o_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0x6, 0x6, &(0x7f0000000700)=[{&(0x7f00000002c0)="887c12ac39c42f465370a8d826a4b2e71f1b9d2dd94791902ddeec197e7ca64e0834021093968a59b206f36cf74450182535e53e588dc17eb979463d38fbc7a4d54d6435b75c74e3af7b30cc8a1a", 0x4e, 0x5}, {&(0x7f0000000340)="605c1ebc2b616699e91b2c2732267d58d752223e86cb706b58188227fece4300b07ea9ff59bb3286b1c0fd790c71b67b1447a261e3299301a5572b848e3a6fdadc09f203ba31dda7a1c11fda9e054bce69c2f95defe493d7894526fb40eac7eab5fd9ebb84a9e6e6d2dcb869f0c8d620417dcbe9ce00110ba3794f15dedfaf2e1d293b8c2d712844dfb34e7d490817a6f92c31a117fc29173652ce209927c3bc25a69e494105df32bd505c19974f80cd8e380b98ca660afa948dd0f57e219d5546cf46a68c93634a95f6aa15f817f9d338f670ce52398284739eb873aacdffebf3797ac7202628e759ecc34c5347bd042c7c949b226b1c", 0xf7, 0x2}, {0xfffffffffffffffc, 0x0, 0x6}, {&(0x7f0000000440)="2ee31b442e7b0bb40a1fe1cf49e1601b73c83be8340cd021ea1a15b4dbc0d8cbe568b847102bc71d962b6d38c9cf4322bd8e06db6975876433aeaf79f8be937277efa9511e02e6f06e660cf037656c0b9bc3bb50c5fbb3a1b2eed8eef7e2d63a8824a3230352efdd1e345e6d53e2698f193d0a4baf88b11b8933555f3440ec350f866c331c5f2259c373fa20b0fb3cd0", 0x90, 0x20}, {&(0x7f0000000500)="f83feb7ce3358eea2a55bc2b77d57f3b0e9d13fea144aabe1182c360add8e84a02b9be745d2c3ce585af1fef85a2acd4bbefd92cf6374baa24aa2c65fdb1affd1f9a93ff35c68cb6e498b15f7c30e1255e87681b1f0c071aaf8f0bf4c6cc71c6f9093f7122026d932f8eddcdc7b704d30256cab5fcf22339070ac0f6159b265138f82960da0e3e088c46b78e83140523fbadab3f3473dfbe5260fd982850fd02d584fafa4888bd68fbc601a20d4ad5c869660ceedc6e0ea3437ac3738d8c44b0f45e6c4d5521986d015ca46cf122e6c83047af401a215d05f98ffc3b867aedac", 0xe0}, {&(0x7f0000000600)="4a4bc3bc0bad01be8d3faf6aa6d6a2d05fa287128a47e4b194324ed72aa2fef701e41de7bbc6535fa62cc7a8ae754125737d02de015172166903f852119c5dc953a5f855a01917c8b12023fa3c3f47fa3df79152983f9a808b83ea0c02678264bcd26989e0b47afab815c593bf30d6de89e0fcce042d9dc909e81aad0fba684d0cfae24d5c51e064c046c797787cbbccd49e2a226b9dbd362670589d99fba37eb79c51a0b6a02a933e4b0b301fd1a861788b11b95647f6bed223e6a024b9fb9305e7", 0xc2, 0x876}], 0x2022420, &(0x7f00000007c0)={[{'\x00'}, {'\x96.#+\\@/p[.('}, {'[,'}, {'\x00'}, {'\x00'}, {'(*^$'}, {'\x00'}, {}, {'\x00'}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000840)={0x0, 0x2, 0x200}) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:05 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4e, 0x0, 0x0, 0x0, 0x0) 09:39:05 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:05 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) ppoll(&(0x7f0000000040)=[{r3, 0x200}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180)={[0x7]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) [ 321.788954][T26336] loop4: detected capacity change from 0 to 8 09:39:05 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 321.855821][T26336] loop4: detected capacity change from 0 to 8 09:39:05 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x4f, 0x0, 0x0, 0x0, 0x0) 09:39:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x12e7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:05 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x242180, 0x0) r4 = syz_io_uring_setup(0x88, &(0x7f00000002c0)={0x0, 0x6bd2, 0x0, 0x0, 0x1ec, 0x0, r3}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r7, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0xffffffffffffffff, r3], 0x2, 0x0, 0x1, {0x0, r7}}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x69c, 0x1, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r9, r10, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:05 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 322.183176][T26394] loop1: detected capacity change from 0 to 264192 [ 322.190625][T26394] FAT-fs (loop1): invalid media value (0x00) [ 322.190639][T26394] FAT-fs (loop1): Can't find a valid FAT filesystem 09:39:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200", 0x12}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:06 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x50, 0x0, 0x0, 0x0, 0x0) 09:39:06 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r3, 0x4d10, 0x96b2, 0x1, &(0x7f0000000080)={[0x1]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0)) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) r6 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r9, r10}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r3, &(0x7f0000000180)={0x2000}, 0xffffffffffffffff, 0x1, 0x0, 0x1, {0x0, r9}}, 0x33d) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x80, 0x0, 0x6, 0x0, 0x9, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x100}, 0xa008, 0x7fffffff, 0x7, 0x6, 0x937, 0x20, 0xf001, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x2, r0, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = fcntl$getown(r0, 0x9) r5 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x400) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x80, 0x1, 0x80, 0x80, 0x0, 0xf188, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x1ff}, 0x40000, 0x84, 0x80000000, 0x5, 0x9, 0x1ff, 0x7ff, 0x0, 0x1}, r4, 0x7, r5, 0x8) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000280)={0x0, 0x407, 0x401, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001200)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001600)={0x0, 0x0, {0x2, @usage=0x1ff, 0x0, 0x8, 0x200, 0xf, 0x2, 0xffffffffffff8001, 0xe0, @struct={0x1}, 0x3, 0x1, [0x8, 0x4, 0x58, 0xffff, 0x6]}, {0x100000000, @usage=0x9ca, r6, 0x2, 0xfff, 0xffffffffffffffff, 0x9, 0x80, 0x62, @usage=0x100, 0x100, 0x0, [0x5, 0x6, 0x6, 0x1, 0x8, 0x7946]}, {0x200000007, @struct={0x8, 0x12}, 0x0, 0x20, 0x2, 0x83, 0x10001, 0x15b575bac000, 0x28, @struct={0x5, 0x1f}, 0x87, 0x8, [0x20, 0x4, 0x7fff, 0x538b7e3d, 0xfffffffffffffffb, 0x80000001]}, {0x401, 0x1f, 0x96}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000340)={0x2, 0x0, {0x7, @struct={0x77, 0xffff}, 0x0, 0x7, 0x7fff, 0x2, 0x7f, 0x7, 0x60, @struct={0x8, 0x6}, 0x3, 0x80, [0x5, 0xfffffffffffffffe, 0x101, 0x2, 0x8, 0x8]}, {0x37b, @struct={0x1}, 0x0, 0x7, 0x5, 0x6, 0x0, 0x80, 0x400, @usage=0x3, 0x7, 0x5, [0x3ff, 0x33, 0xb5a, 0x0, 0x9, 0xffffffffffffffe1]}, {0x7ff, @struct={0x4, 0x3}, 0x0, 0x6, 0xfff, 0x0, 0x8, 0x1, 0x0, @struct={0xaa, 0x80}, 0xfffffffa, 0x5, [0x0, 0xfffffffffffff801, 0x7, 0xfffffffffffffffb, 0x5, 0xfffffffffffffffc]}, {0x401, 0x2, 0x9}}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000740)={0xa, 0x9, {0x6, @usage=0x9, 0x0, 0x35e1, 0x2, 0x9, 0x3, 0x10000, 0x22, @struct={0xfffffffd, 0x7ff}, 0x5, 0x4, [0x80, 0x94, 0x0, 0x4, 0x101, 0x8001]}, {0x4, @usage=0xc6, 0x0, 0xd0, 0x0, 0xffffffffffffffff, 0xa7, 0x7fff, 0x20, @usage=0x7c7, 0x7fffffff, 0x5, [0x10000, 0x5, 0x8d21, 0x5, 0x4, 0x6c]}, {0x7c, @usage=0x100, r7, 0x8, 0x1, 0x5d, 0x1, 0x6, 0x400, @struct={0xffffffff, 0xab}, 0x7, 0x1, [0xcb, 0x1, 0x2, 0x4, 0x2, 0x3c]}, {0x6, 0x56b2, 0x3f}}) wait4(0x0, 0x0, 0x80000000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:06 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4000, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000100)="9e84c6438236e7a2572d6280e60f0d", 0xf) perf_event_open(&(0x7f0000000080)={0x7, 0x70}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xf9ed) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:06 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4580, &(0x7f0000000340)={0x0, 0xe56c, 0x4, 0x3, 0x2c, 0x0, r4}, &(0x7f0000281000/0x1000)=nil, &(0x7f000075e000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x24, {0x10, 0x5, 0x280, 0x40}}) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x17) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x2, 0x2, 0xa5, 0x0, 0xffffffffffffff81, 0x44018, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x100000000, 0x80}, 0x400, 0x2, 0xe7, 0x9, 0x9, 0x2, 0xaa, 0x0, 0x8001, 0x0, 0x4c90}, r6, 0x3, r0, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xfc, 0xf3, 0xdd, 0x5a, 0x0, 0x1ff, 0x40200, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0xdc8, 0x1}, 0x10b2, 0xffffffff, 0xeffc, 0x4, 0x7, 0x3, 0x7a, 0x0, 0xfffffffa, 0x0, 0x80000000}, r7, 0x2, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:06 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x51, 0x0, 0x0, 0x0, 0x0) 09:39:06 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x52, 0x0, 0x0, 0x0, 0x0) 09:39:06 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) vmsplice(r4, &(0x7f0000000780)=[{&(0x7f00000002c0)="4f6527d7642b2ecbe945d9fda7f502994be400f6081477d6b47b10765442e3ac7aa491b38a05b75c46ae7a27e7d2d04af640e5e332de116864efecec3abadf303eb78c83b882333b90fd706d2ad539493edbcde38a1ab022a33042e7dc3472ded701e02dc25bf159ecf6d411477c0f735101ba60a8631ce8100343824f66438aa6559a44b9113b975f4b583e68fd98a3b6daf727c94ebcc81a6dac1f11585168cc47db20affc2a6ba649903179c80dc93dd6231cc1d6715e8b2aa3f037890a6d93ce2e2e5aa7856c23110303c87af7e68b56cea0ed00", 0xd6}, {&(0x7f00000003c0)="d8632d26d83898d3663f8afa97504604fbd2a1a42b0e8c007cb320a87f4afae8d61e8c466ea9d2baa49c0fee54462968fb079d2f7be50d7c72d14b56e6811d87b43122692903b355160633d1bf1e87e803050d93ddf00ab7adfcd0ca2547b66d753bed7dc0577bd0cc9c25955abb90619b3cef3a2c8217fa545b16c98dd0a05ce6933ab4949758", 0x87}, {&(0x7f0000000480)="16d903dad5d95b4954b6ba74407b232942b230effecc7f34825827838d80c459d0b6e9834f0901456364715c3031a1d195520205f85cc33a3c06a9f30f8bdd05f3c8313a5f524528211ac0fdb65c30e8782c5409a3d6af5d9a7a6899732cb1b1267931ce468e23aa138c55", 0x6b}, {&(0x7f0000000500)="0a4dbf72d9570c19f4847f6ccda45cfb4c1dd43827f34886de4a8f7f664c7885efbcb9cc05872fe5eed0facd106281d8609aadeb0d50d9dcfea8ac03b8ff3263a8143c294995aa34551895b0bf7aaa7f1def78ec32dc58515c6f1690790756425dd578763568cbc318f7384b3225bfb14984e0675f88878ddde736ff1e86ed8e75d6fc1df1", 0x85}, {&(0x7f00000005c0)="8f57bab89f02d17d222bbf41f758bae636e43b2fb72ee33d3afc732b51da8f50ead29e979966eee50cd7b348698c36ad47a61b5528727acd66a78caec852e73ef6ee7f1e43a29ae7bd248a18863e95f6cc31651140f332ea59c18f0e7954dd90952d04568d9ed5b73c5daad41daef699abc1a41689dbeb75e7125a8a951ade4ad1a6fa7acfe084a3204e07d0ae71b7577232ec7d05705a36f374e622f4f00db532fe5be8d1cf18bf61106cb5f7702e79761f49c2dada9f58fc7c5b835d6bdc", 0xbf}, {&(0x7f0000000680)="df360d26930192d66fe3aeb6b9bb3859e10fa8a506004ebddd79f9a76330b48996eec811dbbc81e8cf10c77b6cc695b99b645abf263c656a2d5fb159715dac6a2ea4a9f141912a84c551631b3099c72c87359eac7f444e6d82a6c314df6e17594d64326b83fa446dce334ad8c39256f7657b88a41e9ce1dda2d98f20faabe93523dcaca44247698c3ce66958b3837be528aca15a9cef42d4ee17e8269a7c8906e5f9a8982d38566f9b93e94e2e38d9eae3bfcace1af8e17f10dbc31c7a75cd2e1acc99165cafceb8c9440de523e090350a6bd600112574b5a009d5a7cd7a92ae39967114fc383be63d185d544253de", 0xef}], 0x6, 0xe) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000080)) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) mkdirat(r3, &(0x7f00000000c0)='./file0/file0\x00', 0x80) 09:39:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:07 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x53, 0x0, 0x0, 0x0, 0x0) 09:39:07 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) io_uring_enter(r3, 0x36a9, 0xb71, 0x2, &(0x7f00000000c0)={[0x8000]}, 0x8) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:07 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:07 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="3bbbcfad3fb7c5afb304a1531d22f6056c422e427a4409fc3b4197ca793ab4d597f7615a969087acc6dc9786d712553ab08b356f06596de6a3db54e9a667ae0ee70e4f85b15cdd46", 0x48}], 0x1, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x1, 0xff, 0x81, 0x0, 0x3f, 0x243a, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x90, 0x0, 0x5, 0x4, 0x7fffffff, 0x9, 0xfffc, 0x0, 0x0, 0x0, 0x8}, r2, 0xf, r1, 0x2) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x302, 0x80000, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) mmap(&(0x7f00007e0000/0x3000)=nil, 0x3000, 0x8, 0x80010, r3, 0xece3b000) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:08 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x88) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:09 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000040)={0x6, 0x8, 0x5}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:09 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x54, 0x0, 0x0, 0x0, 0x0) 09:39:09 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = gettid() tkill(r3, 