000030020000000000000000841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000a010000000000000000000008000000282300001b00"/192, 0xc0, 0x85000}, {&(0x7f0000013a00)="050102008100000018afa8000a000000000000000400000001000005000000000000300200000000000000008410000001000000000000001a0400000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000b0100000000000000000000080000001a0400002000"/192, 0xc0, 0x85800}, {&(0x7f0000013b00)="0501020039000000f690a0000b00000000000000040000000100000500000000000030020000000000000000841000000100000000000000000000000000000000000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000c0100"/192, 0xc0, 0x86000}, {&(0x7f0000013c00)="01001501000001000000050016010000010046494c4530000000000000000000", 0x20, 0x86800}, {&(0x7f0000013d00)="01000000011500010000050000000116000146494c4530000000000000000000", 0x20, 0x87800}, {&(0x7f0000013e00)="010017010000010000000a0018010000010000660069006c0065003000000000", 0x20, 0x88800}, {&(0x7f0000013f00)="010000000117000100000a0000000118000100660069006c0065003000000000", 0x20, 0x89800}, {&(0x7f0000014000)="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", 0x380, 0x8a800}, {&(0x7f0000014400)="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", 0x200, 0x8b000}, {&(0x7f0000014600)="2200170100000000011700080000000008007809140b2a3a080200000100000101002200170100000000011700080000000008007809140b2a3a0802000001000001010134001a0100000000011a64000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00180100000000011800080000000008007809140b2a3a08020000010000010a00660069006c00650030002c001b0100000000011b0a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c001c0100000000011c28230000000023287809140b2a3a08000000010000010a00660069006c00650032002c001c0100000000011c28230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0x8b800}, {&(0x7f0000014800)="2200180100000000011800080000000008007809140b2a3a080200000100000101002200170100000000011700080000000008007809140b2a3a080200000100000101012c0021010000000001211a0400000000041a7809140b2a3a08000000010000010a00660069006c00650030002c00220100000000012200000000000000007809140b2a3a08000000010000010a00660069006c006500310000000000", 0xa0, 0x8c000}, {&(0x7f0000014900)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0x8c800}, {&(0x7f0000014a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8d000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x8d800}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x90800}, {&(0x7f0000015100)="02000200f000000001d7f0012201000000800000200000000080000030000000", 0x20, 0x91000}, {&(0x7f0000015200)="02000200f100000001d7f0012301000000800000200000000080000030000000", 0x20, 0x91800}, {&(0x7f0000015300)="02000200f200000001d7f0012401000000800000200000000080000030000000", 0x20, 0x92000}, {&(0x7f0000015400)="02000200f300000001d7f0012501000000800000200000000080000030000000", 0x20, 0x92800}, {&(0x7f0000015500)="02000200f400000001d7f0012601000000800000200000000080000030000000", 0x20, 0x93000}, {&(0x7f0000015600)="02000200f500000001d7f0012701000000800000200000000080000030000000", 0x20, 0x93800}, {&(0x7f0000015700)="02000200f600000001d7f0012801000000800000200000000080000030000000", 0x20, 0x94000}, {&(0x7f0000015800)="02000200f700000001d7f0012901000000800000200000000080000030000000", 0x20, 0x94800}, {&(0x7f0000015900)="02000200f800000001d7f0012a01000000800000200000000080000030000000", 0x20, 0x95000}, {&(0x7f0000015a00)="02000200f900000001d7f0012b01000000800000200000000080000030000000", 0x20, 0x95800}, {&(0x7f0000015b00)="02000200fa00000001d7f0012c01000000800000200000000080000030000000", 0x20, 0x96000}, {&(0x7f0000015c00)="02000200fb00000001d7f0012d01000000800000200000000080000030000000", 0x20, 0x96800}, {&(0x7f0000015d00)="02000200fc00000001d7f0012e01000000800000200000000080000030000000", 0x20, 0x97000}, {&(0x7f0000015e00)="02000200fd00000001d7f0012f01000000800000200000000080000030000000", 0x20, 0x97800}, {&(0x7f0000015f00)="02000200fe00000001d7f0013001000000800000200000000080000030000000", 0x20, 0x98000}, {&(0x7f0000016000)="02000200ff00000001d7f0013101000000800000200000000080000030000000", 0x20, 0x98800}, {&(0x7f0000016100)="020002000000000001d7f0013201000000800000200000000080000030000000", 0x20, 0x99000}, {&(0x7f0000016200)="020002000100000001d7f0013301000000800000200000000080000030000000", 0x20, 0x99800}, {&(0x7f0000016300)="020002000200000001d7f0013401000000800000200000000080000030000000", 0x20, 0x9a000}, {&(0x7f0000016400)="020002000300000001d7f0013501000000800000200000000080000030000000", 0x20, 0x9a800}, {&(0x7f0000016500)="020002000400000001d7f0013601000000800000200000000080000030000000", 0x20, 0x9b000}, {&(0x7f0000016600)="020002000500000001d7f0013701000000800000200000000080000030000000", 0x20, 0x9b800}, {&(0x7f0000016700)="020002000600000001d7f0013801000000800000200000000080000030000000", 0x20, 0x9c000}, {&(0x7f0000016800)="020002000700000001d7f0013901000000800000200000000080000030000000", 0x20, 0x9c800}, {&(0x7f0000016900)="020002000800000001d7f0013a01000000800000200000000080000030000000", 0x20, 0x9d000}, {&(0x7f0000016a00)="020002000900000001d7f0013b01000000800000200000000080000030000000", 0x20, 0x9d800}, {&(0x7f0000016b00)="020002000a00000001d7f0013c01000000800000200000000080000030000000", 0x20, 0x9e000}, {&(0x7f0000016c00)="020002000b00000001d7f0013d01000000800000200000000080000030000000", 0x20, 0x9e800}, {&(0x7f0000016d00)="020002000c00000001d7f0013e01000000800000200000000080000030000000", 0x20, 0x9f000}, {&(0x7f0000016e00)="020002000d00000001d7f0013f01000000800000200000000080000030000000", 0x20, 0x100000001}, {&(0x7f0000016f00)="020002000e00000001d7f0014001000000800000200000000080000030000000", 0x20, 0xa0000}, {&(0x7f0000017000)="020002000f00000001d7f0014101000000800000200000000080000030000000", 0x20, 0xa0800}, {&(0x7f0000017100)="020002001000000001d7f0014201000000800000200000000080000030000000", 0x20, 0xa1000}, {&(0x7f0000017200)="020002001100000001d7f0014301000000800000200000000080000030000000", 0x20, 0xa1800}, {&(0x7f0000017300)="020002001200000001d7f0014401000000800000200000000080000030000000", 0x20, 0xa2000}, {&(0x7f0000017400)="020002001300000001d7f0014501000000800000200000000080000030000000", 0x20, 0xa2800}, {&(0x7f0000017500)="020002001400000001d7f0014601000000800000200000000080000030000000", 0x20, 0xa3000}, {&(0x7f0000017600)="020002001500000001d7f0014701000000800000200000000080000030000000", 0x20, 0xa3800}, {&(0x7f0000017700)="020002001600000001d7f0014801000000800000200000000080000030000000", 0x20, 0xa4000}, {&(0x7f0000017800)="020002001700000001d7f0014901000000800000200000000080000030000000", 0x20, 0xa4800}, {&(0x7f0000017900)="020002001800000001d7f0014a01000000800000200000000080000030000000", 0x20, 0xa5000}, {&(0x7f0000017a00)="020002001900000001d7f0014b01000000800000200000000080000030000000", 0x20, 0xa5800}, {&(0x7f0000017b00)="020002001a00000001d7f0014c01000000800000200000000080000030000000", 0x20, 0xa6000}, {&(0x7f0000017c00)="020002001b00000001d7f0014d01000000800000200000000080000030000000", 0x20, 0xa6800}, {&(0x7f0000017d00)="020002001c00000001d7f0014e01000000800000200000000080000030000000", 0x20, 0xa7000}, {&(0x7f0000017e00)="020002001d00000001d7f0014f01000000800000200000000080000030000000", 0x20, 0xa7800}, {&(0x7f0000017f00)="020002001e00000001d7f0015001000000800000200000000080000030000000", 0x20, 0xa8000}, {&(0x7f0000018000)="020002001f00000001d7f0015101000000800000200000000080000030000000", 0x20, 0xa8800}, {&(0x7f0000018100)="020002002000000001d7f0015201000000800000200000000080000030000000", 0x20, 0xa9000}, {&(0x7f0000018200)="020002002100000001d7f0015301000000800000200000000080000030000000", 0x20, 0xa9800}, {&(0x7f0000018300)="020002002200000001d7f0015401000000800000200000000080000030000000", 0x20, 0xaa000}, {&(0x7f0000018400)="020002002300000001d7f0015501000000800000200000000080000030000000", 0x20, 0xaa800}, {&(0x7f0000018500)="020002002400000001d7f0015601000000800000200000000080000030000000", 0x20, 0xab000}, {&(0x7f0000018600)="020002002500000001d7f0015701000000800000200000000080000030000000", 0x20, 0xab800}, {&(0x7f0000018700)="020002002600000001d7f0015801000000800000200000000080000030000000", 0x20, 0xac000}, {&(0x7f0000018800)="020002002700000001d7f0015901000000800000200000000080000030000000", 0x20, 0xac800}, {&(0x7f0000018900)="020002002800000001d7f0015a01000000800000200000000080000030000000", 0x20, 0xad000}, {&(0x7f0000018a00)="020002002900000001d7f0015b01000000800000200000000080000030000000", 0x20, 0xad800}, {&(0x7f0000018b00)="020002002a00000001d7f0015c01000000800000200000000080000030000000", 0x20, 0xae000}, {&(0x7f0000018c00)="020002002b00000001d7f0015d01000000800000200000000080000030000000", 0x20, 0xae800}, {&(0x7f0000018d00)="020002002c00000001d7f0015e01000000800000200000000080000030000000", 0x20, 0xaf000}, {&(0x7f0000018e00)="020002002d00000001d7f0015f01000000800000200000000080000030000000", 0x20, 0xaf800}, {&(0x7f0000018f00)="020002002e00000001d7f0016001000000800000200000000080000030000000", 0x20, 0xb0000}, {&(0x7f0000019000)="020002002f00000001d7f0016101000000800000200000000080000030000000", 0x20, 0xb0800}, {&(0x7f0000019100)="020002003000000001d7f0016201000000800000200000000080000030000000", 0x20, 0xb1000}, {&(0x7f0000019200)="020002003100000001d7f0016301000000800000200000000080000030000000", 0x20, 0xb1800}, {&(0x7f0000019300)="020002003200000001d7f0016401000000800000200000000080000030000000", 0x20, 0xb2000}, {&(0x7f0000019400)="020002003300000001d7f0016501000000800000200000000080000030000000", 0x20, 0xb2800}, {&(0x7f0000019500)="020002003400000001d7f0016601000000800000200000000080000030000000", 0x20, 0xb3000}, {&(0x7f0000019600)="020002003500000001d7f0016701000000800000200000000080000030000000", 0x20, 0xb3800}, {&(0x7f0000019700)="020002003600000001d7f0016801000000800000200000000080000030000000", 0x20, 0xb4000}, {&(0x7f0000019800)="020002003700000001d7f0016901000000800000200000000080000030000000", 0x20, 0xb4800}, {&(0x7f0000019900)="020002003800000001d7f0016a01000000800000200000000080000030000000", 0x20, 0xb5000}, {&(0x7f0000019a00)="020002003900000001d7f0016b01000000800000200000000080000030000000", 0x20, 0xb5800}, {&(0x7f0000019b00)="020002003a00000001d7f0016c01000000800000200000000080000030000000", 0x20, 0xb6000}, {&(0x7f0000019c00)="020002003b00000001d7f0016d01000000800000200000000080000030000000", 0x20, 0xb6800}, {&(0x7f0000019d00)="020002003c00000001d7f0016e01000000800000200000000080000030000000", 0x20, 0xb7000}, {&(0x7f0000019e00)="020002003d00000001d7f0016f01000000800000200000000080000030000000", 0x20, 0xb7800}, {&(0x7f0000019f00)="020002003e00000001d7f0017001000000800000200000000080000030000000", 0x20, 0xb8000}, {&(0x7f000001a000)="020002003f00000001d7f0017101000000800000200000000080000030000000", 0x20, 0xb8800}, {&(0x7f000001a100)="020002004000000001d7f0017201000000800000200000000080000030000000", 0x20, 0xb9000}, {&(0x7f000001a200)="020002004100000001d7f0017301000000800000200000000080000030000000", 0x20, 0xb9800}, {&(0x7f000001a300)="020002004200000001d7f0017401000000800000200000000080000030000000", 0x20, 0xba000}, {&(0x7f000001a400)="020002004300000001d7f0017501000000800000200000000080000030000000", 0x20, 0xba800}, {&(0x7f000001a500)="020002004400000001d7f0017601000000800000200000000080000030000000", 0x20, 0xbb000}, {&(0x7f000001a600)="020002004500000001d7f0017701000000800000200000000080000030000000", 0x20, 0xbb800}, {&(0x7f000001a700)="020002004600000001d7f0017801000000800000200000000080000030000000", 0x20, 0xbc000}, {&(0x7f000001a800)="020002004700000001d7f0017901000000800000200000000080000030000000", 0x20, 0xbc800}, {&(0x7f000001a900)="020002004800000001d7f0017a01000000800000200000000080000030000000", 0x20, 0xbd000}, {&(0x7f000001aa00)="020002004900000001d7f0017b01000000800000200000000080000030000000", 0x20, 0xbd800}, {&(0x7f000001ab00)="020002004a00000001d7f0017c01000000800000200000000080000030000000", 0x20, 0xbe000}, {&(0x7f000001ac00)="020002004b00000001d7f0017d01000000800000200000000080000030000000", 0x20, 0xbe800}, {&(0x7f000001ad00)="020002004c00000001d7f0017e01000000800000200000000080000030000000", 0x20, 0xbf000}, {&(0x7f000001ae00)="020002004d00000001d7f0017f01000000800000200000000080000030000000", 0x20, 0xbf800}, {&(0x7f000001af00)="020002004e00000001d7f0018001000000800000200000000080000030000000", 0x20, 0xc0000}, {&(0x7f000001b000)="020002004f00000001d7f0018101000000800000200000000080000030000000", 0x20, 0xc0800}, {&(0x7f000001b100)="020002005000000001d7f0018201000000800000200000000080000030000000", 0x20, 0xc1000}, {&(0x7f000001b200)="020002005100000001d7f0018301000000800000200000000080000030000000", 0x20, 0xc1800}, {&(0x7f000001b300)="020002005200000001d7f0018401000000800000200000000080000030000000", 0x20, 0xc2000}, {&(0x7f000001b400)="020002005300000001d7f0018501000000800000200000000080000030000000", 0x20, 0xc2800}, {&(0x7f000001b500)="020002005400000001d7f0018601000000800000200000000080000030000000", 0x20, 0xc3000}, {&(0x7f000001b600)="020002005500000001d7f0018701000000800000200000000080000030000000", 0x20, 0xc3800}, {&(0x7f000001b700)="020002005600000001d7f0018801000000800000200000000080000030000000", 0x20, 0xc4000}, {&(0x7f000001b800)="020002005700000001d7f0018901000000800000200000000080000030000000", 0x20, 0xc4800}, {&(0x7f000001b900)="020002005800000001d7f0018a01000000800000200000000080000030000000", 0x20, 0xc5000}, {&(0x7f000001ba00)="020002005900000001d7f0018b01000000800000200000000080000030000000", 0x20, 0xc5800}, {&(0x7f000001bb00)="020002005a00000001d7f0018c01000000800000200000000080000030000000", 0x20, 0xc6000}, {&(0x7f000001bc00)="020002005b00000001d7f0018d01000000800000200000000080000030000000", 0x20, 0xc6800}, {&(0x7f000001bd00)="020002005c00000001d7f0018e01000000800000200000000080000030000000", 0x20, 0xc7000}, {&(0x7f000001be00)="020002005d00000001d7f0018f01000000800000200000000080000030000000", 0x20, 0xc7800}, {&(0x7f000001bf00)="020002005e00000001d7f0019001000000800000200000000080000030000000", 0x20, 0xc8000}, {&(0x7f000001c000)="020002005f00000001d7f0019101000000800000200000000080000030000000", 0x20, 0xc8800}, {&(0x7f000001c100)="020002006000000001d7f0019201000000800000200000000080000030000000", 0x20, 0xc9000}, {&(0x7f000001c200)="020002006100000001d7f0019301000000800000200000000080000030000000", 0x20, 0xc9800}, {&(0x7f000001c300)="020002006200000001d7f0019401000000800000200000000080000030000000", 0x20, 0xca000}, {&(0x7f000001c400)="020002006300000001d7f0019501000000800000200000000080000030000000", 0x20, 0xca800}, {&(0x7f000001c500)="020002006400000001d7f0019601000000800000200000000080000030000000", 0x20, 0xcb000}, {&(0x7f000001c600)="020002006500000001d7f0019701000000800000200000000080000030000000", 0x20, 0xcb800}, {&(0x7f000001c700)="020002006600000001d7f0019801000000800000200000000080000030000000", 0x20, 0xcc000}, {&(0x7f000001c800)="020002006700000001d7f0019901000000800000200000000080000030000000", 0x20, 0xcc800}, {&(0x7f000001c900)="020002006800000001d7f0019a01000000800000200000000080000030000000", 0x20, 0xcd000}, {&(0x7f000001ca00)="020002006900000001d7f0019b01000000800000200000000080000030000000", 0x20, 0xcd800}, {&(0x7f000001cb00)="020002006a00000001d7f0019c01000000800000200000000080000030000000", 0x20, 0xce000}, {&(0x7f000001cc00)="020002006b00000001d7f0019d01000000800000200000000080000030000000", 0x20, 0xce800}, {&(0x7f000001cd00)="020002006c00000001d7f0019e01000000800000200000000080000030000000", 0x20, 0xcf000}, {&(0x7f000001ce00)="020002006d00000001d7f0019f01000000800000200000000080000030000000", 0x20, 0xcf800}, {&(0x7f000001cf00)="020002006e00000001d7f001a001000000800000200000000080000030000000", 0x20, 0xd0000}, {&(0x7f000001d000)="020002006f00000001d7f001a101000000800000200000000080000030000000", 0x20, 0xd0800}, {&(0x7f000001d100)="020002007000000001d7f001a201000000800000200000000080000030000000", 0x20, 0xd1000}, {&(0x7f000001d200)="020002007100000001d7f001a301000000800000200000000080000030000000", 0x20, 0xd1800}, {&(0x7f000001d300)="020002007200000001d7f001a401000000800000200000000080000030000000", 0x20, 0xd2000}, {&(0x7f000001d400)="020002007300000001d7f001a501000000800000200000000080000030000000", 0x20, 0xd2800}, {&(0x7f000001d500)="020002007400000001d7f001a601000000800000200000000080000030000000", 0x20, 0xd3000}, {&(0x7f000001d600)="020002007500000001d7f001a701000000800000200000000080000030000000", 0x20, 0xd3800}, {&(0x7f000001d700)="020002007600000001d7f001a801000000800000200000000080000030000000", 0x20, 0xd4000}, {&(0x7f000001d800)="020002007700000001d7f001a901000000800000200000000080000030000000", 0x20, 0xd4800}, {&(0x7f000001d900)="020002007800000001d7f001aa01000000800000200000000080000030000000", 0x20, 0xd5000}, {&(0x7f000001da00)="020002007900000001d7f001ab01000000800000200000000080000030000000", 0x20, 0xd5800}, {&(0x7f000001db00)="020002007a00000001d7f001ac01000000800000200000000080000030000000", 0x20, 0xd6000}, {&(0x7f000001dc00)="020002007b00000001d7f001ad01000000800000200000000080000030000000", 0x20, 0xd6800}, {&(0x7f000001dd00)="020002007c00000001d7f001ae01000000800000200000000080000030000000", 0x20, 0xd7000}, {&(0x7f000001de00)="020002007d00000001d7f001af01000000800000200000000080000030000000", 0x20, 0xd7800}, {&(0x7f000001df00)="020002007e00000001d7f001b001000000800000200000000080000030000000", 0x20, 0xd8000}, {&(0x7f000001e000)="020002007f00000001d7f001b101000000800000200000000080000030000000", 0x20, 0xd8800}, {&(0x7f000001e100)="020002008000000001d7f001b201000000800000200000000080000030000000", 0x20, 0xd9000}, {&(0x7f000001e200)="020002008100000001d7f001b301000000800000200000000080000030000000", 0x20, 0xd9800}, {&(0x7f000001e300)="020002008200000001d7f001b401000000800000200000000080000030000000", 0x20, 0xda000}, {&(0x7f000001e400)="020002008300000001d7f201b501000000800000204000000080000030000000", 0x20, 0xda800}, {&(0x7f000001e500)="020002008400000001d7f001b601000000800000200000000080000030000000", 0x20, 0xdb000}, {&(0x7f000001e600)="020002008500000001d7f001b701000000800000200000000080000030000000", 0x20, 0xdb800}, {&(0x7f000001e700)="020002008600000001d7f001b801000000800000200000000080000030000000", 0x20, 0xdc000}], 0x0, &(0x7f000001e800)=ANY=[@ANYBLOB="87"]) r1 = signalfd4(r0, &(0x7f0000000140)={[0x4]}, 0x8, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000001600)=0x800000) 20:40:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000180)={0x0, 0x8072, 0x0, 0x2, 0x3b2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x80, 0x0, 0xa0, 0x80, 0x0, 0x5, 0x4590, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x8, 0x7}, 0x3000, 0xf8, 0x81, 0x5, 0x4, 0x5, 0xa1, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xc, r0, 0x8) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x9}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1826.025770] FAULT_INJECTION: forcing a failure. [ 1826.025770] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.027103] CPU: 1 PID: 10155 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1826.027863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1826.028782] Call Trace: [ 1826.029157] dump_stack+0x107/0x167 [ 1826.029562] should_fail.cold+0x5/0xa [ 1826.029987] ? create_io_worker+0xe8/0x620 [ 1826.030456] ? create_io_worker+0xe8/0x620 [ 1826.030922] should_failslab+0x5/0x20 [ 1826.031341] kmem_cache_alloc_node_trace+0x59/0x340 [ 1826.031893] create_io_worker+0xe8/0x620 [ 1826.032344] io_wqe_enqueue+0x69e/0xbe0 [ 1826.032798] ? create_worker_cb+0x260/0x260 [ 1826.033286] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1826.033791] ? io_prep_async_work+0x34e/0x540 [ 1826.034288] io_queue_async_work+0x26b/0x4f0 [ 1826.034792] __io_queue_sqe+0x5cc/0x9d0 [ 1826.035244] ? io_issue_sqe+0x7700/0x7700 [ 1826.035704] ? io_poll_queue_proc+0x50/0x50 [ 1826.036200] io_submit_sqes+0x4461/0x85c0 [ 1826.036677] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1826.037262] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1826.037796] ? lock_downgrade+0x6d0/0x6d0 [ 1826.038263] ? find_held_lock+0x2c/0x110 [ 1826.038720] ? io_submit_sqes+0x85c0/0x85c0 [ 1826.039215] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1826.039757] ? wait_for_completion_io+0x270/0x270 [ 1826.040306] ? rcu_read_lock_any_held+0x75/0xa0 [ 1826.040829] ? vfs_write+0x354/0xa70 [ 1826.041254] ? fput_many+0x2f/0x1a0 [ 1826.041659] ? ksys_write+0x1a9/0x260 [ 1826.042095] ? __ia32_sys_read+0xb0/0xb0 [ 1826.042548] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1826.043137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1826.043708] do_syscall_64+0x33/0x40 [ 1826.044131] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1826.044714] RIP: 0033:0x7f15c8c78b19 [ 1826.045147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1826.047233] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1826.048069] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1826.048904] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1826.049711] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1826.050520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1826.051342] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:40:52 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffc070, 0x0, @perf_bp={0x0, 0xc}, 0xc0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10) close(r0) 20:40:52 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:40:52 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10800, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xd, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:40:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xff, 0x9, 0x6, 0x0, 0x0, 0x10020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0x71}, 0x12, 0x8000, 0x3, 0x1, 0x0, 0x8, 0x2, 0x0, 0xa2b80010, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r0, 0x9) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) lseek(r1, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 20:40:52 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x78}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) fcntl$dupfd(r4, 0x406, r5) close(r3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x78}) close(r6) r7 = signalfd(r0, &(0x7f0000000200)={[0x2]}, 0x8) write$P9_RUNLINKAT(r7, &(0x7f0000000240)={0x7, 0x4d, 0x1}, 0x7) linkat(r3, &(0x7f0000000100)='./file0\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x400) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 20:40:52 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:40:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r4 = syz_io_uring_complete(r1) r5 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x60, 0xa8, 0x5, 0x6, 0x0, 0x3, 0x11, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x4, 0xffffffff, 0x8, 0x3, 0x81, 0x8, 0x80, 0x0, 0x80, 0x0, 0x4}, r3, 0x0, r4, 0x1) 20:40:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000180)={0x0, 0x8072, 0x0, 0x2, 0x3b2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x80, 0x0, 0xa0, 0x80, 0x0, 0x5, 0x4590, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x8, 0x7}, 0x3000, 0xf8, 0x81, 0x5, 0x4, 0x5, 0xa1, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xc, r0, 0x8) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x9}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) 20:40:52 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:40:52 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10800, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xd, 0xffffffffffffffff, 0xb) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448c9, 0x0) [ 1826.303814] FAULT_INJECTION: forcing a failure. [ 1826.303814] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.305145] CPU: 1 PID: 10182 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1826.305906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1826.306808] Call Trace: [ 1826.307106] dump_stack+0x107/0x167 [ 1826.307522] should_fail.cold+0x5/0xa [ 1826.307942] ? create_object.isra.0+0x3a/0xa20 [ 1826.308459] should_failslab+0x5/0x20 [ 1826.308875] kmem_cache_alloc+0x5b/0x310 [ 1826.309360] create_object.isra.0+0x3a/0xa20 [ 1826.309841] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1826.310407] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1826.310974] create_io_worker+0xe8/0x620 [ 1826.311429] io_wqe_enqueue+0x69e/0xbe0 [ 1826.311875] ? create_worker_cb+0x260/0x260 [ 1826.312341] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1826.312837] ? io_prep_async_work+0x34e/0x540 [ 1826.313334] io_queue_async_work+0x26b/0x4f0 [ 1826.313816] __io_queue_sqe+0x5cc/0x9d0 [ 1826.314268] ? io_issue_sqe+0x7700/0x7700 [ 1826.314735] ? io_poll_queue_proc+0x50/0x50 [ 1826.315235] io_submit_sqes+0x4461/0x85c0 [ 1826.315721] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1826.316284] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1826.316830] ? lock_downgrade+0x6d0/0x6d0 [ 1826.317309] ? find_held_lock+0x2c/0x110 [ 1826.317751] ? io_submit_sqes+0x85c0/0x85c0 [ 1826.318244] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1826.318801] ? wait_for_completion_io+0x270/0x270 [ 1826.319345] ? rcu_read_lock_any_held+0x75/0xa0 [ 1826.319869] ? vfs_write+0x354/0xa70 [ 1826.320276] ? fput_many+0x2f/0x1a0 [ 1826.320689] ? ksys_write+0x1a9/0x260 [ 1826.321109] ? __ia32_sys_read+0xb0/0xb0 [ 1826.321577] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1826.322161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1826.322742] do_syscall_64+0x33/0x40 [ 1826.323160] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1826.323732] RIP: 0033:0x7f15c8c78b19 [ 1826.324152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1826.326230] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1826.327075] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1826.327853] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1826.328652] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1826.329463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1826.330242] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:40:52 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:40:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) syz_io_uring_complete(r1) r3 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:40:53 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000140)=0x1) 20:40:53 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10800, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xd, 0xffffffffffffffff, 0xb) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448c9, 0x0) [ 1826.539636] FAULT_INJECTION: forcing a failure. [ 1826.539636] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.542429] CPU: 0 PID: 10198 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1826.543907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1826.545736] Call Trace: [ 1826.546312] dump_stack+0x107/0x167 [ 1826.547097] should_fail.cold+0x5/0xa [ 1826.547928] ? copy_process+0x5d2/0x7800 [ 1826.548799] should_failslab+0x5/0x20 [ 1826.549631] kmem_cache_alloc_node+0x55/0x330 [ 1826.550589] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1826.551551] copy_process+0x5d2/0x7800 [ 1826.552389] ? stack_depot_save+0xf1/0x400 [ 1826.553318] ? kasan_save_stack+0x32/0x40 [ 1826.554199] ? kasan_save_stack+0x1b/0x40 [ 1826.555087] ? create_io_worker+0xe8/0x620 [ 1826.556005] ? io_wqe_enqueue+0x69e/0xbe0 [ 1826.556933] ? __cleanup_sighand+0xb0/0xb0 [ 1826.557874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1826.559008] ? io_wqe_dec_running+0x220/0x220 [ 1826.559985] create_io_thread+0xb6/0xf0 [ 1826.560849] ? pidfd_pid+0x90/0x90 [ 1826.561640] ? io_wqe_dec_running+0x220/0x220 [ 1826.562632] ? __init_swait_queue_head+0xc6/0x150 [ 1826.563685] create_io_worker+0x23a/0x620 [ 1826.564576] io_wqe_enqueue+0x69e/0xbe0 [ 1826.565449] ? create_worker_cb+0x260/0x260 [ 1826.566372] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1826.567340] ? io_prep_async_work+0x34e/0x540 [ 1826.568306] io_queue_async_work+0x26b/0x4f0 [ 1826.569272] __io_queue_sqe+0x5cc/0x9d0 [ 1826.570142] ? io_issue_sqe+0x7700/0x7700 [ 1826.571021] ? io_poll_queue_proc+0x50/0x50 [ 1826.571980] io_submit_sqes+0x4461/0x85c0 [ 1826.572897] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1826.573986] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1826.575033] ? lock_downgrade+0x6d0/0x6d0 [ 1826.575920] ? find_held_lock+0x2c/0x110 [ 1826.576809] ? io_submit_sqes+0x85c0/0x85c0 [ 1826.577757] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1826.578801] ? wait_for_completion_io+0x270/0x270 [ 1826.579851] ? rcu_read_lock_any_held+0x75/0xa0 [ 1826.580848] ? vfs_write+0x354/0xa70 [ 1826.581662] ? fput_many+0x2f/0x1a0 [ 1826.582446] ? ksys_write+0x1a9/0x260 [ 1826.583271] ? __ia32_sys_read+0xb0/0xb0 [ 1826.584147] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1826.585289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1826.586411] do_syscall_64+0x33/0x40 [ 1826.587214] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1826.588327] RIP: 0033:0x7f15c8c78b19 [ 1826.589137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1826.593154] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1826.594796] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1826.596345] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1826.597899] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1826.599444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1826.600992] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:41:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) syz_io_uring_complete(r1) r3 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:41:06 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000100)='./file0\x00', 0x2000, 0x1) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=@getpolicy={0x11c, 0x15, 0x2, 0x70bd27, 0x25dfdbff, {{@in=@multicast1, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x87, r3, r4}, 0x6e6bb9, 0x2}, [@algo_aead={0x8c, 0x12, {{'rfc7539esp(cbc-aes-ce,sha224-ce)\x00'}, 0x200, 0x60, "a3f5e69e83c849545068c65e8c08ba2cf68cc0d1cad9a68aea4dea38ab91bac99be493041d0aaa8671adcb31f510f7adb3f57611cf1a30e3d9564f44757ee210"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e21, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e21, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @extra_flags={0x8}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) getgroups(0x6, &(0x7f0000000080)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00]) fchown(0xffffffffffffffff, r4, r5) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x10, &(0x7f0000000480)={'trans=unix,', {[{@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@uid_eq={'uid', 0x3d, r4}}, {@euid_eq={'euid', 0x3d, r6}}]}}) r7 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5480000000, 0x22040) r8 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x4e21, @rand_addr=0x64010100}, 'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) setresuid(0xffffffffffffffff, r1, 0x0) openat(r0, &(0x7f0000000280)='./file0\x00', 0xcc382, 0x2) 20:41:06 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:41:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:41:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x78}) close(r1) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0xc180, 0x115) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c0000002b00000129bd7000ffdbdf2537000000ec5b1e01d4f3f118142b643e0b3f0f68be762ee8380f81fafc385209377b3ea460ee6059f1ab74d61fc40107541831eae358044a132303b7b524ac622264ad90dc89af6705796dbc822ccd8ece85b5df4d87156c84799c509cc44908adf14034b7b0d6befbed7c88800000a72ab79b09b70b7c370bad79e357aa21a32ab0d7c85c03106d161e946d47627ecb6e558c40a304878cbee0f5a6af853168161bf687a7c6870ca7d3c1dfc67eb831ade0653c11c1f697a1108465b9bf57dac688a15a8964c12c910b84843c67a5"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x3, 0x10000, 0x30000000000) 20:41:06 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x10800, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xd, 0xffffffffffffffff, 0xb) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448c9, 0x0) 20:41:06 executing program 7: setresuid(0xee00, 0xee00, 0xee01) mq_open(&(0x7f0000000100)='$\x00\xfe%\n\xe1\xa9\xb4\x8f\xdbtz\xf1\x06\xfd\x1c\xda#rC`\x8a\xa5\xf0\x8e\xfd\x8c1\xf70\xf8\xf3x\xf3\x96\xbdy\x9bMK\xc9V\x0f\x06\t\xda\x92\xc9\xcb\x18\xe2\n\x97\'*\x93\x9c\xa6V\xbe\xd5\xdc\xdc\xfa\xc2\xb4\xe5W.\xd5-4\xce\xfbx-J\x01\xb7\x8a\xd6\x8cp\xd5\x94\xf5\x93\xfa\x14\xcd\x90\xd5\x05\xb43V\xbe\x10\xe2\xed\xb1\x18\x04(\x1b \xf8\xc6\x99\xc5D\xd6M\xe0\xf5\x18l\xd0\xcc\xcc\xe2\x99\xea\xa1>\x93X\xdb\xf7\xb3~\xcc\x90f4\"\xa3l\xb9\xc1\x8a\xef#Xl!