0x34) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:09 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x55, 0x0, 0x0, 0x0, 0x0) 09:39:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x302, 0x0, 0x0, 0x0, 0xffffffffffffff84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0x8, 0x5, &(0x7f0000000500)=[{&(0x7f00000002c0)="295b7588986415f90205be1384d6c13daa56bb0edd2206b476da20820884868218cc6daff0437653ee5650eca52311e680d464a44bda4026b382b41b03d57cf55b8df1405684ede06e7f06", 0x4b, 0x80}, {&(0x7f0000000340)="17b6801ada8a055225e682da6f3ed7f2b20857b29d8b1f4bdcb4fbad917abec438bd44317d8e6b295f0fe33149c2b9f8b7179b130726b052b0794adf6dce3d0cfd", 0x41, 0x9}, {&(0x7f00000003c0)="a5bb291dd801cfc12705f07fc728c26e820a8e29bda94d8c23cbb79af324bb7c2c33794182db80c07e464ecb32d0df6261c1d8f16a5851c0cfb1711f1939ab425da8a1205c835541b4a7f1f7ef153d12f644e230ef2c603abd40c142bb43466d010a62ada1026f73e4d0c1c0d39e3f19b777fa1d626c079cd378d4b1f125d3be112104ae472ef44282efca07c52d755b1e561b6e60274225adc7663c2ceeafe0ef87a71d9e", 0xa5, 0x7}, {&(0x7f0000000200)="938a4fdeb9deccf93bf7e137cc141dbcf3ba0e2c708cdd3dd8f153435288863ea2bac1012348d65c5b25189402ea3b299e09e84fb0baf0600b32ae0d103e", 0x3e, 0x2}, {&(0x7f0000000480)="01272c5a1e4d21cbdba61379c12db41efd2b206d5fe08c432c834e37b0de19dc4d1b9066b1522bac407a0680092798a15dfb64c68ca7320f7cbaa029a3d87b9b11b91384fb164ce61b9c0769d284894a86789cddd341a0645f853e1a9956a2ff2631352f", 0x64, 0x7fffffff}], 0x49000, &(0x7f0000000580)={[{@huge_never}, {@huge_always}, {@huge_within_size}, {@mpol={'mpol', 0x3d, {'default', '', @void}}}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsname}, {@smackfsdef}, {@smackfshat}, {@permit_directio}, {@hash}]}) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0/file0\x00', 0x1) sendfile(r5, r6, &(0x7f0000000680)=0x6, 0x5) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1800003, 0x8010, r0, 0xa5bf8000) r4 = syz_io_uring_complete(r2) vmsplice(r4, &(0x7f0000000640)=[{&(0x7f00000002c0)="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", 0xfe}, {&(0x7f0000000040)="21b71f33c4e9eecf486fcc90c0aa77ff3e0d6a09ea4fe9e088cad1a1d585a2a0e8d0c45134a739f1502ff45ca1fa4dbd7254d14651584f2eb30411ce99c840b2a823170ac0a5bc1175b4ee93d1b9fac48ffa6f63", 0x54}, {&(0x7f00000003c0)="07182d5ff997027c5368026760bb401e72213363c73a20cff5f25a0f89813ae44a62bd2f5a323d0a6357d56d03a7c2c031ec7157887e4ae7678d510f513c5fdd66598e54470d4b8e7b0570cd19259ce807179f09f1167a333d54bbc5ef476896fe40a35ee8b9e9385b7c2911ae47b31cd8200d25aa517e3696a2b6cc46c81d3e558980ad4a8b5e4afbcfaa84a9ddf802cf04ca8c020b5a84766b76fe4b4e5a9a220223d4ecf67789246855838906b3b3427d4160c15c24e7f3a564fe65d598a54b1c1efacb2982c55b17e08215e491c7e849aaaf6663f6d34978d083df7aa6f7c6376773a360feb22fcc1434e3846d", 0xef}, {&(0x7f00000004c0)="faef6d5b5ecbb63beae015e58eccf9f98e4facc0cf902845387a9c7183ddd4455a95e7695db6fac71f3665c829d54191d0f7f22e255ffd3b127f0729302589eb01ec56768ab2e7471730dcc071a8854eb7a25cdae2303bc79c3cb6e3fe79a06c8caa81f524a545707f5fd5dca408e33c35360a69faa83832037b3d3322fef354556974b049485b083921675ec964998f531f5fcbca170dd0f0cc425889dde29a6d5304a69dddf397a1e02a4cd0", 0xad}, {&(0x7f0000000580)="00c30932307b57f9e89ba887521ff5df28c08e7793f04df4b542f3bbab3437168adc0e121a6a01e9edf6748445d306b8997428c6fd07d06d53cd12b147dce7f1e25302ea592f7fab71dc1d0a45ed98970ad73fcc8a772388d0409b4141d74f093d15fff11db2ec6d5b1ea5fed35d1469c51e0f5637cece35af4164ec5a63669e17fc6a6c0bfd9fca8b706a0c021a2670862d98ed7be3d1510d58d060795fd88dfdcf851eb63d5a0b5f21f1827c821d393d4a7315d4a7c036", 0xb8}], 0x5, 0x6) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:10 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 326.401218][T26538] loop4: detected capacity change from 0 to 264192 09:39:10 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x56, 0x0, 0x0, 0x0, 0x0) 09:39:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000319000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:10 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000680), 0x0, 0x400500) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x6, 0x8, 0x7f, 0x1, 0x0, 0x200, 0x2001, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xc9, 0x4, @perf_bp={&(0x7f0000000340), 0x1}, 0x2011, 0xdd, 0x6, 0x9, 0x3cba, 0x2, 0x3f, 0x0, 0x9, 0x0, 0x7fff}, 0x0, 0x1, r0, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) syz_io_uring_setup(0x232e, &(0x7f0000000040)={0x0, 0xdb1f, 0x10, 0x1, 0x371}, &(0x7f00004b1000/0x3000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r5, 0x0, &(0x7f00000002c0)="da7b4bef4664089ce6475f86fbe8aab2f87c227c4d32ceac94b64f1ed38dd1306fa1cafef7906babd354e4cef083b17bc6a677e4494bb3fe7f317759fb65feea9ecc21ee8e9cecd57a9a005aae432360b39331d89174292720faf34986945c564cfc0d8941d66e2db5e8d2df7e", 0x6d, 0x40012001, 0x0, {0x0, r6}}, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:10 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x11800, 0xf5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) preadv(r3, &(0x7f00000000c0), 0x0, 0x3ff, 0x7ff) io_uring_enter(r5, 0xa01, 0xc05e, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r7, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:10 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x57, 0x0, 0x0, 0x0, 0x0) 09:39:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x101000) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x7, 0x3, 0x8, 0x0, 0x0, 0x401, 0x10, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfc2a, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x40980, 0x8, 0x1, 0x6, 0x5, 0xffffffff, 0x4, 0x0, 0x20, 0x0, 0x3}, 0x0, 0x0, r3, 0x8) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:10 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) r4 = mmap$IORING_OFF_SQES(&(0x7f00005ec000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x10000000) r5 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x4004, @fd_index=0x1, 0x45, &(0x7f00000000c0)=[{&(0x7f0000000480)="ebadd18691392da8fca38e1899ce53d3af295b458f4a4381c305653ee2754a46e8c97fd4ebb53ceecbf405dc67b89c7827c06e82da825fbc284ddaeabe476cd6c2406261c2dc902a74b0893c92804f07bc50e32084f023f4686ffff0e9a27c07ec47026ae4f8c5a98b2dd0395c", 0x6d}, {&(0x7f0000000500)="b3ab1670641b476308c04ad4ff185692743b8d0e19973ae64509d8d0dc310b9451e932dffab55c2ed8bdd92a47a5351455e8706f2347ac112ce559ecb5e93cb9f6ddcb908b386edfb264432bd9affcd775a8cf6a227bf5ec74128f589729282c0fa5358a4725434072369dce0d63bbe92dbdb90e9667d40932f3e0127e610a499c32dc02573ee56275035b732256572925264779e5d2e3f67ef614ad973fe83041dc2073fad0b0fc2948627176e73ae8c0032a444c4d1db8c6b3eea229d78183b9ed665b40f33e6965e791417dd6072b0a59", 0xd2}, {&(0x7f0000000680)="8e96722dbd9401676e4e4c9f610e34cf752c384cd0708791357d3af60756464075c5e5db74848c7f170d29b9f0ec51048f6fb5252b9f276efdd0cd178968fc60aaae1f491143d0e31205950c66e4ec1f306a232df2e7b5c959d2812c722f68db27f0f71c3cb38061338fa8fc469011fb2e115b909788f1b4ab7b88a4a63621593b4c46fc17eb5ab51f898a07485a06b5a66b724a0bbf8f711b924c3c8b46abeb741d1d3a6d8d6a1900bbab31becdfe4ede43eb65909ff7ece51eff4a02ee88b4880902a1d6fcd8603095ceee53ae446d2521be5432d77393eb90fcb2a39ca5011aca443528d82d9894a8fc5e22e895cb63f69537a46f848d28", 0xf9}], 0x3, 0x1, 0x1, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:10 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x58, 0x0, 0x0, 0x0, 0x0) 09:39:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:10 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) r5 = openat$incfs(r4, &(0x7f0000000040)='.log\x00', 0x2, 0x2) getsockname$unix(r5, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x8, 0x0, 0x8, 0x0, 0x3, 0x560, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x140, 0x0, 0x2, 0x6, 0x200, 0x3, 0x8000, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:10 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:10 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x59, 0x0, 0x0, 0x0, 0x0) 09:39:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) sendmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000002c0)="dcc6e5964efacaa1caf8ea3a483c6367c9bd1f645f251f17c527c51664aec923b61b75ab3c5640f261259184f9a7277e687a6a4f1e6cc9342adbabc17d720a2cdfcc7afa41868784cfc8d8e293858a9a56a2ee54ff689a2c711942d65ba99bfcd1ffcd938fc3ef4fdebfc121225c511b28721b9b7b511e7b2ff32daeb0d5511155884f2bc1aa073860b62004c6dd6c3a9ddf1a14a11e5a9799cb8f691422210aa19ecb00a12db6f3", 0xa8}, {&(0x7f0000000380)="ef84739d89fae0ded4f9c5eebaee46779e2585cd60a3137206e3bf8b5cb4acc061ccece6f76aec525342be9a3f11c03d4223168b3ba400bfdcb576945b7b3fbef6bbba937f87448287bc23d9241e6ee02c0f7d273461627cb4bcbc449f2bfa49519d3b58d27f33451327b6bbb7c8aae7a4f58d102db0499074e0dc0151a28974cffc5178fdc9c1f9b801b89c5f5993bd3be0711b9989dad9967231d9a74c436026c008040dbf5cbf1e59ea4aa0a902e3", 0xb0}, {&(0x7f0000000440)="9b31c95992b31a0da39122ca5b2ebd758408d010beaf2c4be6324d523b47dde5183312f6ff0374ed99cef5c7d9", 0x2d}, {&(0x7f0000000480)="a78d00c99fe163075de602c8d0b1a3be14d64cfe58523eb5ef8d03dbd50fd49d56ea8a6e69b35d7cd55d6bef5447c05c5733e605ebee6a319b38371f15fedeef06ad5303b3e72a4fe7989e6f1f67ba4b8456baebd5bb8f0386e711aab2ab4bf7711a6dd01e6b8c8c0b6de0fea56adb1a5592101f993851afef2c7e570cd15f6cd56894ca64fabefb0beee86ecb691847e0c5f1b0b7ba13ff480093aa2caf011ffeb64fa380d798bdc5b1e5b181f6a9dc8bd31a40e56550befd5b72c1d76a1876e62734e67850db93b7f32f9424541d05b1e1d3a5f20e19248c1499943d2ce0479565ee", 0xe3}, {&(0x7f0000000580)="d9392468b9e7e1bfdc86993a2446bcfb066c3e4757ded635ef056480ad7c461e703d21c4aaa1895639110f875a7ac4e068ea8c2cafdaab64372e596b783a5357bbd9e161a745b131b9709927e95702f9764ccbb31c2c1176a411787fa601a1673f89adcb2c64cdc6d32f005b36a22f74913188474ebf74e64427862235d50076daea9a1fb3a114c6ce6d0112b838d1c0984280baa690ee2ade78a35073eef492fe3f69dd73f5f631562ccd797b07d048b94958bf9aa9d09756ff3e4ab14303f978ae3f5ac0d1ec4fc68d5ba2b70f80354e2d1840f1a3a83cb03d5c13179cc8a2892ae31cca53eee7e83fab4789b19a350d20", 0xf2}, {&(0x7f0000001d80)="78e6c18f75d8301419b81ac5d4db54bf813933b9f07545ae7e5d9fceda8bc7f22db6de11558362fb1effbdb4a2cc98da151ab7a60a9fed5b8713b84f49e56e070bc74a5f3e1ecfe31a991ecbb38b362f937f8e92d25f22c50bed6e645e6a042c03736fa73d786a38a8072f445c7f18065774ef5cbc448b76a5041654d957a293052bd5a97bbc0025d584927cef188a101f7018a459fdd2208e283e2cca789efa88b0e96424578b8122ec2e3c6e9febaafad8ae8735ab89555fdd5fc49977a0fd88f4d4205dda207d2feefb98a1e1f62eba108ae2db55f93687ff93fdfe955105737d384637a8c872d57a0dc1599a", 0xee}], 0x6}}, {{&(0x7f0000000800)=@sco, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000880)="d5195178566173d6244d53bea83f11eeac5830180e1b51b9e2ff09703ac9e0cbd3cc1a0ed46effeb303a52b7a7c4e92e56f65d938b7178732460ba9d289ea3e1834f7cb1fe3e5ab27f332d8d31d4d3d4d7ee4b073d15032c5fe450101ff175d628b24257c724ca6cbf5fd527384d0b83fdc7a889c624eb0dc350f640779db0f4a40d9b83a4d7f7dc8c63f4c03df208bdc37454769d01431d5c64e6b902177be9b6ed7d091cc865bb84a846fdc4760d73", 0xb0}, {&(0x7f0000000940)="0e2b20e4acba6959fd4c41e3841b627b0721bbe9aba69a", 0x17}, {&(0x7f0000000980)="528bf7c61de87265a405cb4ec70321b810c3aca4802d20e830b5a3a055b268fd8bce36fdda7e981e49f219394ba5484a60014395134f421440892dc1ecfbfb56435a2743d358ba56c95769077a7921382446e23666a288d7a9c4215139fe48baec0de4c54c7a5968943feb3bf7c8ae5a5ed36a64a42375d47c1521b0d59d16b0403b6c830c795fcec891489a6872d8d4bb856e0ae40f7eea2b8eeaeeef5a2840330b2df1ee861dac86a5039f79504b6de6cb6923cb", 0xb5}, {&(0x7f0000000a40)="b951a2ebd5a57aa373bbafb158b0681b7eec1293336e94ae99791b7513be39e5a40d0b67bba20588e631150881a0083f4b5ce449177ba5208a81fbe14a4182125823581c61a6d16784e9ebb360bffb20", 0x50}, {&(0x7f0000000ac0)="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", 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b40)}, {&(0x7f0000001b80)="a82f9018fb740d1400d5c6e2c4ac0eaea5f016a9c6204e744b6a33af220f0d22f5fc41641021c968de8c36c349", 0x2d}, {&(0x7f0000001bc0)="1f99ac81383ee704fabe305fefc049f52cd15c0204d91419cd685dab05d505e30eec9881409def6b858a90ce14ca42ff787ee4f55d57bc348f3dd2cbc898e13a88db5c0951", 0x45}], 0x3, &(0x7f0000009200)=ANY=[@ANYBLOB="c00000000000000006000000a6020000b9097944a6aad43b358d0b7d899520fddf1ebf8206db7c059b0fa31a977dab7f4b0c89a8a23c7e8576a7d47e7d8aa9a9b6ebf774e21038c9478bcccc7e71fc3ddbef5dee28a5adf9967188fdebed629564cb24df22884088d0398bcc5419d9ea5644f06bc1335cae15908b1f8ae7da041763571bf56fefdfbac4d5ba9b06aa001f41d8ff4e3b8967bec1249621934a2e2efc081772a2b83773a579b8b989248f90f750f7f6ad42d8da0eeb91d5ab66c8a2d79649ad4b249467ca000000700000ff0f00000000010000cc53ed5c68b8ed7caa18a5847066df09d1ec08195ddf634cb3a1bafcb9f68bd93b3384da3cd19364a0ea4b8259cf8bef03be3865d8dbb3ed841e1d5237f7d0d36f9288b44a0e1b5a8e011be91295c6b2cb61c69ba7a871088d14041c2e01f4f78a3504aea00000000000000003010000ffff0000ceb7e70204264007b9dce44c216b6d8641a94c8674fb5a8ae6766ce8f4590f1cefba4e13a07725347489808dee7dd29ca4690392c9e23262a5b38b73b343627d56103b2f2e194e9e373e5896d0adce987e8caac9490207a2805e090f10606d19021d979a1b9c3c49894013c38c8972741762e9c4b1bf1d549a33d66422176d4ac34839741edb9623f43d3b751dd0422761ff45ceba7addaa573dc9bad177d1a532313e0e3afc3126242fd02b6ecd174a4e46bf410b48745c4eccf626234c8fdb53a4518cc65c63a7a9d2a8b260f816f32243d478286599bc3f6f38866e64de7720b6b4e0b255f3f7995498c4963d2333593ea8ae2b5eb4faf01ca42e7e48e70207ead16809423203f9793baf713f424c4cd4be89c0f65ff591c2ec9095e5df205503883dca4a7370cc216bf02c70b1af44c6dbfb6a1e07601382800066a7cb26c121f9ec431904beede191d94d3e851affd838"], 0x1d0}}, {{&(0x7f0000001e80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000001f00), 0x0, &(0x7f0000002080)=[{0xe8, 0xd, 0x800, "34fe84fe9538aa75dad85ac7a28fc39bba37e8ead974f1e597b3b21535b6b609f29afd26b334a73cecd5b7edfcaa89fb40dbecb4b22261cb46594193fcda19718487fcc18d98f7aaac4a1ca7e16c7ada06c9fc6d44f14780d892b042f74d9c08d410d1ce3065e6f98497c4ee6c211fec3405677b3227e37d4c04c767149ba6e582dc4f0b0e6b8f77bad2ed7e03c53398510dd13274801c5f033042c4720d7a8fc0682070a8b8daae655b28e0e095145524766cfc0a3572f2b8f29af4401a48d9a8f8e6ce9b089659782ba67769b8718520e4fd"}, {0x68, 0x0, 0x7fff, "5fa4abe7a7d51ff64e04a98d3cc7544aa6c9f70a35ba91675fe71f70c44483f37780b8836bea89a1158e504a645cf9ade3a837eaa6a03c3608dd242d94617e5732871493b0e52bc2b383dd776d5f18ddd88d4d539f"}, {0x40, 0x108, 0x3, "42f552c5bcff052a151adb4e48f072e7176d41f87a557404dbeb775af760ecd7a49b6305b442fd804880c2db"}, {0x20, 0x10e, 0x80000000, "3309419ae708b6e140"}, {0x48, 0x114, 0x4, "fed8db06e35026316d974e3d16a6b614007f48e7f29a31c7278fdb43d6e07218101fdaa205d0adcdc01d8e1f0873acde1bb51e380c2c"}, {0x90, 0x114, 0xfff, "9f6806dd347457f698b235e23b80bb8dedb5270557364321c54d00a717ba59a9c99c04ed09a207283db7104f25685348c57b20eb1b54b88f89c2655ab061eec1f0234e9204d8edd285898123bdb1ca9ad3a56fbd3a6d1bac02098a00e7c7fa78c8c738e37a49f45e57f81ea0e12136bdf1b3ee7f7dc7ce97f5278b44"}, {0x88, 0x38dae6d0ab9ce505, 0xfffffffe, "6f74bc385bf741cf1e17f76f2793464075f7ff54093d8560513351288e6768371d3d9c2dd6f53966598e968eb1b27b5a0fc2f5ff833edb452d6f9ff5b28cca9f59cbac584a1391477c581a6e03bd6a98b5f59310cbae9d60c14b9cefc95f140bcdf18b4987c728f2f1a2d01c9a536db6a2d1ef5d506d5aa6"}, {0x98, 0x1, 0x0, "43e151e066fd7dd244077ca28419f63446a3c1a171b33a8e7a6bb8ed39ef8751f3f7c281c376bd89eb8d0f126898626f49ae5fc92ad3cdae70a55bb5ff71780efb85cc9acda31ae05be56368dbdd81e6b854248aba162af6414b0f282ebf8dffa9175761272debe4f2431d978725319c3477ef6da48aaf728545fe954975d10452868feb2c23"}, {0x70, 0x10d, 0xfffffff8, "45da7085921a8373f11d0b3b7d2b1b983c8a111aa98ee595d080c1ef7ccacd22c8ef8a7817ddc7edaf6c8940c8adafa817b99e3ce3edabd0cb38a8de8f5c58d0d76d64eee08f6dcb028670fe63130a6998ebb625f8582237749465c21abf10"}], 0x418}}, {{&(0x7f0000001f40)=@rc={0x1f, @any, 0x3}, 0x80, &(0x7f0000002000)=[{&(0x7f00000024c0)="ae7ba0f99159aff48d6b695b4d48473baed91e3412ce1665d559d92758a3d3f2b144715c4a77b6723383766d06e9b4607f6295cad8349ad495972cf15ebce028b6f18f51210ca74589ebe77dd25db6814ddd2eb4094ccb9b20ba4862c298dc33d41999ee36600a76a317ab6951665e72e1534daabe6e1b81d7b480f731263a8e4d6f5344c615d5f8d375eea5311ae9e1045ac6b7e1", 0x95}, {&(0x7f0000001fc0)="e5310fd896690ad9ac8164e16997224f2dee29e3ae577856292d24", 0x1b}], 0x2, &(0x7f0000002580)=[{0x1010, 0x10d, 0x4, "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"}, {0x40, 0x10a, 0x9, "ceef1e571eadbbc56e7547bd03e9de421184ee895ca68ecebeb0d2cec81dcf392aa6201776a70e6a594c0fc1f429ed"}, {0xe0, 0x119, 0x81000000, "bb482fe7a001b441f5823412cff66d7012613340f5400fb84c6e49b016d4a00556a5cbc38e4fb0d55a9b643b932570b2a4dda6f97c0ee8fdae934737b31c2151c52a6b4f7e76044fc6ba3b07eb5b618f73e4080f3e485e4d270c2f97b0f2f4fe51009a6f3861c0e3ab30d1aa3566a5ceee26d0a157c2170faec152f99dc2197c14c0dbe25a89b818f2c7886aad927017e7260695351586ac1d1c9392799504ae30b88ae5350142e7010534475a483d392a86cd4ffdf51e61827cbae98c431e40dc18de1a6d3d046b52362850556ea8"}, {0x110, 0x10b, 0x2, "5e442e9821a4a685ad1beeb6ae3b29d9e886cef3d99ca85870137132d0e6b259b0035aebdeb521009403912e60c63c6338dc6d62bcbb6c7a123ff6c30448d5a94422a83f2ab4a6777d73d06187f3f2e549212dbb6753991d1a77a1d09d1565e88f86d59e8e8486a9b63bfc4fb3541547c505d6404ad6d680e6ea0a0f078bbfccc66e8e8fba51f0a67f0a86a097d89ea329a1af389e64091a22dc639392af9b1005f9f914611d1814369dd8ccca47a74b6bc659c1c77f5727c06db65d525482fae13cb8903f0b1e3aca55cf01211d90f964d26c68a2c4095af0866f5f50f499aabe3563733f508d8eca905040ba2f69f14665ad6ab9196fd0bf6a4f466df6"}, {0x1010, 0x10c, 0x7fffffff, "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"}, {0x88, 0x39e30e506db5c208, 0x9, "fef227b22ec49fa4f492e5bce08d870ae3cf24977b15f43ee9696488f96412530a24cac81a70d21018153634b288141424d523e381f1354d23a883304de6f8e1ec5de895aea49c4efdfdc872844c396ef0a534fd30cafcefe34c4f892b11f53c18f0f7f2b7a6e4d8f7d5e94743af8df37f63"}], 0x22d8}}, {{&(0x7f0000004880)=@caif=@rfm={0x25, 0x5, "d362372e21981ad2fa47d19a8131f48a"}, 0x80, &(0x7f0000006b40)=[{&(0x7f0000004900)="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", 0x1000}, {&(0x7f0000005900)="b1dccd396ccd55206c568bb5a27f7f98903ba878e6d6866a6cd8887a3ffa6b18205ef7a3c8b7f43200dc84fee86871df8faa5148bea73ed925b608ac64283d1e5e5b4e16f5f4287f951afebf1126e0b3634e7c3077619a85105ae7f99dc25ac190c87176ed30efd7316da146fe816e1465a4ee42cd40ba027a54fd5c4a61f91d7b30e41d28348ef26d8c63b2e61683991e1764320a6c3bd56f019197ab196979290ffbb3de8da3b02329343cd7a24619c4188df84b8e089db593f3871bcae6970468a9a6e0", 0xc5}, {&(0x7f0000005a00)="0955b51159c5fd3fc29ae978a45956a91bcc4129b6dac71175a895a803f20c3d4cbedc3ac14b3da42ac9b663bd6a831c3acf6008553a9c5bf026fb974673ffe600c5635990181ff46f85cec4e74744c234f3e52d166f3f1ff4d2a8840d450aedc05cd21616abd93877eb978ec14c16e0e08178528415b80bc8c9a4c778cb422a46a080eb881bd500b76833f17d", 0x8d}, {&(0x7f0000005ac0)="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", 0x1000}, {&(0x7f0000006ac0)="c69d0ca54369cf2b071c2ba108284e9991bfc98fb2068c81b44f2b0a8f9a55edf43d542934a05ae2e40a74d531a37561b1c20ee1b59864d7dfaab973eb71e097cfe000b5cd3d9a91783137", 0x4b}], 0x5}}, {{&(0x7f0000006bc0)=@in6={0xa, 0x4e24, 0x4, @private1, 0x2}, 0x80, &(0x7f0000007140)=[{&(0x7f0000006c40)="f69e407fdf707420cdba0367d1928a1a119adf7170eee0214cbf90586a6977d7aa4e64a508a6f8b324a0952acb2dff6793281500aa0a4d29cc342f5f3de95ed72ff3af248f0592c1d9df7fab80c725f3bdd1a00c194042ba99052bd7cef22655edaa1b66ab", 0x65}, {&(0x7f0000006cc0)="6773f5c51769760ca3fbb771772a2e20d9fed6a0ef6d799541e788c22a60338809a6e131e922b38eec9e94f110c45a495854317ce67511022bec0f07c46358118caa670195c7e1f805baa7021cec17bc5bad63daf8de225dbb9add7d27c6c201cd0b00b7d52b55434b94015fc4daaa25c084909f37e5fdc02c4f672338fc0c0cec48a1dbd1", 0x85}, {&(0x7f0000006d80)="45d28922f90118492b26edefa32dd8050b3d4312d27ed78878d405f8ef26fc45d29b7709a32458afd7da5805e011357bd1da9352e37ebbfdb4aec533e2ceb0de1b92bd9fc65089cd343d725a001072485893299e6c6f3327a50a8be632f3e62ab5de193c0c76fa4eec5942e7a61bf6bab05181cbcd86c6f1296e497dd25851d1d8612bc3b3f58bc5c8a5967002b3d0b2b35347e57ca44a1893639a0ab79b1846a172df40d58e8c9b97378f", 0xab}, {&(0x7f0000006e40)="6a2e655c815386592aeb19c46942dd85e7fd49d5255ba007daebf3e6cd2e5dd79975cf16991850c4406623579bab994a40d45fcd3d2b4aad1a7f12144189cbb37d8114766087d23399dc5b5ef6fcb18f9b88287816052fde4075db184fbe0673b017fade6448ec88b31ed6acda3d1aaebc725bf9318166fbb377e25bb90f6dc458a0ba334c391785d9f114afb903bf54fda65c69a97352994bf99845", 0x9c}, {&(0x7f0000006f00)="c867a79b49b02000dd4e559eeb8eeaadbd949803a6805872dd10986446cb41c7ea59dcc9f65ef8ad8196c809efc0137a3136075490c2f1baada712b1bac7b3e64a30fb1f3c07336aaba9b0665dd0619d021b64dac854f1efc9cd164cc3c3d8f31572473951966e456850", 0x6a}, {&(0x7f0000006f80)="e20fa2f990280006689b94c813c4f1459b373403dad5", 0x16}, {&(0x7f0000006fc0)="d17ef38d415fe8ace598d4e33c71878810437ee51965faf78a1813df81bce890678c7d362426f3452aac7f416a1fa967714c2d7cf2308ddbdc72c392", 0x3c}, {&(0x7f0000000080)="7fdb6887efcc204319e586e76bb5d1a1e1803503450ecb3987d31c3d0b780d3976584729fc8083e2138e3bc308a335bc931113c1aa9a75", 0x37}, {&(0x7f0000007040)="e9bd1429f6c48ce2705fa638413920f89f5974ac7a256caa211927797b8cda321785c39fd646b953d64a65896d6a3fba68c42f2b7841ff011d05316ea262f5a025afac08e1e7e2a67075ab5bc176eda98296284b8edcdcce83f478ddedd8b8d0720f4a73f80466c06122f07321d8aaf6cbda402826528da3e540b73cbfbdfe882b98b3417981d135215aba3d333ac26e9085d4b337d228efc60ab955e7f659af9969869690b86c05b58d97797d0004ae25305981f49b2866f61819cd5bb5ce19c716aea7c6a1fdedca761996b79acfb8615ac0dc9c999320e24373e3b3ee7177bc1f5c3bcc6bba3145756a696667e520", 0xf0}], 0x9, &(0x7f0000007200)=[{0x58, 0x199, 0x3, "1c1995436544ad9e06f96ba2008085453ca20cc9bbc0b0d4825091f8276b4f706e8bde6d5932d538fe2656c9f5e0d4f81e9907c81f4e89c147e42679ad7fc164ea5fc57a"}, {0x68, 0x114, 0x2, "09718b5b3540bc6f43a1e86d5771e93ec4953ffcdcacd24917c87cc3658d07a84e1a785cd99d72bb55baec1a71e125b70a1e844b3b247c08c12b80d178ba61a008d13c738be3c96d6bf7faeea8b8c181f3ef3f05939a"}, {0xc0, 0x114, 0xc2c7, "5bce83a4e43c41d8f8c4987892d28a0a6ecf467e95e33ec57012583eaead2e3c91b6de3b0adb53d203bb3c2f6841d86a11137085d3cc5fd30a4b9f5ccdc3557cfdb02a8ecf635ef1fe33fedece52d6b1f03f3c87ce02daef185e842363c681078f93c1a0cf93d44814c4134bb97421e73243b07df5c56a767e0ed70542106c5ea25d78e40437ae2ae533eb4c055710600f494b0a442af8b5b47087649aa6f2d68ed832916beb6c4d4e71"}], 0x180}}, {{&(0x7f0000001c80)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000007500)=[{&(0x7f0000007400)="0cb1e595b8e902e91ef6d44cc5a4a3aedbeb50a67e95d4cb332303fb28bffaa782351050304b1d86684055eaab232121f628666982efb4e2e3018e242ee2e4a3703fe10d10d0cb0d8987134da7f86b87ca05fb28c566c6a50b7ebff7c5bce737a4d205c09fe5602eefae86823d52e2c7f009c699b82f7f645eec711b6e459dc1638990ef673a6ac8311bccc66cc9250e6c73d236ed86305a318b47a30cd0670d172f8c7fd2697a3ca8095909e284d0f3b72e0c2ce905c36fd106ac575769628ca96e84efe8530742ca75b69330e337e1329d6a13d1adca9ea317c7e14a6b1cce", 0xe0}], 0x1, &(0x7f0000007540)=[{0xb0, 0x10b, 0x2, "0996d7f86db4a47e30ea581b3c76388ad78d6dcdd3b746ee5996b82e7c6968454174e94c5c21542096575b1cf32ed2731c6d998eb0e36e3f865df41abde54be04f39a726439afbb0f5c6340e5f379b080788d616187f70db0d4be923a070d2c6164f3c15597da6a24fcda8b95cd02a1623bcd115d1ae4a433ec2a0437e3915b1b2d65818c98a10de23309b536cb748aebd235a8152a9ce6af4a20b482759dd"}, {0x50, 0x88, 0xfffffff8, "fd62a1d6ec7924211bc021413495d1308c29b4302ce04da860d2afa71f525d74e90bee88eeed214941060f6dbada18415526b042b733aa3b6648e69eed30c1be"}, {0x40, 0x112, 0x1, "d2fa38d72729c84fcda69745a95c1a02462114a86801ad11a2f8c05c7af9ae357d90186aff377aebdddc46cc5e"}, {0xd8, 0x84, 0x4, "fbdef95e2dafb8f2f7246164648df5f9b894d73209214653cc7afde8c650e66c3d65c72a75d804ed18aea834a2a2cc550d40f0a3867454d7471f64cb3dd87b167e0995214e88f75cedfbef368fa538eb9e8da896cebad297bd65782cdf170af6c3467962d5ac59598d291aba5cfcaa99dca956626bcfdf1a83e8bc2bbd1ed7850dd74c87c0f70ca4865b311a54aab3ca8476ef7de4e5abec21bc49079a5c773c0ae8abf5e9c7854d33d8704604b38c64979271c541d0e8394acca825e9597da04297ccb0fcd16b9f"}, {0x38, 0x10e, 0x6, "016653849e24b50008e7be07815b539770b367adb674498fc6f47e23a5a9b76aacdb"}, {0x40, 0x112, 0x4, "6e0981973533af2febc910b6d008c3c2520b3db27229426491eb90623833112e2c99118076229d26f08e9612d08f"}], 0x290}}, {{&(0x7f0000007800)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1_virt_wifi\x00'}}, 0x80, &(0x7f0000007900)=[{&(0x7f0000007880)="e324c52a46f071f0c5a6c31baea3528b16b73a7814783e4e445b00649b0c3eb4837b357a34f08ce16159857ee7bd0dddb6722ebb97591ce8", 0x38}, {&(0x7f00000078c0)="45b0e58e878219350c2e9d27b7a1e7d7bcb801b02d9f6d9b20530733", 0x1c}], 0x2, &(0x7f0000007940)=[{0x48, 0x10c, 0x5, "3ee9ed1dffd0933f54ddc509cf6d143ea275d2a3f15d6dae2bb74123a65ab58b05aed13fee356230b731257fe178f50282"}, {0x110, 0x10d, 0x7f, "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"}, {0xf0, 0xff, 0x1f, "d203f52d45a206574cb7c1b745b3e67ce4909d35f2446dcc27c8f119836383a9b02ae44adc82420903f8f5b93e019547690ba8c8fee75708ca1930237c2ea074ec1e43078204b263dd36c44339041b191df9b3745e84daee111883a30c2e659ae05512cc570cc7f934eef709a9d65c2f56d8cf66bd66a990996815a21755dbdaea0dfb67685347988e8e52949f39805b6078dd720804117923b0c50df7704725b6295926d4467078d1f213185d83a8a6747c742b49a48490fa6c90974e42338a65caaa4ff5705d9660e22b83718aa2d0383c59f628ff39ed4e6070216f28f5"}, {0xe0, 