\x9bpo\xc7h\r\xaf\xf6\x96MRp\xfbZ\x94\xf2\xcb\xec\x06\xe9d\xf1\xee\xf4Je\v8\xe7\v\x89\x85\xd2\xa0k\x8f\xe3\x04]\xe3\xc2\x17\xb6N\xda(7\x10S\xe6', 0x40, 0x0, &(0x7f0000000040)={0x4, 0x1000, 0xb520, 0x6dd}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = dup(r0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)=@getpolicy={0x108, 0x15, 0x2, 0x70bd27, 0x25dfdbff, {{@in=@multicast1, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x87, r2, r3}, 0x6e6bb9, 0x2}, [@algo_aead={0x8c, 0x12, {{'rfc7539esp(cbc-aes-ce,sha224-ce)\x00'}, 0x200, 0x60, "a3f5e69e83c849545068c65e8c08ba2cf68cc0d1cad9a68aea4dea38ab91bac99be493041d0aaa8671adcb31f510f7adb3f57611cf1a30e3d9564f44757ee210"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e21, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @tfcpad={0x8, 0x16, 0x5}, @extra_flags={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) getgroups(0x6, &(0x7f0000000080)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00]) fchown(r0, r3, r4) recvmsg$unix(r1, &(0x7f0000000880)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000640)=""/7, 0x7}, {&(0x7f0000000a40)=""/185, 0xb9}], 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c835160ff42ef6468e05d0d84f44ec20000000000004d9b3af02fd2dda26eb3006181d9e6010003dcacd4f1ea7e6291ae50f9c95853a13e76c1f199a56e6a15fb0946252e2531ba6a6b19043c270f8b", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}, 0x12040) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x4000010, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x78}) close(r7) syz_io_uring_submit(r6, 0x0, &(0x7f0000000a00)=@IORING_OP_STATX={0x15, 0x0, 0x0, r7, &(0x7f00000008c0), &(0x7f00000009c0)='./file0\x00', 0x7ff, 0x2000, 0x1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) setresuid(r3, 0xffffffffffffffff, r8) 20:41:06 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x2, 0x0, 0x687981c5ff4dd88, @mcast2, @mcast1, 0x7, 0x700, 0x4, 0xfff}}) [ 1839.528196] audit: type=1326 audit(1699735266.066:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10217 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69c64b19 code=0x7ffc0000 [ 1839.530709] audit: type=1326 audit(1699735266.067:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10217 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69c64b19 code=0x7ffc0000 [ 1839.535582] audit: type=1326 audit(1699735266.072:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10217 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a69c64b19 code=0x7ffc0000 20:41:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1839.545164] audit: type=1326 audit(1699735266.073:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10217 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69c64b19 code=0x7ffc0000 [ 1839.550345] 9pnet: p9_fd_create_unix (10221): problem connecting socket: ./file0: -111 [ 1839.551588] audit: type=1326 audit(1699735266.073:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10217 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69c64b19 code=0x7ffc0000 [ 1839.557109] audit: type=1326 audit(1699735266.074:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10217 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4a69c64b19 code=0x7ffc0000 [ 1839.563169] audit: type=1326 audit(1699735266.074:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10217 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f4a69c64ad7 code=0x7ffc0000 [ 1839.566376] audit: type=1326 audit(1699735266.077:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10217 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4a69c17ab7 code=0x7ffc0000 [ 1839.575508] audit: type=1326 audit(1699735266.111:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10217 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4a69c17ab7 code=0x7ffc0000 [ 1839.578262] audit: type=1326 audit(1699735266.111:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10217 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4a69c17ab7 code=0x7ffc0000 [ 1839.595043] FAULT_INJECTION: forcing a failure. [ 1839.595043] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.598306] CPU: 1 PID: 10223 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1839.599720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1839.601408] Call Trace: [ 1839.601948] dump_stack+0x107/0x167 [ 1839.602684] should_fail.cold+0x5/0xa [ 1839.603458] ? create_object.isra.0+0x3a/0xa20 [ 1839.604382] ? create_object.isra.0+0x3a/0xa20 [ 1839.605320] should_failslab+0x5/0x20 [ 1839.606087] kmem_cache_alloc+0x5b/0x310 [ 1839.606910] ? copy_process+0x5d2/0x7800 [ 1839.607741] create_object.isra.0+0x3a/0xa20 [ 1839.608633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1839.609685] kmem_cache_alloc_node+0x169/0x330 [ 1839.610611] copy_process+0x5d2/0x7800 [ 1839.611405] ? stack_trace_save+0x8c/0xc0 [ 1839.612247] ? stack_trace_consume_entry+0x160/0x160 [ 1839.613288] ? kasan_save_stack+0x32/0x40 [ 1839.614130] ? kasan_save_stack+0x1b/0x40 [ 1839.614966] ? create_io_worker+0xe8/0x620 [ 1839.615820] ? io_wqe_enqueue+0x69e/0xbe0 [ 1839.616666] ? __cleanup_sighand+0xb0/0xb0 [ 1839.617555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.618621] ? io_wqe_dec_running+0x220/0x220 [ 1839.619525] create_io_thread+0xb6/0xf0 [ 1839.620330] ? pidfd_pid+0x90/0x90 [ 1839.621056] ? io_wqe_dec_running+0x220/0x220 [ 1839.621986] ? __init_swait_queue_head+0xc6/0x150 [ 1839.622964] create_io_worker+0x23a/0x620 [ 1839.623806] io_wqe_enqueue+0x69e/0xbe0 [ 1839.624611] ? create_worker_cb+0x260/0x260 [ 1839.625504] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1839.626417] ? io_prep_async_work+0x34e/0x540 [ 1839.627330] io_queue_async_work+0x26b/0x4f0 [ 1839.628226] __io_queue_sqe+0x5cc/0x9d0 [ 1839.629035] ? io_issue_sqe+0x7700/0x7700 [ 1839.629907] ? io_poll_queue_proc+0x50/0x50 [ 1839.630791] ? __sanitizer_cov_trace_switch+0xe/0x80 [ 1839.631817] io_submit_sqes+0x4461/0x85c0 [ 1839.632686] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1839.633707] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1839.634688] ? lock_downgrade+0x6d0/0x6d0 [ 1839.635529] ? find_held_lock+0x2c/0x110 [ 1839.636359] ? io_submit_sqes+0x85c0/0x85c0 [ 1839.637260] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1839.638236] ? wait_for_completion_io+0x270/0x270 [ 1839.639215] ? rcu_read_lock_any_held+0x75/0xa0 [ 1839.640153] ? vfs_write+0x354/0xa70 [ 1839.640911] ? fput_many+0x2f/0x1a0 [ 1839.641649] ? ksys_write+0x1a9/0x260 [ 1839.642393] ? __ia32_sys_read+0xb0/0xb0 [ 1839.643187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1839.644215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1839.645236] do_syscall_64+0x33/0x40 [ 1839.645966] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1839.646967] RIP: 0033:0x7f15c8c78b19 [ 1839.647720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1839.651456] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1839.652998] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1839.654449] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1839.655886] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1839.657346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1839.658782] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:41:18 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:41:18 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:41:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:41:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x42}, 0x0, 0x18}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r2 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000100)={{r2}, "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"}) 20:41:18 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r1, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/181, 0x11}], 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000ac0)=""/182, 0xb6, 0x9) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000080)={0x0, 0x6, @start={0x0, 0x0, "e09a4fd8afae45450c61b09d2f32d28cb366ea7b9a2e7b8f27d257017c7312b3e816421510707f66df32a2134470b246adb3059c6eeda4f305cc3ff7a0d7595100aeefc215f5339b34ac8d967784261e8e9dc0e32cadb4cbb785632860135c68bcdfb39ab4a258231c916c6021b52f822dd352824c974d4c772f68ba309db744ef5fc2205fb815f9a8cb80b2167230eb651be6edcbd11136fc22ee4c50cf7fb87c54b3a6353159e8f2d962e6862cc87a81efd21b27eca65946ea193365c9d14dcf60e745c870332cb5d3720b90e7557ae867b7412afcc20b75de7618f21a8fca6bf21cfcc7ada989bd4f466e91c050f97108675aa526bd741fe47c33de3ece153f6af565f15491dce6cf0f35bab4125d59278fb9995af6e4734ec14d08cf841524d6c387a8bbb6423c29916b7430f5ba77d3d2ea02d2f37eda40e56de7134557f3b95a32e94d98c61ea8f3bed0c838a70a82fd8bf31735d8a3f58b9a5c8e74cafc5c51b2ba6a0621e69ce68c916443f142dffed02f7b97ce4619997e0fca9a01f2be10bc4d84b6746ab6a09ca515e2ca619a7010633a4b3602d6a1003426a027aba6c1ce313093f62de0cd36def5af6976725db5a6341d9bbdc73a9063dca73626ffe08f6d5f7d97253f86e77f58cf76af44c84c4414dad5ff038276c4c483547391435a23c01fedee0aa3a3179d9ee02a6b350c61308d069742439531771c2b32e956029595559051c152307480da95f1eb3fe75070b6228a37c8d98e0e5651d31b18285f08c40bdf7c94e77c2d003e8090efc8c4d0cb426dd576c37f3da42f68a228e6295a68da12a8ea22f63ed64876af1eb660fb68dc05d9295468c56b1842595aad3a385c42395393bacd2e1b2731e6d8ebe036fa2df43e9e63ffa3172b0784f40e41aee27701e92dddeec21147b4f85b7eaaf178bb41a9ad4073ff67e278515c860696d67fe28f6c19845b452fc56c8aee7ce5fc4a7b91092e493b5d6b48290c1257ff57392d2a285b46935ed40a79812d26baacf4c78dfab785379dbed6726427045a0e82a080b698e8f4b0e9705a7e0e2c34f71c0fdd56f47396561a35dd116a3dba197fe0f928c9c1f9f29d1a04047eef3bef9c7a6bf4b8f946ceaaf6d8310757849c6cf6fc4259c1e3893eb88a5c432421143aea559586010cf76b319c8cb7756d5a8891b4440784d0361538d0fccd0ce7cf88bf8fdbc861c45315b36b15100bf1d74fac140fe4097a22c540d113f407301dcf90fba19c8a524440fdf46e80a79778375685aa1293f45e8effda6ff6e1342cbcb8e65714f1341904010e2b44cc42b7976435677e09aca6716576dc509e3b6f7a756e2ac8a8f826418b161e44598207e3e6621d9a928d2ca04a47fa3b8eefce9e53c7a83825e09451931b35ceb2dd2f17aa6829a0cd6702fe584782c8624f9110584280ebbf891c5c90", "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"}, [0x0, 0xbc2, 0x3, 0x60000, 0x1, 0x8, 0x229d, 0x2, 0x0, 0x4, 0x0, 0xc775, 0x3, 0x6, 0x626, 0x8, 0xba55, 0xfff, 0x1, 0x8, 0xdd9a, 0xffffffffffff0000, 0x5, 0xfffffffffffffffc, 0x1, 0x7, 0x0, 0xfff, 0xfffffffffffffffb, 0x9, 0x9, 0x8000, 0x6, 0x2, 0x4, 0xa296, 0x2, 0x8, 0x4, 0x81, 0x3, 0x25, 0x3f, 0x1, 0xfffffffffffffffb, 0x9, 0x3, 0x3f, 0x0, 0x200, 0x100000001, 0x50df, 0x6d, 0xe, 0x5, 0x50e8c464, 0x101, 0x7, 0x8, 0x5, 0x8, 0x5, 0x10000, 0x9]}) 20:41:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/158, 0x9e}, {0x0}, {0x0}, {&(0x7f0000000800)=""/181, 0xb5}, {&(0x7f0000000300)=""/79, 0x4f}], 0x5, &(0x7f0000000ac0)=""/179, 0xb3}, 0x8}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000022, &(0x7f0000004800)={0x77359400}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) connect$unix(r2, &(0x7f0000000100)=@abs={0x1}, 0x6e) unlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file0/file0\x00', 0x200) write(r2, &(0x7f00000000c0)="e2dfba27c44c36cf7937d4600e67", 0xe) sendfile(r0, r1, 0x0, 0x100000001) r3 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x800) getpeername$unix(r3, &(0x7f0000000440)=@abs, &(0x7f0000000200)=0x6e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x18300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0xca0cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r4, 0x0, 0x80000001) fcntl$dupfd(r4, 0x406, r0) 20:41:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) syz_io_uring_complete(r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:41:18 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x2, 0x0, 0x687981c5ff4dd88, @mcast2, @mcast1, 0x7, 0x700, 0x4, 0xfff}}) [ 1852.224554] kauditd_printk_skb: 27 callbacks suppressed [ 1852.224572] audit: type=1326 audit(1699735278.759:57): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10248 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69c64b19 code=0x7ffc0000 20:41:18 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) [ 1852.239695] audit: type=1326 audit(1699735278.773:58): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10248 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a69c64b19 code=0x7ffc0000 [ 1852.252036] audit: type=1326 audit(1699735278.790:59): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10248 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a69c64b19 code=0x7ffc0000 20:41:18 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd, 0x6, &(0x7f0000000300)=""/250, 0xfa, 0x2}, 0x1ff) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x3]}, 0x8, 0x80800) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) munlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x3, &(0x7f0000ffa000/0x4000)=nil, 0x5) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9bbb) mmap$usbmon(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x13, 0xffffffffffffffff, 0x0) [ 1852.274691] audit: type=1326 audit(1699735278.800:60): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10248 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4a69c64b19 code=0x7ffc0000 [ 1852.283562] audit: type=1326 audit(1699735278.805:61): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10248 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f4a69c64ad7 code=0x7ffc0000 [ 1852.292381] audit: type=1326 audit(1699735278.813:62): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10248 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4a69c17ab7 code=0x7ffc0000 [ 1852.300458] audit: type=1326 audit(1699735278.828:63): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10248 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4a69c17ab7 code=0x7ffc0000 [ 1852.310759] audit: type=1326 audit(1699735278.829:64): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10248 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4a69c17ab7 code=0x7ffc0000 [ 1852.316641] audit: type=1326 audit(1699735278.842:65): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10248 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4a69c17ab7 code=0x7ffc0000 [ 1852.323666] audit: type=1326 audit(1699735278.861:66): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10248 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f4a69c17ab7 code=0x7ffc0000 20:41:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1852.383485] FAULT_INJECTION: forcing a failure. [ 1852.383485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1852.386201] CPU: 1 PID: 10254 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1852.387793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1852.389782] Call Trace: [ 1852.390354] dump_stack+0x107/0x167 [ 1852.391158] should_fail.cold+0x5/0xa [ 1852.391994] __alloc_pages_nodemask+0x182/0x600 [ 1852.392956] ? lock_downgrade+0x6d0/0x6d0 [ 1852.393801] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1852.395022] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1852.396217] ? kmem_cache_alloc_node+0x2bc/0x330 [ 1852.397266] copy_process+0x618/0x7800 [ 1852.398059] ? stack_trace_save+0x8c/0xc0 [ 1852.398895] ? stack_trace_consume_entry+0x160/0x160 [ 1852.399915] ? mark_lock+0xf5/0x2df0 [ 1852.400672] ? create_io_worker+0xe8/0x620 [ 1852.401526] ? io_wqe_enqueue+0x69e/0xbe0 [ 1852.402363] ? __cleanup_sighand+0xb0/0xb0 [ 1852.403338] ? io_wqe_dec_running+0x220/0x220 [ 1852.404452] create_io_thread+0xb6/0xf0 [ 1852.405270] ? pidfd_pid+0x90/0x90 [ 1852.405987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1852.407035] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1852.408124] ? io_wqe_dec_running+0x220/0x220 [ 1852.409033] ? create_io_worker+0x202/0x620 [ 1852.409918] create_io_worker+0x23a/0x620 [ 1852.410901] io_wqe_enqueue+0x69e/0xbe0 [ 1852.411896] ? create_worker_cb+0x260/0x260 [ 1852.412759] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1852.413687] ? io_prep_async_work+0x34e/0x540 [ 1852.414599] io_queue_async_work+0x26b/0x4f0 [ 1852.415469] __io_queue_sqe+0x5cc/0x9d0 [ 1852.416351] ? io_issue_sqe+0x7700/0x7700 [ 1852.417261] ? io_poll_queue_proc+0x50/0x50 [ 1852.418239] io_submit_sqes+0x4461/0x85c0 [ 1852.419135] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1852.420120] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1852.421092] ? lock_downgrade+0x6d0/0x6d0 [ 1852.421936] ? find_held_lock+0x2c/0x110 [ 1852.422835] ? io_submit_sqes+0x85c0/0x85c0 [ 1852.423885] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1852.424850] ? wait_for_completion_io+0x270/0x270 [ 1852.425875] ? rcu_read_lock_any_held+0x75/0xa0 [ 1852.426790] ? vfs_write+0x354/0xa70 [ 1852.427538] ? fput_many+0x2f/0x1a0 [ 1852.428355] ? ksys_write+0x1a9/0x260 [ 1852.429208] ? __ia32_sys_read+0xb0/0xb0 [ 1852.430132] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1852.431165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1852.432190] do_syscall_64+0x33/0x40 [ 1852.432943] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1852.434056] RIP: 0033:0x7f15c8c78b19 [ 1852.434908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1852.438643] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1852.440278] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1852.442254] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1852.443955] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1852.445692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1852.447489] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:41:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) syz_io_uring_complete(r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:41:19 executing program 7: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) 20:41:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getpgid(0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x118, 0x12, 0x100, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private}, @typed={0xfa, 0x55, 0x0, 0x0, @binary="5ee16858c38d2219500e7ec24adf72bdda33034b6bc604b1eeb2a0e5c1d018aa7e17132ec988e19cc0e369d5905a204e8b893ea2d856a6cfe088b0ff084463d457ebe04599a6e4297a909c6f0dbb3d2c6fda8300aa0c9dd4a8b6989b9e6a099aac06caf60b2e70154b7b860f367caafa4aaabef6d9f5baf96ed26c5256575e6fe75476246a3bd80f06e0f4cedb1032e217ead6272737b7d802dc8e77a5193132e793dfde350a30d9c9908e1ba83d01bd3e2b54d0f2a4b5cbbb76dd84655d5810356d7baf0bb91f10988d19480a569f30407db7e0e2dc570c77f26e4d8e0d97ad88a0357c4d6413981dd6ebe7797285d92b6a8c1dc25b"}]}, 0x118}}, 0x1) 20:41:19 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:41:19 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:41:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) syz_io_uring_complete(r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 1852.691779] udc-core: couldn't find an available UDC or it's busy [ 1852.693351] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:41:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:41:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:41:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) syz_io_uring_complete(r1) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:41:19 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) [ 1852.880532] FAULT_INJECTION: forcing a failure. [ 1852.880532] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.883516] CPU: 1 PID: 10284 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1852.885097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1852.886933] Call Trace: [ 1852.887535] dump_stack+0x107/0x167 [ 1852.888278] should_fail.cold+0x5/0xa [ 1852.889098] ? __delayacct_tsk_init+0x1b/0x80 [ 1852.890147] should_failslab+0x5/0x20 [ 1852.890915] kmem_cache_alloc+0x5b/0x310 [ 1852.891821] __delayacct_tsk_init+0x1b/0x80 [ 1852.892735] copy_process+0x3319/0x7800 [ 1852.893637] ? stack_depot_save+0x6d/0x400 [ 1852.894578] ? kasan_save_stack+0x1b/0x40 [ 1852.895445] ? __cleanup_sighand+0xb0/0xb0 [ 1852.896463] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1852.897618] ? io_wqe_dec_running+0x220/0x220 [ 1852.898591] create_io_thread+0xb6/0xf0 [ 1852.899400] ? pidfd_pid+0x90/0x90 [ 1852.900118] ? io_wqe_dec_running+0x220/0x220 [ 1852.901032] ? __init_swait_queue_head+0xc6/0x150 [ 1852.902013] create_io_worker+0x23a/0x620 [ 1852.902928] io_wqe_enqueue+0x69e/0xbe0 [ 1852.903796] ? create_worker_cb+0x260/0x260 [ 1852.904772] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1852.905691] ? io_prep_async_work+0x34e/0x540 [ 1852.906610] io_queue_async_work+0x26b/0x4f0 [ 1852.907559] __io_queue_sqe+0x5cc/0x9d0 [ 1852.908456] ? io_issue_sqe+0x7700/0x7700 [ 1852.909422] ? io_poll_queue_proc+0x50/0x50 [ 1852.910337] ? io_submit_sqes+0x4429/0x85c0 [ 1852.911222] ? io_submit_sqes+0x4437/0x85c0 [ 1852.912181] io_submit_sqes+0x4461/0x85c0 [ 1852.913031] ? percpu_ref_tryget_many+0x17c/0x2d0 [ 1852.914130] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1852.915190] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1852.916317] ? lock_downgrade+0x6d0/0x6d0 [ 1852.917142] ? find_held_lock+0x2c/0x110 [ 1852.918053] ? io_submit_sqes+0x85c0/0x85c0 [ 1852.918928] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1852.919914] ? wait_for_completion_io+0x270/0x270 [ 1852.920961] ? rcu_read_lock_any_held+0x75/0xa0 [ 1852.922089] ? vfs_write+0x354/0xa70 [ 1852.922843] ? fput_many+0x2f/0x1a0 [ 1852.923571] ? ksys_write+0x1a9/0x260 [ 1852.924334] ? __ia32_sys_read+0xb0/0xb0 [ 1852.925161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1852.926222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1852.927275] do_syscall_64+0x33/0x40 [ 1852.928139] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1852.929284] RIP: 0033:0x7f15c8c78b19 [ 1852.930113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1852.934035] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1852.935652] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1852.937085] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1852.938627] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1852.940080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1852.941620] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:41:19 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="1a00000080000000000000637572697479f957b22e1b774afe8fa6992bc3665f1ae501969959dea9d4a918089a4b95e14150232df5d53866f8d2c2d350c5334d805875c5c3125ceff74149360a9fcee3caee05408579cad1095e01f730e662ef345b86d6fe51eb085d0f38b57fcdf66492a41ff05ffcdb3858b018038ea1775b8000d76642df4cae70c53f08b5b4e20a1e33dd6d631f99"], 0x1a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000380)={0x6, 'gre0\x00', {}, 0x20}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xa01d, 0x20, 0x0, 0x342}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9686b2ee929616b7, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000001c0)) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000540)=ANY=[@ANYBLOB="e602360041000800000500c0cefcedcc64456dc3026fc7270300a28ce2d10d69c19cc92a89e0e8006cae3c03e2cd52fb690a5821e92d1ea02d49bcf41c21e99e30bd00abff79bf2df543268e998b19e1995496a05b34c9bd973922d0b645fa535e6ccead8cdd3750769177c8f6ea272912631fb84a37654a6bfdd776ac74790b7f2a0a35a814f6cc845e9fe4f0ba140c59b1a14ffa11c99c80487a95afb81b51f1fa09e9539966c16e15854fbfc5a9e63e0866ff1e005e934d3712ac4f9fa3a2a84eb909fa"], 0x54, 0x1) r2 = syz_io_uring_setup(0x5556, &(0x7f0000000240)={0x0, 0x82a4, 0x20, 0x0, 0x33a, 0x0, r0}, &(0x7f0000ff7000/0x8000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb, 0x30, r2, 0x8000000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup2(0xffffffffffffffff, r4) r6 = signalfd(r3, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000200)) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) 20:41:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r3 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:41:19 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:41:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:41:19 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:41:19 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:41:19 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x8001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x5, 0x3, 0xfc01, 0x40, 0x77}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10088, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r2, 0x0, &(0x7f0000000600)={0x1, 0x0, 0x7e32, 0xb1fcdcc}) fcntl$lock(r2, 0x26, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x43}) pidfd_getfd(r0, r2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200)) renameat2(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', r2, 0x0, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "f08ae4982277a7420924b401e61ede1b"}, 0x11, 0x1) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffffc]}, 0x8, 0xc0800) fcntl$lock(r1, 0x25, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000240)=""/168) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3f, 0x0, 0x0, 0xe1, 0x0, 0x5e, 0x80068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x40000000000000}, 0xa405, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6d7a2ebe, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 1853.457712] FAULT_INJECTION: forcing a failure. [ 1853.457712] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.460692] CPU: 0 PID: 10316 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1853.462170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1853.463884] Call Trace: [ 1853.464431] dump_stack+0x107/0x167 [ 1853.465177] should_fail.cold+0x5/0xa [ 1853.466099] ? create_object.isra.0+0x3a/0xa20 [ 1853.467240] should_failslab+0x5/0x20 [ 1853.468204] kmem_cache_alloc+0x5b/0x310 [ 1853.469237] create_object.isra.0+0x3a/0xa20 [ 1853.470360] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1853.471537] kmem_cache_alloc+0x159/0x310 [ 1853.472384] __delayacct_tsk_init+0x1b/0x80 [ 1853.473273] copy_process+0x3319/0x7800 [ 1853.474088] ? mark_lock+0xf5/0x2df0 [ 1853.474860] ? stack_trace_save+0x8c/0xc0 [ 1853.475713] ? stack_trace_consume_entry+0x160/0x160 [ 1853.476739] ? lock_chain_count+0x20/0x20 [ 1853.477614] ? kasan_save_stack+0x1b/0x40 [ 1853.478476] ? __cleanup_sighand+0xb0/0xb0 [ 1853.479344] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1853.480428] ? io_wqe_dec_running+0x220/0x220 [ 1853.481348] create_io_thread+0xb6/0xf0 [ 1853.482160] ? pidfd_pid+0x90/0x90 [ 1853.482901] ? io_wqe_dec_running+0x220/0x220 [ 1853.483829] ? __init_swait_queue_head+0xc6/0x150 [ 1853.484817] create_io_worker+0x23a/0x620 [ 1853.485679] ? create_io_worker+0x2/0x620 [ 1853.486533] io_wqe_enqueue+0x69e/0xbe0 [ 1853.487340] ? create_worker_cb+0x260/0x260 [ 1853.488220] ? __sanitizer_cov_trace_pc+0x3c/0x60 [ 1853.489224] ? io_prep_async_work+0x34e/0x540 [ 1853.490163] io_queue_async_work+0x26b/0x4f0 [ 1853.491082] __io_queue_sqe+0x5cc/0x9d0 [ 1853.491900] ? io_issue_sqe+0x7700/0x7700 [ 1853.492758] ? io_poll_queue_proc+0x50/0x50 [ 1853.493650] io_submit_sqes+0x4461/0x85c0 [ 1853.494543] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1853.495564] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1853.496549] ? io_submit_sqes+0x85c0/0x85c0 [ 1853.497457] ? recalibrate_cpu_khz+0x10/0x10 [ 1853.498344] ? ktime_get+0x158/0x1f0 [ 1853.499113] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1853.500014] ? clockevents_program_event+0x131/0x360 [ 1853.501045] ? tick_program_event+0xa8/0x140 [ 1853.501953] ? hrtimer_interrupt+0x771/0x9b0 [ 1853.502870] do_syscall_64+0x33/0x40 [ 1853.503625] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1853.504648] RIP: 0033:0x7f15c8c78b19 [ 1853.505405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1853.509057] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1853.510636] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1853.512045] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1853.513529] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1853.514979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1853.516450] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:41:34 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:41:34 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:41:34 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:41:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) r3 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:41:34 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:41:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000003200010100000000000000000000000008000100", @ANYRES32, @ANYBLOB="1a00"], 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x78}) close(r1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)="3256f044b13201bfdb2814d32bb324f0668c432a3e0025e5a45931471879459d590003bf39be7fc18a948f513277af581bc36a43e3b45b250e5334ddc942c8c34c411695a87d751775b3a9379331f3c33cb6b75a9a47c606b57b714b851ba41426b318ac8f5ce5a9e90a34b599f70137f0a7f481701afed72371475c6a08d3c15ea62bb67e819b4819f151ecd2b1ab89ee78f909f5ecf9e00baac1ad19a88ec5a3e0f8d30a02c77996281a6d47e6bab296ca3a78738af4b8aced8ca5411b75eb36fa31180495cae272680c81610b50a0bb664fbce433322d9630c9ab45aa88afa77298210908ca483af94062b1dd4abbc738fe954cb03c5f252c85ff038e89469508c9211bf99ec3a94fb694f5c74f8ad2a12391e70298a66dc13a4684f56213063cbd3c9135d09ffb7ac225cab7b84840cf959fb160fcb18de21600713742e18b6fe5ef02954ea239dd1400a28bb95d1841668df3f231b55ed680fcfc2d1ec42f16250aee3dc833d75cdfa6d51d7c9d434c48d920778a93c873edca9dec6d564772b69c1a1435a85f5b9d2319134bb59c3864cdd6252fc3694cafb13768fd4c794ea58c6643f3333ab6c96af1863eb20c2f13fb5cd3aa770adf356d82c27ee5157e5855afefffe3ca975f3790009190d673ecbb7534a92e839cfafd48164438d7815891e4513c63535cc659b9656d6e35f602a4c2c78ae5842f006393da108ce1f918d902b19c400aefe6c1a8ef1275c06a92438ea6619b59675c1eed528a03f786cc01f6e60f51fc07c3ec14f1475027c90b361fca980f9d733e5c2ad0ab554d4765d0c4b8bb6d698fcc2103f2e2a2ab893ac65ea5c8bec64fb755fac85aebb3098517c0f5b10ddd73a9abaf201e85507340630a14236d8c08a3f81f1abbd69d470b8298a039142858c51f424d44881ab1b69a50753a44fb94396765e1d698f7b2ce0d4b4b3da476128343e32a2b390231a940d42d49a8aeac014e86959a656625dba257427c93813e94cf6484f96e8d09ffc86faec6235411f4c93f64c1f036022a6b3d117dc220d588cdaff39f33b1d18a4d7dde32470d150adf02472a114f2ec90ca68a41210e9e9c47494e8da6571b718b64f669492d979427dc1eda496ff28297d85889d30466e8be293df2466a4643b0342814a582c6b308969da0efc3bfea153fe912d309ded5ef39748b728d4bdcb1800118e099ee8ed0b08c3877aa75ab55bffc69720e7de3ad1c4a532c8dd69a6d1a589b1fce17ba2da0113325c10eb0d198dab31ee74e2d6eafd863fca533e6bde39452c6f73e593657852ecff8ffa1b9309f1874220f94dbf21e3eefd95d3fc2007d019b7bf70f807102ee5b50273b977d9d6020058e52d76c0333deb1affefc1ae2d545066e0932bbd1da40e143a51adda557267ff2350ddc8b1a5d299bd000916cd4e60ed086bf35ac3f1982565ef09070116dfed680fb6640fa3740622926df51014b00430b1f09c733a225af71207b64d933e18ccf24276eaeb0bd5caef8cb82870c70ff6331d56e75cac7c2d82802718c6802481f6d6d030bd5e5c564addcc9cf9702094169ca4a006d6ba525de621d4122d080af37bfc302f9e23db939fc2198c2d96a9bd0ffa74e4ab259d8915329aa98279203ce1fe8625beecd45cf9b31ea509125ab573e5a2db0430b03ab759e02bb55c4605c283927da5933c6ff5ef85ddfc3d9658fa44c0af2f85e7500b7b28ade0e24a2bea190873fcf908a45aba00aec28a98672f228dad025bc31969c53f6fe9dcc8e4c7fff5af4f297def69017ea52bab85a9aefb3231110f7a81b4cce114bf992136ae961e6424b2b97321dd919bf190025069101a5615c1c0581685ce4838a951370a30235c0ab2577e1cf41882e45d5550f89e95fe4b2e7c7eb094845a7e2f8cc122475a2269c5210560635b9997d0c2821b598145a04afd20b371eebdd359e518ab757f05789dd308ad5cb676eb964a88c56990c71ec64d4919285f59c28c129c50df2eeb891f6090cb968cf2c5eda9a996bbfd8251bd9e284b9ae04f32e6714e5cbcacdbbfc1fbd84ac8e7f9ca9e49410e961b1d250048885fcc86a6c5ca68681d9f77997c993cb8f5852d159f6c85243d0d4b5494d7f6223205fbef13b5617364b552480040c7a142bee19ed3df602e5d1adcf53f494510f95a98b0c624f944cb92ea3fc6f4fb9a9984e6a8c420813856cd8bd366986c314cf7efa1f4e6cd89209c4df56115b181f633ea1ebf294c7ce427e431604513f5487266807207ae3329aa346898083e85958dd2e547868b802bf648f257dfa43a0c717a2b870fd088f62b0d055bc2dd5b25c396aeb2141be5a52eaf91607fafeabeeafff48fa8889cffb044acace9a5d9f141992659b8cf2fe3383bcb67a691e0c7e45d0d1757d48089d7795bdeb7f86bf4e884507fc70d0de2fcc38386022fe20a2edb04f1c581c53d4eb5b930f093e85a7948a43d7f877862927422bf0a1241fb903ebf8ebfa97722c3230a316924efd540ab05016e7ae56907905678b08b7f0b32eaa6fb19e522b1ff9872886ba94af07f3884fe6c7de3899c4209b5be550715b232c79b1e5c6b415f4178cc6f4cb6fb4d96b23c8d5decabae495041342f2b5725a3d3eb780e047ce9d7336aee348d06c717922c07a15d2e5beb55681289e35286a2827e78bd3a264a5a6da50142c617ae1d7bcb896049a9007122d71c1af3d0e40bcf48134b2625d87aba53b7edccded77de441e509812b85be9fdb1968667e859c1745e689f1773d6aa59088abf244137df4ede9e9ffea1b1d1996dbd8abedd39657ba64dfa87362024c11591acd3ec095b6ab4c4e572ede05d47f8e39bd00a9c31b30500bd847817e0d422faadde88883049d38694033104584b7df81607ac59fddfb72bcc7a215d340286488d637e33ca535446af3b8dd0cbd72c0f409078725fe5f56c49b82f135ce92f2675a9c32c7d234204289688ca3d640c2817ecce73cba77ae00b291fde6499108e571ea48c487a35ba66b2f49df168cafff2de79f87ddb7254c7cf0088bb25a63bd2378393f66b30fa113f7a22db10601429fcdf7500252891280e5e705e238989e1127baf2cae894803f4e0a19eaff77bd363f4567efebf018232b6ffe469809aefde4416ad3add166a5e7c02fb28534b2b873be4ef504ce72d01af71068ec74270e7f7472587bd64a84d722f362bbb143d9a83eb5256f33d94e07738aa2be15583afea9d02cd40f7fef10835cd5a3e40072b23595aa5c71c8e317ac7c244cb04b76490f261fa4f880afb475996942484692f502f83e6ac719a8327e864dae16b95e82502b537dd6cf372e0723e4c8a53462eacaf25681dda7654c9b86e53f75a266cf67fc3e28e28369ca32545efa2c87e0b4c4efbf91987e585ab7cc678235faffad1014763a2508c61932124160af6ac2d5bb00ca850f6ae263492afa2042c84ded64b98c9fa065be2f2f37472667b3f536cb8eee32e6a8fd19154d84c933f4b40d56d793f79d4d468f16b5665921fcf18486d3e94c5b0b9cf0323dc4c3d80ada66813a0a8e65181be09c19f785076807e28b33ca6bb6fc606d41dd571aa98e12a12613070a68b504d3c60355cc267bc6b09ac116035df0f72c7b38ed6e5fe65496303a73943671a2fe34c602f0256c2959ef66d07484a10401c6c1aac26d0585538ac9a38ab91e3886485305cbd7c3b9f8557b6ba379bf16b8ac04661473832ceb7dcf8f9efb2dda8592204eb4c0d62d3c6f45e7b0d5aa258f9d727cb382f2bfc3f16a25040c8c372567654f38764f0276c31e63dd0eb08bc74ef0b543d809f705ad8d34fad788d37f071f6bbcb1c185351a1f212a906307bc1568d8500be9ae3dfb433239e951c846f82bca34b851dc4385348eb9441a4d5f1ad90fda1645652ab3fd86e8fd6f034f1df333d60667c8c1b6838c8390f5fdf2e68e428023189fc2e5462c5efbe64a7a872cdccec7efcd5809060f07228be064d20cab5f6b1460182b7e6ee77a03e8b74c3dbe1221085a12d5253f4207168caa1eadb2872723db9dcc47d2b6bf19782705297d6c0636bdc408a028e7640725bc00fb012b1412b253d8724f6b2368dfaa1571a84a14f6456271181c0157de3586f1b66cff00372f2c527efad041856eab1906c4c50a15f7c2cc3fd4ec1da4beb5bba50355e1c4c152a2269c4a9c35ee82fb33c95a884ae4c1f7f41f12923cd56f05fc4ed16f2890fd21584803be0a2d3a00646304d7fc9e631dbae4cab831ac70135fbe002fb7fefc67fb7eb3b21a337f615c39bf34d92b203b7e828653dfd24c6a0813869e44553d8b43133cf95f252d3a3db4ba44185f6b51c38912f7e90f6fb80bf600c38bed143f9d0dac44690b072a3865dd4c6c98f6fc04cac9f317042ae510f1962cfb6edb4cefb3a45a12f728b40622b9ef2f0656d196a399a32f76ba046c4426fa28d7d3d71fba819c68daebcf56b727a6eac34d24ee85ad6c1a855ad302eff820698c759cf4ac52730adc7a4d04a6925b29911e8332e38f814597256cc3d921ca9f69728c6fba9e0a562b0708b160eb299bcd16de0dca05f9b2fe8a8761484ceda526528187930a407cb2679f44b11fb78c54f04309192dade389cabc8d27f5f797c09fcd32cef156ff6703d56288244f222ec21acbd87d743dd1827026a011b93bdec8ad60795a1f275ee95bd5c4c54823797f5cac7db390010b3a86129dc093e2465abe83fd6264c03ff79b8230be629fcf7248ce5641b691c815d02a027c12b1974ce472fdb838f656121e28f7080de5cd255ec973449a5815edb7069645d28ee1ebad0df59f7ffd9a0de6d13b1c16b780e0e9e616dd0d8cddbcf86ab6224c06f2eecb83d5ffb154c1d188811501008a7c61aadc36a3790fa4fb17ff8bcdb636c76d5655f9a298f96c9c5eea3fef5888537222a5471e9530022bf219ec84fddbff95891d78fd6ec95d140c3fbb6d333307a77aad88eae885f3a42e0c43b146e6a8b76f4de95aa31c8ea2d17152320bef5a8ccfa22edc9615a512b8e8b879f90084c0e8a71664b362c0dcb63971285cae0dd6cccc831b86f49654d5aab723edd920aac794a02bbdcd4b1b9ee92775bd32456415a35eb5a40130435749826066619c277db772085bfa01397219e947554dd1c2cb770941980b42c02a31af955c5323486872066ca3bf75501b6bb0da6e21ea33bf2610fd888f5d5209ece1fe97f3cbb08df7826b461893f7e55e38028ee4fdeef3864dd906b57fb6f27a2731fc7f55b9415e7090c6703869014ab96afccc8da8f3f9ef9cc21fb3610893012a08306c3a81dd26e387602bc182b941837fc12924840ecae507e4142016ec37ebc6cfa8949c270ffbf5c4f040a8c49eaedae7f53bea52cd6a903a31eb76aaa32cc17561d6fc8a302932c11cadd429c3e215c61762dea2ad0027b1ed483e0e866ecd83008f5e5fd6c388496c25a996ba6ea042d973b3e0b25e0f4787f7a8c6df2f0d7dc212a6d494b5a50b1515b5ef7dd1828523a6f34634f6463d7c7150122b928334068f2344c12878e6e49e95fef6f7c8d5c27fe4d625a67daef9fb72b93c44bca48c98c7ac9875bdc886e8d43a9b549e5766148ed43948fd0e3e6421f7da5ab42631e261f13e76cf6cd78defe9822527b994b482c4a31ae8ec5def6f97908be9deb82aa6f9996f9a5c1daa4233af17d199214610a8ba3470551d143c38eb8d8a72bfe4a86a0e7c39d9c59cb13bfd386643215370d2da78fb9ac01830349244d5a2454b91d3f566640cd680c5b68a0", 