0x10d, 0x8000, "dc13b368a9b4b1352bf027365d2940b805eebe6ef19a82d246fd1b893bbc14f863bcfe9a459783e5f17976e0f0446ab7924b8407c441ee600b4931e6e29fcab94e86318f3bead3d03f006788f0da43e62b1c6fb8c66de8ed21bd016ac80267782f0a29e69206581cd9e604ada685ce789b39cf38e91239145d4ee1e8ac54f036ee4229b1ab18a8fb38bc2e1b5746c77c9afc85fc679fbc601b181ec14f0ef273e07b9be9f9767db33009daab80783d2e42afa9418dc79f9151231ee3714b0cd06f46ec18ef54c25726a288ebf03355"}], 0x328}}, {{&(0x7f0000007c80)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000008d40)=[{&(0x7f0000007d00)="3b45f581250d83c8f671547fe38641ce989742d625dc07e92c5c99883146f1c4ea73d75c85b1ac3abc35af6990b0b2291acbe0", 0x33}, {&(0x7f0000007d40)="ac85313dca8f1c3e1d22e4851e6b7ff8221b12766af675385ffe0c5360a0a2a7e1ddbe4b36848208c37bb1c028064a57b8eefc8eeb47c0691107f85ae8e00c580df9464be857f18968311e25ff236908b996fb86617ced5cfa5d4785bd4e204b1c7ab06f06a1bbae10744509b952c5d361d5fdf2d7bafe381f4f3c81bb9c91cd667348845f026f268c693f16ef0e1c10d618ba843634bc3e89b73d816847cbc25e867b13f0d5fe0cf48acfafdd9dab86f944668eaf326a8120df2a5f6bafb7a8759a9d5fe0ea3589e2720c8130ae461f53a96934cc3451722f9086cfe42f01816dfba5697a58915caaf293a68fb21d4a9330435230dff8aa18e3d702d05a042c2628aee87e54ed20aa1fbab11923bc5e37772f81333aecb29eff4e67f7a80e50305e74089e69306287bf6f2dc28996b6d898adadd6c89414fc884a8dd4dc6ff40c6a23277f127d1d9252bffd48a64ffef28fcb8c4804e12d467c2a81e2fdbdaf9f3c7cedffd85ddda16415d9d04155e48d0bdabbb838889e4dda2e938feae101be35a63cf23e43ef136336679d2b55583a4e606a42606c3729f4e26e2018f4af162f34946b3ae262c3572fd8bb377fb4d5989ad862d2beab60e5c0bdf2074e569ea1409e4bde4ec2c8e85bc55cf1ac1e4731fbb877ffac8498d5e5edfccc974096d15c993ea7e0d2eb6dbfc87f8e708e490d8df68d983c03a8b6c203ec7ccb0d9f558769f5b9cbe8dd6ea6b15d497ac6f91e4b3274789df7188938121d5e8b58cc04db118b0ddbefe5d94543e81cb6911826d0c98882f072312057b104e7659d9f04f54736080e85d8e7fc21e9598d1b2ec89fd39010c23047ad1da0861d78fc8424cd951c6442fe4f2a0248ed62f6e0cab1b2e6e47511bddcadb8767a72e837c24b56113f3a414b19fe9b579ada429aefbac39184b2a855f70bbd1e48aa836251809948c134ead569471ae1918a20ad4612b596105997dcc00adcec27db839c2f8608a17a1e80ce20a5ee7a0fb7daaf2c9b9318594a166e1204691761eebe12918fb65abbe72539eed7ebd4fc19dc6d58505692cefbe5698928ee27104a50cf15c4207ecc8ca4308e78669fa09802c45105e3379c5f3bebc707cd116114f2ef61967e2c1da9018069250a68c0647ede023539a845dd800a806ca92a72ea9e248dbd904b211ade9a64c4c6e7642232f8cee25625262eb22769b0eacd7ced85b443dcb11d277e316c50015f37c3437baf73b4a600d00817e1fe9d91f9f1fbb2263f3fba505014d8997d4bdb7aff1129c1d070f92cd9d44f3ed3648b6f330ace4e0413e143a302d03ba7b60806c598a976f11d0de24ca261305293c9fcdf4f39bfeac2ffb46f6d363841d5e4ad2e7cc010a70a42c0da02bccda94f397e64f1b899e4d2d886569d3a29d1486c0742b646f961f2f9f8bb271e4f2dd0450bedf1c8f29d8de4c1cdb05ea9c0b801aa5f90ff2668b09c83508b3705164e3558a7eeeea16592a42f16eb2103d423cc29020d3239205c4ef62bca2e9a554f13063458a414af5ecf785026af6b783f3428b8e379e7311ab41de35e1d875126c8b3632f2fd14d564c4cdff1168f950f614716f6b47fd38f0f2595c5764af588147d954e9b48b34fc5320dabf8fdbb43e17a16a88cca4d0f0843d2408609b9d4fde06264afc8c5c5b72f35e8592825cf8675c9c125fc17a3e67254653217e8c5578e233d942e9bbfb229478fa1b15b54dcb65ed52f04719ca9e32a812a13e6f94b5f2016b4825cfd1b81fb1b4dd6cc45a6d459a78ba853a8635d39fff231358f66b4b1c618977afb3bbb2da5fd889648b1d7960d9e0f055223f51b648c1fb39da52886e22c2eac705216a1d05957aa05c94510829e1b3cf9aafe792d5934083d3a2e17c120c4c9d7b709dd51031c7240240f2010c6fc6405f19d73358f39946767457309b38eab529980a9888fabffb7c6684b66f381d7318de8ab1addde976221c25b08e5151551bb2dcf9745e06ffff1d4e1142d9d7dedf80b0f8db67869646e5465b4cc1a88dd5a2a5db1dbeace80bc6102955d7dab1cebdd5ee70fc3d80f9c02634f7569d9c8c10ef185d2831948fc1ad29eec08e241bf83325f709f4fed4eceb111fc6e432cedf9f8021aa75fc2734b7049d884f2562af5564b59213a58b5dade27f58fbb35ec065f0a3a9ae83d952b4c5b3d0ab588de885e8fd64f1c60449126d0cd89d105079363529dcdf5984ad3a546f3d439ef312c195d9e03a6e4832d36c91b83ed1580019cb3572b7c74447de45dbb82b7c3cf7231fca031edb84c1100e803638a49c7bf4dd2de4ff29511c6d5722f1c3f48d6e90ce08da5fa35106e573a0759137c60a3d3cd1eb101648c24d08e4206726448e7f7fe329b2f8206252d8528ddfc4c654831bff92eb79e8d2637de9bfe353cfa3e887a392c1196331f903166abd3f768cacf7577a5d33a56b3f917ce48f8e9ee57d368cfc80b2dc592696de6a058a873cd2e2a5c2be3306764763edb497e4c6fc03a7f0bd47c5ca2d6af1f129d49a9865fdeaf737ff1c0cd7e9b04240d33a2a8406c9222225f3fccb869e189d8ca68b12617ff4032a4f816a36756d43f257be931148d6583c741f76aea59c84fd255712d4767346a484db8dcd4c2716e2b5072b9008fe48cbae329f644fdf5367df27ffd182e8537799e8fe31f9ff808b5ae3ee224daf192ec97bd97a902a1dc8d915f77b9653838aac37b21f0f6554452bd7bdad02d0126ef3c92a3e6f1530cdd296d2539fb1ba4dc53912636f3828de3eee9d87ec1f88d951ee3002feb6d4651cebda3c7172639e4d8fe7f8684b33edd60e014e5ac530e07f4fdb2bcdf2de49ab416bdee19483fc8fc02a7a6960b648d50b4825be5a2c58f5185cd1842596427d976cd72156ad95439bda46b0d9cbdba3587e447ee734b8e8dc330ce116dfdd5f5b09ac53f153b6b5b599e5755e96c1989ebe485879e901ff2c6c8b463c4186c1274e1332e35c4463a8c68b3c2ddbba6fc4bc778a1886ec2fd279704ca512da31857d2c33a29ccc9500f76518108aabe5c7bdd8cef7ea197be30b6b3ec28c90ebc41a135c1a8e72a366b62dd9cd6dbccbebd78d55768df1c2ef1b1ea0b794259d2bf178e27587e9b34ba7601a1730ad0ad9c9f22da2d085c2965920f3a560cd6abad37ab5d10ea22a7e5b8725f08ac8f27b7c98454bc216ef44656b98dddc6bb3d04b3e2035e55729318cd41fee59f48e29c0dbb20b478c2cf222f2cce7408b1f299e64254145a631c78bdabb3418ea12117fe48ac427b6f88594ed6d2b86fb523ff565abe934686e541bc479d5a66e6c34c84029507216931eec20c3ef642148c571a0ee1b282c187563c0790ac4364dcd3af613f03b220e8113b87c66027652c5c2977ec20792f8f7cc39b28d785cf4c58c464e65d880b96087858da59d212708292dccd212299ae62970c882c4d45f7ed552f9a456f2822a156bca6eca8303dec05df09c2b12cd50bc6735c79a593cc8cbfa672b41262c52bff74f7d7f1fd4fabb4cea812a6a7ec0c843107430cbb158ed2119df0fc82e03e8eba143c953dee9e712fbd8d67e4ea15364c0ed130843618d5e0e32a4e920437febe940bc3c8b608d508d7c591cb54f55823af5c58f69bcb17a73be2aa79471da7a819fa925c5ec5df166ee526546e07dfd3891095d09537e503adcd9a3a8397fd9b7581f41bfd813a9e4ad4d01d6cd8945918a28492c90fb2ffb1a742d346546e7f60f5d31cdba945c4cb1857ebde8d7c4824831b5cec11a317ea38af07f2c04ad40926ad7b80e61e037921c8e4653460ce4246735bfe5407197b5e4015607617fad1a19860b9d82184655f8baab48a55199a6292a57b0465a6687884ae546c0f90c5891dbdea9e4ff9d03f7d63713b7c807ca2954d782c37a44c49a965d7a3c07059d151c8fcb7c393ba841a33ee431c2b91ef0854fb6774c9989daa95d69b0041c5512a02434ea6fd3962c6824c7b389f329fdb7165552bb035df22ba31e6059379bc3203a4d27774b82604515e009007b0c689b914284a34d38f541b9ac5c06cb050cbd3d54919e861033f2e5251d9fc8114cad7b80a3d5b53c2969f3f9b0563ce2153762bb05207140c0b5e4b030022c1ee96f534d9f1f1064788e0442d634e0194393e5c426b62ab30be9448af08e82e6f0d71c705e8b30a9a8bfad228419ec5845bffb31863e9ccfd1fc76b9d7ea7a71406743468396087178074bbf0121b79c1c7bf02a57b51c7e1a7142a170738684b596915ae023656584b146bea9357da4eb505cf0b0905c56fe358c76faf489da71648b652e75ed929ac3dd544ffc3173a1f454000477d8b49c97fa09c0f5dbb6ae4f78e02f519b14bc48bad4cef3077239d2a1c1923d3c2dc860fc6b5170dd68577489176e41465b5a8e490edbba44446047858865808c13a743e31d111cf3de0d402ebaa2afd13b095446651106e0745dd80e08e131421e48eea9598bfb4bf2618ef4243578de9be85527cf3ac191d544bf5bb13f060d72d9bf7e72300ed5f9665cf764146192f456b412c454b7d69238b0af202a33387dbb8f7d2668159414916240f651814910ed1661cda1dde9d7b30e11e792d0579df035e013739369f951eb4d0a5bd668976e99ad575eb105e15c6da5033b27c571f3db049ccb9d59e4da9b35ad7248463068443cfde6980ea3507d021d7d74cbd65d461c72a5d9926aadf9b4aa6a7aff510f71eecb02dd5e6d928cf95defcc5582fae36c72acc6bd20c70165754be701c6c425eb2862670df274e74ff550a9f987fe89728ac184c934c9affe0cc4ff0a56bd04ada3113d72068e3185092a86360d933e2c09ff1420ee3b742d60b3e49f3439ebfd09a2c3871f229bcc2bab70fb3ee10e4530cfb5de0a70d601d0647c3f02b4836bca890b13d2a6a3a18902aa81c6f74be930542cd9234fb43152f5df7f51e7af893d7ca4f7a95c041d4616d2c219d6d1d691cfddecd337064bb0f6b344c01c0478c64863acbd9d37bf73c086897470a3149dd5d1a806b878ddf38e7bd17e2190fd88a6a7e5af94d5dcbbdc1f18283cdf0e14d861095f0aa3c395b385f643dd98f52da46d75bed69e141c5f76e919d252235f3e8952040433d7e9714531ea4431a215b81a7ba87124021605a83df00c40acd61cfc317f57004c6e7b3e4c845bdbedb27702f86b392db00274adb396feb71e7e98ecf41055f711b45ab59af2565e02fb0cf6865ab0ed35cfadf00267a526575e7a802bee83abb33a6ce1cc45bd3a0d10eb03fa3e41f66e6760e08fe656a7908cd77cd92122c56e5438e3d58b2b4da0fa3734a126fb4dbd129437edb84080f91528c8975928403842cee56eba6f0e91115361a3219282c78ab704261e7f8a86b8c52e5d130a84abd3d5537ae02893777945ac63e0c757990836b6e98d0daec765ae4abc7701e5cc2e3d252ff54e9eacbff2c238cc5d1c8b56760b13e679cdbc78b11e56c79a23a87fe2b80e57a37fa97210446abe71a937130146c735b558ce6da311ff5643a6c1746e5be89634494e837e2baf81fc691dc9d33704a9da785e939c096da664fdc81a7d740ec318dd72114bf75a86ad4f450170b04895e5b2c0bfb1ca175d5c165281a6afc6c69d804ec9b58872a0d5d3a103e45679cadf3fb4de95a448c3de300333666b374ceaf44ab1ba49836752b7de88da6ee178b95757900e5812dc9b18be7107237c27a44d9aabd8bfe7b9f4f46bd3c3ca145fb8b43f50c7216c140794632bf6f606eaa1eb450fb3e90103b6b", 0x1000}], 0x2, &(0x7f0000008d80)=ANY=[@ANYBLOB="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"], 0x1f8}}], 0xa, 0x40) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) clock_gettime(0x6, &(0x7f0000000040)) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000680)=0x50) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:11 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:11 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x5a, 0x0, 0x0, 0x0, 0x0) 09:39:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000080)={0x3, 0x0, 0x1, {0x615a, 0xfffff001}, 0x4, 0x30}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000762000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x8000000) syz_io_uring_setup(0x445f, &(0x7f0000000080)={0x0, 0x5434, 0x8, 0x3, 0x3bf, 0x0, r0}, &(0x7f000066f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:11 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0xfd, 0x0, 0xa, 0x0, 0x0, 0x2e00000000000000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') sendfile(r3, r4, 0x0, 0x800000080004105) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000002c0), 0x1) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000000c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010102}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:11 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x5b, 0x0, 0x0, 0x0, 0x0) 09:39:11 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:11 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x5c, 0x0, 0x0, 0x0, 0x0) 09:39:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r3, 0x6, {0x0, r4}, 0x7fff, 0xd, 0x1, {0x0, 0x0, r0}}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x2, 0x62) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:11 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x4000080, &(0x7f0000000040)="336477ce0ce3ed1b8b188f067cd8b639c068bee21085e606a59c0548cb1d9b05e8697079a452362e8f89d8", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000002c0)="20cc2d909f7f006a8760903bcb315d2b2a2ffd0dca4476c4185b1e86f341ed8150e37dd1253bcbefa6ee09e286e97d8ab490b85529c0187d890ef08b7884d444cb130a7e409ff91abd0efc1f1cd67c741de1eea7cf171c217ffdff733070e15dc4c02d3d7dce682eb2db") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1400, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2000, @fd=r0, 0x101, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:12 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r1, 0xe0249000) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}, 0x4003, 0x0, 0x0, 0x5, 0x80000001, 0x100, 0xfffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x450c, 0x521a, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) tkill(0x0, 0x34) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0}, &(0x7f0000000b80)=0xc) sendmsg$unix(r4, &(0x7f0000000c80)={&(0x7f0000000180)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000002c0)="58aa", 0x2}, {&(0x7f0000000440)="d03cfd031f54e4cf359771bdd5f656b6f6746cb56b2dbd4e429ee6c7f452cde14fbc1b37daadd77639794e9aded2e09845d653e0a4ef6e837d3c4be4d638a2fed197932d5e2f93df2406a897f574a8bcd9c7b193bbba6a24dd4340a54ccdeb83dc705bfe21e93d5f4ce86eaa896b69ead7950a50ad8fbe647248eca346b67aeab6d5ae1c8937dc82a1b00d974804a3875cc31bfbb332e718ba599ca894d7279339673a57625df495bd2f1fb4d92132d4e0884c01f67452f56bec27793d32e109cbb13e5b6953d7eb0e7c1ddfc542817c8e06694e25045f75e1ec", 0xda}, {&(0x7f0000000540)="61f7cfa016659d92c0e80ee83418973c5dd18afae8f5634387cc23cdbf483f59bd644b067d96cd3ce0f25ec64b90931f8d67d631d8ebb78e4b8e22f3dc8f1a14c7092dbd0539ff862a10fa3f0443c24faacfef2b9cadacb42e70a1b5dcda37affb48354aba1d766d744af3402f7962406db5fcfa917e0120b6d1a623d569e763ddfd9ddec61b57033a491e9a4c309bb1c8a62a73f75d1e4014932def7c603723f99623d111c27a1fb20961635a934675f4ceca9dbe3b2013f0b04ce7b2a1c563c229ce5b232ec5cf3ce916ad5c983e463e4ae3a99243bdb9ee5cf97a459febadc1638fb53f31265e8f72bd", 0xeb}, {&(0x7f0000000640)="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", 0xfd}, {&(0x7f0000000740)="295717ab3a25bf8fdfb61cf3e50516484405d46a4fb8cadf263882ded3bf35a08c656d82d332648b041b64b6bf875831b3aeb5595f8d80e2fb7668ccfc57b55e455b4665e020552d93fb10e6becea55844ee638b9ef23d642533a77e34316cd4e91a99c1b90f8645ed4c31edfce4152cfc18b738b0cfd05e821b692ee1257889d41e23fb61243b2cb1143d76c633bf26d67bf54e3097992746db9031d67257d6a6b088d0795e24af23e8e32779e4cdafa707e7e751f94b4a02b295bac890004363cfbe6fd592953be4663cb940a98175c53a5239dc96189c5fdbb38175b616117fd83414ed31e1320d51224df2aabc77", 0xf0}, {&(0x7f0000000300)="aa5ec9b264ba25c858fc138a89b3aeb25c351eb124d2793a243d2443201422ee3a7d4ce839ae91bf7e5740995dbd38d49f080ef4ebf316", 0x37}, {&(0x7f0000000840)="8560fb044f8e3cddf661295a41057b631b209677f1f99803f2d13d9be9d3614741f6a10b06bfd61a20517c8b226ecd1063ccf3b3c58746a7618f3d0a8165b5a73d75cc9ee491090a49606fc28a515fa98502ecbac23edd7e3b68ead2b95990c38b90b29d641ebb048dc1c1eaa16620f4a53a7ca8584e374c39527af7d901457fcb962eeeebdc91ed70266c829b03db834af5856f1017a05212eaa6cb22ab861aba28c196d436f9b49dff21ac365faf3127263f07c8636c3c36a0123a32ebda47b83e3a317920", 0xc6}], 0x7, &(0x7f0000000a40)=ANY=[@ANYBLOB="1c000010000000000100000002000000", @ANYRESOCT=r8, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000ff0f00000002000000", @ANYRES32, @ANYRESHEX=r9, @ANYRES32=0x0, @ANYBLOB="00184b7d64004bd40d6c957cf1c509123deda212", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYRESOCT=r5, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32, @ANYBLOB="3f9a55630bac000400"/19], 0xb8, 0x22004000}, 0x20044894) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 09:39:12 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:12 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x5d, 0x0, 0x0, 0x0, 0x0) 09:39:12 executing program 3: sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x110, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:13 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0xfffffffffffffffd, 0x7e}) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:13 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='.\x00', 0x100, 0x9, &(0x7f0000000800)=[{&(0x7f0000000180)="da73e3eb7e93cf001a716d945bb85f5df621a90bc0f605140930f6aa833c898ded198cdf570ff6cacdd1eeeb1817326e53c4783c8af24198af7a758431e21c9b3bdd2af44eaa3f16351ea30087fe6836d219028649805ca5ebb6e426647614e98424ee4efcc8f9da4c50ff591f3fd060a5cd048759568d32", 0x78, 0x2}, {&(0x7f00000002c0)="888425cb6b26e5b06a2b58224b00344e9e0ef5d6af2b2f6b9eb4a3568edc2810890e6d7c00a6b80cc25c4d256d18177e55bae08ae581da1a6eed21a9f3b7b7a0e32480834147ff4589b304fff66b702654bb92fe5efe9ecd7095f0b8317cb6bcf9b7b26fc4345c098d154a52df39c2b9414f230c376054a556d1fb9829dc42d8322ac70ce783b8bb47a9609e1e20eb2258495e2489e3ceb2b6084a9433c94e26479a360794f4788896cfb3840c66a6763e09a0572101b4d9c467bc0a1978c347bf3e89031ee8ec0d2a28341c21f6d54f3d7f4bbad43f8509fca6d8a994473c65f1", 0xe1, 0xdd}, {&(0x7f0000000440)="aa66dc5bb8501789d283ecb46131be2095f3", 0x12, 0xffff}, {&(0x7f0000000480)="41e051518a2043c8a09ed75b73c99c3f7ad751a4447aeb2566cfdee7cad2edbfe557da319294d6cf94420b0e135424808f3b28d859b64faa02f771c273866f112939005f0c60a7e4aa9c39eb14142164675e26d728124fd303d806a245809b119cec41e0755457293848733a3b3530959e4de76db046450a1b1b0f70d7bca6b2c06a7354fdb2a78cfd42913252bb57f8dd28d175daf83acc8419a4f403df45644513e41c2bca5695c912352480d49ee52602bae3335b019e64356608fae7e7d576f15f8921833891064d7bafdbd48e6377594d320297a861e9e94d29b1623739670e86246e136d044c", 0xe9, 0x7ff}, {&(0x7f0000000580)="7121760954ea19e4463d3015b2dbfcaa2cff900e810c39ae04adae1a69d2db827801ccffa575aabc3a13399dbdeae9b9ee87c3e77a7324cf06b100cd58364041fdc5e877ba3b46a92b8f", 0x4a, 0x8}, {&(0x7f0000000600)="7428590f6ee9d358168f780ec867b76b08523aa3faea", 0x16, 0x3}, {&(0x7f0000000640)="4a17c8512f4b5e5007517614981c30c741088af683cce2335248d281a8b836d64eab0f44bad5b35d219971c95161a2288ddbd96075a7a55e449d25b6b3d6fc9ff723b28579d9ee", 0x47, 0x1}, {&(0x7f00000006c0)='>D', 0x2, 0x8}, {&(0x7f0000000700)="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", 0xfc, 0x2}], 0x2804000, &(0x7f0000000b40)=ANY=[@ANYBLOB='journal_checksum,data=writeback,noload,auto_da_alloc,sysvgroups,func=PATH_CHECK,context=staff_u,hash,hash,audit,euid>', @ANYRESDEC=0xee01, @ANYBLOB="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"]) openat(r3, &(0x7f00000009c0)='./file0\x00', 0x0, 0x13b) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:13 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x5e, 0x0, 0x0, 0x0, 0x0) 09:39:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0xc43042790121c3a7, 0x400002, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000048b000/0x12000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r4}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x2102}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x101301, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b57, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000063c000/0x4000)=nil, 0x0, 0x0) 09:39:13 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c040000130000b048c873fedcd7e3b7df0327bd7000fedbdf2505ff093d4e0e20fe0400000082000000060000000800a9d8c268000055050000c301000000100000010000008bc65cf7c9fe9a68ce3d5d365f146c6c537944cba45359d085476a4adb3f7ee9c7efba26ed751052596310227066ed51d06b6f63dd34e92178085073b1222bea239f567a7f622a0598b64e1c740c8be040cb627c0f8dac5f74f5e5851221d68f8db4ca5d84d4f3beb3b336ceb0652d8f3b1ac5b4e9050000000000000043b4a0a7ed", @ANYRES32=0x0, @ANYBLOB="ffffff7f09000000090000000000000068000100573e49c2d0438b727ea90137f89c27f2f00c92d40241fc54e456715c73c3c073b315431da4b9b5d77cfd2990d3f20a30572e01b27a60d9c32092cb94b6c2f1deb854c8d7ef7bc93385eb44ad7731531642a3bc8ac7b52b3555d70f5b0158e1c0349a0e8e66000100f7c68c9d8d4bc7914d8486e813d7659409eb3dea55c0078687bd8385d0831a24d705cc53edddecb0988f8db4406ad65e4d8cc0b3b81443ccc0078bdc11a9f1f586df5cc23bcb23e458c30788bd060572848e4a140dc87a6d02b59975a26ac14d3d080000ef00010062b62310515013ae167d38f23e14212ec8cb4db95849fec5f93c437b24cc2c8601be2b7fc65f33b770e459ea28016a74b62b69b69acb9ce6991d3b6f49a1452855fbbeb24284dd4ae6f000480ec6ba5b62786101d21918a08e405945c978fd2d529dc8ea435abd7b6424b51053e63aefbf6ba300c8438d247bab77b2151f373880f069ffc1f99f50c1c739042d4e29f2379773115dd95fe05750f9d6dc612b17b31f14b24492f42bec1de6289e045b1debb0df8c5f99c6467d97684dccbaf3a2c03d2c0c67c7f94ff53a744aa9bbd23c03a080b5f4980d0ee47a354d22beaef0337b68b30f31df699ac5b1003300010016e3b593dc56b7139fecfef6841474f9cf2edc373c5cf1c315a7dc9ca8beb9bbf28f56591a6d9d0697f6904544903400de000100fd4a99b8b99c11127ecf5435bf06539c4ceba4453f8e7ffc0c50737499419e625d72fe57f36d8fd42b1cb09c2cf79ce7c698c2a8bc260c39d83364b942ad9c27602bf5035669ce824d56c0eb50071772fa414524150d0accbe041205a6a9707d5c320ca18921176d5d80fa5033f47140a3a187ba6360f61e5abbc63ad96f65422fd13dca13ba4a90776f3557d9ca8ac1901dbbbf0ff159f6325dcf6511b94f7f2c92da3459592b840ebb7ab0b8f540ecb23efc6c6cc860ec5e8ec7ca56acea496f1d69e6d3160e5658bd7e19f4b5325593d73026623e953663d40000fc000100705fa3518a42bffe0a9c327c54fe60516133f7906994b98959564849a6d0c12f79bb2ac64aaea48811503c9f4a9fa5ddcf842af57bf56834f7d7925bbe7d0d580ed079ee5a4c57fa6a0e060dea3bab5faf9b7b4e4d7be19dbf8dd2d4ac7d48b095dd15fb9afb3b2e67a1ffb1739af79bec5a67397e7a35fa094e14ec6a16664b296a269e0f3e0e7541742f7cbc40740d64f64f4710d3c25d95b37cb90376794e8b899188027227b179bc34283bac897de2be129610dd3347bdc90dfd421d24473cf54271d063d794e6f2c97365dafcdda4a73e52e66f7962bc8face3af7aefdf3c740635709a1689de96263adbb3854a2ac66d63bcaf783a"], 0x41c}, 0x1, 0x0, 0x0, 0x4004814}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 329.481232][T26750] loop5: detected capacity change from 0 to 255 [ 329.501193][T26750] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 09:39:13 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x5f, 0x0, 0x0, 0x0, 0x0) 09:39:13 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:13 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r0, 0xff, 0x0, 0x5, 0x7, 0x1}, 0x5) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x9, 0x58, 0x0, 0x3907, 0x2, 0x3, 0x80000001, 0x2a7, 0x40, 0x1f5, 0x0, 0x7, 0x38, 0x2, 0x4, 0x1, 0x5}, [{0x6474e551, 0x6, 0x4, 0x20, 0x1f, 0x81, 0xfffffffffffffffd, 0x8000}, {0x2714372c2d0c98a2, 0x20, 0x200, 0x9, 0x9, 0x0, 0x401, 0x4}], "2a6842da885d689f4ed90180e740850b4eb1a8b65acf9d950c1a3d71e7b9ac14474dc9d9980592adc55b5cf5fddeb01e04273a13ac8635043a3c0d4c165ee1a6d8f7ea2264e3ef0c41203c6f9e9e59db07731115d4d620e337e86e8dc7e6e11e46a8198db945ae26768cfe8636404a258d1360c9278178044706493e9b9a6d1c41395e6529ab64503659174a4e5204ffb0c67a354f7efbf22102fb708fa4aeb8c5d4ca341ccdf99fe32bab347b199732e94c6e52bb93bb750d4fc89090d9a1aa45", ['\x00', '\x00', '\x00', '\x00']}, 0x571) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:13 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x60, 0x0, 0x0, 0x0, 0x0) 09:39:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = gettid() tkill(r3, 0x34) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xff, 0x4d, 0x6, 0xff, 0x0, 0x4, 0x4000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x2101, 0xfff, 0x4c0, 0x3, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200}, r3, 0x10, 0xffffffffffffffff, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd=r5, 0x4000, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r4, &(0x7f0000000280), 0x0, 0xd9f, 0x1) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) [ 329.747910][T26750] loop5: detected capacity change from 0 to 255 [ 329.748307][T26750] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 09:39:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:14 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0}, 0x3) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$nbd(r4, &(0x7f00000002c0)={0x67446698, 0x1, 0x1, 0x3, 0x2, "2d9f2bb0edbc949fd6e71c1f4dd8ed6620d224f68c0fa1b0c8178c33340979b99fc0b133dda9feb4f529b5359313dab22962b75473e783dd3ac23a4e9ba77a6501ae4b68279ad6ab3894ef4c69324432b73cbe4499c4a7cc78d39cb99607b7159ff9051276262febf7de8b481efadbc662d382ade62fc15541cf154b0a2d1a716c48aa23da6c7e058048babeae653f18b82af9e05b6d6e921d04e7716b13884d1ce711fb99fe9f6b840940b8b390253973f5a3f010c35412aac572f83aee2ec0aec845a308ffd27553cb3476618d9c669c4ef00c9e530729bff374269c3b977b385e15a26c5085"}, 0xf7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:14 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x61, 0x0, 0x0, 0x0, 0x0) 09:39:14 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r3, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:14 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:14 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x62, 0x0, 0x0, 0x0, 0x0) 09:39:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r7, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd, 0xfffffffffffffffa, &(0x7f0000000180)=[{&(0x7f00000000c0)="4ebf9208be6f9d3446e63a82", 0xc}, {&(0x7f00000002c0)="716bc064aade5308c0128adafa378fb62a78c065b950e0e89ab23a4d7cd959519e9f2d6d26752289106af7eb40851331aa4e3b77e54741d57a8a0e34bf1a2bb2b85176e3d06f34d012e3ff56a41e8473f45f227ab900c65f552217d8c85bb64682aeffa91ada56f58c71643b8570587a36a36ee230c29e41132c1d4a84de1ee6cc1cb31b0dd6138d9a4bb598d177416a56f48579ad49ca08935d4a289a1e0b7fc1b94e2283408dc00f5997a85b0b1ce62ba08a57a5142487cb2ae80c0e25b66b09ef551cdcbcf8ae62e1fa31d7344d48073daf4fa4", 0xd5}], 0x2, 0x7, 0x0, {0x0, r7}}, 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r9, 0x5b0a, 0x7e0b, 0x2, &(0x7f0000000040)={[0x8]}, 0x8) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:14 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x63, 0x0, 0x0, 0x0, 0x0) 09:39:14 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf8a, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) recvfrom(r4, &(0x7f0000000040)=""/49, 0x31, 