0x1000, r1}, 0x68) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) 20:41:34 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:41:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_PKTS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000140)="ed29870000655f000004ffffff7fc82438af00200000e5a698a1a364cba4372f793d62a745c8c131db", 0x29, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) [ 1867.898605] FAULT_INJECTION: forcing a failure. [ 1867.898605] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.900925] CPU: 0 PID: 10332 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1867.902318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1867.904008] Call Trace: [ 1867.904543] dump_stack+0x107/0x167 [ 1867.905325] should_fail.cold+0x5/0xa [ 1867.906112] ? alloc_pid+0xd7/0xd30 [ 1867.906854] should_failslab+0x5/0x20 [ 1867.907627] kmem_cache_alloc+0x5b/0x310 [ 1867.908456] alloc_pid+0xd7/0xd30 [ 1867.909214] copy_process+0x3a8e/0x7800 [ 1867.910043] ? stack_trace_save+0x8c/0xc0 [ 1867.910899] ? stack_trace_consume_entry+0x160/0x160 [ 1867.911947] ? __cleanup_sighand+0xb0/0xb0 [ 1867.912805] ? lock_acquire+0x197/0x470 [ 1867.913649] ? create_object.isra.0+0x3ad/0xa20 [ 1867.914597] ? lock_release+0x680/0x680 [ 1867.915399] ? find_held_lock+0x2c/0x110 [ 1867.916229] ? io_wqe_dec_running+0x220/0x220 [ 1867.917142] create_io_thread+0xb6/0xf0 [ 1867.917952] ? pidfd_pid+0x90/0x90 [ 1867.918672] ? mark_held_locks+0x9e/0xe0 [ 1867.919497] ? io_wqe_dec_running+0x220/0x220 [ 1867.920443] ? __init_swait_queue_head+0xc6/0x150 [ 1867.921420] create_io_worker+0x23a/0x620 [ 1867.922280] io_wqe_enqueue+0x69e/0xbe0 [ 1867.923089] ? create_worker_cb+0x260/0x260 [ 1867.923966] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1867.924879] ? io_prep_async_work+0x34e/0x540 [ 1867.925829] io_queue_async_work+0x26b/0x4f0 [ 1867.926723] __io_queue_sqe+0x5cc/0x9d0 [ 1867.927533] ? io_issue_sqe+0x7700/0x7700 [ 1867.928406] ? io_poll_queue_proc+0x50/0x50 [ 1867.929283] ? io_submit_sqes+0x3b63/0x85c0 [ 1867.930192] io_submit_sqes+0x4461/0x85c0 [ 1867.931061] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1867.932068] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1867.933047] ? lock_downgrade+0x6d0/0x6d0 [ 1867.933890] ? find_held_lock+0x2c/0x110 [ 1867.934716] ? io_submit_sqes+0x85c0/0x85c0 [ 1867.935596] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1867.936574] ? wait_for_completion_io+0x270/0x270 [ 1867.937566] ? rcu_read_lock_any_held+0x75/0xa0 [ 1867.938506] ? vfs_write+0x354/0xa70 [ 1867.939262] ? fput_many+0x2f/0x1a0 [ 1867.940000] ? ksys_write+0x1a9/0x260 [ 1867.940749] ? __ia32_sys_read+0xb0/0xb0 [ 1867.941584] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1867.942642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1867.943692] do_syscall_64+0x33/0x40 [ 1867.944448] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1867.945490] RIP: 0033:0x7f15c8c78b19 [ 1867.946245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1867.949970] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1867.951492] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1867.952932] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1867.954402] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1867.955892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1867.957413] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:41:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:41:46 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000400)) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) getegid() r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x400000, 0x1d) pread64(r1, &(0x7f00000002c0)=""/212, 0xd4, 0x9) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004004}, 0x1) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) openat(r2, &(0x7f0000000280)='./file0\x00', 0x488000, 0x4e) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000000040), 0x0, 0x2008080) sendmsg$inet6(r4, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) pread64(r3, &(0x7f0000000480)=""/91, 0x5b, 0x8) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\a', 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) unshare(0x48020200) 20:41:46 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:41:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) setns(0xffffffffffffffff, 0x10000000) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f832650000000000d30ad022cea3b5906ed71efbac7160411494569681c28281208008c2fd0650ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5127467341e4376c1319a3cb91e308000000f3acaab637ceb7852dafdf71f385cfa97aa0b4888b849ea763e6372e3668ad38b4998b12b7f74f557998f5ab174fbc688112a84bc0"], 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {0x4}, [@generic='\x00\x00\x00\x00\x00\x00']}, 0x1c}}, 0x20000000) 20:41:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:41:46 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:41:46 executing program 3: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x74c9ccf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="659bc0646c379c461730ca94a7356a27ed406ed80a92ae403ef2e13e2ee29ba43e1955ebb51e9f3e432d6f5b457aaed05afd5094fccb1a2373c9ae75b7c0df2812565ff44fc7fad9075fc81e884b9f014cd68ead9168b72b7f2ec60a2b50bbb083b8620ddc8f13fa518d5572dd888fd52ea6b6851905390fbdbd2a064c100379b1a9921d26365e20662c2851a23c6bfaba23da96bdaeee375c169bd6be6ee34bb525c3", 0xa3, r1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000440)="dea6978faf8eb1e680a91b4c5b12acb4a2dddfe7e5966d217560c5e09aaf859070a22bad14a8830810ad35bb650581d0f3bca494d12e4d0e9709a049501d363b8ba88e49a2ee976f218923c26523c86fe1bde22669b01b62a8ed3dbf0ec95330e37b07e0b4f3f9895e90d597b32c682122d01bf8f7ede784b020d26993146da5e3c795b2061febdd4126750b7e721fee7ae27872432371bad49bf3d9303f05d045d0272744b6a72886", 0xa9, 0xfffffffffffffff8) unshare(0x30000200) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "5fe29085105f88cba699d0ba7028577c7bd3b21096c36401a63be1cc4716dc1b206d58aaa32ee060cecea1b38d1d9c576302c5c49331112e22b92c50f37f5060", 0x11}, 0x48, 0xfffffffffffffffb) 20:41:46 executing program 7: add_key(&(0x7f0000000200)='dns_resolver\x00', 0x0, &(0x7f0000000000)="c3123e22cae7", 0x6, 0xfffffffffffffffb) [ 1880.431985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1880.528304] FAULT_INJECTION: forcing a failure. [ 1880.528304] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.531300] CPU: 0 PID: 10359 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1880.532711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.534409] Call Trace: [ 1880.534948] dump_stack+0x107/0x167 [ 1880.535691] should_fail.cold+0x5/0xa [ 1880.536473] ? create_object.isra.0+0x3a/0xa20 [ 1880.537403] should_failslab+0x5/0x20 [ 1880.538197] kmem_cache_alloc+0x5b/0x310 [ 1880.539027] create_object.isra.0+0x3a/0xa20 [ 1880.539919] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1880.540959] kmem_cache_alloc+0x159/0x310 [ 1880.541819] alloc_pid+0xd7/0xd30 [ 1880.542540] copy_process+0x3a8e/0x7800 [ 1880.543360] ? stack_trace_save+0x8c/0xc0 [ 1880.544203] ? stack_trace_consume_entry+0x160/0x160 [ 1880.545253] ? __cleanup_sighand+0xb0/0xb0 [ 1880.546147] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.547225] ? io_wqe_dec_running+0x220/0x220 [ 1880.548136] create_io_thread+0xb6/0xf0 [ 1880.548947] ? pidfd_pid+0x90/0x90 [ 1880.549698] ? io_wqe_dec_running+0x220/0x220 [ 1880.550632] ? __init_swait_queue_head+0xc6/0x150 [ 1880.551613] create_io_worker+0x23a/0x620 [ 1880.552462] io_wqe_enqueue+0x69e/0xbe0 [ 1880.553275] ? create_worker_cb+0x260/0x260 [ 1880.554167] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1880.555088] ? io_prep_async_work+0x34e/0x540 [ 1880.556005] io_queue_async_work+0x26b/0x4f0 [ 1880.556906] __io_queue_sqe+0x5cc/0x9d0 [ 1880.557742] ? io_issue_sqe+0x7700/0x7700 [ 1880.558584] ? io_poll_queue_proc+0x50/0x50 [ 1880.559472] io_submit_sqes+0x4461/0x85c0 [ 1880.560341] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1880.561353] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1880.562342] ? lock_downgrade+0x6d0/0x6d0 [ 1880.563182] ? find_held_lock+0x2c/0x110 [ 1880.564009] ? io_submit_sqes+0x85c0/0x85c0 [ 1880.564892] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1880.565892] ? wait_for_completion_io+0x270/0x270 20:41:47 executing program 4: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x78}) close(r1) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1, 0xd4, 0x0, 0x3f, 0x0, 0x8001, 0x1e00, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x10, 0x0, 0x10001, 0x2, 0x7fff, 0x7fffffff, 0x8, 0x0, 0x6, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, r1, 0x9) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) [ 1880.566876] ? rcu_read_lock_any_held+0x75/0xa0 [ 1880.568029] ? vfs_write+0x354/0xa70 [ 1880.568795] ? fput_many+0x2f/0x1a0 [ 1880.569534] ? ksys_write+0x1a9/0x260 [ 1880.570319] ? __ia32_sys_read+0xb0/0xb0 [ 1880.571144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.572204] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.573265] do_syscall_64+0x33/0x40 [ 1880.574036] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1880.575086] RIP: 0033:0x7f15c8c78b19 [ 1880.575843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1880.579594] RSP: 002b:00007f15c61ee188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1880.581114] RAX: ffffffffffffffda RBX: 00007f15c8d8bf60 RCX: 00007f15c8c78b19 [ 1880.582573] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1880.584019] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.585466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.586919] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:41:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) r3 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:41:47 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:41:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x30000, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000140)={0x1, 0x9}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r2, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x88) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x7002, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r4 = openat(r3, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) 20:41:47 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:41:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000200), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)}, 0x10040095) 20:41:47 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) [ 1880.961592] FAULT_INJECTION: forcing a failure. [ 1880.961592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.964181] CPU: 1 PID: 10384 Comm: syz-executor.6 Not tainted 5.10.200 #1 [ 1880.965608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1880.967315] Call Trace: [ 1880.967897] dump_stack+0x107/0x167 [ 1880.968666] should_fail.cold+0x5/0xa [ 1880.969453] _copy_to_user+0x2e/0x180 [ 1880.970284] simple_read_from_buffer+0xcc/0x160 [ 1880.971268] proc_fail_nth_read+0x198/0x230 [ 1880.972200] ? proc_sessionid_read+0x230/0x230 [ 1880.973161] ? security_file_permission+0x24e/0x570 [ 1880.974200] ? perf_trace_initcall_start+0x101/0x380 [ 1880.975267] ? proc_sessionid_read+0x230/0x230 [ 1880.976234] vfs_read+0x228/0x580 [ 1880.976947] ksys_read+0x12d/0x260 [ 1880.977697] ? vfs_write+0xa70/0xa70 [ 1880.978457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1880.979515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1880.980570] do_syscall_64+0x33/0x40 [ 1880.981329] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1880.982380] RIP: 0033:0x7f15c8c2b69c [ 1880.983132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1880.986862] RSP: 002b:00007f15c61ee170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1880.988444] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f15c8c2b69c [ 1880.989948] RDX: 000000000000000f RSI: 00007f15c61ee1e0 RDI: 0000000000000007 [ 1880.991386] RBP: 00007f15c61ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1880.992828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.994266] R13: 00007ffd17a6232f R14: 00007f15c61ee300 R15: 0000000000022000 20:41:47 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:41:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r3 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:42:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) r2 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:42:01 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:42:01 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000400)) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) getegid() r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x400000, 0x1d) pread64(r1, &(0x7f00000002c0)=""/212, 0xd4, 0x9) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004004}, 0x1) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) openat(r2, &(0x7f0000000280)='./file0\x00', 0x488000, 0x4e) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000000040), 0x0, 0x2008080) sendmsg$inet6(r4, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) pread64(r3, &(0x7f0000000480)=""/91, 0x5b, 0x8) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\a', 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) unshare(0x48020200) 20:42:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:42:01 executing program 7: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x78}) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x1, 0x2}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 20:42:01 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001e00)={{0x14}, [@NFT_MSG_NEWSET={0x13e8, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x200000}, @NFTA_SET_DESC={0x1b8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x90, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfe}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb876}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x14}]}]}]}, @NFTA_SET_DESC={0xf8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xf4, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x367133ea}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8037}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d1}]}]}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}, @NFTA_SET_USERDATA={0x1004, 0xd, 0x1, 0x0, "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"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_USERDATA={0xee, 0xd, 0x1, 0x0, "714727f2edecbf412340992aa441298b04d5d3764fcef46b0f0af361004aa805fee39d0c85c003245dd58369ec433e872b6ed5e0e368d3dc44062ff4e5e544183d613bcaa7156f0dbed2582fd39fa824416f4435be9226c5d2ad6f8eae832a5c6cb62431e9f030e834128948d1feeaa67f85c41359470f85c1efa369aca118d4a6a3b4600bd093732e0809c4bdc11ad5c4cffdb9931f328bf3cdbce51fce050a864f565d17a48270a25f49ec4af4a1a060633e8bb31d778dadc1594e683b5984442b5f45ffce10c1b51ee4614ff97c41d8035b710135a6fcc4512203b2632f54212b2fd8f9d89582bf06"}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2da21b829f731d57, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x124, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}, @tunnel={{0xb}, @void}]}, {0x60, 0x1, 0x0, 0x1, [@hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7fff}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7f}]}}, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x19}]}}]}, {0x4c, 0x1, 0x0, 0x1, [@dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xe}]}}, @lookup={{0xb}, @val={0x4}}, @byteorder={{0xe}, @void}, @byteorder={{0xe}, @void}]}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x302, 0x0, 0x0, {0xe, 0x0, 0x8}}, @NFT_MSG_DELCHAIN={0x7c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf59}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}], {0x14}}, 0x1650}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r1, &(0x7f00000001c0), &(0x7f0000000240)=ANY=[@ANYBLOB="869cb3"], 0x3, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)=ANY=[@ANYBLOB="4091df61dbfa48931fc20a1542825124b9a2b5bc0000000000000000000000000043026673c230d4a39cb03164e47e8a72ba0039fece1c1b394366868809a3b6269050120b176c7403cf49f7465886ea77dba42d04b981539a8b390e9f7e4ff98aa578a8a94e8991336b4f5764ae1a4b30bbc0cf488d930b458c039b24c70fe5cb74f1c14d9cee8a5320ef3ea1f648dd66db977314e6cc933a54f9d276a26a0a8d62d7bd434be82df77e7be0ffc1624c943306edaf3e31f1a95bdf80d2e8ae9b2e32d6b8b7ee47409fdbc7494ea6cb08c35d393a47801b84964a02b06d5b9e1787", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f66"]) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/software', 0xae000, 0x0) getpid() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x7f, "9656c75f04ba4d"}) 20:42:01 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:42:01 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0xa) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x95d7}}, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x80) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e24, 0x3ff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8000}}, 0x0, 0x0, 0x15, 0x0, "6d2826d01e85de429a87b951e91df1f2febad950d1c91970075d8635561183a0c7e3fab6bf4c8b798c7b1a6e8849451714cc5146eb2f5a98eb28a49dae861484af2095749bc5ada8993243a1f88973db"}, 0xd8) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 20:42:01 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 20:42:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1895.196629] kauditd_printk_skb: 6 callbacks suppressed [ 1895.196649] audit: type=1400 audit(1699735321.734:73): avc: denied { setattr } for pid=10409 comm="syz-executor.3" name="status" dev="proc" ino=36401 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 20:42:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:42:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x999, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="084fbe2e79df5f23a2010178cd38e5b527ab19db1ed5c1e91200bc4a38b1933278fd25e3a52eed", 0x27, 0x10000}], 0x1000000, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@dont_hash}]}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000240)='}],.\x87]`)\x84\\\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff) 20:42:01 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) [ 1895.488941] FAT-fs (loop7): Unrecognized mount option "mask=^MAY_WRITE" or missing value [ 1895.515571] FAT-fs (loop7): Unrecognized mount option "mask=^MAY_WRITE" or missing value 20:42:15 executing program 1: r0 = creat(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) openat(r1, &(0x7f0000000340)='./file0\x00', 0x0, 0x10) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x30, 0x81, 0x7fffffff) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_io_uring_setup(0x3893, &(0x7f00000000c0)={0x0, 0x84b4, 0x20, 0x2, 0x26b, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x444000, 0x20) syz_io_uring_submit(r2, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)={0x521500, 0x24, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x5) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x2c0, 0x2e2f, 0x1, 0x100, 0xfffffffffffffffc, 0x100080}) 20:42:15 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:42:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:42:15 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 20:42:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:42:15 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:42:15 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001e00)={{0x14}, [@NFT_MSG_NEWSET={0x13e8, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x200000}, @NFTA_SET_DESC={0x1b8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x90, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfe}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb876}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x14}]}]}]}, @NFTA_SET_DESC={0xf8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xf4, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x367133ea}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8037}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d1}]}]}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}, @NFTA_SET_USERDATA={0x1004, 0xd, 0x1, 0x0, "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"}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_USERDATA={0xee, 0xd, 0x1, 0x0, "714727f2edecbf412340992aa441298b04d5d3764fcef46b0f0af361004aa805fee39d0c85c003245dd58369ec433e872b6ed5e0e368d3dc44062ff4e5e544183d613bcaa7156f0dbed2582fd39fa824416f4435be9226c5d2ad6f8eae832a5c6cb62431e9f030e834128948d1feeaa67f85c41359470f85c1efa369aca118d4a6a3b4600bd093732e0809c4bdc11ad5c4cffdb9931f328bf3cdbce51fce050a864f565d17a48270a25f49ec4af4a1a060633e8bb31d778dadc1594e683b5984442b5f45ffce10c1b51ee4614ff97c41d8035b710135a6fcc4512203b2632f54212b2fd8f9d89582bf06"}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2da21b829f731d57, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x124, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}, @tunnel={{0xb}, @void}]}, {0x60, 0x1, 0x0, 0x1, [@hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7fff}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7f}]}}, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x19}]}}]}, {0x4c, 0x1, 0x0, 0x1, [@dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xe}]}}, @lookup={{0xb}, @val={0x4}}, @byteorder={{0xe}, @void}, @byteorder={{0xe}, @void}]}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x302, 0x0, 0x0, {0xe, 0x0, 0x8}}, @NFT_MSG_DELCHAIN={0x7c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf59}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}], {0x14}}, 0x1650}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r1, &(0x7f00000001c0), &(0x7f0000000240)=ANY=[@ANYBLOB="869cb3"], 0x3, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000005c0)=ANY=[@ANYBLOB="4091df61dbfa48931fc20a1542825124b9a2b5bc0000000000000000000000000043026673c230d4a39cb03164e47e8a72ba0039fece1c1b394366868809a3b6269050120b176c7403cf49f7465886ea77dba42d04b981539a8b390e9f7e4ff98aa578a8a94e8991336b4f5764ae1a4b30bbc0cf488d930b458c039b24c70fe5cb74f1c14d9cee8a5320ef3ea1f648dd66db977314e6cc933a54f9d276a26a0a8d62d7bd434be82df77e7be0ffc1624c943306edaf3e31f1a95bdf80d2e8ae9b2e32d6b8b7ee47409fdbc7494ea6cb08c35d393a47801b84964a02b06d5b9e1787", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f66"]) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/software', 0xae000, 0x0) getpid() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x7f, "9656c75f04ba4d"}) 20:42:15 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:42:15 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:42:15 executing program 2: r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:42:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6e3, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:42:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x4000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="177f97b28df9c604d70513be1c265d9e4f414e6eb8cb5c785fc2142b071cd78f679ced6fde70e42ed7ee9f02fd46ba3728fdf9a6a43dbab5dc7a6ce2ee35074f16b7cffdc900da5cad75994153a9256371dd99421322df942f5966227507984b0811312aa1c77d4296fda181f1ced94df90d000000"], 0x30}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r0}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfe01}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000300)={0x1, {{0xa, 0x4e20, 0x0, @private2, 0x4fab}}, {{0xa, 0x4e24, 0xd76, @empty, 0x8f4}}}, 0x108) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x2f) fork() fork() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)=0x0) wait4(r1, &(0x7f00000004c0), 0x1, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=ANY=[], 0xa) r2 = fork() ptrace(0x10, r2) fork() ptrace$cont(0x9, r2, 0x7fffffff, 0x4) [ 1909.293330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1909.395532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1909.854885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:42:29 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:42:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:42:29 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)=ANY=[@ANYBLOB="340000001000010000000000000000000000000005000000000000000c00008008000d00ac1414000c0004000005"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 20:42:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x4000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="177f97b28df9c604d70513be1c265d9e4f414e6eb8cb5c785fc2142b071cd78f679ced6fde70e42ed7ee9f02fd46ba3728fdf9a6a43dbab5dc7a6ce2ee35074f16b7cffdc900da5cad75994153a9256371dd99421322df942f5966227507984b0811312aa1c77d4296fda181f1ced94df90d000000"], 0x30}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r0}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfe01}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000300)={0x1, {{0xa, 0x4e20, 0x0, @private2, 0x4fab}}, {{0xa, 0x4e24, 0xd76, @empty, 0x8f4}}}, 0x108) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x2f) fork() fork() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)=0x0) wait4(r1, &(0x7f00000004c0), 0x1, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=ANY=[], 0xa) r2 = fork() ptrace(0x10, r2) fork() ptrace$cont(0x9, r2, 0x7fffffff, 0x4) 20:42:29 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x30000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002580)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000000c0)={r3, 0x0, 0x20}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYRESHEX=r1]) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000500)={r3, 0x1, 0x1, [0x0, 0x8, 0x7, 0x7, 0x4], [0x8001, 0xd3b, 0x1fbc06a6, 0x100000001, 0x1000, 0x0, 0x5, 0x0, 0x100, 0x3, 0x2, 0x2e, 0x6, 0xfffffffeffffffff, 0x9, 0x7ff, 0x8a, 0x80000000, 0x5, 0x1, 0x2, 0xfffffffffffffff8, 0x3ff, 0x8, 0x7, 0xffffffffffff2400, 0x7, 0x7, 0x7fff, 0x0, 0x7, 0x3, 0x8, 0x9, 0x8001, 0x6, 0x3b2, 0xffff, 0x9, 0x1, 0x0, 0x100, 0xb0ad, 0x72a, 0x3, 0x6, 0xffffffffffffffff, 0x7, 0xfffffffffffffffa, 0x101, 0x63ed, 0x6, 0xec, 0xfffffffffffff001, 0x9, 0x80000000, 0x5, 0x2, 0x4, 0x6, 0x100, 0xb5, 0x4, 0x8, 0x9, 0x8001, 0x4, 0x800, 0x4, 0x0, 0x1000, 0x3, 0x3, 0x40, 0x7fc00000000000, 0x1, 0x2c9b, 0x7c0a, 0x1, 0x45, 0x3, 0x40, 0x3, 0x3, 0x6, 0x0, 0x8, 0x8, 0xfffffffffffffffb, 0xffffffffffffff91, 0x954, 0xf938, 0x7, 0x2, 0x3, 0x20, 0x4621a915, 0x1000, 0x4, 0x2, 0x400, 0x703, 0x7, 0x0, 0x7, 0xc79e, 0x80000001, 0x7, 0xfffffffffffffff8, 0x3, 0x5, 0x81, 0x7, 0x1, 0x2000000000000, 0xffff, 0xffffffff, 0x562, 0x2, 0x40, 0x2]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x12, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743"]}]}, 0x28}}, 0x0) 20:42:29 executing program 2: r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:42:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x3, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:42:29 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1923.380028] netlink: 'syz-executor.7': attribute type 4 has an invalid length. [ 1923.385265] mac80211_hwsim hwsim13 wlan1: refused to change device tx_queue_len [ 1923.386245] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 20:42:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:42:30 executing program 0: r0 = socket$inet(0x2, 0x0, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:42:30 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:42:30 executing program 2: r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:42:30 executing program 7: r0 = semget$private(0x0, 0x3, 0x40) semctl$IPC_RMID(r0, 0x0, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = semget(0x2, 0x2, 0x40) semtimedop(r1, &(0x7f0000000280)=[{0x3, 0xed, 0x1000}, {0x3, 0x80, 0x800}, {0x4, 0x4, 0x1800}, {0x3, 0x2}], 0x4, &(0x7f0000000300)={0x77359400}) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x82}, 0x18) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xd18, 0x1800}, {0x2, 0x1, 0x800}], 0x2, &(0x7f0000000240)={0x0, 0x989680}) getsockname(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001380)={'erspan0\x00', &(0x7f0000001280)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0001000800000008fffffbd44a9a00a80065000080049078ffffffffe0010002441067b000000002000007ff00000e0d440c3f400000007f00000bc0890b38ac1414bb6401010144188a6000000200fffff00000000eff0000f8c100000009441c57f10a01010100000000ac1414aa00000008e000000200001000890befac1e00017f000001440c3c20fffffff7000000034420935000008001000011b48000000100000d500000000300000100000000050000"]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6c) semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000000c0)=""/4096) semop(0x0, &(0x7f0000000040)=[{0x4, 0x7, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 20:42:30 executing program 0: r0 = socket$inet(0x2, 0x0, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:42:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:42:30 