0x10061, &(0x7f0000000180)=@generic={0x29, "d41636391ff14b68996761968026444cae899f21e05cd3f570c00279d98607d0b7e79ae5c06bf6b9c70aea00d1f1ee340432a95c8f438039ab35a9e28ab3a3579d9877e4db25698ea1ac2d2a2d6a6925b61e96de35bd24383202128f6f62671e995076126c121f8dc6f37bbe288b88170ea578ba39df202abfdf4abf004b"}, 0x80) 09:39:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de3, &(0x7f0000000240)={0x0, 0xfffffffd}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x8010, r4, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x7b9d, 0x2, 0xffffffff, 0xfffffff8, 0x0, 0x0}, &(0x7f000065d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:15 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x64, 0x0, 0x0, 0x0, 0x0) 09:39:15 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x301, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x8000000000803, 0xa08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3f, 0x81}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) io_uring_enter(0xffffffffffffffff, 0x38dc, 0xffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x10000000) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0xda, 0x4001, 0x12345}, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{r6}, 0x3, &(0x7f00000000c0)=[0x6, 0xa00000000000000, 0x7], 0x7, 0x6, [0x6, 0xffffffff, 0x5, 0x8d4]}) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getrusage(0x1, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:15 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x65, 0x0, 0x0, 0x0, 0x0) 09:39:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:15 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x6000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = openat2(r3, &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)={0x20000, 0x40, 0x1c}, 0x18) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000300)={0x1, 0x1, 0x1000, 0x79, &(0x7f0000000180)="72b749d09e207a4b8064012e97d7fa2f4de4a3a540dcd887de28b238e9c2baededc32cdf43bfed8fe7f09d9af4af1f41f8055af35ae405a1af2d7046881aecb2b3ac7847c281a35936db04713024d1ddcb1a18213421c231275591a7f525c7d438d35081a285c0222d78392cc671fa442d7c747078a768e876", 0x20, 0x0, &(0x7f00000002c0)="7a4733e414b1520e364ee74ea422e15fdbec91ad827edebe0aab263268d02fe6"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:16 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x66, 0x0, 0x0, 0x0, 0x0) 09:39:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0}, &(0x7f000033c000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r7 = socket$unix(0x1, 0x6, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@ax25={{0x3, @default, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x0, 0x0, 0x1}, 0x8) ioctl$BLKROSET(r3, 0x125d, &(0x7f00000000c0)=0x3ff) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000000, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$chown(0x4, r5, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), 0x80000, &(0x7f0000000c80)={'trans=unix,', {[{@version_u}], [{@appraise}, {@subj_role={'subj_role', 0x3d, ',%#-'}}, {@uid_lt={'uid<', 0xee01}}, {@uid_lt}]}}) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xdc, 0x35, 0xff, 0x9, 0x1, 0x3, 0x3e, 0x10000, 0x32c, 0x40, 0x3f, 0x5, 0xe3, 0x38, 0x2, 0x4f, 0x1, 0x6}, [{0x7, 0xffffffc8, 0x0, 0x4, 0x4, 0xcd, 0x7, 0x7fffffff}, {0x60000000, 0x6, 0x6, 0x0, 0x1, 0x401, 0xd67e, 0x7}], "bb3193090be0", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5b6) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf64(r0, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x7f, 0x9, 0x3, 0x5, 0x4, 0x3e, 0x80000001, 0x2cb, 0x40, 0x43, 0x21f32bce, 0x9, 0x38, 0x0, 0x40, 0x3f, 0x6}, [{0x6474e551, 0x1, 0x67f7, 0xd8f, 0x5, 0x10001, 0x800, 0x20}], "1dd16b4ddd16b6253cfac2dec597d51383af5ed371a332e8eaa149000060b0060773e3c7e604006e1e46789693b5c980b091523dc98beac738523e6de3cb4d15374c3b43e795308e9e56", ['\x00', '\x00', '\x00']}, 0x3c2) sendmmsg$unix(r6, 0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:16 executing program 5: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = dup(r3) syz_io_uring_setup(0x4636, &(0x7f0000000180)={0x0, 0xe835, 0x10, 0x2, 0x10f, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 09:39:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x2) 09:39:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:16 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x67, 0x0, 0x0, 0x0, 0x0) 09:39:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r7, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd, 0xfffffffffffffffa, &(0x7f0000000180)=[{&(0x7f00000000c0)="4ebf9208be6f9d3446e63a82", 0xc}, {&(0x7f00000002c0)="716bc064aade5308c0128adafa378fb62a78c065b950e0e89ab23a4d7cd959519e9f2d6d26752289106af7eb40851331aa4e3b77e54741d57a8a0e34bf1a2bb2b85176e3d06f34d012e3ff56a41e8473f45f227ab900c65f552217d8c85bb64682aeffa91ada56f58c71643b8570587a36a36ee230c29e41132c1d4a84de1ee6cc1cb31b0dd6138d9a4bb598d177416a56f48579ad49ca08935d4a289a1e0b7fc1b94e2283408dc00f5997a85b0b1ce62ba08a57a5142487cb2ae80c0e25b66b09ef551cdcbcf8ae62e1fa31d7344d48073daf4fa4", 0xd5}], 0x2, 0x7, 0x0, {0x0, r7}}, 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r9, 0x5b0a, 0x7e0b, 0x2, &(0x7f0000000040)={[0x8]}, 0x8) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r7, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd, 0xfffffffffffffffa, &(0x7f0000000180)=[{&(0x7f00000000c0)="4ebf9208be6f9d3446e63a82", 0xc}, {&(0x7f00000002c0)="716bc064aade5308c0128adafa378fb62a78c065b950e0e89ab23a4d7cd959519e9f2d6d26752289106af7eb40851331aa4e3b77e54741d57a8a0e34bf1a2bb2b85176e3d06f34d012e3ff56a41e8473f45f227ab900c65f552217d8c85bb64682aeffa91ada56f58c71643b8570587a36a36ee230c29e41132c1d4a84de1ee6cc1cb31b0dd6138d9a4bb598d177416a56f48579ad49ca08935d4a289a1e0b7fc1b94e2283408dc00f5997a85b0b1ce62ba08a57a5142487cb2ae80c0e25b66b09ef551cdcbcf8ae62e1fa31d7344d48073daf4fa4", 0xd5}], 0x2, 0x7, 0x0, {0x0, r7}}, 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r9, 0x5b0a, 0x7e0b, 0x2, &(0x7f0000000040)={[0x8]}, 0x8) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r8, r9}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000001300)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x400, 0x124, 0xd}, &(0x7f00000012c0)='./file0/file0\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0x7fffffff) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r11 = dup(r3) ioctl$BTRFS_IOC_ADD_DEV(r11, 0x5000940a, &(0x7f00000002c0)={{r0}, "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"}) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x810, r3, 0x8000000) syz_io_uring_submit(r12, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f0000000080)={0x4840, 0x10, 0x3}, &(0x7f00000000c0)='./file0/file0\x00', 0x18, 0x0, 0x12345}, 0x7b) 09:39:17 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x68, 0x0, 0x0, 0x0, 0x0) 09:39:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x10200, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x3}, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x511080, 0x20) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x2001c00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r7 = openat(r3, &(0x7f00000000c0)='./file0/file0\x00', 0x80880, 0x101) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) fsmount(r6, 0x0, 0x3a) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r7, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd, 0xfffffffffffffffa, &(0x7f0000000180)=[{&(0x7f00000000c0)="4ebf9208be6f9d3446e63a82", 0xc}, {&(0x7f00000002c0)="716bc064aade5308c0128adafa378fb62a78c065b950e0e89ab23a4d7cd959519e9f2d6d26752289106af7eb40851331aa4e3b77e54741d57a8a0e34bf1a2bb2b85176e3d06f34d012e3ff56a41e8473f45f227ab900c65f552217d8c85bb64682aeffa91ada56f58c71643b8570587a36a36ee230c29e41132c1d4a84de1ee6cc1cb31b0dd6138d9a4bb598d177416a56f48579ad49ca08935d4a289a1e0b7fc1b94e2283408dc00f5997a85b0b1ce62ba08a57a5142487cb2ae80c0e25b66b09ef551cdcbcf8ae62e1fa31d7344d48073daf4fa4", 0xd5}], 0x2, 0x7, 0x0, {0x0, r7}}, 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r9, 0x5b0a, 0x7e0b, 0x2, &(0x7f0000000040)={[0x8]}, 0x8) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:17 executing program 5 (fault-call:8 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:17 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x69, 0x0, 0x0, 0x0, 0x0) 09:39:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 334.344762][T27030] FAULT_INJECTION: forcing a failure. [ 334.344762][T27030] name failslab, interval 1, probability 0, space 0, times 0 [ 334.357435][T27030] CPU: 1 PID: 27030 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 334.365956][T27030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.376037][T27030] Call Trace: [ 334.379944][T27030] dump_stack+0x137/0x19d [ 334.384355][T27030] should_fail+0x23c/0x250 [ 334.388815][T27030] __should_failslab+0x81/0x90 [ 334.393584][T27030] should_failslab+0x5/0x20 [ 334.398102][T27030] kmem_cache_alloc_bulk+0x40/0x340 [ 334.403363][T27030] io_submit_sqes+0x4a3/0xbd0 [ 334.408046][T27030] __se_sys_io_uring_enter+0x1e1/0xa80 [ 334.413525][T27030] __x64_sys_io_uring_enter+0x74/0x80 [ 334.419024][T27030] do_syscall_64+0x4a/0x90 [ 334.424299][T27030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 334.430293][T27030] RIP: 0033:0x4665f9 [ 334.434210][T27030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 334.453821][T27030] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 334.462357][T27030] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 334.470358][T27030] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 334.478406][T27030] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 334.486398][T27030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:39:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2f, 0xd5, 0x3, 0x9, 0x0, 0x982, 0x80, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0xa080, 0xffffffffffffffff, 0x3, 0x9, 0x2, 0x1, 0x800, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, r3, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1b, &(0x7f0000000180)=0x4, 0xfffffffffffffdc2) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000080)) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xe246, 0xc8, 0x0, 0xcbb}, 0x14) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) 09:39:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 334.494371][T27030] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, 0x0) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:19 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x6a, 0x0, 0x0, 0x0, 0x0) 09:39:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}, 0x400, 0x8, 0x0, 0x0, 0x6, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x80002de1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) io_uring_enter(r5, 0x2a60, 0x3741, 0x1, &(0x7f0000000080)={[0x96]}, 0x8) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r6 = dup2(r4, r5) signalfd(r6, &(0x7f00000000c0)={[0x4]}, 0x8) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000340)=""/199, 0xc7}], 0x2, 0x9, 0x9) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:19 executing program 5 (fault-call:8 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) [ 335.557499][T27075] FAULT_INJECTION: forcing a failure. [ 335.557499][T27075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.570742][T27075] CPU: 0 PID: 27075 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 335.580028][T27075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.590096][T27075] Call Trace: [ 335.593375][T27075] dump_stack+0x137/0x19d [ 335.597774][T27075] should_fail+0x23c/0x250 [ 335.602233][T27075] __alloc_pages+0xe7/0x310 09:39:19 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x6b, 0x0, 0x0, 0x0, 0x0) [ 335.606813][T27075] kmem_getpages+0x1a/0xd0 [ 335.611244][T27075] cache_grow_begin+0x4c/0x1a0 [ 335.616020][T27075] cache_alloc_refill+0x326/0x3d0 [ 335.621929][T27075] ? should_fail+0xd6/0x250 [ 335.626489][T27075] kmem_cache_alloc_bulk+0x1ec/0x340 [ 335.631781][T27075] io_submit_sqes+0x4a3/0xbd0 [ 335.636538][T27075] __se_sys_io_uring_enter+0x1e1/0xa80 [ 335.642022][T27075] __x64_sys_io_uring_enter+0x74/0x80 [ 335.647402][T27075] do_syscall_64+0x4a/0x90 [ 335.651830][T27075] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 335.657739][T27075] RIP: 0033:0x4665f9 [ 335.661649][T27075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 335.681359][T27075] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 335.689791][T27075] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 335.697765][T27075] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 09:39:19 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x6c, 0x0, 0x0, 0x0, 0x0) 09:39:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 335.705790][T27075] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 335.713772][T27075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.721768][T27075] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r4 = syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x30ce, 0xbcad, 0x2, &(0x7f0000000040)={[0x2]}, 0x8) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xac, 0x1, 0x3a, 0x0, 0x0, 0x2, 0x840, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x6c8, 0x3c1c83bd}, 0x4000, 0x0, 0x8, 0x2, 0x8, 0x1, 0x100, 0x0, 0x100, 0x0, 0x7fff}, 0x0, 0xf, 0xffffffffffffffff, 0x9) 09:39:19 executing program 5 (fault-call:8 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 335.856262][T27106] FAULT_INJECTION: forcing a failure. [ 335.856262][T27106] name failslab, interval 1, probability 0, space 0, times 0 [ 335.868930][T27106] CPU: 1 PID: 27106 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 335.877366][T27106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.887423][T27106] Call Trace: [ 335.890873][T27106] dump_stack+0x137/0x19d [ 335.895214][T27106] should_fail+0x23c/0x250 [ 335.899707][T27106] ? io_req_prep_async+0xdc/0x410 [ 335.904745][T27106] __should_failslab+0x81/0x90 [ 335.909527][T27106] should_failslab+0x5/0x20 [ 335.914042][T27106] __kmalloc+0x66/0x340 [ 335.918255][T27106] ? __alloc_pages+0x17a/0x310 [ 335.923026][T27106] io_req_prep_async+0xdc/0x410 [ 335.927877][T27106] ? fget_many+0x178/0x1a0 [ 335.932330][T27106] io_req_defer+0x155/0x4a0 [ 335.936900][T27106] io_submit_sqe+0x157d/0x33d0 [ 335.941768][T27106] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 335.947279][T27106] io_submit_sqes+0x5bd/0xbd0 [ 335.951983][T27106] __se_sys_io_uring_enter+0x1e1/0xa80 [ 335.957536][T27106] __x64_sys_io_uring_enter+0x74/0x80 [ 335.962978][T27106] do_syscall_64+0x4a/0x90 [ 335.967423][T27106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 335.973331][T27106] RIP: 0033:0x4665f9 [ 335.977220][T27106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 335.997372][T27106] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 336.005968][T27106] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 336.013941][T27106] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 336.021930][T27106] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 336.029924][T27106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.037944][T27106] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:20 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, 0x0) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0xc978, 0x40000) r5 = inotify_init() dup2(r4, r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:20 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x6d, 0x0, 0x0, 0x0, 0x0) 09:39:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = openat(r3, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x21) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:20 executing program 5 (fault-call:8 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 336.764671][T27132] FAULT_INJECTION: forcing a failure. [ 336.764671][T27132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 336.777910][T27132] CPU: 1 PID: 27132 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 336.786372][T27132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.796476][T27132] Call Trace: [ 336.800715][T27132] dump_stack+0x137/0x19d [ 336.805047][T27132] should_fail+0x23c/0x250 [ 336.809482][T27132] __alloc_pages+0xe7/0x310 [ 336.813983][T27132] kmem_getpages+0x1a/0xd0 [ 336.818563][T27132] cache_grow_begin+0x4c/0x1a0 [ 336.823346][T27132] cache_alloc_refill+0x326/0x3d0 [ 336.828442][T27132] ? should_fail+0xd6/0x250 [ 336.832953][T27132] ? io_req_prep_async+0xdc/0x410 [ 336.838684][T27132] __kmalloc+0x2ba/0x340 [ 336.842985][T27132] ? io_req_prep_async+0xdc/0x410 [ 336.848091][T27132] io_req_prep_async+0xdc/0x410 [ 336.852976][T27132] ? fget_many+0x178/0x1a0 [ 336.857458][T27132] io_req_defer+0x155/0x4a0 [ 336.862010][T27132] io_submit_sqe+0x157d/0x33d0 [ 336.866811][T27132] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 336.872286][T27132] io_submit_sqes+0x5bd/0xbd0 [ 336.876975][T27132] __se_sys_io_uring_enter+0x1e1/0xa80 [ 336.882476][T27132] __x64_sys_io_uring_enter+0x74/0x80 [ 336.887910][T27132] do_syscall_64+0x4a/0x90 [ 336.892427][T27132] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 336.898334][T27132] RIP: 0033:0x4665f9 [ 336.902231][T27132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 336.922214][T27132] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 336.930643][T27132] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 336.938661][T27132] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 336.946650][T27132] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 336.954649][T27132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:39:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r7 = dup2(r3, r3) r8 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0/file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="cd0c7305771ee1f371a0c6291b69fe78a22c2880ae97eed0045ead03f01c424a52ca11321e7e465bb453f0fb380b10d9d15404b9774723bcbf01275677e191ccc1ae9c168fee7cd3654e98e696e9310037d3bf436a7d9947cb0257b33f12688a0118fe2595d36a2a53a61e5a79afd2048fa1ab0f99b95d237621f695c8a516379e3f7373e1cdb2c6dd149ab04aa6c6b96b4e832ad59037c75dd038087cde3980e80c10fa59a4bf84406d6c97798a23b93d3123ad16db335a48ff15b6d1979a69f231bb9e5657f53bb723b2d6f7e39d0e8f24855de5c1beff8ae0184cee18d7c61386de09f9109ec2a97f", 0xea, 0x2}], 0x44002, &(0x7f00000003c0)={[], [{@obj_role={'obj_role', 0x3d, '^-@'}}, {@subj_user}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@appraise}]}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r7, &(0x7f0000000080)={0x40002012}, r8, 0x1, 0x0, 0x1, {0x0, r9}}, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:20 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x6e, 0x0, 0x0, 0x0, 0x0) [ 336.962629][T27132] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x20, 0x1, 0x6, 0xdb, 0x0, 0x0, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0xa, 0x6, 0x3ff, 0x6, 0x0, 0x400000f9, 0x7ff, 0x0, 0x8, 0x0, 0xfb}, 0x0, 0x7, r3, 0x1) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:20 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x6f, 0x0, 0x0, 0x0, 0x0) 09:39:21 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, 0x0) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x0, 0x4, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000359000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00002f9000/0x1000)=nil, &(0x7f0000206000/0x4000)=nil, &(0x7f0000458000/0x2000)=nil, &(0x7f000018c000/0x3000)=nil, &(0x7f0000340000/0x1000)=nil, &(0x7f00002a2000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000011b000/0x4000)=nil, &(0x7f000004b000/0x3000)=nil, &(0x7f0000000300)="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", 0xfb, r5}, 0x68) syz_io_uring_setup(0x7155, &(0x7f0000000080)={0x0, 0x2783, 0x20, 0x1, 0x16b, 0x0, r4}, &(0x7f0000098000/0x2000)=nil, &(0x7f000037f000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, 0x1, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:21 executing program 5 (fault-call:8 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "e8114135e5f3469dfc42958734635ab5069b4fda"}, 0x15, 0x1) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7b55, 0x0, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 09:39:21 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x70, 0x0, 0x0, 0x0, 0x0) 09:39:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 338.032068][T27202] FAULT_INJECTION: forcing a failure. [ 338.032068][T27202] name failslab, interval 1, probability 0, space 0, times 0 [ 338.044825][T27202] CPU: 0 PID: 27202 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 338.053416][T27202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.063471][T27202] Call Trace: [ 338.066756][T27202] dump_stack+0x137/0x19d [ 338.071546][T27202] should_fail+0x23c/0x250 [ 338.076196][T27202] ? io_req_prep_async+0xdc/0x410 [ 338.081239][T27202] __should_failslab+0x81/0x90 [ 338.086458][T27202] should_failslab+0x5/0x20 [ 338.090979][T27202] __kmalloc+0x66/0x340 [ 338.095189][T27202] io_req_prep_async+0xdc/0x410 [ 338.100164][T27202] io_req_defer+0x155/0x4a0 [ 338.104727][T27202] io_submit_sqe+0x157d/0x33d0 [ 338.109499][T27202] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 338.114976][T27202] io_submit_sqes+0x5bd/0xbd0 [ 338.119761][T27202] __se_sys_io_uring_enter+0x1e1/0xa80 [ 338.125231][T27202] __x64_sys_io_uring_enter+0x74/0x80 [ 338.130635][T27202] do_syscall_64+0x4a/0x90 [ 338.135072][T27202] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 338.140992][T27202] RIP: 0033:0x4665f9 [ 338.144884][T27202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 338.164516][T27202] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 338.172962][T27202] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 09:39:21 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x71, 0x0, 0x0, 0x0, 0x0) 09:39:21 executing program 2 (fault-call:9 fault-nth:0): r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:21 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) close(r0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) [ 338.180937][T27202] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 338.189103][T27202] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 338.197076][T27202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.205059][T27202] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 338.318109][T27223] FAULT_INJECTION: forcing a failure. [ 338.318109][T27223] name failslab, interval 1, probability 0, space 0, times 0 [ 338.331079][T27223] CPU: 1 PID: 27223 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 338.339517][T27223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.349574][T27223] Call Trace: [ 338.352853][T27223] dump_stack+0x137/0x19d [ 338.357200][T27223] should_fail+0x23c/0x250 [ 338.361618][T27223] __should_failslab+0x81/0x90 [ 338.366408][T27223] ? alloc_pipe_info+0xac/0x350 [ 338.371385][T27223] should_failslab+0x5/0x20 [ 338.375904][T27223] kmem_cache_alloc_trace+0x49/0x310 [ 338.381245][T27223] ? kstrtoull+0x4e/0x350 [ 338.385688][T27223] alloc_pipe_info+0xac/0x350 [ 338.390385][T27223] splice_direct_to_actor+0x5f7/0x650 [ 338.395830][T27223] ? do_splice_direct+0x170/0x170 [ 338.400917][T27223] ? do_splice_direct+0xd8/0x170 [ 338.405875][T27223] do_splice_direct+0xf5/0x170 [ 338.410662][T27223] do_sendfile+0x773/0xda0 [ 338.415344][T27223] __x64_sys_sendfile64+0xf2/0x130 [ 338.420576][T27223] do_syscall_64+0x4a/0x90 [ 338.425154][T27223] ? irqentry_exit_to_user_mode+0x5/0x20 [ 338.431081][T27223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 338.437011][T27223] RIP: 0033:0x4665f9 [ 338.440926][T27223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:39:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 338.461504][T27223] RSP: 002b:00007fa615994188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 338.469931][T27223] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 338.477904][T27223] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 338.486192][T27223] RBP: 00007fa6159941d0 R08: 0000000000000000 R09: 0000000000000000 [ 338.494196][T27223] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000001 [ 338.502289][T27223] R13: 00007ffe961c848f R14: 00007fa615994300 R15: 0000000000022000 09:39:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:22 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x0, 0x0, 0x0) 09:39:22 executing program 5 (fault-call:8 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0/file0', [{0x20, '@'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '/'}]}, 0x19) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x98) syz_io_uring_setup(0x4105, &(0x7f00000002c0)={0x0, 0x3a22, 0x4, 0x0, 0x24, 