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x0, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:42:30 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:42:30 executing program 7: r0 = semget$private(0x0, 0x3, 0x40) semctl$IPC_RMID(r0, 0x0, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = semget(0x2, 0x2, 0x40) semtimedop(r1, &(0x7f0000000280)=[{0x3, 0xed, 0x1000}, {0x3, 0x80, 0x800}, {0x4, 0x4, 0x1800}, {0x3, 0x2}], 0x4, &(0x7f0000000300)={0x77359400}) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x82}, 0x18) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xd18, 0x1800}, {0x2, 0x1, 0x800}], 0x2, &(0x7f0000000240)={0x0, 0x989680}) getsockname(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001380)={'erspan0\x00', &(0x7f0000001280)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0001000800000008fffffbd44a9a00a80065000080049078ffffffffe0010002441067b000000002000007ff00000e0d440c3f400000007f00000bc0890b38ac1414bb6401010144188a6000000200fffff00000000eff0000f8c100000009441c57f10a01010100000000ac1414aa00000008e000000200001000890befac1e00017f000001440c3c20fffffff7000000034420935000008001000011b48000000100000d500000000300000100000000050000"]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6c) semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000000c0)=""/4096) semop(0x0, &(0x7f0000000040)=[{0x4, 0x7, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 20:42:30 executing program 3: r0 = semget$private(0x0, 0x3, 0x40) semctl$IPC_RMID(r0, 0x0, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = semget(0x2, 0x2, 0x40) semtimedop(r1, &(0x7f0000000280)=[{0x3, 0xed, 0x1000}, {0x3, 0x80, 0x800}, {0x4, 0x4, 0x1800}, {0x3, 0x2}], 0x4, &(0x7f0000000300)={0x77359400}) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x82}, 0x18) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xd18, 0x1800}, {0x2, 0x1, 0x800}], 0x2, &(0x7f0000000240)={0x0, 0x989680}) getsockname(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001380)={'erspan0\x00', &(0x7f0000001280)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0001000800000008fffffbd44a9a00a80065000080049078ffffffffe0010002441067b000000002000007ff00000e0d440c3f400000007f00000bc0890b38ac1414bb6401010144188a6000000200fffff00000000eff0000f8c100000009441c57f10a01010100000000ac1414aa00000008e000000200001000890befac1e00017f000001440c3c20fffffff7000000034420935000008001000011b48000000100000d500000000300000100000000050000"]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x6c) semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000000c0)=""/4096) semop(0x0, &(0x7f0000000040)=[{0x4, 0x7, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 20:42:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f800948f92c2f60000160001000000000000000000000000000000000000000000000000007f00000100"/69, @ANYRES32=0x0, @ANYRES16=r0, @ANYRESDEC], 0xf8}}, 0x0) r2 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="04001e80"], 0x20}}, 0x0) r3 = syz_io_uring_setup(0x12ef, &(0x7f0000000000)={0x0, 0xd222, 0x8, 0x0, 0x8c}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r3, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x64, 0x1}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0), 0x8001) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x20000000}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r8 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000140)=r8, 0x1) 20:42:43 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:42:43 executing program 0: r0 = socket$inet(0x2, 0x0, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:42:43 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:42:43 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x0, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:42:43 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:42:43 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1f, 0x302) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004af00)={0x4, [], 0x0, "e6a2e51d013042"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004af00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "e6a2e51d013042"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000058f40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000059140)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r7}, {0x0, r9}], 0x1, "bdb3e8fedaea56"}) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68010000", @ANYRES16=r10, @ANYBLOB="00032dbd7000fddbdf25010000000000000009410000004c00180000000665746800"/98], 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x20004840) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000000000000000000000000936b6899f9cb71ac3ae672", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) 20:42:43 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400680, 0x0, 0x14}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x1, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1937.456952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10585 comm=syz-executor.7 20:42:44 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400680, 0x0, 0x14}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x1, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 20:42:44 executing program 7: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1e, 0xc0b12afe4b722e85, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x8, 0x0, 0x0, @pid=r2}]}, 0x24}}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = getpgid(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000400)='macsec0\x00', 0x10) ptrace(0x10, r3) clone3(&(0x7f0000001500)={0x80000000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x2f}, &(0x7f00000002c0)=""/197, 0xc5, &(0x7f0000001440)=""/134, &(0x7f00000003c0)=[r3, 0x0], 0x2, {r1}}, 0x58) r4 = memfd_create(&(0x7f0000000080)='\x00', 0x2) socket$nl_audit(0x10, 0x3, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x78}) close(r5) perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x3f, 0x4f, 0x1, 0x29, 0x0, 0x7f, 0x4810, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x30, 0x400000000000000}, 0x0, 0x1f, 0x10000, 0x4, 0x3, 0x9, 0x9400, 0x0, 0x3, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xb, r5, 0x3) fcntl$getown(r4, 0x9) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000440)=""/4096, 0x1000}) 20:42:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:42:44 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x0, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:42:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:42:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:42:44 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:42:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x40, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180), 0x2}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x13) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000340), 0x2, 0x3) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="667265ff7a65722c00af686d9d9c670e7d57468fa9ba855157a40f52621b149a6786e67924a0a84f31b78d6fc57ec5223d4e132795745e0d4e6e5be39d2651a64a73"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x8) chroot(&(0x7f00000004c0)='./file0\x00') ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x28, {0x2, 0x0, @empty}}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x28, {0x2, 0x0, @empty}}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000400)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@noprefix}, {@clone_children}, {@subsystem='hugetlb'}], [{@fsname={'fsname', 0x3d, '/dev/zero\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@obj_role={'obj_role', 0x3d, '^('}}]}) 20:42:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1937.912169] cgroup: Unknown subsys name 'freÿzer' 20:42:44 executing program 3: sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x885) r0 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x13, 0x1, 0x0, 0x80, 0x0, 0x20000000000, 0x10108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x7}, 0x40000, 0x0, 0xfffffffe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x48020200) unshare(0xd24d04d8c3083b61) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000045) unshare(0x40000000) unshare(0x0) unshare(0x20000000) unshare(0x20020000) fallocate(r0, 0x4, 0x9, 0x0) [ 1937.933592] cgroup: Unknown subsys name 'freÿzer' 20:42:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x40, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180), 0x2}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x13) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000340), 0x2, 0x3) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="667265ff7a65722c00af686d9d9c670e7d57468fa9ba855157a40f52621b149a6786e67924a0a84f31b78d6fc57ec5223d4e132795745e0d4e6e5be39d2651a64a73"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x8) chroot(&(0x7f00000004c0)='./file0\x00') ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x28, {0x2, 0x0, @empty}}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x28, {0x2, 0x0, @empty}}) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000400)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@noprefix}, {@clone_children}, {@subsystem='hugetlb'}], [{@fsname={'fsname', 0x3d, '/dev/zero\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@obj_role={'obj_role', 0x3d, '^('}}]}) 20:42:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x2f0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:42:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1938.127508] cgroup: Unknown subsys name 'freÿzer' 20:43:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup2(r0, r0) r2 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) readahead(r2, 0x3, 0x4) ioctl$TIOCL_PASTESEL(r1, 0x4bfb, &(0x7f00000001c0)) 20:43:00 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:43:00 executing program 3: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000000c0)={{0x8001, 0x4c}, 0x100, './file0\x00'}) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xa) unlink(&(0x7f0000000080)='./file0\x00') 20:43:00 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:43:00 executing program 1: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001940)={0x0, 0x5, 0x1, 0x6, 0x9, 0x8}) ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) lstat(0x0, 0x0) readv(r0, &(0x7f0000001640)=[{&(0x7f0000001840)=""/100, 0x64}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000200)=""/204, 0xcc}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/131, 0x83}, {&(0x7f00000003c0)=""/186, 0xba}, {&(0x7f00000014c0)=""/84, 0x54}, {&(0x7f0000001540)=""/219, 0xdb}], 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001700)={{0x1, 0x1, 0x18, r0, {0x400}}, './file1\x00'}) sendto$unix(r1, &(0x7f0000001740)="6bc3a56d7a4548779eda5567332e5aff7d9cf9b3196258f9dadafd9e2e3763e012f4ed8a3195172081e9cfaa235d840d6b675fb0da5f5af0e116ab48f598af82c969ce79dce4645592a9ebf8e5ec0fb3ce4abd97801a7927e25afbaebc9dfb1bd6aa01322c2a23e2303656f785e054d2699cd6df3384f2260b4fa1f88fa530329102132695f07f912286106cc79996d93f7fee5f18e11e104e932480aeb34d9e3b8419a0ae6b186764b97f575a7dd4ef95ef1a8fe2fa1868a410e4b86ba130527423124c9058d6fd6af38e47cfa87c990154be087b9332c1a2789118bc07125b4100f9f5d63b7ed90acb6c9eaa784e", 0xef, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x80, 0x2, 0x0, 0x0, 0x0, 0x4307, 0x1218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c8000000100040c096c000000"], 0x1c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = syz_open_dev$loop(&(0x7f0000001980), 0x5, 0x8982) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000019c0)={0x200078, 0x0, 0xa, 0x0, 0x1}) close(r3) sendto$unix(r3, &(0x7f00000000c0)="577e10af", 0x4, 0x10, &(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 20:43:00 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:43:00 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x300, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:43:00 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:43:00 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='ext4\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 20:43:00 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:43:12 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:43:12 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:43:12 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 20:43:12 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:43:12 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x8, 0xffff}) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xd1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_none}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r1, 0x0, 0x70) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="1d0001"], 0x340}}, 0x0) 20:43:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:43:12 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100010, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) dup2(r0, r3) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x78}) close(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x110c, 0x3e, 0x400, 0x70bd27, 0x25dfdbff, {0x18}, [@generic="2dec939635b4751d846ac212fb531b8838bcd9125f0f2f9e9d3b61874160d66f389aa8c6dd06b8865e2e8bba508e2c9dfc9b91e8b03d3fa7b9051e3f7418affa76fc7258f58bfdc58fd649680f67fb0cce56f59929769e83b9b4eb19724e51f3e771219e5383dcc1c1a459340eb1c60c972dade2058c34afe3372a8144aae885e9e6b3c7", @typed={0x1004, 0x5a, 0x0, 0x0, @binary="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"}, @generic="d0098132d0d01f7be417333d740298bd384792c50a3be9e75e444b5c240649f2665a93bd0f3b962c676f06fe0de02a6241367b62ff5d116ee596e49b49015cc278fe642005e0e8356e0f6bcbd50fabb95b0e", @typed={0x8, 0x91, 0x0, 0x0, @pid}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@empty}]}, 0x110c}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, 0x0) fallocate(r4, 0x2e, 0x6b95, 0xffff) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) setresuid(0xffffffffffffffff, 0x0, 0x0) 20:43:12 executing program 1: syz_emit_ethernet(0x44d, &(0x7f0000000640)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "461e16", 0x417, 0x21, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x0, 0x26, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x400}, @ra={0x5, 0x2, 0x1f}, @enc_lim={0x4, 0x1, 0xff}, @pad1, @padn={0x1, 0x1, [0x0]}, @pad1, @generic={0x9, 0x79, "b2899a4eb9c44f71e5a18d7aa4aa2e588cda9609656f1fb73023fd3afb90037607758e2e8e3591119fdeac89cb934ee1190ff8eb2e12682e88f41d7e40aa98409cb3060d5845e185d14c4d47f7940de24ea387d6411611e1b7a4d23c784b3ce269752737d86dd272a6e969c819d26e14b26c7ba21c01bc8764"}, @generic={0x3, 0x8a, "d1c7081da293414b63cc228716a11f4203b70ff3328a7d84e0e05a333f3d3e68c958efc1d1a4edb1e28351e0f069ec592ccea2572d9f4b83c407b95760c54c330e36369f51961e0ed3b72e3420122aab636074e5ebf7b12968f35f3fea22cfb99943fd8b4d39f2111293863fd9ecfaca9e9cfa86513830e7cce903210965a8c699106287157d01371628"}, @ra={0x5, 0x2, 0x239}]}, @hopopts={0x2c, 0x4, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x3, 0x1f, [0xffffffffffffffff]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @srh={0x87, 0xc, 0x4, 0x6, 0x80, 0x10, 0x8, [@empty, @mcast1, @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0]}, @hopopts={0x29, 0x0, '\x00', [@ra={0x5, 0x2, 0x8001}]}, @srh={0x32, 0x4, 0x4, 0x2, 0x6, 0x8, 0x17b5, [@private0={0xfc, 0x0, '\x00', 0x1}, @remote]}, @fragment={0x6, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @dstopts={0x87, 0x12, '\x00', [@ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x6, 0x65, "62bae7f6c155b689a3d4688e1924373a821793e5865b15cd7ea491857f624ad0fbcc7342600e4c48550a5de8e7cfe2cc0841e40b622c633147f72d888a83162e62a365ec3b3625d9908b3e508ee80cb181fb97c6f05920f8f5481a3009f30bf2318dce70fb"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x47}}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x7fff}]}, @dstopts={0x6, 0x18, '\x00', [@generic={0x7, 0x8d, "183f881c4d920627f28614a480d909f2a667ef5df9b391690acea3dbca2987403c0c7aee869b57c7aac43b17ffb166a4455a88b3a96c6a007b5302d0a67126ee38f1d971d8252097fc3f7fde6e7f734d2176710cae0d8e403fc0c607311727c25bd6695435d21a02f1b4984ec3b436624b775c4986d1b1d4a5f2113315c486998471c7885ed32b3715b3f2e647"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x20}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @generic={0x7, 0xe, "19f9f70ecb6a20c3bc712d3e3831"}]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x2, 0x0, 0x0, 0x7, 0x6, 'C)P', 0x20, "4adc54"}, "093f8bc5eabe3bffcc9cef3519a92e9b348035223f2497aa9deac8c34d165f808ddcfebdf2c288dece77758bd96cdff68766b6e20a2cec0c747a808cd6938c417fdeb5233dcf037f9e6d69b9109d166095e474fd48b0313d4e969ed34c0ef3050f562138804a03938a9788c4e8536173c5914649a3fbde0eaf0d73ba60f802be6ed3bb21700ba1"}}}}}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) syz_emit_ethernet(0x101, &(0x7f00000004c0)={@local, @remote, @void, {@llc={0x4, {@snap={0x1, 0xaa, '2f', "52a5da", 0x7, "9012234c709681f2b230e77cad0660f21c68874c8b7bda4420e03d1cadefdb012c8f32f478f00af63bc2bc567c19a7da02c4bab08c6feb70ecc9463ad31d4c0e9762e6d0b53f320b9c3d8a350fa9c0b439fb0d3409522a871d995988bea27c3aaf9c01b2dae91e42b3af03f4c4c2c5695e4548dfde20bf946141517d38ace8e5394b852646af46a7a9b81ad2be8f3a63ea08481d55cb8bd9d96360dd87212ca4779564a2dac657728dee722568a43cedc396520f635d1df9b36a20a853564afe0c2378e1b6f37d365dde1cfa8bacb45d201fae429a2569f5f252ca4907762c0dc85b7e67f9a82b55a9d7"}}}}}, &(0x7f0000000600)={0x0, 0x4, [0x49, 0xbe8, 0xb33, 0x492]}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x6e) [ 1965.940424] FAULT_INJECTION: forcing a failure. [ 1965.940424] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.942944] CPU: 1 PID: 10691 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1965.944409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1965.946168] Call Trace: [ 1965.946742] dump_stack+0x107/0x167 [ 1965.947550] should_fail.cold+0x5/0xa [ 1965.948383] should_failslab+0x5/0x20 [ 1965.949204] kmem_cache_alloc_bulk+0x4b/0x320 [ 1965.950177] io_submit_sqes+0x6f76/0x85c0 [ 1965.951085] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1965.952136] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1965.953190] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1965.954211] ? lock_downgrade+0x6d0/0x6d0 [ 1965.955099] ? find_held_lock+0x2c/0x110 [ 1965.955967] ? io_submit_sqes+0x85c0/0x85c0 [ 1965.956895] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1965.957934] ? wait_for_completion_io+0x270/0x270 [ 1965.958991] ? rcu_read_lock_any_held+0x75/0xa0 [ 1965.959987] ? vfs_write+0x354/0xa70 [ 1965.960781] ? fput_many+0x2f/0x1a0 [ 1965.961550] ? ksys_write+0x1a9/0x260 [ 1965.962356] ? __ia32_sys_read+0xb0/0xb0 [ 1965.963240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1965.964342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1965.965448] do_syscall_64+0x33/0x40 [ 1965.966239] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1965.967451] RIP: 0033:0x7f204535cb19 [ 1965.967935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.971873] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1965.973487] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 1965.975019] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 1965.976535] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1965.978047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1965.979835] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 [ 1965.985523] 9pnet: Insufficient options for proto=fd 20:43:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xfa) ftruncate(r0, 0x7) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/93, 0x5d, 0x80000040, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) 20:43:12 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000100)) r3 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x61, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="1d23de7449ee513d0fbbb59dcf0b1bbac60fe6674c12730f11d2e4a1e5f805fa4b51984ac5bc8ca2939f684ddf22e6602e5bd13a291e12eb168fd3a24106088d1c278eafb335beb6e01629099e679c512f7219aa2f120c110a54e373ea9d3aaeb23dde64ff57a34a6b52aa10e55013c177ccf8a58eb34a2f8f5a64e95da56e9e9bb1de581df6f59867fe2d2005abe10959b04704", 0x94, 0x101}], 0x14041, &(0x7f00000014c0)=ANY=[@ANYBLOB="ba073d0500b7a85e55eae2c5f51b3a7e3a8b09c96fd575ff41fefe4328202c91b23a71482b571e01004074289de9529cfbff4d94989e6d925bab2aefe085db118e91f9bf8b264ce0d92a363af5e1df0c2a8794dd30c363820af3b156b73d4986421be588ccec48bdae64bca4059c8080052533d0e1ede4569da23fc0f657364713957e459ef28c860aef4408643e4f9f443832452b96510b89eea8b0d8927f63d59e5a00000000"]) dup2(0xffffffffffffffff, r3) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = mq_open(&(0x7f00000000c0)='loginuid\x00', 0x2, 0x10, &(0x7f00000002c0)={0x905, 0x4, 0xffffffffffffff11, 0x6}) dup2(r0, r4) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000240)=0x8000, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000015c0)={r5, 0x4a77, 0x431a9ac8, 0x4f}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000001580), 0x17, 0x0) pread64(r7, &(0x7f0000000080)=""/4088, 0xff8, 0x0) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000300)) 20:43:12 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x15, &(0x7f00000002c0)={@multicast, @local, @val={@void, {0x8906}}, {@x25}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="92"]}]}, 0x1c}}, 0x0) readv(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x14}, 0xc885) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000004c0)={'veth1_to_batadv\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4600000000000400400000000080001f021358e80500000076f0ffff0500000000ff0080270000000300000003000000"]}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1, 0x2000000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() kcmp(0x0, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 20:43:12 executing program 0: socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:43:12 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:43:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0xcc0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:43:12 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x15, &(0x7f00000002c0)={@multicast, @local, @val={@void, {0x8906}}, {@x25}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="92"]}]}, 0x1c}}, 0x0) readv(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x14}, 0xc885) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000004c0)={'veth1_to_batadv\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4600000000000400400000000080001f021358e80500000076f0ffff0500000000ff0080270000000300000003000000"]}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1, 0x2000000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() kcmp(0x0, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 20:43:12 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 20:43:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x6000, 0x3) getdents64(r0, &(0x7f0000001200)=""/4081, 0x742) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0/file0/file0\x00'}) linkat(r1, &(0x7f00000000c0)='./file0/file0\x00', r0, &(0x7f0000000140)='./file0/file0\x00', 0x0) getdents(r0, &(0x7f0000000640)=""/98, 0x62) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={0x440, 0x100, 0x16}, 0x18) getdents(r0, &(0x7f0000000380)=""/151, 0x72) r2 = socket$packet(0x11, 0x3, 0x300) tee(0xffffffffffffffff, r2, 0x1ff, 0x5) uselib(&(0x7f00000001c0)='./file0\x00') [ 1966.472910] FAULT_INJECTION: forcing a failure. [ 1966.472910] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.475652] CPU: 1 PID: 10747 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1966.477300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.479298] Call Trace: [ 1966.479947] dump_stack+0x107/0x167 [ 1966.480834] should_fail.cold+0x5/0xa [ 1966.481768] ? create_object.isra.0+0x3a/0xa20 [ 1966.482794] should_failslab+0x5/0x20 [ 1966.483574] kmem_cache_alloc+0x5b/0x310 [ 1966.484397] create_object.isra.0+0x3a/0xa20 [ 1966.485269] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1966.486284] kmem_cache_alloc_bulk+0x168/0x320 [ 1966.487233] io_submit_sqes+0x6f76/0x85c0 [ 1966.488066] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1966.489063] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1966.490053] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1966.491023] ? lock_downgrade+0x6d0/0x6d0 [ 1966.491846] ? find_held_lock+0x2c/0x110 [ 1966.492649] ? io_submit_sqes+0x85c0/0x85c0 [ 1966.493512] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1966.494465] ? wait_for_completion_io+0x270/0x270 [ 1966.495526] ? rcu_read_lock_any_held+0x75/0xa0 [ 1966.496630] ? vfs_write+0x354/0xa70 [ 1966.497418] ? fput_many+0x2f/0x1a0 [ 1966.498140] ? ksys_write+0x1a9/0x260 [ 1966.498903] ? __ia32_sys_read+0xb0/0xb0 [ 1966.499709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.500749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.501771] do_syscall_64+0x33/0x40 [ 1966.502509] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1966.503544] RIP: 0033:0x7f204535cb19 [ 1966.504281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.507918] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1966.509431] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 1966.510854] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 1966.512268] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1966.513682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1966.515106] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 20:43:25 executing program 0: socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:43:25 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:43:25 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:43:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x13, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x4080, 0x1) write$cgroup_pid(r2, &(0x7f00000004c0)=0xffffffffffffffff, 0x12) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) r3 = mq_open(&(0x7f0000000340)='\x00', 0x2, 0x90, &(0x7f0000000380)={0x2f8, 0xfffffffffffffffc, 0x9, 0xae}) write$binfmt_elf64(r3, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x5, 0x6, 0xd0, 0x0, 0x0, 0x3, 0x8, 0x32b, 0x40, 0x123, 0x40, 0x5, 0x38, 0x2, 0x8001, 0xfffb, 0x73b}, [{0x60000000, 0x624, 0x958, 0x7fff, 0xffffffff, 0x6, 0x8, 0x8000}, {0x3, 0x1f, 0x3f, 0xffffffff, 0x8f, 0x3, 0x3, 0x1ff}], "eff8e95b129aa49e40de108e842139b763914e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xac3) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 20:43:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000683deb52663b7f80fb2aeab017d22c7d2cceabf99045188ba17d432079f2472e5b049c6407384bbf71fe908c729b"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat2(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)={0x40, 0x3, 0x11}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000006c0)=ANY=[@ANYBLOB="d412ff000100000018000000d5c20d8a2299db83b92cbb79e270403fd60c645d19fc303bb19298", @ANYRES32=r3, @ANYBLOB="2e2f66696c65300000000000000000007bb5fb6c2bad26ec596e60146d0719021d618dbb4c02768c9c6212701e6ba6cdb3b0569038b09f8393150cad1428334c43615859f30a99cd775fe282663d4a09a0917db9eec4ef47c9551b7435e451c663444809aabf8008d4ce318da30e01c2a01b383d27cc477587322d500400be34e7c1b868a5df3749e70101000000000000ada70db17c8e50b3851c35eefe300bab676668df87fe6567db862ad0d29bf4e6e364afdca177064811c87216ff3a2c9adf18d70055561456a531c02cfdfd1ee48ad5a8"]) r4 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x62, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 'wg0\x00'}) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x28, {0x2, 0x0, @empty}, 'ip6erspan0\x00'}) bind(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x80) fsmount(r2, 0x1, 0x4) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), 0x2800061, &(0x7f00000005c0)={[{@noprefix}, {@subsystem='cpuset'}, {}, {@noprefix}, {@cpuset_v2_mode}, {@xattr}, {@noprefix}, {}, {}, {@noprefix}]}) 20:43:25 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 20:43:25 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:43:25 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c00, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x78}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x78}) close(r2) renameat2(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file1\x00', 0x2) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x8040, 0x0, 0x0, 0x0, "cfa2f8201eed6e500c32342a221d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd00", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92", [0x400000000008]}) [ 1979.411514] FAULT_INJECTION: forcing a failure. [ 1979.411514] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.412655] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1979.412786] CPU: 0 PID: 10765 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1979.412793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1979.412797] Call Trace: [ 1979.412813] dump_stack+0x107/0x167 [ 1979.412828] should_fail.cold+0x5/0xa [ 1979.412842] ? create_object.isra.0+0x3a/0xa20 [ 1979.412856] should_failslab+0x5/0x20 [ 1979.412867] kmem_cache_alloc+0x5b/0x310 [ 1979.412879] ? mark_held_locks+0x9e/0xe0 [ 1979.412892] create_object.isra.0+0x3a/0xa20 [ 1979.412903] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1979.412917] kmem_cache_alloc_bulk+0x168/0x320 [ 1979.412932] io_submit_sqes+0x6f76/0x85c0 [ 1979.412946] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1979.412969] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1979.412979] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1979.412992] ? lock_downgrade+0x6d0/0x6d0 [ 1979.413001] ? find_held_lock+0x2c/0x110 [ 1979.413014] ? io_submit_sqes+0x85c0/0x85c0 [ 1979.413030] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1979.413043] ? wait_for_completion_io+0x270/0x270 [ 1979.413055] ? rcu_read_lock_any_held+0x75/0xa0 [ 1979.413065] ? vfs_write+0x354/0xa70 [ 1979.413077] ? fput_many+0x2f/0x1a0 [ 1979.413088] ? ksys_write+0x1a9/0x260 [ 1979.413099] ? __ia32_sys_read+0xb0/0xb0 [ 1979.413112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1979.413122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1979.413136] do_syscall_64+0x33/0x40 [ 1979.413156] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1979.432317] RIP: 0033:0x7f204535cb19 [ 1979.432829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1979.435297] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1979.436318] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 1979.437272] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 1979.438228] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1979.439197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1979.440150] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 20:43:25 executing program 0: socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 20:43:26 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) [ 1979.500972] cgroup: subsys name conflicts with all 20:43:26 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 20:43:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x3f, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="13892a42a51deefe6c11", 0xa, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 20:43:26 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x28bd, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:43:26 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) 20:43:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000340)) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x3ff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x40480c1, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x78}) close(r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="65727370616e300016ce5db800000000533c5b058481332a4469276f4dcc30adc7790119c730ae79f23b82e3c89e313fa9f9c8bfc60fc5fbe61f0d0758916723f783a32fd86493b2986e", @ANYRES32=0x0, @ANYBLOB="004000100000007d00e4ffff430200fe7f6700000729907800000000ac1e000186090000000105033b8313aa0a010100ac1414bb09000000ac1e0101441cd981e0000001000000077f00000100000008ac1414aa00000007191e855d89878a9a6d860248e9960e2af9d8d800046ed7a8e320742cd6681dbd1b618b813dc52a289c"]}) r4 = fsopen(&(0x7f0000000300)='logfs\x00', 0x0) dup(r4) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000480)) r6 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockname(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000140)=0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r3, 0x2f, 0x51, 0x3, 0x3, 0x0, @private2, @mcast2, 0x20, 0x40, 0xe05, 0xffff}}) [ 1979.673545] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 20:43:26 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:43:26 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:43:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x13, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x4080, 0x1) write$cgroup_pid(r2, &(0x7f00000004c0)=0xffffffffffffffff, 0x12) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) r3 = mq_open(&(0x7f0000000340)='\x00', 0x2, 0x90, &(0x7f0000000380)={0x2f8, 0xfffffffffffffffc, 0x9, 0xae}) write$binfmt_elf64(r3, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x5, 0x6, 0xd0, 0x0, 0x0, 0x3, 0x8, 0x32b, 0x40, 0x123, 0x40, 0x5, 0x38, 0x2, 0x8001, 0xfffb, 0x73b}, [{0x60000000, 0x624, 0x958, 0x7fff, 0xffffffff, 0x6, 0x8, 0x8000}, {0x3, 0x1f, 0x3f, 0xffffffff, 0x8f, 0x3, 0x3, 0x1ff}], "eff8e95b129aa49e40de108e842139b763914e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xac3) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 1979.793111] FAULT_INJECTION: forcing a failure. [ 1979.793111] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.795586] CPU: 1 PID: 10784 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1979.796973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1979.798628] Call Trace: [ 1979.799170] dump_stack+0x107/0x167 [ 1979.799903] should_fail.cold+0x5/0xa [ 1979.800668] ? create_object.isra.0+0x3a/0xa20 [ 1979.801582] should_failslab+0x5/0x20 [ 1979.802340] kmem_cache_alloc+0x5b/0x310 [ 1979.803164] ? mark_held_locks+0x9e/0xe0 [ 1979.803984] create_object.isra.0+0x3a/0xa20 [ 1979.804858] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1979.805868] kmem_cache_alloc_bulk+0x168/0x320 [ 1979.806779] io_submit_sqes+0x6f76/0x85c0 [ 1979.807635] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1979.808622] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1979.809619] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1979.810585] ? lock_downgrade+0x6d0/0x6d0 [ 1979.811420] ? find_held_lock+0x2c/0x110 [ 1979.812235] ? io_submit_sqes+0x85c0/0x85c0 [ 1979.813103] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1979.814068] ? wait_for_completion_io+0x270/0x270 [ 1979.815040] ? rcu_read_lock_any_held+0x75/0xa0 [ 1979.815969] ? vfs_write+0x354/0xa70 [ 1979.816714] ? fput_many+0x2f/0x1a0 [ 1979.817444] ? ksys_write+0x1a9/0x260 [ 1979.818209] ? __ia32_sys_read+0xb0/0xb0 [ 1979.819041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1979.820077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1979.821106] do_syscall_64+0x33/0x40 [ 1979.821849] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1979.822865] RIP: 0033:0x7f204535cb19 [ 1979.823610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1979.827236] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1979.828743] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 1979.830150] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 1979.831573] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1979.832981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1979.834385] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 [ 1979.963831] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 20:43:40 executing program 7: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:43:40 executing program 1: ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000000240)=""/206, 0xce}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/162, 0xa2}], 0x5, 0xff, 0x1) clock_gettime(0x0, &(0x7f00000000c0)) unshare(0x48020200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) kcmp(0xffffffffffffffff, 0x0, 0x0, r2, r1) 20:43:40 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:43:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x3f00, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:43:40 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) 20:43:40 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:43:40 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 20:43:40 executing program 3: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1993.753659] FAULT_INJECTION: forcing a failure. [ 1993.753659] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.754954] CPU: 1 PID: 10822 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1993.755716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1993.756639] Call Trace: [ 1993.756931] dump_stack+0x107/0x167 [ 1993.757327] should_fail.cold+0x5/0xa [ 1993.757739] ? create_object.isra.0+0x3a/0xa20 [ 1993.758242] should_failslab+0x5/0x20 [ 1993.758647] kmem_cache_alloc+0x5b/0x310 [ 1993.759105] ? mark_held_locks+0x9e/0xe0 [ 1993.759569] create_object.isra.0+0x3a/0xa20 [ 1993.760050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1993.760608] kmem_cache_alloc_bulk+0x168/0x320 [ 1993.761115] io_submit_sqes+0x6f76/0x85c0 [ 1993.761571] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1993.762112] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1993.762669] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1993.763231] ? lock_downgrade+0x6d0/0x6d0 [ 1993.763708] ? find_held_lock+0x2c/0x110 [ 1993.764184] ? io_submit_sqes+0x85c0/0x85c0 [ 1993.764673] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1993.765232] ? wait_for_completion_io+0x270/0x270 [ 1993.765772] ? rcu_read_lock_any_held+0x75/0xa0 [ 1993.766300] ? vfs_write+0x354/0xa70 [ 1993.766725] ? fput_many+0x2f/0x1a0 [ 1993.767140] ? ksys_write+0x1a9/0x260 [ 1993.767577] ? __ia32_sys_read+0xb0/0xb0 [ 1993.768056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1993.768653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1993.769251] do_syscall_64+0x33/0x40 [ 1993.769670] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1993.770257] RIP: 0033:0x7f204535cb19 [ 1993.770675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1993.772776] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1993.773642] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 1993.774431] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 1993.775238] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1993.776031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1993.776827] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 20:43:40 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) 20:43:40 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:43:40 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:43:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:43:40 executing program 7: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:43:40 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 20:43:40 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) [ 1994.081451] FAULT_INJECTION: forcing a failure. [ 1994.081451] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.082771] CPU: 1 PID: 10841 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 1994.083550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1994.084506] Call Trace: [ 1994.084803] dump_stack+0x107/0x167 [ 1994.085230] should_fail.cold+0x5/0xa [ 1994.085646] ? create_object.isra.0+0x3a/0xa20 [ 1994.086163] should_failslab+0x5/0x20 [ 1994.086612] kmem_cache_alloc+0x5b/0x310 [ 1994.087084] ? mark_held_locks+0x9e/0xe0 [ 1994.087563] create_object.isra.0+0x3a/0xa20 [ 1994.088075] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1994.088666] kmem_cache_alloc_bulk+0x168/0x320 [ 1994.089216] io_submit_sqes+0x6f76/0x85c0 [ 1994.089694] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1994.090263] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1994.090845] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1994.091400] ? lock_downgrade+0x6d0/0x6d0 [ 1994.091876] ? find_held_lock+0x2c/0x110 [ 1994.092338] ? io_submit_sqes+0x85c0/0x85c0 [ 1994.092849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1994.093405] ? wait_for_completion_io+0x270/0x270 [ 1994.093973] ? rcu_read_lock_any_held+0x75/0xa0 [ 1994.094510] ? vfs_write+0x354/0xa70 [ 1994.094955] ? fput_many+0x2f/0x1a0 [ 1994.095379] ? ksys_write+0x1a9/0x260 [ 1994.095804] ? __ia32_sys_read+0xb0/0xb0 [ 1994.096266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1994.096856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1994.097441] do_syscall_64+0x33/0x40 [ 1994.097866] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1994.098457] RIP: 0033:0x7f204535cb19 [ 1994.098855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1994.100964] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1994.101803] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 1994.102625] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 1994.103453] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1994.104225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1994.105034] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 20:43:54 executing program 3: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:43:54 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0xbd28, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:43:54 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 20:43:54 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:43:54 executing program 1: ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000000240)=""/206, 0xce}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/162, 0xa2}], 0x5, 0xff, 0x1) clock_gettime(0x0, &(0x7f00000000c0)) unshare(0x48020200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) kcmp(0xffffffffffffffff, 0x0, 0x0, r2, r1) 20:43:54 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 20:43:54 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:43:54 executing program 7: ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000000240)=""/206, 0xce}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/162, 0xa2}], 0x5, 0xff, 0x1) clock_gettime(0x0, &(0x7f00000000c0)) unshare(0x48020200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) kcmp(0xffffffffffffffff, 0x0, 0x0, r2, r1) [ 2007.766283] FAULT_INJECTION: forcing a failure. [ 2007.766283] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.767739] CPU: 1 PID: 10863 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2007.768522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.769446] Call Trace: [ 2007.769745] dump_stack+0x107/0x167 [ 2007.770153] should_fail.cold+0x5/0xa [ 2007.770581] ? create_object.isra.0+0x3a/0xa20 [ 2007.771083] should_failslab+0x5/0x20 [ 2007.771526] kmem_cache_alloc+0x5b/0x310 [ 2007.771984] ? mark_held_locks+0x9e/0xe0 [ 2007.772444] create_object.isra.0+0x3a/0xa20 [ 2007.772933] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2007.773503] kmem_cache_alloc_bulk+0x168/0x320 [ 2007.774011] io_submit_sqes+0x6f76/0x85c0 [ 2007.774475] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2007.775030] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2007.775594] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2007.776128] ? lock_downgrade+0x6d0/0x6d0 [ 2007.776611] ? find_held_lock+0x2c/0x110 [ 2007.777087] ? io_submit_sqes+0x85c0/0x85c0 [ 2007.777588] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2007.778149] ? wait_for_completion_io+0x270/0x270 [ 2007.778706] ? rcu_read_lock_any_held+0x75/0xa0 [ 2007.779242] ? vfs_write+0x354/0xa70 [ 2007.779683] ? fput_many+0x2f/0x1a0 [ 2007.780104] ? ksys_write+0x1a9/0x260 [ 2007.780552] ? __ia32_sys_read+0xb0/0xb0 [ 2007.781028] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.781640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.782245] do_syscall_64+0x33/0x40 [ 2007.782686] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2007.783309] RIP: 0033:0x7f204535cb19 [ 2007.783784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.785920] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2007.786810] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 2007.787644] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 2007.788471] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2007.789307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2007.790132] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 20:43:54 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:43:54 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 1) [ 2007.890447] FAULT_INJECTION: forcing a failure. [ 2007.890447] name fail_usercopy, interval 1, probability 0, space 0, times 0 20:43:54 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0xc00c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:43:54 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 2) [ 2007.890460] CPU: 1 PID: 10869 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2007.890466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.890470] Call Trace: [ 2007.890486] dump_stack+0x107/0x167 [ 2007.890499] should_fail.cold+0x5/0xa [ 2007.890514] _copy_from_user+0x2e/0x1b0 [ 2007.890527] xt_copy_counters+0x425/0x5b0 [ 2007.890540] ? xt_compat_target_to_user+0x420/0x420 [ 2007.890554] ? lock_release+0x680/0x680 20:43:54 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2007.890563] ? cap_capable+0x1d6/0x240 [ 2007.890575] ? security_capable+0x95/0xc0 [ 2007.890589] do_ipt_set_ctl+0x17f/0xa90 [ 2007.890600] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2007.890610] ? lock_downgrade+0x6d0/0x6d0 [ 2007.890618] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2007.890629] ? compat_do_replace.constprop.0+0x470/0x470 [ 2007.890645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2007.890656] ? wait_for_completion_io+0x270/0x270 [ 2007.890668] ? ip_setsockopt+0x1f4e/0x35c0 [ 2007.890680] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2007.890690] nf_setsockopt+0x8b/0xf0 [ 2007.890706] ip_setsockopt+0xe20/0x35c0 [ 2007.890719] ? ip_ra_control+0x580/0x580 [ 2007.890730] ? __fget_files+0x26d/0x4c0 20:43:54 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) [ 2007.890740] ? sock_has_perm+0x1ea/0x280 20:43:54 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) [ 2007.890751] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2007.890764] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2007.890776] ? __fget_files+0x296/0x4c0 [ 2007.890787] raw_setsockopt+0x27c/0x2c0 [ 2007.890798] ? raw_getsockopt+0x1e0/0x1e0 [ 2007.890809] ? selinux_socket_setsockopt+0x6a/0x80 20:43:54 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 3) [ 2007.890821] ? sock_common_setsockopt+0x2b/0x100 [ 2007.890833] __sys_setsockopt+0x180/0x2b0 [ 2007.890843] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2007.890852] ? __ia32_sys_recv+0x100/0x100 [ 2007.890863] ? fput_many+0x2f/0x1a0 [ 2007.890873] ? ksys_write+0x1a9/0x260 [ 2007.890883] ? __ia32_sys_read+0xb0/0xb0 [ 2007.890896] __x64_sys_setsockopt+0xba/0x160 [ 2007.890906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.890916] do_syscall_64+0x33/0x40 [ 2007.890927] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2007.890934] RIP: 0033:0x7f3ad54dab19 [ 2007.890945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.890950] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2007.890962] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2007.890967] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2007.890973] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2007.890979] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2007.890985] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 [ 2008.018903] FAULT_INJECTION: forcing a failure. [ 2008.018903] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.018920] CPU: 0 PID: 10878 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2008.018927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2008.018932] Call Trace: [ 2008.018949] dump_stack+0x107/0x167 [ 2008.018967] should_fail.cold+0x5/0xa [ 2008.018984] ? __get_vm_area_node+0xd4/0x340 [ 2008.018999] should_failslab+0x5/0x20 [ 2008.019014] kmem_cache_alloc_node_trace+0x59/0x340 [ 2008.019028] ? lock_downgrade+0x6d0/0x6d0 [ 2008.019045] __get_vm_area_node+0xd4/0x340 [ 2008.019062] __vmalloc_node_range+0x13f/0x9e0 [ 2008.019078] ? xt_copy_counters+0x2c2/0x5b0 [ 2008.019092] ? xt_copy_counters+0x2c2/0x5b0 [ 2008.019106] ? __might_fault+0xd3/0x180 [ 2008.019119] ? lock_downgrade+0x6d0/0x6d0 [ 2008.019138] ? __vmalloc_node+0x110/0x110 [ 2008.019161] ? xt_copy_counters+0x2c2/0x5b0 [ 2008.019174] __vmalloc_node+0xb5/0x110 [ 2008.019188] ? xt_copy_counters+0x2c2/0x5b0 [ 2008.019206] xt_copy_counters+0x2c2/0x5b0 [ 2008.019223] ? xt_compat_target_to_user+0x420/0x420 [ 2008.019238] ? lock_release+0x680/0x680 [ 2008.019250] ? cap_capable+0x1d6/0x240 [ 2008.019267] ? security_capable+0x95/0xc0 [ 2008.019286] do_ipt_set_ctl+0x17f/0xa90 [ 2008.019301] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2008.019314] ? lock_downgrade+0x6d0/0x6d0 [ 2008.019334] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2008.019349] ? compat_do_replace.constprop.0+0x470/0x470 [ 2008.019371] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2008.019388] ? wait_for_completion_io+0x270/0x270 [ 2008.019404] ? ip_setsockopt+0x1f4e/0x35c0 [ 2008.019421] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2008.019436] nf_setsockopt+0x8b/0xf0 [ 2008.019453] ip_setsockopt+0xe20/0x35c0 [ 2008.019472] ? ip_ra_control+0x580/0x580 [ 2008.019486] ? __fget_files+0x26d/0x4c0 [ 2008.019499] ? sock_has_perm+0x1ea/0x280 [ 2008.019516] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2008.019533] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2008.019551] ? __fget_files+0x296/0x4c0 [ 2008.019568] raw_setsockopt+0x27c/0x2c0 [ 2008.019582] ? raw_getsockopt+0x1e0/0x1e0 [ 2008.019599] ? selinux_socket_setsockopt+0x6a/0x80 [ 2008.019614] ? sock_common_setsockopt+0x2b/0x100 [ 2008.019632] __sys_setsockopt+0x180/0x2b0 [ 2008.019646] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2008.019660] ? __ia32_sys_recv+0x100/0x100 [ 2008.019674] ? fput_many+0x2f/0x1a0 [ 2008.019688] ? ksys_write+0x1a9/0x260 [ 2008.019702] ? __ia32_sys_read+0xb0/0xb0 [ 2008.019719] __x64_sys_setsockopt+0xba/0x160 [ 2008.019733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2008.019747] do_syscall_64+0x33/0x40 [ 2008.019763] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2008.019772] RIP: 0033:0x7f3ad54dab19 [ 2008.019787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2008.019794] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2008.019809] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2008.019817] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2008.019825] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2008.019832] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2008.019841] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 [ 2008.020012] syz-executor.0: vmalloc: allocation failure: 32 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 2008.020196] CPU: 0 PID: 10878 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2008.020203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2008.020207] Call Trace: [ 2008.020218] dump_stack+0x107/0x167 [ 2008.020234] warn_alloc.cold+0x95/0x18a [ 2008.020249] ? zone_watermark_ok_safe+0x260/0x260 [ 2008.020266] ? __get_vm_area_node+0xd4/0x340 [ 2008.020284] ? __kasan_kmalloc.constprop.0+0xa2/0xd0 [ 2008.020301] ? __get_vm_area_node+0x262/0x340 [ 2008.020320] __vmalloc_node_range+0x58f/0x9e0 [ 2008.020334] ? xt_copy_counters+0x2c2/0x5b0 [ 2008.020348] ? __might_fault+0xd3/0x180 [ 2008.020362] ? lock_downgrade+0x6d0/0x6d0 [ 2008.020376] ? __vmalloc_node+0x110/0x110 [ 2008.020397] ? xt_copy_counters+0x2c2/0x5b0 [ 2008.020410] __vmalloc_node+0xb5/0x110 [ 2008.020424] ? xt_copy_counters+0x2c2/0x5b0 [ 2008.020441] xt_copy_counters+0x2c2/0x5b0 [ 2008.020458] ? xt_compat_target_to_user+0x420/0x420 [ 2008.020473] ? lock_release+0x680/0x680 [ 2008.020484] ? cap_capable+0x1d6/0x240 [ 2008.020501] ? security_capable+0x95/0xc0 [ 2008.020518] do_ipt_set_ctl+0x17f/0xa90 [ 2008.020531] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2008.020544] ? lock_downgrade+0x6d0/0x6d0 [ 2008.020556] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2008.020570] ? compat_do_replace.constprop.0+0x470/0x470 [ 2008.020590] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2008.020606] ? wait_for_completion_io+0x270/0x270 [ 2008.020622] ? ip_setsockopt+0x1f4e/0x35c0 [ 2008.020639] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2008.020653] nf_setsockopt+0x8b/0xf0 [ 2008.020670] ip_setsockopt+0xe20/0x35c0 [ 2008.020688] ? ip_ra_control+0x580/0x580 [ 2008.020700] ? __fget_files+0x26d/0x4c0 [ 2008.020717] ? sock_has_perm+0x1ea/0x280 [ 2008.020734] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2008.020750] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2008.020771] ? __fget_files+0x296/0x4c0 [ 2008.020786] raw_setsockopt+0x27c/0x2c0 [ 2008.020800] ? raw_getsockopt+0x1e0/0x1e0 [ 2008.020816] ? selinux_socket_setsockopt+0x6a/0x80 [ 2008.020830] ? sock_common_setsockopt+0x2b/0x100 [ 2008.020847] __sys_setsockopt+0x180/0x2b0 [ 2008.020861] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2008.020874] ? __ia32_sys_recv+0x100/0x100 [ 2008.020887] ? fput_many+0x2f/0x1a0 [ 2008.020901] ? ksys_write+0x1a9/0x260 [ 2008.020915] ? __ia32_sys_read+0xb0/0xb0 [ 2008.020933] __x64_sys_setsockopt+0xba/0x160 [ 2008.020947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2008.020960] do_syscall_64+0x33/0x40 [ 2008.020976] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2008.020984] RIP: 0033:0x7f3ad54dab19 [ 2008.020997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2008.021005] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2008.021018] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2008.021026] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2008.021034] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2008.021042] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2008.021050] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 [ 2008.021104] Mem-Info: [ 2008.021132] active_anon:58 inactive_anon:59202 isolated_anon:0 [ 2008.021132] active_file:21462 inactive_file:54225 isolated_file:0 [ 2008.021132] unevictable:0 dirty:217 writeback:1 [ 2008.021132] slab_reclaimable:9225 slab_unreclaimable:63861 [ 2008.021132] mapped:81616 shmem:118 pagetables:1854 bounce:0 [ 2008.021132] free:129977 free_pcp:285 free_cma:0 [ 2008.021155] Node 0 active_anon:232kB inactive_anon:236808kB active_file:85848kB inactive_file:216900kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:326464kB dirty:868kB writeback:4kB shmem:472kB writeback_tmp:0kB kernel_stack:5024kB all_unreclaimable? no [ 2008.021160] Node 0 DMA free:15908kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2008.021190] lowmem_reserve[]: 0 1616 1616 1616 [ 2008.021216] Node 0 DMA32 free:504000kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:232kB inactive_anon:236808kB active_file:85848kB inactive_file:216900kB unevictable:0kB writepending:908kB present:2080640kB managed:1660488kB mlocked:0kB pagetables:7416kB bounce:0kB free_pcp:1136kB local_pcp:792kB free_cma:0kB [ 2008.021249] lowmem_reserve[]: 0 0 0 0 [ 2008.021274] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2008.021381] Node 0 DMA32: 90*4kB (ME) 54*8kB (UME) 28*16kB (UME) 69*32kB (UE) 28*64kB (UE) 8*128kB (UM) 0*256kB 2*512kB (UE) 1*1024kB (E) 4*2048kB (UE) 119*4096kB (UM) = 503928kB [ 2008.021503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2008.021508] 34888 total pagecache pages [ 2008.021515] 0 pages in swap cache [ 2008.021523] Swap cache stats: add 0, delete 0, find 0/0 [ 2008.021528] Free swap = 0kB [ 2008.021532] Total swap = 0kB [ 2008.021537] 524158 pages RAM [ 2008.021542] 0 pages HighMem/MovableOnly [ 2008.021546] 105059 pages reserved [ 2008.207503] FAULT_INJECTION: forcing a failure. [ 2008.207503] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.304369] CPU: 0 PID: 10888 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2008.304378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2008.304383] Call Trace: [ 2008.304403] dump_stack+0x107/0x167 [ 2008.304423] should_fail.cold+0x5/0xa [ 2008.304441] ? create_object.isra.0+0x3a/0xa20 [ 2008.304458] should_failslab+0x5/0x20 [ 2008.304479] kmem_cache_alloc+0x5b/0x310 [ 2008.309955] ? mark_held_locks+0x9e/0xe0 [ 2008.309973] create_object.isra.0+0x3a/0xa20 [ 2008.309989] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2008.312028] kmem_cache_alloc_bulk+0x168/0x320 [ 2008.312747] io_submit_sqes+0x6f76/0x85c0 [ 2008.313376] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2008.314126] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2008.314871] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2008.315631] ? lock_downgrade+0x6d0/0x6d0 [ 2008.316248] ? find_held_lock+0x2c/0x110 [ 2008.316872] ? io_submit_sqes+0x85c0/0x85c0 [ 2008.317524] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2008.318255] ? wait_for_completion_io+0x270/0x270 [ 2008.318981] ? rcu_read_lock_any_held+0x75/0xa0 [ 2008.319682] ? vfs_write+0x354/0xa70 [ 2008.320247] ? fput_many+0x2f/0x1a0 [ 2008.320791] ? ksys_write+0x1a9/0x260 [ 2008.321366] ? __ia32_sys_read+0xb0/0xb0 [ 2008.321977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2008.322759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2008.323555] do_syscall_64+0x33/0x40 [ 2008.324129] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2008.324897] RIP: 0033:0x7f204535cb19 [ 2008.325449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2008.328215] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2008.329376] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 2008.330441] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 2008.331481] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2008.332564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2008.333635] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 [ 2008.405197] FAULT_INJECTION: forcing a failure. [ 2008.405197] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.406503] CPU: 1 PID: 10892 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2008.407246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2008.408156] Call Trace: [ 2008.408460] dump_stack+0x107/0x167 [ 2008.408864] should_fail.cold+0x5/0xa [ 2008.409283] ? create_object.isra.0+0x3a/0xa20 [ 2008.409790] should_failslab+0x5/0x20 [ 2008.410200] kmem_cache_alloc+0x5b/0x310 [ 2008.410660] create_object.isra.0+0x3a/0xa20 [ 2008.411147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2008.411728] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2008.412275] ? lock_downgrade+0x6d0/0x6d0 [ 2008.412738] __get_vm_area_node+0xd4/0x340 [ 2008.413198] __vmalloc_node_range+0x13f/0x9e0 [ 2008.413691] ? xt_copy_counters+0x2c2/0x5b0 [ 2008.414178] ? xt_copy_counters+0x2c2/0x5b0 [ 2008.414654] ? __might_fault+0xd3/0x180 [ 2008.415077] ? lock_downgrade+0x6d0/0x6d0 [ 2008.415547] ? __vmalloc_node+0x110/0x110 [ 2008.416008] ? xt_copy_counters+0x2c2/0x5b0 [ 2008.416480] __vmalloc_node+0xb5/0x110 [ 2008.416903] ? xt_copy_counters+0x2c2/0x5b0 [ 2008.417379] xt_copy_counters+0x2c2/0x5b0 [ 2008.417837] ? xt_compat_target_to_user+0x420/0x420 [ 2008.418380] ? lock_release+0x680/0x680 [ 2008.418814] ? cap_capable+0x1d6/0x240 [ 2008.419241] ? security_capable+0x95/0xc0 [ 2008.419710] do_ipt_set_ctl+0x17f/0xa90 [ 2008.420150] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2008.420715] ? lock_downgrade+0x6d0/0x6d0 [ 2008.421166] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2008.421717] ? compat_do_replace.constprop.0+0x470/0x470 [ 2008.422314] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2008.422839] ? wait_for_completion_io+0x270/0x270 [ 2008.423378] ? ip_setsockopt+0x1f4e/0x35c0 [ 2008.423845] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2008.424424] nf_setsockopt+0x8b/0xf0 [ 2008.424836] ip_setsockopt+0xe20/0x35c0 [ 2008.425281] ? ip_ra_control+0x580/0x580 [ 2008.425724] ? __fget_files+0x26d/0x4c0 [ 2008.426164] ? sock_has_perm+0x1ea/0x280 [ 2008.426607] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2008.427178] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2008.427803] ? __fget_files+0x296/0x4c0 [ 2008.428246] raw_setsockopt+0x27c/0x2c0 [ 2008.428682] ? raw_getsockopt+0x1e0/0x1e0 [ 2008.429139] ? selinux_socket_setsockopt+0x6a/0x80 [ 2008.429678] ? sock_common_setsockopt+0x2b/0x100 [ 2008.430200] __sys_setsockopt+0x180/0x2b0 [ 2008.430660] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2008.431165] ? __ia32_sys_recv+0x100/0x100 [ 2008.431641] ? fput_many+0x2f/0x1a0 [ 2008.432045] ? ksys_write+0x1a9/0x260 [ 2008.432460] ? __ia32_sys_read+0xb0/0xb0 [ 2008.432915] __x64_sys_setsockopt+0xba/0x160 [ 2008.433400] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2008.433965] do_syscall_64+0x33/0x40 [ 2008.434374] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2008.434930] RIP: 0033:0x7f3ad54dab19 [ 2008.435351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2008.437343] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2008.438177] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2008.438957] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2008.439742] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2008.440516] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2008.441301] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 20:44:08 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 4) 20:44:08 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0xf002, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:44:08 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 20:44:08 executing program 7: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:44:08 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:44:08 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:44:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000200)='./file0\x00', 0x20) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/virtio_pci', 0x66803, 0x11) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x10010, r2, 0x6) syz_emit_ethernet(0x103, &(0x7f00000002c0)={@random="67856f93ef03", @remote, @val={@val={0x9100, 0x3, 0x1, 0x2}, {0x8100, 0x3, 0x0, 0x3}}, {@x25={0x805, {0x1, 0x4, 0x9, "9731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd0af59dea0d41a8bf855c71d77d33975eb4f9bdf14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e603a241d6e545655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fc9c53d63e7dbf8b94e47c3f13463de034dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69f8d1a2e5287c5085d321a25a7ca4"}}}}, &(0x7f0000000180)={0x0, 0x0, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 20:44:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0)="495209e6ac9073b899308dd482e75670b2233115d368a1960cdebf2f82ec30b983815ea9e4af26724c42f5a225844a5ccda703c965c4d5401f0291fbd52f839fb473fc802b8bc41f132fb45b3e6884913e3bd61c66407e3eeebc6ac5f6a4afdaed59cc31b55a84ec6b4adfa2311e307df674a04f5366a3d5e0439f3fbbe6f806ef14af6bee3c0d49e9026ec176142bf76f901e6c307d891a760c4e07126049d822a9c8086553b14874202acc98595faf4b89fba4c1cb024c642edf6c03aa445d0ad3f3b9ae2f4f18876699df29b9108f398c1ca721fd700f1f935b4e789174a4d86b6290f11f", 0xe6, r0}, 0x68) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530a, 0x0) [ 2021.957697] FAULT_INJECTION: forcing a failure. [ 2021.957697] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.959077] CPU: 1 PID: 10902 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2021.959874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.961153] Call Trace: [ 2021.961677] dump_stack+0x107/0x167 [ 2021.962307] should_fail.cold+0x5/0xa [ 2021.963047] ? alloc_vmap_area+0x148/0x1d10 [ 2021.963723] should_failslab+0x5/0x20 [ 2021.964301] kmem_cache_alloc_node+0x55/0x330 [ 2021.964989] alloc_vmap_area+0x148/0x1d10 [ 2021.965619] ? kmem_cache_alloc_node_trace+0x16d/0x340 [ 2021.966414] ? lock_downgrade+0x6d0/0x6d0 [ 2021.967065] ? purge_vmap_area_lazy+0xc0/0xc0 [ 2021.967767] ? kasan_unpoison_shadow+0x33/0x50 [ 2021.968522] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.969367] __get_vm_area_node+0x127/0x340 [ 2021.970066] __vmalloc_node_range+0x13f/0x9e0 [ 2021.970798] ? xt_copy_counters+0x2c2/0x5b0 [ 2021.971625] ? xt_copy_counters+0x2c2/0x5b0 [ 2021.972234] ? __might_fault+0xd3/0x180 [ 2021.972697] ? lock_downgrade+0x6d0/0x6d0 [ 2021.973285] ? __vmalloc_node+0x110/0x110 [ 2021.973932] ? xt_copy_counters+0x2c2/0x5b0 [ 2021.974429] __vmalloc_node+0xb5/0x110 [ 2021.974880] ? xt_copy_counters+0x2c2/0x5b0 [ 2021.975391] xt_copy_counters+0x2c2/0x5b0 [ 2021.975883] ? xt_compat_target_to_user+0x420/0x420 [ 2021.976476] ? lock_release+0x680/0x680 [ 2021.976941] ? cap_capable+0x1d6/0x240 [ 2021.977414] ? security_capable+0x95/0xc0 [ 2021.977915] do_ipt_set_ctl+0x17f/0xa90 [ 2021.978392] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2021.979019] ? lock_downgrade+0x6d0/0x6d0 [ 2021.979526] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2021.980147] ? compat_do_replace.constprop.0+0x470/0x470 [ 2021.980826] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2021.981506] ? wait_for_completion_io+0x270/0x270 [ 2021.982099] ? ip_setsockopt+0x1f4e/0x35c0 [ 2021.982599] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2021.983376] nf_setsockopt+0x8b/0xf0 [ 2021.983846] ip_setsockopt+0xe20/0x35c0 [ 2021.984344] ? ip_ra_control+0x580/0x580 [ 2021.984818] ? __fget_files+0x26d/0x4c0 [ 2021.985279] ? sock_has_perm+0x1ea/0x280 [ 2021.985749] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2021.986368] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2021.987026] ? __fget_files+0x296/0x4c0 [ 2021.987522] raw_setsockopt+0x27c/0x2c0 [ 2021.987992] ? raw_getsockopt+0x1e0/0x1e0 [ 2021.988491] ? selinux_socket_setsockopt+0x6a/0x80 [ 2021.989090] ? sock_common_setsockopt+0x2b/0x100 [ 2021.989646] __sys_setsockopt+0x180/0x2b0 [ 2021.990142] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2021.990681] ? __ia32_sys_recv+0x100/0x100 [ 2021.991179] ? fput_many+0x2f/0x1a0 [ 2021.991621] ? ksys_write+0x1a9/0x260 [ 2021.992068] ? __ia32_sys_read+0xb0/0xb0 [ 2021.992555] __x64_sys_setsockopt+0xba/0x160 [ 2021.993081] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.993704] do_syscall_64+0x33/0x40 [ 2021.994151] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2021.994749] RIP: 0033:0x7f3ad54dab19 [ 2021.995200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.995582] FAULT_INJECTION: forcing a failure. [ 2021.995582] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.997312] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2021.997325] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2021.997332] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2021.997338] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2021.997344] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2021.997351] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 [ 2021.997473] syz-executor.0: vmalloc: allocation failure: 32 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 2021.999949] CPU: 0 PID: 10903 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2022.000563] ,cpuset= [ 2022.001994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.002000] Call Trace: [ 2022.002025] dump_stack+0x107/0x167 [ 2022.002050] should_fail.cold+0x5/0xa [ 2022.002981] syz0 [ 2022.004424] ? create_object.isra.0+0x3a/0xa20 [ 2022.004447] should_failslab+0x5/0x20 [ 2022.005310] ,mems_allowed=0 [ 2022.006735] kmem_cache_alloc+0x5b/0x310 [ 2022.006758] ? mark_held_locks+0x9e/0xe0 [ 2022.007843] [ 2022.009224] create_object.isra.0+0x3a/0xa20 [ 2022.009248] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.019538] kmem_cache_alloc_bulk+0x168/0x320 [ 2022.020467] io_submit_sqes+0x6f76/0x85c0 [ 2022.021316] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2022.022302] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2022.023313] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2022.024288] ? lock_downgrade+0x6d0/0x6d0 [ 2022.025134] ? find_held_lock+0x2c/0x110 [ 2022.025950] ? io_submit_sqes+0x85c0/0x85c0 [ 2022.026821] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.027799] ? wait_for_completion_io+0x270/0x270 [ 2022.028766] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.029688] ? vfs_write+0x354/0xa70 [ 2022.030443] ? fput_many+0x2f/0x1a0 [ 2022.031174] ? ksys_write+0x1a9/0x260 [ 2022.031955] ? __ia32_sys_read+0xb0/0xb0 [ 2022.032782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.033827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.034877] do_syscall_64+0x33/0x40 [ 2022.035634] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2022.036675] RIP: 0033:0x7f204535cb19 [ 2022.037428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.041164] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.042704] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 2022.044165] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 2022.045615] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.047111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2022.048605] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 [ 2022.050108] CPU: 1 PID: 10902 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2022.050881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.051802] Call Trace: [ 2022.052086] dump_stack+0x107/0x167 [ 2022.052485] warn_alloc.cold+0x95/0x18a [ 2022.052923] ? zone_watermark_ok_safe+0x260/0x260 [ 2022.053451] ? slab_free_freelist_hook+0xa9/0x180 [ 2022.053978] ? __get_vm_area_node+0x2cf/0x340 [ 2022.054465] ? kasan_unpoison_shadow+0x33/0x50 [ 2022.054966] ? __get_vm_area_node+0x262/0x340 [ 2022.055458] __vmalloc_node_range+0x58f/0x9e0 [ 2022.055969] ? xt_copy_counters+0x2c2/0x5b0 [ 2022.056449] ? __might_fault+0xd3/0x180 [ 2022.056874] ? lock_downgrade+0x6d0/0x6d0 [ 2022.057326] ? __vmalloc_node+0x110/0x110 [ 2022.057783] ? xt_copy_counters+0x2c2/0x5b0 [ 2022.058243] __vmalloc_node+0xb5/0x110 [ 2022.058675] ? xt_copy_counters+0x2c2/0x5b0 [ 2022.059135] xt_copy_counters+0x2c2/0x5b0 [ 2022.059597] ? xt_compat_target_to_user+0x420/0x420 [ 2022.060127] ? lock_release+0x680/0x680 [ 2022.060554] ? cap_capable+0x1d6/0x240 [ 2022.060976] ? security_capable+0x95/0xc0 [ 2022.061428] do_ipt_set_ctl+0x17f/0xa90 [ 2022.061868] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2022.062440] ? lock_downgrade+0x6d0/0x6d0 [ 2022.062889] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2022.063440] ? compat_do_replace.constprop.0+0x470/0x470 [ 2022.064028] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.064547] ? wait_for_completion_io+0x270/0x270 [ 2022.065070] ? ip_setsockopt+0x1f4e/0x35c0 [ 2022.065587] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2022.066333] nf_setsockopt+0x8b/0xf0 [ 2022.066879] ip_setsockopt+0xe20/0x35c0 [ 2022.067379] ? ip_ra_control+0x580/0x580 [ 2022.067828] ? __fget_files+0x26d/0x4c0 [ 2022.068257] ? sock_has_perm+0x1ea/0x280 [ 2022.068690] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2022.069261] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2022.069852] ? __fget_files+0x296/0x4c0 [ 2022.070287] raw_setsockopt+0x27c/0x2c0 [ 2022.070714] ? raw_getsockopt+0x1e0/0x1e0 [ 2022.071154] ? selinux_socket_setsockopt+0x6a/0x80 [ 2022.071684] ? sock_common_setsockopt+0x2b/0x100 [ 2022.072185] __sys_setsockopt+0x180/0x2b0 [ 2022.072633] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2022.073125] ? __ia32_sys_recv+0x100/0x100 [ 2022.073590] ? fput_many+0x2f/0x1a0 [ 2022.073980] ? ksys_write+0x1a9/0x260 [ 2022.074387] ? __ia32_sys_read+0xb0/0xb0 [ 2022.074823] __x64_sys_setsockopt+0xba/0x160 [ 2022.075291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.075866] do_syscall_64+0x33/0x40 [ 2022.076258] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2022.076810] RIP: 0033:0x7f3ad54dab19 [ 2022.077214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.079194] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2022.080007] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2022.080764] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2022.081522] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2022.082279] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2022.083052] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 [ 2022.083852] Mem-Info: [ 2022.084128] active_anon:58 inactive_anon:59095 isolated_anon:0 [ 2022.084128] active_file:21512 inactive_file:54276 isolated_file:0 [ 2022.084128] unevictable:0 dirty:431 writeback:0 [ 2022.084128] slab_reclaimable:9220 slab_unreclaimable:64256 [ 2022.084128] mapped:81615 shmem:118 pagetables:1852 bounce:0 [ 2022.084128] free:128457 free_pcp:427 free_cma:0 [ 2022.087620] Node 0 active_anon:232kB inactive_anon:236380kB active_file:86048kB inactive_file:217104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:326460kB dirty:1724kB writeback:0kB shmem:472kB writeback_tmp:0kB kernel_stack:5024kB all_unreclaimable? no [ 2022.090189] Node 0 DMA free:15908kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2022.092972] lowmem_reserve[]: 0 1616 1616 1616 [ 2022.093490] Node 0 DMA32 free:497920kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:232kB inactive_anon:236380kB active_file:86048kB inactive_file:217104kB unevictable:0kB writepending:1724kB present:2080640kB managed:1660488kB mlocked:0kB pagetables:7408kB bounce:0kB free_pcp:1700kB local_pcp:1180kB free_cma:0kB [ 2022.096644] lowmem_reserve[]: 0 0 0 0 [ 2022.097087] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2022.098612] Node 0 DMA32: 238*4kB (UM) 45*8kB (UME) 34*16kB (UME) 66*32kB (UME) 10*64kB (UME) 7*128kB (UM) 1*256kB (M) 3*512kB (UME) 1*1024kB (E) 3*2048kB (UME) 118*4096kB (UM) = 497792kB [ 2022.100576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2022.101496] 34990 total pagecache pages [ 2022.101931] 0 pages in swap cache [ 2022.102298] Swap cache stats: add 0, delete 0, find 0/0 [ 2022.102914] Free swap = 0kB [ 2022.103250] Total swap = 0kB [ 2022.103585] 524158 pages RAM [ 2022.103938] 0 pages HighMem/MovableOnly [ 2022.104372] 105059 pages reserved 20:44:08 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:44:08 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 5) 20:44:08 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x40000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:44:08 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:44:08 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 20:44:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat2(r0, &(0x7f0000006480)='./file0\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) read(r2, &(0x7f0000000200)=""/137, 0x89) perf_event_open(&(0x7f0000006400)={0x3, 0x80, 0x0, 0x5, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x16, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x3001, 0xdd, 0xf0, 0x5, 0x0, 0xffff, 0x7, 0x0, 0x4104}, 0x0, 0x5, r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) getdents(0xffffffffffffffff, &(0x7f0000007b00)=""/172, 0xac) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) [ 2022.259098] Process accounting resumed 20:44:08 executing program 7: r0 = dup(0xffffffffffffffff) ftruncate(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x5, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, 'gre0\x00', {0xf6}, 0x7}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) lseek(r1, 0x3ad3, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0x674, 0x8}) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x263, 0x0, 0x2}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000740)=""/138, 0x8a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000100)=0xfffffff8, 0x19) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) renameat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0xb}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) close_range(r2, 0xffffffffffffffff, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000280)=""/109, 0xa}], 0x2, 0x8, 0x3) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 20:44:08 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) [ 2022.376449] FAULT_INJECTION: forcing a failure. [ 2022.376449] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.378005] CPU: 1 PID: 10928 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2022.378801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.379674] Call Trace: [ 2022.379961] dump_stack+0x107/0x167 [ 2022.380345] should_fail.cold+0x5/0xa [ 2022.380749] ? create_object.isra.0+0x3a/0xa20 [ 2022.381229] should_failslab+0x5/0x20 [ 2022.381628] kmem_cache_alloc+0x5b/0x310 [ 2022.382055] ? nf_setsockopt+0x8b/0xf0 [ 2022.382465] ? ip_setsockopt+0xe20/0x35c0 [ 2022.382911] create_object.isra.0+0x3a/0xa20 [ 2022.383370] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.383926] kmem_cache_alloc_node+0x169/0x330 [ 2022.384408] alloc_vmap_area+0x148/0x1d10 [ 2022.384847] ? kmem_cache_alloc_node_trace+0x16d/0x340 [ 2022.385401] ? lock_downgrade+0x6d0/0x6d0 [ 2022.385858] ? purge_vmap_area_lazy+0xc0/0xc0 [ 2022.386332] ? kasan_unpoison_shadow+0x33/0x50 [ 2022.386817] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2022.387380] __get_vm_area_node+0x127/0x340 [ 2022.387849] __vmalloc_node_range+0x13f/0x9e0 [ 2022.388319] ? xt_copy_counters+0x2c2/0x5b0 [ 2022.388779] ? xt_copy_counters+0x2c2/0x5b0 [ 2022.389245] ? __might_fault+0xd3/0x180 [ 2022.389672] ? lock_downgrade+0x6d0/0x6d0 [ 2022.390124] ? __vmalloc_node+0x110/0x110 [ 2022.390564] ? xt_copy_counters+0x2c2/0x5b0 [ 2022.391024] __vmalloc_node+0xb5/0x110 [ 2022.391461] ? xt_copy_counters+0x2c2/0x5b0 [ 2022.391928] xt_copy_counters+0x2c2/0x5b0 [ 2022.392371] ? xt_compat_target_to_user+0x420/0x420 [ 2022.392898] ? lock_release+0x680/0x680 [ 2022.393315] ? cap_capable+0x1d6/0x240 [ 2022.393725] ? security_capable+0x95/0xc0 [ 2022.394169] do_ipt_set_ctl+0x17f/0xa90 [ 2022.394597] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2022.395150] ? lock_downgrade+0x6d0/0x6d0 [ 2022.395597] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2022.396159] ? compat_do_replace.constprop.0+0x470/0x470 [ 2022.396739] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.397251] ? wait_for_completion_io+0x270/0x270 [ 2022.397763] ? ip_setsockopt+0x1f4e/0x35c0 [ 2022.398215] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2022.398767] nf_setsockopt+0x8b/0xf0 [ 2022.399172] ip_setsockopt+0xe20/0x35c0 [ 2022.399606] ? ip_ra_control+0x580/0x580 [ 2022.400036] ? __fget_files+0x26d/0x4c0 [ 2022.400461] ? sock_has_perm+0x1ea/0x280 [ 2022.400894] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2022.401439] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2022.402027] ? __fget_files+0x296/0x4c0 [ 2022.402447] raw_setsockopt+0x27c/0x2c0 [ 2022.402869] ? raw_getsockopt+0x1e0/0x1e0 [ 2022.403320] ? selinux_socket_setsockopt+0x6a/0x80 [ 2022.403871] ? sock_common_setsockopt+0x2b/0x100 [ 2022.404374] __sys_setsockopt+0x180/0x2b0 [ 2022.404813] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2022.405298] ? __ia32_sys_recv+0x100/0x100 [ 2022.405755] ? fput_many+0x2f/0x1a0 [ 2022.406141] ? ksys_write+0x1a9/0x260 [ 2022.406549] ? __ia32_sys_read+0xb0/0xb0 [ 2022.406978] __x64_sys_setsockopt+0xba/0x160 [ 2022.407449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.408011] do_syscall_64+0x33/0x40 [ 2022.408417] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2022.408963] RIP: 0033:0x7f3ad54dab19 [ 2022.409357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.411294] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2022.412127] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2022.412905] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2022.413656] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2022.414421] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2022.415177] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 [ 2022.419676] Process accounting resumed [ 2022.428898] FAULT_INJECTION: forcing a failure. [ 2022.428898] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.430233] CPU: 1 PID: 10931 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2022.430983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.431897] Call Trace: [ 2022.432201] dump_stack+0x107/0x167 [ 2022.432594] should_fail.cold+0x5/0xa [ 2022.433010] should_failslab+0x5/0x20 [ 2022.433416] kmem_cache_alloc_bulk+0x4b/0x320 [ 2022.433909] io_submit_sqes+0x6f76/0x85c0 [ 2022.434366] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2022.434900] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2022.435431] ? lock_downgrade+0x6d0/0x6d0 [ 2022.435887] ? find_held_lock+0x2c/0x110 [ 2022.436331] ? io_submit_sqes+0x85c0/0x85c0 [ 2022.436800] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.437322] ? wait_for_completion_io+0x270/0x270 [ 2022.437869] ? rcu_read_lock_any_held+0x75/0xa0 [ 2022.438366] ? vfs_write+0x354/0xa70 [ 2022.438774] ? fput_many+0x2f/0x1a0 [ 2022.439166] ? ksys_write+0x1a9/0x260 [ 2022.439604] ? __ia32_sys_read+0xb0/0xb0 [ 2022.440052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.440614] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.441171] do_syscall_64+0x33/0x40 [ 2022.441579] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2022.442137] RIP: 0033:0x7f204535cb19 [ 2022.442545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.444545] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2022.445372] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 2022.446153] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 2022.446925] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.447704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2022.448484] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 20:44:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x10001, 0x4) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000540)={{}, "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"}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)='ceph\x00', 0x820020, 0x0) r1 = getuid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup(r2) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)=@getpolicy={0x108, 0x15, 0x2, 0x70bd27, 0x25dfdbff, {{@in=@multicast1, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x87, r3, r4}, 0x6e6bb9, 0x2}, [@algo_aead={0x8c, 0x12, {{'rfc7539esp(cbc-aes-ce,sha224-ce)\x00'}, 0x200, 0x60, "a3f5e69e83c849545068c65e8c08ba2cf68cc0d1cad9a68aea4dea38ab91bac99be493041d0aaa8671adcb31f510f7adb3f57611cf1a30e3d9564f44757ee210"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e21, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @tfcpad={0x8, 0x16, 0x5}, @extra_flags={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) getgroups(0x6, &(0x7f0000000080)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00]) fchown(r2, r4, r5) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x60, &(0x7f0000000240)={'trans=unix,', {[], [{@euid_lt={'euid<', r1}}, {@subj_type={'subj_type', 0x3d, 'lo\x00'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, '\\{'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) 20:44:09 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:44:09 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:44:22 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 6) 20:44:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat2(r0, &(0x7f0000006480)='./file0\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) read(r2, &(0x7f0000000200)=""/137, 0x89) perf_event_open(&(0x7f0000006400)={0x3, 0x80, 0x0, 0x5, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x16, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x3001, 0xdd, 0xf0, 0x5, 0x0, 0xffff, 0x7, 0x0, 0x4104}, 0x0, 0x5, r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) getdents(0xffffffffffffffff, &(0x7f0000007b00)=""/172, 0xac) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 20:44:22 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:44:22 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000080)) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:44:22 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:44:22 executing program 7: r0 = dup(0xffffffffffffffff) ftruncate(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x5, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, 'gre0\x00', {0xf6}, 0x7}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) lseek(r1, 0x3ad3, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0x674, 0x8}) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x263, 0x0, 0x2}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000740)=""/138, 0x8a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000100)=0xfffffff8, 0x19) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) renameat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0xb}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) close_range(r2, 0xffffffffffffffff, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000280)=""/109, 0xa}], 0x2, 0x8, 0x3) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 20:44:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 20:44:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) [ 2035.876347] FAULT_INJECTION: forcing a failure. [ 2035.876347] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.879016] CPU: 1 PID: 10962 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2035.880627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2035.882505] Call Trace: [ 2035.883107] dump_stack+0x107/0x167 [ 2035.883952] should_fail.cold+0x5/0xa [ 2035.884828] ? kmemleak_scan_area+0xa6/0x360 [ 2035.885833] should_failslab+0x5/0x20 [ 2035.886702] kmem_cache_alloc+0x5b/0x310 [ 2035.887643] kmemleak_scan_area+0xa6/0x360 [ 2035.888629] alloc_vmap_area+0x171/0x1d10 [ 2035.889572] ? kmem_cache_alloc_node_trace+0x16d/0x340 [ 2035.890768] ? lock_downgrade+0x6d0/0x6d0 [ 2035.891734] ? purge_vmap_area_lazy+0xc0/0xc0 [ 2035.892754] ? kasan_unpoison_shadow+0x33/0x50 [ 2035.893796] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2035.894951] __get_vm_area_node+0x127/0x340 [ 2035.895958] __vmalloc_node_range+0x13f/0x9e0 [ 2035.896978] ? xt_copy_counters+0x2c2/0x5b0 [ 2035.897957] ? xt_copy_counters+0x2c2/0x5b0 [ 2035.898939] ? __might_fault+0xd3/0x180 [ 2035.899851] ? lock_downgrade+0x6d0/0x6d0 [ 2035.900795] ? __vmalloc_node+0x110/0x110 [ 2035.901753] ? xt_copy_counters+0x2c2/0x5b0 [ 2035.902731] __vmalloc_node+0xb5/0x110 [ 2035.903621] ? xt_copy_counters+0x2c2/0x5b0 [ 2035.904627] xt_copy_counters+0x2c2/0x5b0 [ 2035.905563] ? xt_compat_target_to_user+0x420/0x420 [ 2035.906680] ? lock_release+0x680/0x680 [ 2035.907568] ? cap_capable+0x1d6/0x240 [ 2035.908458] ? security_capable+0x95/0xc0 [ 2035.909395] do_ipt_set_ctl+0x17f/0xa90 [ 2035.910285] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2035.911461] ? lock_downgrade+0x6d0/0x6d0 [ 2035.912397] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2035.913570] ? compat_do_replace.constprop.0+0x470/0x470 [ 2035.914788] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2035.915888] ? wait_for_completion_io+0x270/0x270 [ 2035.916992] ? ip_setsockopt+0x1f4e/0x35c0 [ 2035.917959] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2035.919141] nf_setsockopt+0x8b/0xf0 [ 2035.920006] ip_setsockopt+0xe20/0x35c0 [ 2035.920913] ? ip_ra_control+0x580/0x580 [ 2035.921839] ? __fget_files+0x26d/0x4c0 [ 2035.922739] ? sock_has_perm+0x1ea/0x280 [ 2035.923676] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2035.924869] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2035.926140] ? __fget_files+0x296/0x4c0 [ 2035.927044] raw_setsockopt+0x27c/0x2c0 [ 2035.927952] ? raw_getsockopt+0x1e0/0x1e0 [ 2035.928895] ? selinux_socket_setsockopt+0x6a/0x80 [ 2035.930005] ? sock_common_setsockopt+0x2b/0x100 [ 2035.931086] __sys_setsockopt+0x180/0x2b0 [ 2035.932034] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2035.933068] ? __ia32_sys_recv+0x100/0x100 [ 2035.934021] ? fput_many+0x2f/0x1a0 [ 2035.934853] ? ksys_write+0x1a9/0x260 [ 2035.935730] ? __ia32_sys_read+0xb0/0xb0 [ 2035.936657] __x64_sys_setsockopt+0xba/0x160 [ 2035.937653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2035.938840] do_syscall_64+0x33/0x40 [ 2035.939695] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2035.940854] RIP: 0033:0x7f3ad54dab19 [ 2035.941700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2035.945883] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2035.947611] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2035.949230] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2035.950850] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2035.952475] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2035.954089] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 [ 2035.956249] kmemleak: Cannot allocate a scan area, scanning the full object 20:44:22 executing program 7: r0 = dup(0xffffffffffffffff) ftruncate(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x5, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, 'gre0\x00', {0xf6}, 0x7}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) lseek(r1, 0x3ad3, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0x674, 0x8}) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x263, 0x0, 0x2}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000740)=""/138, 0x8a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000100)=0xfffffff8, 0x19) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) renameat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0xb}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) close_range(r2, 0xffffffffffffffff, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000280)=""/109, 0xa}], 0x2, 0x8, 0x3) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 20:44:22 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:44:22 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 7) [ 2036.123377] FAULT_INJECTION: forcing a failure. [ 2036.123377] name failslab, interval 1, probability 0, space 0, times 0 [ 2036.126597] CPU: 0 PID: 10969 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2036.128052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2036.129773] Call Trace: [ 2036.130336] dump_stack+0x107/0x167 [ 2036.131121] should_fail.cold+0x5/0xa [ 2036.131933] ? create_object.isra.0+0x3a/0xa20 [ 2036.132865] should_failslab+0x5/0x20 [ 2036.133633] kmem_cache_alloc+0x5b/0x310 [ 2036.134460] create_object.isra.0+0x3a/0xa20 [ 2036.135363] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2036.136477] kmem_cache_alloc_bulk+0x168/0x320 [ 2036.137414] io_submit_sqes+0x6f76/0x85c0 [ 2036.138290] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2036.139310] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2036.140351] ? lock_downgrade+0x6d0/0x6d0 [ 2036.141196] ? find_held_lock+0x2c/0x110 [ 2036.142026] ? io_submit_sqes+0x85c0/0x85c0 [ 2036.142915] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2036.143904] ? wait_for_completion_io+0x270/0x270 [ 2036.144891] ? rcu_read_lock_any_held+0x75/0xa0 [ 2036.145835] ? vfs_write+0x354/0xa70 [ 2036.146599] ? fput_many+0x2f/0x1a0 [ 2036.147342] ? ksys_write+0x1a9/0x260 [ 2036.148131] ? __ia32_sys_read+0xb0/0xb0 [ 2036.148963] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2036.150028] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2036.151085] do_syscall_64+0x33/0x40 [ 2036.151866] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2036.152906] RIP: 0033:0x7f204535cb19 [ 2036.153668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2036.157397] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2036.158947] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 2036.160405] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 2036.161853] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2036.163292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2036.164758] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 20:44:22 executing program 3: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:44:22 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:44:22 executing program 7: r0 = dup(0xffffffffffffffff) ftruncate(r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x5, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x6, 'gre0\x00', {0xf6}, 0x7}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) lseek(r1, 0x3ad3, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x6, 0x674, 0x8}) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x263, 0x0, 0x2}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000740)=""/138, 0x8a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000100)=0xfffffff8, 0x19) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) renameat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000400)={0xb}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) close_range(r2, 0xffffffffffffffff, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000280)=""/109, 0xa}], 0x2, 0x8, 0x3) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 2036.417874] FAULT_INJECTION: forcing a failure. [ 2036.417874] name failslab, interval 1, probability 0, space 0, times 0 [ 2036.420376] CPU: 1 PID: 10982 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2036.421832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2036.423536] Call Trace: [ 2036.424111] dump_stack+0x107/0x167 [ 2036.424891] should_fail.cold+0x5/0xa [ 2036.425701] ? __vmalloc_node_range+0x7a2/0x9e0 [ 2036.426678] should_failslab+0x5/0x20 [ 2036.427483] __kmalloc_node+0x76/0x420 [ 2036.428294] __vmalloc_node_range+0x7a2/0x9e0 [ 2036.429217] ? __might_fault+0xd3/0x180 [ 2036.430037] ? __vmalloc_node+0x110/0x110 [ 2036.430900] ? xt_copy_counters+0x2c2/0x5b0 [ 2036.431824] __vmalloc_node+0xb5/0x110 [ 2036.432620] ? xt_copy_counters+0x2c2/0x5b0 [ 2036.433502] xt_copy_counters+0x2c2/0x5b0 [ 2036.434356] ? xt_compat_target_to_user+0x420/0x420 [ 2036.435374] ? lock_release+0x680/0x680 [ 2036.436201] ? cap_capable+0x1d6/0x240 [ 2036.437000] ? security_capable+0x95/0xc0 [ 2036.437848] do_ipt_set_ctl+0x17f/0xa90 [ 2036.438658] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2036.439724] ? lock_downgrade+0x6d0/0x6d0 [ 2036.440568] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2036.441659] ? compat_do_replace.constprop.0+0x470/0x470 [ 2036.442772] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2036.443807] ? wait_for_completion_io+0x270/0x270 [ 2036.444789] ? ip_setsockopt+0x1f4e/0x35c0 [ 2036.445694] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2036.446766] nf_setsockopt+0x8b/0xf0 [ 2036.447560] ip_setsockopt+0xe20/0x35c0 [ 2036.448383] ? ip_ra_control+0x580/0x580 [ 2036.449211] ? __fget_files+0x26d/0x4c0 [ 2036.450017] ? sock_has_perm+0x1ea/0x280 [ 2036.450848] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2036.451917] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2036.453056] ? __fget_files+0x296/0x4c0 [ 2036.453864] raw_setsockopt+0x27c/0x2c0 [ 2036.454672] ? raw_getsockopt+0x1e0/0x1e0 [ 2036.455516] ? selinux_socket_setsockopt+0x6a/0x80 [ 2036.456535] ? sock_common_setsockopt+0x2b/0x100 [ 2036.457502] __sys_setsockopt+0x180/0x2b0 [ 2036.458346] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2036.459272] ? __ia32_sys_recv+0x100/0x100 [ 2036.460145] ? fput_many+0x2f/0x1a0 [ 2036.460884] ? ksys_write+0x1a9/0x260 [ 2036.461656] ? __ia32_sys_read+0xb0/0xb0 [ 2036.462490] __x64_sys_setsockopt+0xba/0x160 [ 2036.463377] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2036.464444] do_syscall_64+0x33/0x40 [ 2036.465201] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2036.466242] RIP: 0033:0x7f3ad54dab19 [ 2036.466998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2036.470739] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2036.472292] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2036.473735] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2036.475181] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2036.476638] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2036.478082] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 20:44:36 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:44:36 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:44:36 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:44:36 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x30, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_delete(r0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x22080, 0x82) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) getdents64(0xffffffffffffff9c, &(0x7f0000000400)=""/224, 0xe0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000002c0)={{r3, r4+10000000}}, &(0x7f0000000300)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x480000, 0x20) read(r5, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x5, 0x0, 0x0, 0x1ff}, {0x0, 0x9, 0xb5, 0x6}, {0xfffb, 0x7, 0x1f}, {0x0, 0xfa, 0x80, 0x3}, {0x7, 0x81, 0x1f, 0x20}, {0x3, 0x9, 0xff, 0x9ec4}, {0x5, 0x80, 0xb, 0x3f}, {0x34, 0x0, 0x9}]}, 0x10) 20:44:36 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000140)=@manufact={0x4, 0x0, 0x800, "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"}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x78}) close(r2) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0xa2) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000980), 0x2000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000015c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000080)="a168e3390000", 0x0, 0x0, 0x0, 0x0, 0x0}) 20:44:36 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 8) 20:44:36 executing program 7: copy_file_range(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000000100)=0x7fffffff, 0x4d76, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)={0x2, 0x9, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x20, 0x9, [0x5, 0x0, 0xa0, 0x4, 0x3, 0x3, 0x6]}}, @jumbo]}, 0x58) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000340)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x8d, 0x6}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0xb5fe1f02bac2b7e1}, @CTA_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4044008) fremovexattr(r3, &(0x7f0000000300)=@known='system.sockprotoname\x00') openat(r1, &(0x7f00000001c0)='./file0\x00', 0x40000, 0xc0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x80) close(0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) r6 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r5, @ANYRES16=r1, @ANYRES64=r6], 0x24}, 0x1, 0x0, 0x0, 0xc855}, 0x1) 20:44:36 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 2050.499433] FAULT_INJECTION: forcing a failure. [ 2050.499433] name failslab, interval 1, probability 0, space 0, times 0 [ 2050.501844] CPU: 0 PID: 11003 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2050.503284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2050.504998] Call Trace: [ 2050.505555] dump_stack+0x107/0x167 [ 2050.506313] should_fail.cold+0x5/0xa [ 2050.507107] ? create_object.isra.0+0x3a/0xa20 [ 2050.508087] should_failslab+0x5/0x20 [ 2050.508873] kmem_cache_alloc+0x5b/0x310 [ 2050.509801] create_object.isra.0+0x3a/0xa20 [ 2050.510708] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2050.511743] __kmalloc_node+0x1ae/0x420 [ 2050.512579] __vmalloc_node_range+0x7a2/0x9e0 [ 2050.513519] ? __might_fault+0xd3/0x180 [ 2050.514345] ? __vmalloc_node+0x110/0x110 [ 2050.515212] ? xt_copy_counters+0x2c2/0x5b0 [ 2050.516097] __vmalloc_node+0xb5/0x110 [ 2050.516887] ? xt_copy_counters+0x2c2/0x5b0 [ 2050.517768] xt_copy_counters+0x2c2/0x5b0 [ 2050.518620] ? xt_compat_target_to_user+0x420/0x420 [ 2050.519652] ? lock_release+0x680/0x680 [ 2050.520489] ? cap_capable+0x1d6/0x240 [ 2050.521297] ? security_capable+0x95/0xc0 [ 2050.522152] do_ipt_set_ctl+0x17f/0xa90 [ 2050.522972] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2050.524060] ? lock_downgrade+0x6d0/0x6d0 [ 2050.524911] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2050.525968] ? compat_do_replace.constprop.0+0x470/0x470 [ 2050.527110] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2050.528124] ? wait_for_completion_io+0x270/0x270 [ 2050.529129] ? ip_setsockopt+0x1f4e/0x35c0 [ 2050.529994] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2050.531064] nf_setsockopt+0x8b/0xf0 [ 2050.531828] ip_setsockopt+0xe20/0x35c0 [ 2050.532659] ? ip_ra_control+0x580/0x580 [ 2050.533487] ? __fget_files+0x26d/0x4c0 [ 2050.534318] ? sock_has_perm+0x1ea/0x280 [ 2050.535151] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2050.536218] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2050.537364] ? __fget_files+0x296/0x4c0 [ 2050.538190] raw_setsockopt+0x27c/0x2c0 [ 2050.539011] ? raw_getsockopt+0x1e0/0x1e0 [ 2050.539868] ? selinux_socket_setsockopt+0x6a/0x80 [ 2050.540895] ? sock_common_setsockopt+0x2b/0x100 [ 2050.541880] __sys_setsockopt+0x180/0x2b0 [ 2050.542719] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2050.543643] ? __ia32_sys_recv+0x100/0x100 [ 2050.544521] ? fput_many+0x2f/0x1a0 [ 2050.545269] ? ksys_write+0x1a9/0x260 [ 2050.546078] ? __ia32_sys_read+0xb0/0xb0 [ 2050.546922] __x64_sys_setsockopt+0xba/0x160 [ 2050.547825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2050.548911] do_syscall_64+0x33/0x40 [ 2050.549670] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2050.550717] RIP: 0033:0x7f3ad54dab19 [ 2050.551479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2050.555225] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2050.556792] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2050.558253] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2050.559710] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2050.561181] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2050.562632] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 20:44:37 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) [ 2050.595605] FAULT_INJECTION: forcing a failure. [ 2050.595605] name failslab, interval 1, probability 0, space 0, times 0 [ 2050.598281] CPU: 0 PID: 10999 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2050.599778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2050.601502] Call Trace: [ 2050.602051] dump_stack+0x107/0x167 [ 2050.602815] should_fail.cold+0x5/0xa [ 2050.603605] ? create_object.isra.0+0x3a/0xa20 [ 2050.604582] should_failslab+0x5/0x20 [ 2050.605363] kmem_cache_alloc+0x5b/0x310 [ 2050.606205] ? mark_held_locks+0x9e/0xe0 [ 2050.607058] create_object.isra.0+0x3a/0xa20 [ 2050.607993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2050.609055] kmem_cache_alloc_bulk+0x168/0x320 [ 2050.610033] io_submit_sqes+0x6f76/0x85c0 [ 2050.610942] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2050.611986] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2050.612974] ? lock_downgrade+0x6d0/0x6d0 [ 2050.613845] ? io_submit_sqes+0x85c0/0x85c0 [ 2050.614742] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2050.615729] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2050.616797] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2050.617896] ? trace_hardirqs_on+0x5b/0x180 [ 2050.618779] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2050.619881] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2050.620955] do_syscall_64+0x33/0x40 [ 2050.621716] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2050.622752] RIP: 0033:0x7f204535cb19 [ 2050.623507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2050.627287] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2050.628874] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 2050.630353] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 2050.631817] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2050.633328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2050.634808] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 20:44:37 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x3000000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:44:37 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:44:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:44:37 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 9) 20:44:37 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x30, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_delete(r0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x22080, 0x82) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) getdents64(0xffffffffffffff9c, &(0x7f0000000400)=""/224, 0xe0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000002c0)={{r3, r4+10000000}}, &(0x7f0000000300)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x480000, 0x20) read(r5, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x5, 0x0, 0x0, 0x1ff}, {0x0, 0x9, 0xb5, 0x6}, {0xfffb, 0x7, 0x1f}, {0x0, 0xfa, 0x80, 0x3}, {0x7, 0x81, 0x1f, 0x20}, {0x3, 0x9, 0xff, 0x9ec4}, {0x5, 0x80, 0xb, 0x3f}, {0x34, 0x0, 0x9}]}, 0x10) 20:44:37 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x30, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_delete(r0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x22080, 0x82) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) getdents64(0xffffffffffffff9c, &(0x7f0000000400)=""/224, 0xe0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000002c0)={{r3, r4+10000000}}, &(0x7f0000000300)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x480000, 0x20) read(r5, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x5, 0x0, 0x0, 0x1ff}, {0x0, 0x9, 0xb5, 0x6}, {0xfffb, 0x7, 0x1f}, {0x0, 0xfa, 0x80, 0x3}, {0x7, 0x81, 0x1f, 0x20}, {0x3, 0x9, 0xff, 0x9ec4}, {0x5, 0x80, 0xb, 0x3f}, {0x34, 0x0, 0x9}]}, 0x10) 20:44:37 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) [ 2050.880638] FAULT_INJECTION: forcing a failure. [ 2050.880638] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2050.883210] CPU: 0 PID: 11025 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2050.884650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2050.886386] Call Trace: [ 2050.886935] dump_stack+0x107/0x167 [ 2050.887689] should_fail.cold+0x5/0xa [ 2050.888487] __alloc_pages_nodemask+0x182/0x600 [ 2050.889433] ? __kmalloc_node+0x1ae/0x420 [ 2050.890289] ? lock_downgrade+0x6d0/0x6d0 [ 2050.891146] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2050.892395] ? trace_hardirqs_on+0x5b/0x180 [ 2050.893281] alloc_pages_current+0x187/0x280 [ 2050.894185] __vmalloc_node_range+0x60a/0x9e0 [ 2050.895101] ? __vmalloc_node+0x110/0x110 [ 2050.895965] ? xt_copy_counters+0x2c2/0x5b0 [ 2050.896849] __vmalloc_node+0xb5/0x110 [ 2050.897668] ? xt_copy_counters+0x2c2/0x5b0 [ 2050.898567] xt_copy_counters+0x2c2/0x5b0 [ 2050.899416] ? xt_compat_target_to_user+0x420/0x420 [ 2050.900450] ? lock_release+0x680/0x680 [ 2050.901279] ? cap_capable+0x1d6/0x240 [ 2050.902104] ? security_capable+0x95/0xc0 [ 2050.902949] do_ipt_set_ctl+0x17f/0xa90 [ 2050.903755] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2050.904832] ? lock_downgrade+0x6d0/0x6d0 [ 2050.905673] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2050.906750] ? compat_do_replace.constprop.0+0x470/0x470 [ 2050.907870] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2050.908866] ? wait_for_completion_io+0x270/0x270 [ 2050.909876] ? ip_setsockopt+0x1f4e/0x35c0 [ 2050.910753] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2050.911820] nf_setsockopt+0x8b/0xf0 [ 2050.912611] ip_setsockopt+0xe20/0x35c0 [ 2050.913423] ? ip_ra_control+0x580/0x580 [ 2050.914278] ? __fget_files+0x26d/0x4c0 [ 2050.915088] ? sock_has_perm+0x1ea/0x280 [ 2050.915929] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2050.916976] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2050.918109] ? __fget_files+0x296/0x4c0 [ 2050.918939] raw_setsockopt+0x27c/0x2c0 [ 2050.919749] ? raw_getsockopt+0x1e0/0x1e0 [ 2050.920608] ? selinux_socket_setsockopt+0x6a/0x80 [ 2050.921616] ? sock_common_setsockopt+0x2b/0x100 [ 2050.922581] __sys_setsockopt+0x180/0x2b0 [ 2050.923424] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2050.924414] ? __ia32_sys_recv+0x100/0x100 [ 2050.925290] ? fput_many+0x2f/0x1a0 [ 2050.926037] ? ksys_write+0x1a9/0x260 [ 2050.926816] ? __ia32_sys_read+0xb0/0xb0 [ 2050.927645] __x64_sys_setsockopt+0xba/0x160 [ 2050.928587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2050.929628] do_syscall_64+0x33/0x40 [ 2050.930392] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2050.931431] RIP: 0033:0x7f3ad54dab19 [ 2050.932229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2050.935982] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2050.937519] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2050.938955] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2050.940426] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2050.941868] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2050.943296] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 20:44:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 20:44:37 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 20:44:37 executing program 7: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x30, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_delete(r0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x22080, 0x82) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) getdents64(0xffffffffffffff9c, &(0x7f0000000400)=""/224, 0xe0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000002c0)={{r3, r4+10000000}}, &(0x7f0000000300)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x480000, 0x20) read(r5, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x5, 0x0, 0x0, 0x1ff}, {0x0, 0x9, 0xb5, 0x6}, {0xfffb, 0x7, 0x1f}, {0x0, 0xfa, 0x80, 0x3}, {0x7, 0x81, 0x1f, 0x20}, {0x3, 0x9, 0xff, 0x9ec4}, {0x5, 0x80, 0xb, 0x3f}, {0x34, 0x0, 0x9}]}, 0x10) [ 2051.173824] FAULT_INJECTION: forcing a failure. [ 2051.173824] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.176561] CPU: 1 PID: 11039 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2051.178011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2051.179717] Call Trace: [ 2051.180298] dump_stack+0x107/0x167 [ 2051.181060] should_fail.cold+0x5/0xa [ 2051.181855] ? create_object.isra.0+0x3a/0xa20 [ 2051.182828] should_failslab+0x5/0x20 [ 2051.183615] kmem_cache_alloc+0x5b/0x310 [ 2051.184465] ? mark_held_locks+0x9e/0xe0 [ 2051.185314] create_object.isra.0+0x3a/0xa20 [ 2051.186231] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2051.187297] kmem_cache_alloc_bulk+0x168/0x320 [ 2051.188249] io_submit_sqes+0x6f76/0x85c0 [ 2051.189159] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2051.190203] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2051.191211] ? lock_downgrade+0x6d0/0x6d0 [ 2051.192089] ? find_held_lock+0x2c/0x110 [ 2051.192937] ? io_submit_sqes+0x85c0/0x85c0 [ 2051.193844] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2051.194856] ? wait_for_completion_io+0x270/0x270 [ 2051.195871] ? rcu_read_lock_any_held+0x75/0xa0 [ 2051.196853] ? vfs_write+0x354/0xa70 [ 2051.197642] ? fput_many+0x2f/0x1a0 [ 2051.198421] ? ksys_write+0x1a9/0x260 [ 2051.199220] ? __ia32_sys_read+0xb0/0xb0 [ 2051.200098] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2051.201192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2051.202273] do_syscall_64+0x33/0x40 [ 2051.203054] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2051.204134] RIP: 0033:0x7f204535cb19 [ 2051.204912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2051.208717] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2051.210301] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 2051.211783] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 2051.213284] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2051.214789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2051.216285] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 20:44:51 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843", 0x6d, 0xb800}], 0x0, &(0x7f0000011700)) readv(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000001dc0)='system_u:object_r:fonts_t:s0\x00', 0x1d) r3 = syz_open_procfs(0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000010000001804e20a7c4000", @ANYRES32=r1, @ANYBLOB='U\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x39, 0x1, 0x30, 0x53, 0x0, 0x80e3, 0x8900, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffff9, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x10, 0x4, 0x927, 0x9, 0xffff, 0x3, 0x3, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0xf, r4, 0x1) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000180)}, {&(0x7f0000000340)}, {0x0}, {&(0x7f00000004c0)}, {&(0x7f00000005c0)="5bee93514217276c2ab19065264ea93ffd2b2d16d69b14381cfec2b92efe1e1f61f5f71aa328218b25053b9a", 0x2c}, {&(0x7f0000000680)="f5eb38646340ec087f8435023f124e6af003e05ec0f440d8f4bbbb16cfe1a1d7d078c2fd9f37bd20ad56f286f73b7dec", 0x30}], 0x6, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000280)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) 20:44:51 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 20:44:51 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:44:51 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:44:51 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 10) 20:44:51 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448c9, 0x0) 20:44:51 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x30, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_delete(r0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x22080, 0x82) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) getdents64(0xffffffffffffff9c, &(0x7f0000000400)=""/224, 0xe0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000002c0)={{r3, r4+10000000}}, &(0x7f0000000300)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x480000, 0x20) read(r5, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x5, 0x0, 0x0, 0x1ff}, {0x0, 0x9, 0xb5, 0x6}, {0xfffb, 0x7, 0x1f}, {0x0, 0xfa, 0x80, 0x3}, {0x7, 0x81, 0x1f, 0x20}, {0x3, 0x9, 0xff, 0x9ec4}, {0x5, 0x80, 0xb, 0x3f}, {0x34, 0x0, 0x9}]}, 0x10) 20:44:51 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001b00210c00000000000000000a000000050000009e00000014000100ff010000000000000000000000000001297e4b283443bc398a09a650731ed9ce9f29beb8c8173589f652885b3982d8d2cc9ea5bd403fe1adc1acad531d307ab3c149e13a020c55c31d3194bf3615c6c464a668c6495fd0acbe86364e6cc99faf0b694708106f99f1a2ed2c2972cf104b06138914ef86bbbbe1bb0ecd6d805951760e17df79bca99801832b12f400445ed9f003a3180cb7ad4e69c43748ca116eac09"], 0x30}}, 0x0) [ 2065.462359] FAULT_INJECTION: forcing a failure. [ 2065.462359] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.464972] CPU: 1 PID: 11061 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2065.466600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2065.468321] Call Trace: [ 2065.468881] dump_stack+0x107/0x167 [ 2065.469639] should_fail.cold+0x5/0xa [ 2065.470444] ? create_object.isra.0+0x3a/0xa20 [ 2065.471392] should_failslab+0x5/0x20 [ 2065.472194] kmem_cache_alloc+0x5b/0x310 [ 2065.473030] create_object.isra.0+0x3a/0xa20 [ 2065.473959] kmemleak_vmalloc+0x49/0x120 [ 2065.474808] __vmalloc_node_range+0x574/0x9e0 [ 2065.475731] ? __vmalloc_node+0x110/0x110 [ 2065.476613] ? xt_copy_counters+0x2c2/0x5b0 [ 2065.477509] __vmalloc_node+0xb5/0x110 [ 2065.478322] ? xt_copy_counters+0x2c2/0x5b0 [ 2065.479215] xt_copy_counters+0x2c2/0x5b0 [ 2065.480071] ? xt_compat_target_to_user+0x420/0x420 [ 2065.481121] ? lock_release+0x680/0x680 [ 2065.481932] ? cap_capable+0x1d6/0x240 [ 2065.482751] ? security_capable+0x95/0xc0 [ 2065.483607] do_ipt_set_ctl+0x17f/0xa90 [ 2065.484429] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2065.485488] ? lock_downgrade+0x6d0/0x6d0 [ 2065.486323] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2065.487366] ? compat_do_replace.constprop.0+0x470/0x470 [ 2065.488485] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2065.489467] ? wait_for_completion_io+0x270/0x270 [ 2065.490441] ? ip_setsockopt+0x1f4e/0x35c0 [ 2065.491307] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2065.492396] nf_setsockopt+0x8b/0xf0 [ 2065.493157] ip_setsockopt+0xe20/0x35c0 [ 2065.493973] ? ip_ra_control+0x580/0x580 [ 2065.494798] ? __fget_files+0x26d/0x4c0 [ 2065.495608] ? sock_has_perm+0x1ea/0x280 [ 2065.496443] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2065.497499] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2065.498648] ? __fget_files+0x296/0x4c0 [ 2065.499459] raw_setsockopt+0x27c/0x2c0 [ 2065.500298] ? raw_getsockopt+0x1e0/0x1e0 [ 2065.501161] ? selinux_socket_setsockopt+0x6a/0x80 [ 2065.502172] ? sock_common_setsockopt+0x2b/0x100 [ 2065.503156] __sys_setsockopt+0x180/0x2b0 [ 2065.504020] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2065.504971] ? __ia32_sys_recv+0x100/0x100 [ 2065.505844] ? fput_many+0x2f/0x1a0 [ 2065.506593] ? ksys_write+0x1a9/0x260 [ 2065.507373] ? __ia32_sys_read+0xb0/0xb0 [ 2065.508208] __x64_sys_setsockopt+0xba/0x160 [ 2065.509131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2065.510179] do_syscall_64+0x33/0x40 [ 2065.510968] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2065.512027] RIP: 0033:0x7f3ad54dab19 [ 2065.512816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2065.516611] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2065.518188] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2065.519640] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2065.520606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=11073 comm=syz-executor.3 [ 2065.521094] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2065.521107] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 [ 2065.521120] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 [ 2065.526927] FAULT_INJECTION: forcing a failure. [ 2065.526927] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.530356] CPU: 1 PID: 11065 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2065.531895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2065.533722] Call Trace: [ 2065.534372] dump_stack+0x107/0x167 [ 2065.535191] should_fail.cold+0x5/0xa [ 2065.536009] ? create_object.isra.0+0x3a/0xa20 [ 2065.537130] should_failslab+0x5/0x20 [ 2065.538026] kmem_cache_alloc+0x5b/0x310 [ 2065.538850] ? mark_held_locks+0x9e/0xe0 [ 2065.539800] create_object.isra.0+0x3a/0xa20 [ 2065.540713] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2065.541761] kmem_cache_alloc_bulk+0x168/0x320 [ 2065.542700] io_submit_sqes+0x6f76/0x85c0 [ 2065.543593] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2065.544641] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2065.545675] ? lock_downgrade+0x6d0/0x6d0 [ 2065.546526] ? find_held_lock+0x2c/0x110 [ 2065.547392] ? io_submit_sqes+0x85c0/0x85c0 [ 2065.548292] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2065.549300] ? wait_for_completion_io+0x270/0x270 [ 2065.550297] ? rcu_read_lock_any_held+0x75/0xa0 [ 2065.551438] ? vfs_write+0x354/0xa70 [ 2065.552375] ? fput_many+0x2f/0x1a0 [ 2065.553215] ? ksys_write+0x1a9/0x260 [ 2065.553990] ? __ia32_sys_read+0xb0/0xb0 [ 2065.555011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2065.556167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2065.557233] do_syscall_64+0x33/0x40 [ 2065.557995] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2065.559080] RIP: 0033:0x7f204535cb19 [ 2065.559858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2065.563729] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2065.565308] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 2065.566885] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 2065.568592] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2065.570074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2065.571615] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 20:44:52 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 20:44:52 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448c9, 0x0) 20:44:52 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 11) 20:44:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9941, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x100000000000ffc) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2065.739090] FAULT_INJECTION: forcing a failure. [ 2065.739090] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.741510] CPU: 1 PID: 11080 Comm: syz-executor.5 Not tainted 5.10.200 #1 [ 2065.742944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2065.744694] Call Trace: [ 2065.745241] dump_stack+0x107/0x167 [ 2065.746008] should_fail.cold+0x5/0xa [ 2065.746805] ? create_object.isra.0+0x3a/0xa20 [ 2065.747737] should_failslab+0x5/0x20 [ 2065.748560] kmem_cache_alloc+0x5b/0x310 [ 2065.749400] ? mark_held_locks+0x9e/0xe0 [ 2065.750240] create_object.isra.0+0x3a/0xa20 [ 2065.751152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2065.752208] kmem_cache_alloc_bulk+0x168/0x320 [ 2065.753164] io_submit_sqes+0x6f76/0x85c0 [ 2065.754053] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2065.755083] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2065.756069] ? lock_downgrade+0x6d0/0x6d0 [ 2065.756932] ? find_held_lock+0x2c/0x110 [ 2065.757762] ? io_submit_sqes+0x85c0/0x85c0 [ 2065.758652] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2065.759634] ? wait_for_completion_io+0x270/0x270 [ 2065.760631] ? rcu_read_lock_any_held+0x75/0xa0 [ 2065.761575] ? vfs_write+0x354/0xa70 [ 2065.762335] ? fput_many+0x2f/0x1a0 [ 2065.763070] ? ksys_write+0x1a9/0x260 [ 2065.763840] ? __ia32_sys_read+0xb0/0xb0 [ 2065.764671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2065.765729] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2065.766793] do_syscall_64+0x33/0x40 [ 2065.767554] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2065.768597] RIP: 0033:0x7f204535cb19 [ 2065.769353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2065.773112] RSP: 002b:00007f20428d2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2065.774653] RAX: ffffffffffffffda RBX: 00007f204546ff60 RCX: 00007f204535cb19 [ 2065.776111] RDX: 0000000000000000 RSI: 00000000008058ab RDI: 0000000000000004 [ 2065.777587] RBP: 00007f20428d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2065.779027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2065.780486] R13: 00007ffec8ecd6ef R14: 00007f20428d2300 R15: 0000000000022000 20:44:52 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x8000000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) [ 2065.949066] FAULT_INJECTION: forcing a failure. [ 2065.949066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2065.951455] CPU: 1 PID: 11085 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2065.952863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2065.954566] Call Trace: [ 2065.955103] dump_stack+0x107/0x167 [ 2065.955874] should_fail.cold+0x5/0xa [ 2065.956692] _copy_from_user+0x2e/0x1b0 [ 2065.957486] xt_copy_counters+0x4fc/0x5b0 [ 2065.958339] ? xt_compat_target_to_user+0x420/0x420 [ 2065.959362] ? lock_release+0x680/0x680 [ 2065.960217] ? cap_capable+0x1d6/0x240 [ 2065.961029] ? security_capable+0x95/0xc0 [ 2065.961876] do_ipt_set_ctl+0x17f/0xa90 [ 2065.962687] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2065.963812] ? lock_downgrade+0x6d0/0x6d0 [ 2065.964677] ? nf_sockopt_find.constprop.0+0x2a/0x2a0 [ 2065.965713] ? compat_do_replace.constprop.0+0x470/0x470 [ 2065.966821] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2065.967830] ? wait_for_completion_io+0x270/0x270 [ 2065.968856] ? ip_setsockopt+0x1f4e/0x35c0 [ 2065.969698] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 2065.970740] nf_setsockopt+0x8b/0xf0 [ 2065.971511] ip_setsockopt+0xe20/0x35c0 [ 2065.972356] ? ip_ra_control+0x580/0x580 [ 2065.973213] ? __fget_files+0x26d/0x4c0 [ 2065.974008] ? sock_has_perm+0x1ea/0x280 [ 2065.974826] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2065.975924] ? selinux_netlbl_socket_setsockopt+0x9e/0x420 [ 2065.977117] ? __fget_files+0x296/0x4c0 [ 2065.977923] raw_setsockopt+0x27c/0x2c0 [ 2065.978767] ? raw_getsockopt+0x1e0/0x1e0 [ 2065.979625] ? selinux_socket_setsockopt+0x6a/0x80 [ 2065.980667] ? sock_common_setsockopt+0x2b/0x100 [ 2065.981638] __sys_setsockopt+0x180/0x2b0 [ 2065.982485] ? sock_common_recvmsg+0x1a0/0x1a0 [ 2065.983409] ? __ia32_sys_recv+0x100/0x100 [ 2065.984305] ? fput_many+0x2f/0x1a0 [ 2065.985070] ? ksys_write+0x1a9/0x260 [ 2065.985830] ? __ia32_sys_read+0xb0/0xb0 [ 2065.986657] __x64_sys_setsockopt+0xba/0x160 [ 2065.987575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2065.988681] do_syscall_64+0x33/0x40 [ 2065.989452] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2065.990487] RIP: 0033:0x7f3ad54dab19 [ 2065.991242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2065.995015] RSP: 002b:00007f3ad2a50188 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2065.996616] RAX: ffffffffffffffda RBX: 00007f3ad55edf60 RCX: 00007f3ad54dab19 [ 2065.998070] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 2065.999548] RBP: 00007f3ad2a501d0 R08: 0000000000000048 R09: 0000000000000000 [ 2066.001036] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 [ 2066.002486] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 20:45:06 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x30, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_delete(r0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x22080, 0x82) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) getdents64(0xffffffffffffff9c, &(0x7f0000000400)=""/224, 0xe0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000002c0)={{r3, r4+10000000}}, &(0x7f0000000300)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x480000, 0x20) read(r5, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x5, 0x0, 0x0, 0x1ff}, {0x0, 0x9, 0xb5, 0x6}, {0xfffb, 0x7, 0x1f}, {0x0, 0xfa, 0x80, 0x3}, {0x7, 0x81, 0x1f, 0x20}, {0x3, 0x9, 0xff, 0x9ec4}, {0x5, 0x80, 0xb, 0x3f}, {0x34, 0x0, 0x9}]}, 0x10) 20:45:06 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843", 0x6d, 0xb800}], 0x0, &(0x7f0000011700)) readv(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000001dc0)='system_u:object_r:fonts_t:s0\x00', 0x1d) r3 = syz_open_procfs(0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000010000001804e20a7c4000", @ANYRES32=r1, @ANYBLOB='U\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x39, 0x1, 0x30, 0x53, 0x0, 0x80e3, 0x8900, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffff9, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x10, 0x4, 0x927, 0x9, 0xffff, 0x3, 0x3, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0xf, r4, 0x1) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000180)}, {&(0x7f0000000340)}, {0x0}, {&(0x7f00000004c0)}, {&(0x7f00000005c0)="5bee93514217276c2ab19065264ea93ffd2b2d16d69b14381cfec2b92efe1e1f61f5f71aa328218b25053b9a", 0x2c}, {&(0x7f0000000680)="f5eb38646340ec087f8435023f124e6af003e05ec0f440d8f4bbbb16cfe1a1d7d078c2fd9f37bd20ad56f286f73b7dec", 0x30}], 0x6, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000280)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) 20:45:06 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:45:06 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x30, 0x2d, 0x30, 0xd]}}}}]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xd60c1, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x402c0, 0x149) 20:45:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 20:45:06 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448c9, 0x0) 20:45:06 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (fail_nth: 12) 20:45:06 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2079.884239] FAULT_INJECTION: forcing a failure. [ 2079.884239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2079.886830] CPU: 0 PID: 11108 Comm: syz-executor.0 Not tainted 5.10.200 #1 [ 2079.888306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2079.889967] Call Trace: [ 2079.890494] dump_stack+0x107/0x167 [ 2079.891235] should_fail.cold+0x5/0xa [ 2079.892000] _copy_to_user+0x2e/0x180 [ 2079.892787] simple_read_from_buffer+0xcc/0x160 [ 2079.893724] proc_fail_nth_read+0x198/0x230 [ 2079.894598] ? proc_sessionid_read+0x230/0x230 [ 2079.895511] ? security_file_permission+0x24e/0x570 [ 2079.896518] ? perf_trace_initcall_start+0x101/0x380 [ 2079.897536] ? proc_sessionid_read+0x230/0x230 [ 2079.898455] vfs_read+0x228/0x580 [ 2079.899153] ksys_read+0x12d/0x260 [ 2079.899869] ? vfs_write+0xa70/0xa70 [ 2079.900645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2079.901701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2079.902733] do_syscall_64+0x33/0x40 [ 2079.903487] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2079.904516] RIP: 0033:0x7f3ad548d69c [ 2079.905268] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2079.908940] RSP: 002b:00007f3ad2a50170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2079.910443] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f3ad548d69c [ 2079.911843] RDX: 000000000000000f RSI: 00007f3ad2a501e0 RDI: 0000000000000004 [ 2079.913265] RBP: 00007f3ad2a501d0 R08: 0000000000000000 R09: 0000000000000000 [ 2079.914670] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000002 [ 2079.916074] R13: 00007ffd0f9d888f R14: 00007f3ad2a50300 R15: 0000000000022000 20:45:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:45:06 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 20:45:06 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x30, 0x2d, 0x30, 0xd]}}}}]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xd60c1, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x402c0, 0x149) 20:45:06 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x4, 0x0, 0xf3, 0x4, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xa6}, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = getpid() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = clone3(&(0x7f00000003c0)={0x280808800, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x6}, &(0x7f0000000d40)=""/4096, 0x1000, &(0x7f0000000440)=""/22, &(0x7f00000002c0)=[r1, r1, r1, r1], 0x4}, 0x58) pidfd_open(r3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x49c0, 0x4) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="3181", 0x2}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2020, 0x0) r4 = dup(r2) ioctl$SIOCGSTAMP(r4, 0x80108906, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1f, 0x2, 0xb4, 0x7f, 0x0, 0xb7, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x4, @perf_config_ext={0x9, 0xfffffffffffffff7}, 0x8000, 0x8, 0xffff0001, 0x9, 0xfffffffffffffff9, 0x1, 0x7, 0x0, 0x100, 0x0, 0xd185}, r1, 0x10, r4, 0xa) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000005f40)=0xd6) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') pread64(r6, &(0x7f0000000300)=""/166, 0xa6, 0x0) 20:45:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 20:45:21 executing program 1: memfd_create(&(0x7f00000003c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\x82\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\xb5\xc6#w\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87\x8d\x8d\x82|\x94\x10\xdaU', 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="5ea1", 0x2, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000e80)=ANY=[@ANYBLOB="010000ff2a0000002f939eed06d87c80eea855ae5655bd1a8815ca54e154d675c6c238572144e2f13384caaa516331b225bb946ede3881f24882c472cd668c04ff421d105fd274b1dc9b9a339cab9dd47c970aa727c7f9d2482734a23355f5def156b3402d3f97bcd75af5fff94efcd7bcada73286e01ea64de692d67191cb0988de1db9c3d8ec52426fc6a2f7c8a2c3c847ebd37693ae61bfa80348a218bb878a9fabf01089b801e666b25b099fae12268536535a12105d1c749a7976365d4f3efe1353b6f69d6d8c60ce24bd1c2b88021b4e7c89a3c62ca7eb2580a7554c3d644e5cbc7882", @ANYRES32=r0, @ANYBLOB="03000000090000002e2f66696c653000"]) r1 = creat(&(0x7f0000000cc0)='./file1\x00', 0x0) fallocate(r1, 0x26, 0x3, 0xfffffffe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) readv(r2, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f00000004c0)=""/245, 0xf5}, {&(0x7f00000005c0)=""/219, 0xdb}], 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000d00)={0x0, 0x7ff}) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x0, 0x90000) r5 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x8, &(0x7f0000000b40)=[{&(0x7f0000000700)="3adfdd1e60428ef0e599c17d4dc9b865dcd7602db93a7c8803751de57c5fc2431d4943a33fee9b5f1af2432fa9a2120feaa2f8d3a498d8cd1ea2b228f0a2023e2dc047746a930bc9fc01370fd26ef3aa337bbb8cb5f43cf90b36f929363a5571df98b4e1a8c25b95f8ce96e42957b1677bca197d85d33c38825d3d8dbe3d3e73cb5f32", 0x83, 0x1f}, {&(0x7f00000007c0)="4476d237eafa094feca566a348293022987e05ac3f9a80cdddf03e466f81a035d9ae3fd8e98523afa86e5088b935e0be8ab7b6b9a20fa4139a383f7518b543e8652f427f80d4c95e718a6ced025f1b1d3ba995eeb23478c6bc65822d8a3b35e0606ba03fb1c1f269eba324ce5e40a073b4631a04ff00f5957351ad0e1101bfe055fa91e1ef11a0b70200add6cbbaa211202f6e1b08ffb5bf561cf8e8cf232a2fdb741f7a768fa3218dc558e82bbcd6159dcf83", 0xb3, 0x7}, {&(0x7f0000000880)="63eea74df1394c769791da1ac8fd8506863ffec496266b88c3500b08db5c913f4fa5b63d88a9796a95ab8bbb8f4e19b2b9715ed4d5a82012763719bf6c6075c908", 0x41, 0xffffffff}, {&(0x7f0000000900)="1509f2a0da2d3e357ec7adb4375c58aefe41f94f7af1172d9c41dabb541fbdbd67e2c68a56675bfc5835bcd2558a582ccab4636b840274fb7085ae5e528b11cda485c5f308fdc292b50ab1385c590c36df", 0x51, 0x3}, {&(0x7f0000000280)="dcfa3f3cb224fc837da1852233c86221455edda96822819064bd40e1efc88be7a65032dd133b5351b92508468bad7e74483e8b68f1ebce9c9b58b903f4d00d", 0x3f, 0xbf}, {&(0x7f0000000480)="48735ebc6de7b17061cc5903aed31d64d93db9397f35c9b00a546639c5ba13e5101d4577d0d54d5a2c4b965826bff9d271b738284014f66c", 0x38}, {&(0x7f0000000980)="9f276b3595970ec8521ad42305093badb2f5ce5ece3db411d463a2037e4b332261d9129211f94d96270154e0057f0fbd8f125c7d5c33e6f73b37b6d680222a068b2abacdaf44b7ea2264966a11f5a9909d551bc36f4db1fc54caef1ae52a07f2d4f6e332e93ec13af658ae136d9c91ffdc2dd752403ac35e01bf38bef6af2e91f730e84e136ec27aa9690c1cd8bab7d03c1efe6e6313710ed1a3e593b657a7fb6a15876ce84f4050451c870fbd95caf5f5605d39a27fcb22962a8c26f097336b4f7165b62a8d60bd10af026853ee9225236cc0391a21ef153cab97adb96f4f13cf25cca7a4dca30427f0abc81b", 0xed, 0x9}, {&(0x7f0000000a80)="b8c87ee45e5ceb2ceb52b8a1e9e4116e3a28edeac2277bd262145e40f59fdd2a8cb18ff797764503ff7928b6244298f0ec94959d3c913ab7a14ece62a7381cff84525c3b3e74f28e2c7c17a197a9da5a0362ba26f6ffcddd4208e57b119305165fee935ca060ed40e47b8b541c58e46adc2106225b289f983bf8a13e0c936344a7b2471fdcaf6e8b1fecfee214e51f782d6d78f8ddc86decf65207dd90382938c90486f017eb44c770f77874381ee589c4ca", 0xb2, 0x5}], 0x200824, &(0x7f0000000c00)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_win95}, {@shortname_winnt}, {@shortname_winnt}], [{@smackfsdef={'smackfsdef', 0x3d, '\x82.)-\x9a-\x00'}}, {@fsname={'fsname', 0x3d, '\xe2(\x9a:{.l]'}}]}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000c80)={0xc0000010}) read(r3, &(0x7f0000000000), 0x1b4000) 20:45:21 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:45:21 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:45:21 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) (fail_nth: 1) 20:45:21 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 20:45:21 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001380)='timerslack_ns\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4107, 0x100b}], 0x1) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x78}) io_uring_enter(r2, 0x4e8e, 0x7068, 0x8ee7cb433cdcdbf7, &(0x7f0000000040), 0x8) close(r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 20:45:21 executing program 7: r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0xa9, 0x2, 0x4, 0x100000000, 0x2, 0x3, 0x3, 0x157, 0x40, 0x25f, 0x4, 0x7, 0x38, 0x2, 0x800, 0x1f}, [{0x60000000, 0x1, 0x3, 0x1f, 0x4, 0x7}, {0x6, 0x1ff, 0x1000, 0x80, 0x6, 0x1, 0x80000000, 0x5}], "7930e58ea2887834e39310c81c21e54243a3b334ce4e04458bcdd5ced6c47a0362ae9de92f156f2b1c9381222e18cc4cb71910bedc0cf505f20ff074752c0975412837524db30c6b4f33fbd6dfcc8c79a62a9a30dd17ee37a380ffdf844ce0173171abd2812e56c4ae6af122fa0bc526ad28b6b23c084271f88ec2208e880f67f4021e100f50ba24693c3b0e55d55c01702346d9dc1457d13d57b36a7c593186d888", ['\x00', '\x00']}, 0x352) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004af00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "e6a2e51d013042"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000440)={r3, r5, "0e4fd6d7aba1baedb48cc9885f549ed0e7ad3a8f50d03a8e1728add53b8d398fcb9c0db850d2d5685379cef2cf4193324b8dd46174fb80766a47daeb62cd53fcd00d21c5a1b3300e3f8ec9d5851d65e38b0ce4694941992e10df1a8b21591df4981e2dade6b462dd54b04dda735cd4db86e546b9362940f35c9e6418856e84eca0993f7ec43f8d46f46f8ef3269d96f9a85202860a18e8ee3f491fca076308a3366f66c2aabe8de03f0667365682fdca637ec19f9c91c5b9153ef2c4ebef77a8e6e868633badf2fec87980d27e8e950e9d8c7e419ca158964ed546c3129839618b8dea9a235c2c7a469ac8a6b3396645cecfee60dc5018050c5d0aec5a1f3efa", "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"}) [ 2095.215748] FAULT_INJECTION: forcing a failure. [ 2095.215748] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.218877] CPU: 1 PID: 11150 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2095.220272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.221965] Call Trace: [ 2095.222505] dump_stack+0x107/0x167 [ 2095.223265] should_fail.cold+0x5/0xa [ 2095.224045] ? __alloc_skb+0x6d/0x5b0 [ 2095.224834] should_failslab+0x5/0x20 [ 2095.225607] kmem_cache_alloc_node+0x55/0x330 [ 2095.226516] __alloc_skb+0x6d/0x5b0 [ 2095.227272] ? lock_downgrade+0x6d0/0x6d0 [ 2095.228133] create_monitor_ctrl_open+0x170/0x680 [ 2095.229136] ? create_monitor_ctrl_close+0x460/0x460 [ 2095.230180] ? ns_capable+0xe2/0x110 [ 2095.230943] hci_sock_ioctl+0x458/0x980 [ 2095.231758] ? lock_acquire+0x197/0x470 [ 2095.232588] ? create_monitor_event+0x930/0x930 [ 2095.233531] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2095.234595] ? find_held_lock+0x2c/0x110 [ 2095.235429] sock_do_ioctl+0xd3/0x300 [ 2095.236213] ? compat_ifr_data_ioctl+0x180/0x180 [ 2095.237315] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2095.238518] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2095.239584] ? do_vfs_ioctl+0x283/0x10d0 [ 2095.240425] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2095.241518] ? generic_block_fiemap+0x60/0x60 [ 2095.242454] sock_ioctl+0x3ea/0x700 [ 2095.243214] ? dlci_ioctl_set+0x30/0x30 [ 2095.244053] ? selinux_file_ioctl+0xb6/0x270 [ 2095.244976] ? dlci_ioctl_set+0x30/0x30 [ 2095.245819] __x64_sys_ioctl+0x19a/0x210 [ 2095.246674] do_syscall_64+0x33/0x40 [ 2095.247458] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2095.248542] RIP: 0033:0x7f9cc0a72b19 [ 2095.249321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.253128] RSP: 002b:00007f9cbdfe8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2095.254697] RAX: ffffffffffffffda RBX: 00007f9cc0b85f60 RCX: 00007f9cc0a72b19 [ 2095.256186] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 2095.257685] RBP: 00007f9cbdfe81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2095.259159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2095.260639] R13: 00007fff4ac6274f R14: 00007f9cbdfe8300 R15: 0000000000022000 20:45:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x2, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 20:45:21 executing program 3: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfffffdec, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x18, 0x109, 0x0, 0x0, {0xa, 0x2}, [@typed={0x8, 0x600, 0x0, 0x0, @u32}, @typed={0x8, 0x4, 0x0, 0x0, @u32=0x4}]}, 0x24}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xab}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xab}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x44000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) kcmp(0x0, 0xffffffffffffffff, 0x5, r1, r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) 20:45:21 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x20004084) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8400804}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='rdma.current\x00', 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x298, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa349}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ffe000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa7}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x94}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @empty, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "1d9875f45795b42885281cd1df861743b28b7ba4be79b539a20b7512137a25c6"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x209f}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3078}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000004}, 0x80010) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x481200c}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x41, 0x2a, [@preq={0x82, 0x3b, @not_ext={{0x0, 0x1, 0x1}, 0x2, 0xff, 0x2, @device_b, 0x5, "", 0x6, 0x7ff, 0x3, [{{0x1}, @broadcast, 0xe}, {{0x1}, @broadcast, 0x7}, {{}, @broadcast, 0x3}]}}]}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="d13811356cd6e82821c1f14bd7f4b364811b1f97748d917fe9e2"}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000804}, 0x4048040) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008014}, 0x884) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 2095.413492] IPv6: Can't replace route, no match found 20:45:21 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) (fail_nth: 2) 20:45:21 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x40000000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:45:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x2000, 0x0, 0x0, 0x0) 20:45:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:45:22 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x2000, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) [ 2095.619031] FAULT_INJECTION: forcing a failure. [ 2095.619031] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.621497] CPU: 0 PID: 11172 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2095.622896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2095.624598] Call Trace: [ 2095.625143] dump_stack+0x107/0x167 [ 2095.625893] should_fail.cold+0x5/0xa [ 2095.626672] ? ida_alloc_range+0x3a8/0x820 [ 2095.627537] ? create_object.isra.0+0x3a/0xa20 [ 2095.628473] should_failslab+0x5/0x20 [ 2095.629314] kmem_cache_alloc+0x5b/0x310 [ 2095.630147] ? mark_held_locks+0x9e/0xe0 [ 2095.631021] create_object.isra.0+0x3a/0xa20 [ 2095.631961] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2095.633063] kmem_cache_alloc_node+0x169/0x330 [ 2095.634040] __alloc_skb+0x6d/0x5b0 [ 2095.634790] ? lock_downgrade+0x6d0/0x6d0 [ 2095.635722] create_monitor_ctrl_open+0x170/0x680 [ 2095.636733] ? create_monitor_ctrl_close+0x460/0x460 [ 2095.637810] ? ns_capable+0xe2/0x110 [ 2095.638573] hci_sock_ioctl+0x458/0x980 [ 2095.639391] ? lock_acquire+0x197/0x470 [ 2095.640207] ? create_monitor_event+0x930/0x930 [ 2095.641171] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2095.642246] ? find_held_lock+0x2c/0x110 [ 2095.643084] sock_do_ioctl+0xd3/0x300 [ 2095.643860] ? compat_ifr_data_ioctl+0x180/0x180 [ 2095.644847] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2095.646046] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2095.647082] ? do_vfs_ioctl+0x283/0x10d0 [ 2095.647947] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2095.649020] ? generic_block_fiemap+0x60/0x60 [ 2095.649947] sock_ioctl+0x3ea/0x700 [ 2095.650676] ? dlci_ioctl_set+0x30/0x30 [ 2095.651478] ? selinux_file_ioctl+0xb6/0x270 [ 2095.652370] ? dlci_ioctl_set+0x30/0x30 [ 2095.653182] __x64_sys_ioctl+0x19a/0x210 [ 2095.653998] do_syscall_64+0x33/0x40 [ 2095.654766] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2095.655817] RIP: 0033:0x7f9cc0a72b19 [ 2095.656585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.660470] RSP: 002b:00007f9cbdfe8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2095.662065] RAX: ffffffffffffffda RBX: 00007f9cc0b85f60 RCX: 00007f9cc0a72b19 [ 2095.663592] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 2095.665037] RBP: 00007f9cbdfe81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2095.666471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2095.667969] R13: 00007fff4ac6274f R14: 00007f9cbdfe8300 R15: 0000000000022000 20:45:22 executing program 1: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00\x00', 0x2}, {&(0x7f0000000700)="3b2d95bf6923932acddce28286696baef1139165b6c1327f20c35f7c45950add387521ca3081b09d6487d2a8f8fe88e43d9e1501e2f760b93b1beb982b16b1b90408bdff3ac266488dcd43799f4418e209ed649e59cd505f38b31d37711f9ad2f38574693577eb1d48d5de45acdc8bfdcd7ad5a0d831b84026cc465b100c7770abf732d4420d2620f235204a95148d48a39423590cde9c4e3c", 0x99}, {&(0x7f00000007c0)="a9e139d3cb948f539bc7c9b6bc9e414a882e8ff9f2550d2d4cc1ca70d6f1851de97c9e52f2a7fbc2db07050b7a8c62242719180807a9b54e920a16bb7677d276327e10251d138ffb67639ff6768e4643f909b28faf072c43ddf7b6f3d1f4a438a407ab1e648de86d097476c4b6f02968ce007e32e8e2c2fc23df94ce6a1f628f477ea8dd569c014e4471fcf8ab0f20796ad53a9cc930f7da4cd8708a09aa535392128294c62bd973c0eaca400d0584c12c", 0xb1}], 0x3, 0x0, 0x7fffffff) dup2(r3, r4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) pwrite64(r5, &(0x7f0000000240)="6943e3f136eccd6dfc05a1ae806cc6b5866c224a109046b36ee91244839f3d20461f0fa22908f60100b13171d7b83f4f81291cb3758747880b6a9a114855ce1805a0992ec455258ce0ed591f2812c70497991361bd89c8f73a04728805f8e26292d182e195a281fa76916cbf301c16", 0x6f, 0x7fffffff) fallocate(r2, 0x0, 0x0, 0x8000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) kcmp(0xffffffffffffffff, 0x0, 0x6, r6, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x8, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 20:45:22 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0xff00, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 20:45:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000700100000f000000000000000000adcc74022788e1be8f1b9b4f1d54ab8f000004000000000002000020000020000000d1f401000000655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x76, 0x400}, {&(0x7f0000010100)="000000000000000000000000d0a9da48497c4915a7449265c083aec0010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1800}], 0x41, &(0x7f0000013800)=ANY=[@ANYBLOB='\x00']) 20:45:22 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) (fail_nth: 3) 20:45:22 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:45:22 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) signalfd(r1, &(0x7f00000000c0)={[0x6]}, 0x8) close(r0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000040)='}$\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x24500, 0x0) 20:45:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0xbd280000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) [ 2096.049980] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 2096.077347] FAULT_INJECTION: forcing a failure. [ 2096.077347] name failslab, interval 1, probability 0, space 0, times 0 [ 2096.080200] CPU: 0 PID: 11205 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2096.081867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2096.083843] Call Trace: [ 2096.084478] dump_stack+0x107/0x167 [ 2096.085362] should_fail.cold+0x5/0xa [ 2096.086279] should_failslab+0x5/0x20 [ 2096.087188] __kmalloc_node_track_caller+0x74/0x3b0 [ 2096.088376] ? create_monitor_ctrl_open+0x170/0x680 [ 2096.089467] __alloc_skb+0xb1/0x5b0 [ 2096.090204] create_monitor_ctrl_open+0x170/0x680 [ 2096.091172] ? create_monitor_ctrl_close+0x460/0x460 [ 2096.092197] ? ns_capable+0xe2/0x110 [ 2096.092960] hci_sock_ioctl+0x458/0x980 [ 2096.093760] ? lock_acquire+0x197/0x470 [ 2096.094562] ? create_monitor_event+0x930/0x930 [ 2096.095495] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2096.096558] ? find_held_lock+0x2c/0x110 [ 2096.097379] sock_do_ioctl+0xd3/0x300 [ 2096.098145] ? compat_ifr_data_ioctl+0x180/0x180 [ 2096.099103] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2096.100269] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2096.101328] ? do_vfs_ioctl+0x283/0x10d0 [ 2096.102148] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2096.103206] ? generic_block_fiemap+0x60/0x60 [ 2096.104118] sock_ioctl+0x3ea/0x700 [ 2096.104863] ? dlci_ioctl_set+0x30/0x30 [ 2096.105668] ? selinux_file_ioctl+0xb6/0x270 [ 2096.106554] ? dlci_ioctl_set+0x30/0x30 [ 2096.107357] __x64_sys_ioctl+0x19a/0x210 [ 2096.108217] do_syscall_64+0x33/0x40 [ 2096.108991] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2096.110028] RIP: 0033:0x7f9cc0a72b19 [ 2096.110778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2096.114442] RSP: 002b:00007f9cbdfe8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2096.115990] RAX: ffffffffffffffda RBX: 00007f9cc0b85f60 RCX: 00007f9cc0a72b19 [ 2096.117434] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 2096.118893] RBP: 00007f9cbdfe81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2096.120385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.121837] R13: 00007fff4ac6274f R14: 00007f9cbdfe8300 R15: 0000000000022000 [ 2096.130887] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 20:45:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lremovexattr(0x0, &(0x7f0000000940)=@known='security.apparmor\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fc1650200b205f0000032c64efa1fdcd22693e348ca00020000e2a89c48060e7e00008c87"]) r6 = syz_genetlink_get_family_id$batadv(0x0, r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x1) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r6, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 20:45:35 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x4000, 0x0, 0x0, 0x0) 20:45:35 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) signalfd(r1, &(0x7f00000000c0)={[0x6]}, 0x8) close(r0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000040)='}$\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x24500, 0x0) 20:45:35 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$FITHAW(r0, 0xc0045878) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) (fail_nth: 4) 20:45:35 executing program 4: capset(&(0x7f0000000180)={0x20080522, 0xffffffffffffffff}, &(0x7f00000001c0)={0x7, 0x7, 0xffffffff, 0xc7, 0x3, 0x19a}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r4, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:45:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x2) r1 = socket$inet(0x2, 0x3, 0x80) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) write$binfmt_elf64(r1, &(0x7f0000000c40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x5, 0xff, 0x48, 0xfffffffffffffffa, 0x3, 0x3, 0x77, 0x27f, 0x40, 0x1f8, 0xa5, 0xfffa, 0x38, 0x2, 0xb42, 0x6, 0x4}, [{0x4, 0x101, 0x2, 0x4, 0xb81, 0x5, 0x1, 0x4}, {0x2, 0x5, 0xff, 0x5, 0x800, 0xa6f, 0x10000, 0x1f}], "cae20520e2509d3e58128eb03c4e33aa509e81dd9756115b3d0789cb1a5e19739750534969cce275a5805aa474da570357027a06ed0f0dc78b51be065112", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9ee) syz_mount_image$tmpfs(0x0, 0x0, 0x11, 0x4, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="16", 0x1, 0x7fffffff}, {0x0, 0x0, 0x80000000}], 0x0, 0x0) 20:45:35 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000002c0)={0x5, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) io_uring_enter(r0, 0x58ab, 0xc00c0000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) 20:45:35 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x200000, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) [ 2109.282018] FAULT_INJECTION: forcing a failure. [ 2109.282018] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.283337] CPU: 1 PID: 11231 Comm: syz-executor.2 Not tainted 5.10.200 #1 [ 2109.284144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2109.285107] Call Trace: [ 2109.285418] dump_stack+0x107/0x167 [ 2109.285841] should_fail.cold+0x5/0xa [ 2109.286271] ? ___slab_alloc+0x155/0x700 [ 2109.286723] ? create_object.isra.0+0x3a/0xa20 [ 2109.287250] should_failslab+0x5/0x20 [ 2109.287680] kmem_cache_alloc+0x5b/0x310 [ 2109.288151] create_object.isra.0+0x3a/0xa20 [ 2109.288666] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2109.289258] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2109.289825] ? create_monitor_ctrl_open+0x170/0x680 [ 2109.290386] __alloc_skb+0xb1/0x5b0 [ 2109.290796] create_monitor_ctrl_open+0x170/0x680 [ 2109.291333] ? create_monitor_ctrl_close+0x460/0x460 [ 2109.291911] ? ns_capable+0xe2/0x110 [ 2109.292348] hci_sock_ioctl+0x458/0x980 [ 2109.292813] ? lock_acquire+0x197/0x470 [ 2109.293270] ? create_monitor_event+0x930/0x930 [ 2109.293812] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2109.294421] ? find_held_lock+0x2c/0x110 [ 2109.294881] sock_do_ioctl+0xd3/0x300 [ 2109.295344] ? compat_ifr_data_ioctl+0x180/0x180 [ 2109.295915] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2109.296581] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2109.297199] ? do_vfs_ioctl+0x283/0x10d0 [ 2109.297702] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2109.298347] ? generic_block_fiemap+0x60/0x60 [ 2109.298875] sock_ioctl+0x3ea/0x700 [ 2109.299293] ? dlci_ioctl_set+0x30/0x30 [ 2109.299786] ? selinux_file_ioctl+0xb6/0x270 [ 2109.300285] ? dlci_ioctl_set+0x30/0x30 [ 2109.300755] __x64_sys_ioctl+0x19a/0x210 [ 2109.301246] do_syscall_64+0x33/0x40 [ 2109.301689] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2109.302330] RIP: 0033:0x7f9cc0a72b19 [ 2109.302763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2109.304969] RSP: 002b:00007f9cbdfe8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2109.305902] RAX: ffffffffffffffda RBX: 00007f9cc0b85f60 RCX: 00007f9cc0a72b19 [ 2109.306754] RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 2109.307664] RBP: 00007f9cbdfe81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2109.308573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.309468] R13: 00007fff4ac6274f R14: 00007f9cbdfe8300 R15: 0000000000022000 20:45:35 executing program 0: r0 = socket$inet(0x2, 0x3, 0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x1000000, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) [ 2109.352362] device lo entered promiscuous mode [ 2109.380535] device lo left promiscuous mode 20:45:35 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x78}) close(r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) [ 2109.442468] device lo entered promiscuous mode [ 2109.459096] device lo left promiscuous mode [ 2109.535512] [ 2109.535725] ====================================================== [ 2109.536378] WARNING: possible circular locking dependency detected [ 2109.537049] 5.10.200 #1 Not tainted [ 2109.537453] ------------------------------------------------------ [ 2109.538141] syz-executor.7/11246 is trying to acquire lock: [ 2109.538738] ffff88800e010ae8 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2109.539776] [ 2109.539776] but task is already holding lock: [ 2109.540409] ffff88800e010f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 2109.541322] [ 2109.541322] which lock already depends on the new lock. [ 2109.541322] [ 2109.542180] [ 2109.542180] the existing dependency chain (in reverse order) is: [ 2109.542975] [ 2109.542975] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 2109.543637] __mutex_lock+0x13d/0x10b0 [ 2109.544100] hci_dev_do_close+0xef/0x1240 [ 2109.544584] hci_rfkill_set_block+0x166/0x1a0 [ 2109.545121] rfkill_set_block+0x1fd/0x540 [ 2109.545607] rfkill_fop_write+0x253/0x4b0 [ 2109.546103] vfs_write+0x29a/0xa70 [ 2109.546544] ksys_write+0x1f6/0x260 [ 2109.546998] do_syscall_64+0x33/0x40 [ 2109.547459] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2109.550432] [ 2109.550432] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 2109.551171] __mutex_lock+0x13d/0x10b0 [ 2109.551648] rfkill_register+0x36/0xa10 [ 2109.552136] hci_register_dev+0x42e/0xc00 [ 2109.552645] __vhci_create_device+0x2c8/0x5c0 [ 2109.553214] vhci_open_timeout+0x38/0x50 [ 2109.553707] process_one_work+0x9a9/0x14b0 [ 2109.554238] worker_thread+0x61d/0x1310 [ 2109.554729] kthread+0x38f/0x470 [ 2109.555137] ret_from_fork+0x22/0x30 [ 2109.555581] [ 2109.555581] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 2109.556271] __mutex_lock+0x13d/0x10b0 [ 2109.556737] vhci_send_frame+0x63/0xa0 [ 2109.557210] hci_send_frame+0x1b9/0x320 [ 2109.557676] hci_tx_work+0x10af/0x1660 [ 2109.558140] process_one_work+0x9a9/0x14b0 [ 2109.558631] worker_thread+0x61d/0x1310 [ 2109.559099] kthread+0x38f/0x470 [ 2109.559504] ret_from_fork+0x22/0x30 [ 2109.559946] [ 2109.559946] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2109.560792] __lock_acquire+0x29e7/0x5b00 [ 2109.561284] lock_acquire+0x197/0x470 [ 2109.561735] __flush_work+0x105/0xa90 [ 2109.562186] hci_dev_do_close+0x131/0x1240 [ 2109.562707] hci_rfkill_set_block+0x166/0x1a0 [ 2109.563227] rfkill_set_block+0x1fd/0x540 [ 2109.563724] rfkill_fop_write+0x253/0x4b0 [ 2109.564216] vfs_write+0x29a/0xa70 [ 2109.564648] ksys_write+0x1f6/0x260 [ 2109.565091] do_syscall_64+0x33/0x40 [ 2109.565537] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2109.566119] [ 2109.566119] other info that might help us debug this: [ 2109.566119] [ 2109.566959] Chain exists of: [ 2109.566959] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 2109.566959] [ 2109.568357] Possible unsafe locking scenario: [ 2109.568357] [ 2109.568989] CPU0 CPU1 [ 2109.569492] ---- ---- [ 2109.570014] lock(&hdev->req_lock); [ 2109.570415] lock(rfkill_global_mutex); [ 2109.571106] lock(&hdev->req_lock); [ 2109.571779] lock((work_completion)(&hdev->tx_work)); [ 2109.572352] [ 2109.572352] *** DEADLOCK *** [ 2109.572352] [ 2109.573002] 2 locks held by syz-executor.7/11246: [ 2109.573522] #0: ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2109.574543] #1: ffff88800e010f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 2109.575526] [ 2109.575526] stack backtrace: [ 2109.576018] CPU: 1 PID: 11246 Comm: syz-executor.7 Not tainted 5.10.200 #1 [ 2109.576776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2109.577664] Call Trace: [ 2109.577949] dump_stack+0x107/0x167 [ 2109.578348] check_noncircular+0x263/0x2e0 [ 2109.578809] ? register_lock_class+0xbb/0x17b0 [ 2109.579304] ? print_circular_bug+0x470/0x470 [ 2109.579798] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 2109.580286] __lock_acquire+0x29e7/0x5b00 [ 2109.580759] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2109.581334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2109.581903] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2109.582490] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2109.583070] lock_acquire+0x197/0x470 [ 2109.583487] ? __flush_work+0xdd/0xa90 [ 2109.583909] ? lock_release+0x680/0x680 [ 2109.584336] ? lock_release+0x680/0x680 [ 2109.584786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2109.585354] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2109.585941] ? trace_hardirqs_on+0x5b/0x180 [ 2109.586409] __flush_work+0x105/0xa90 [ 2109.586817] ? __flush_work+0xdd/0xa90 [ 2109.587237] ? queue_delayed_work_on+0xe0/0xe0 [ 2109.587732] ? hci_dev_do_close+0xef/0x1240 [ 2109.588203] ? __cancel_work_timer+0x2a9/0x4c0 [ 2109.588714] ? mutex_lock_io_nested+0xf30/0xf30 [ 2109.589230] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2109.589796] ? cancel_delayed_work+0x24d/0x2b0 [ 2109.590286] ? trace_hardirqs_on+0x5b/0x180 [ 2109.590752] ? cancel_delayed_work+0x1b8/0x2b0 [ 2109.591256] ? cancel_delayed_work_sync+0x20/0x20 [ 2109.591780] hci_dev_do_close+0x131/0x1240 [ 2109.592236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2109.592797] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2109.593376] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2109.593960] ? hci_dev_open+0x350/0x350 [ 2109.594392] hci_rfkill_set_block+0x166/0x1a0 [ 2109.594876] ? hci_power_off+0x20/0x20 [ 2109.595301] rfkill_set_block+0x1fd/0x540 [ 2109.595753] rfkill_fop_write+0x253/0x4b0 [ 2109.596204] ? rfkill_sync_work+0xa0/0xa0 [ 2109.596656] ? security_file_permission+0x24e/0x570 [ 2109.597221] ? rfkill_sync_work+0xa0/0xa0 [ 2109.597675] vfs_write+0x29a/0xa70 [ 2109.598063] ksys_write+0x1f6/0x260 [ 2109.598459] ? __ia32_sys_read+0xb0/0xb0 [ 2109.598896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2109.599468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2109.600029] do_syscall_64+0x33/0x40 [ 2109.600437] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2109.601003] RIP: 0033:0x7f39d5d96b19 [ 2109.601413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2109.603416] RSP: 002b:00007f39d330c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2109.604240] RAX: ffffffffffffffda RBX: 00007f39d5ea9f60 RCX: 00007f39d5d96b19 [ 2109.605032] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2109.605806] RBP: 00007f39d5df0f6d R08: 0000000000000000 R09: 0000000000000000 [ 2109.606581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2109.607362] R13: 00007ffc861ca26f R14: 00007f39d330c300 R15: 0000000000022000 [ 2109.698034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2114.526761] Bluetooth: hci1: command 0x0409 tx timeout [ 2116.574935] Bluetooth: hci1: command 0x041b tx timeout [ 2117.354256] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 2117.368107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.369282] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 2117.369886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.375346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2117.384546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.386131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.388212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2117.507112] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 2117.508427] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 2117.510023] PM: hibernation: Basic memory bitmaps created [ 2117.517135] PM: hibernation: Basic memory bitmaps freed [ 2117.524819] device lo entered promiscuous mode [ 2117.535987] device lo left promiscuous mode [ 2117.550212] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 2117.551921] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 2117.553603] PM: hibernation: Basic memory bitmaps created [ 2117.558455] device lo entered promiscuous mode [ 2117.569327] PM: hibernation: Basic memory bitmaps freed [ 2117.570255] device lo left promiscuous mode [ 2118.623761] Bluetooth: hci1: command 0x040f tx timeout VM DIAGNOSIS: 20:45:36 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff815fa2f0 RDX=ffff88800e553480 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffea0000dba740 RSP=ffff88804870f758 R8 =0000000000000000 R9 =ffff88800e553487 R10=0000000000000000 R11=0000000000000001 R12=8000000036e9e007 R13=ffff88804868e920 R14=dffffc0000000000 R15=00007fe9f0325000 RIP=ffffffff814083f4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe9f0dd8fb8 CR3=0000000040f58000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822ca1e1 RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff8880497ef2f0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000035 R13=0000000000000035 R14=ffffffff879e81a0 R15=dffffc0000000000 RIP=ffffffff822ca238 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f39d330c700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d9d81a7a20 CR3=0000000047bec000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000