0x0, r5}, &(0x7f00001c7000/0x3000)=nil, &(0x7f00002a1000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000340)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000080)=0x6, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:22 executing program 2 (fault-call:9 fault-nth:1): r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) [ 339.121017][T27255] FAULT_INJECTION: forcing a failure. [ 339.121017][T27255] name failslab, interval 1, probability 0, space 0, times 0 [ 339.133714][T27255] CPU: 0 PID: 27255 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 339.135380][T27252] FAULT_INJECTION: forcing a failure. [ 339.135380][T27252] name failslab, interval 1, probability 0, space 0, times 0 [ 339.142152][T27255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.142168][T27255] Call Trace: [ 339.142176][T27255] dump_stack+0x137/0x19d [ 339.142203][T27255] should_fail+0x23c/0x250 [ 339.142223][T27255] __should_failslab+0x81/0x90 [ 339.142246][T27255] ? io_req_defer+0x198/0x4a0 [ 339.142264][T27255] should_failslab+0x5/0x20 [ 339.142321][T27255] kmem_cache_alloc_trace+0x49/0x310 [ 339.142343][T27255] ? io_prep_async_link+0x335/0x350 [ 339.208034][T27255] io_req_defer+0x198/0x4a0 [ 339.212555][T27255] io_submit_sqe+0x157d/0x33d0 [ 339.217312][T27255] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 339.222821][T27255] io_submit_sqes+0x5bd/0xbd0 [ 339.227546][T27255] __se_sys_io_uring_enter+0x1e1/0xa80 [ 339.233013][T27255] __x64_sys_io_uring_enter+0x74/0x80 [ 339.238457][T27255] do_syscall_64+0x4a/0x90 [ 339.242945][T27255] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 339.249029][T27255] RIP: 0033:0x4665f9 [ 339.252919][T27255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 339.272540][T27255] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 339.280960][T27255] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 339.288951][T27255] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 339.296943][T27255] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 339.305579][T27255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.313836][T27255] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 [ 339.322105][T27252] CPU: 1 PID: 27252 Comm: syz-executor.2 Not tainted 5.12.0-syzkaller #0 [ 339.330637][T27252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.340693][T27252] Call Trace: [ 339.343972][T27252] dump_stack+0x137/0x19d [ 339.348307][T27252] should_fail+0x23c/0x250 [ 339.352725][T27252] ? kcalloc+0x32/0x40 [ 339.356796][T27252] __should_failslab+0x81/0x90 [ 339.361569][T27252] should_failslab+0x5/0x20 [ 339.366126][T27252] __kmalloc+0x66/0x340 [ 339.370300][T27252] ? kmem_cache_alloc_trace+0x215/0x310 [ 339.375857][T27252] ? alloc_pipe_info+0xac/0x350 [ 339.380786][T27252] kcalloc+0x32/0x40 [ 339.384694][T27252] alloc_pipe_info+0x1be/0x350 [ 339.389463][T27252] splice_direct_to_actor+0x5f7/0x650 [ 339.394904][T27252] ? do_splice_direct+0x170/0x170 [ 339.399930][T27252] ? security_file_permission+0x87/0xa0 [ 339.405533][T27252] ? rw_verify_area+0x136/0x250 [ 339.410408][T27252] do_splice_direct+0xf5/0x170 [ 339.415183][T27252] do_sendfile+0x773/0xda0 [ 339.419605][T27252] __x64_sys_sendfile64+0xf2/0x130 [ 339.424844][T27252] do_syscall_64+0x4a/0x90 [ 339.429307][T27252] ? irqentry_exit_to_user_mode+0x5/0x20 [ 339.434956][T27252] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 339.441027][T27252] RIP: 0033:0x4665f9 [ 339.444955][T27252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:39:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 339.464572][T27252] RSP: 002b:00007fa615994188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 339.473214][T27252] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 339.481312][T27252] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 339.489286][T27252] RBP: 00007fa6159941d0 R08: 0000000000000000 R09: 0000000000000000 [ 339.497706][T27252] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000001 [ 339.505732][T27252] R13: 00007ffe961c848f R14: 00007fa615994300 R15: 0000000000022000 09:39:23 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x73, 0x0, 0x0, 0x0, 0x0) 09:39:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x1f, 0xfff, 0x9, 0x1, 0x0, "9d9eeb8b2f427ff6"}) io_uring_enter(r2, 0x231a, 0xe49d, 0x1, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:23 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x74, 0x0, 0x0, 0x0, 0x0) 09:39:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f000073d000/0x1000)=nil, 0x1000, 0xa, 0x50, r0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:23 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x75, 0x0, 0x0, 0x0, 0x0) 09:39:23 executing program 5 (fault-call:8 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:23 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) [ 340.342088][T27315] FAULT_INJECTION: forcing a failure. [ 340.342088][T27315] name failslab, interval 1, probability 0, space 0, times 0 [ 340.354751][T27315] CPU: 0 PID: 27315 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 340.363198][T27315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.373436][T27315] Call Trace: [ 340.376736][T27315] dump_stack+0x137/0x19d [ 340.381667][T27315] should_fail+0x23c/0x250 [ 340.386092][T27315] __should_failslab+0x81/0x90 [ 340.390864][T27315] ? io_req_defer+0x198/0x4a0 [ 340.395627][T27315] should_failslab+0x5/0x20 [ 340.400139][T27315] kmem_cache_alloc_trace+0x49/0x310 [ 340.405609][T27315] ? io_prep_async_link+0x335/0x350 [ 340.410905][T27315] io_req_defer+0x198/0x4a0 [ 340.415525][T27315] io_submit_sqe+0x157d/0x33d0 [ 340.420387][T27315] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 340.425871][T27315] io_submit_sqes+0x5bd/0xbd0 [ 340.430549][T27315] __se_sys_io_uring_enter+0x1e1/0xa80 [ 340.436106][T27315] __x64_sys_io_uring_enter+0x74/0x80 [ 340.441497][T27315] do_syscall_64+0x4a/0x90 [ 340.445925][T27315] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 340.451854][T27315] RIP: 0033:0x4665f9 [ 340.455792][T27315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 340.475587][T27315] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 340.484090][T27315] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 09:39:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x110) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 340.492067][T27315] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 340.500110][T27315] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 340.508082][T27315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.516046][T27315] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:24 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x76, 0x0, 0x0, 0x0, 0x0) 09:39:24 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x7ffff000) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:24 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x77, 0x0, 0x0, 0x0, 0x0) 09:39:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x369) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_xfrm(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000bc0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@XFRMA_IF_ID={0x8, 0x1f, r6}]}, 0xc0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@updpolicy={0x17c, 0x15, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@algo_aead={0xad, 0x12, {{'seqiv(generic-gcm-aesni)\x00'}, 0x308, 0x0, "8dbc3b0254f904a943e049393d228980cfe3078b91e1112fe6ecaabfd95183f9d4acff5f0b5fd634b39f5d2aab2a8f54887fffab7974f9483776b0939f55457005f6c0fd482ee6ca385f9409dcf90ffc9c6ed1a479d66a31abc6015d5a8804dd74"}}, @sec_ctx={0x14, 0x8, {0x10, 0x8, 0x0, 0x3, 0x8, "27eaede1a9fa6b16"}}]}, 0x17c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:24 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080000010) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:24 executing program 5 (fault-call:8 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 341.414187][T27374] FAULT_INJECTION: forcing a failure. [ 341.414187][T27374] name failslab, interval 1, probability 0, space 0, times 0 [ 341.426834][T27374] CPU: 0 PID: 27374 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 341.435299][T27374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.435313][T27374] Call Trace: [ 341.435320][T27374] dump_stack+0x137/0x19d [ 341.435348][T27374] should_fail+0x23c/0x250 [ 341.435370][T27374] ? io_req_prep_async+0xdc/0x410 [ 341.435404][T27374] __should_failslab+0x81/0x90 [ 341.435430][T27374] should_failslab+0x5/0x20 [ 341.435454][T27374] __kmalloc+0x66/0x340 [ 341.435534][T27374] io_req_prep_async+0xdc/0x410 [ 341.435552][T27374] io_req_defer+0x155/0x4a0 [ 341.435570][T27374] io_submit_sqe+0x157d/0x33d0 [ 341.435588][T27374] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 341.435609][T27374] io_submit_sqes+0x5bd/0xbd0 [ 341.435628][T27374] __se_sys_io_uring_enter+0x1e1/0xa80 [ 341.435692][T27374] __x64_sys_io_uring_enter+0x74/0x80 09:39:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 341.435753][T27374] do_syscall_64+0x4a/0x90 [ 341.435877][T27374] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 341.435900][T27374] RIP: 0033:0x4665f9 [ 341.435914][T27374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 341.435939][T27374] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 341.435958][T27374] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 341.435971][T27374] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 341.435983][T27374] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 341.436044][T27374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.436055][T27374] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:25 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x78, 0x0, 0x0, 0x0, 0x0) 09:39:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp6\x00') io_uring_enter(r3, 0x43c9, 0x9, 0x0, 0x0, 0xfffffe6d) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:25 executing program 5 (fault-call:8 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 341.769731][T27408] FAULT_INJECTION: forcing a failure. [ 341.769731][T27408] name failslab, interval 1, probability 0, space 0, times 0 [ 341.782486][T27408] CPU: 1 PID: 27408 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 341.790907][T27408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.800989][T27408] Call Trace: [ 341.804270][T27408] dump_stack+0x137/0x19d [ 341.808694][T27408] should_fail+0x23c/0x250 [ 341.813156][T27408] __should_failslab+0x81/0x90 [ 341.818014][T27408] ? io_req_defer+0x198/0x4a0 [ 341.822717][T27408] should_failslab+0x5/0x20 [ 341.827396][T27408] kmem_cache_alloc_trace+0x49/0x310 [ 341.832868][T27408] ? io_prep_async_link+0x335/0x350 [ 341.838088][T27408] io_req_defer+0x198/0x4a0 [ 341.842595][T27408] io_submit_sqe+0x157d/0x33d0 [ 341.847556][T27408] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 341.853124][T27408] io_submit_sqes+0x5bd/0xbd0 [ 341.857924][T27408] __se_sys_io_uring_enter+0x1e1/0xa80 [ 341.863409][T27408] __x64_sys_io_uring_enter+0x74/0x80 [ 341.868861][T27408] do_syscall_64+0x4a/0x90 [ 341.873338][T27408] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 341.879240][T27408] RIP: 0033:0x4665f9 [ 341.883189][T27408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 341.903562][T27408] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 341.912007][T27408] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 341.919996][T27408] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 341.928075][T27408] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 341.936053][T27408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.944141][T27408] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:25 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x9, 0x8db9, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:25 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x79, 0x0, 0x0, 0x0, 0x0) 09:39:25 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004104) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:25 executing program 5 (fault-call:8 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000665000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) [ 342.482061][T27425] FAULT_INJECTION: forcing a failure. [ 342.482061][T27425] name failslab, interval 1, probability 0, space 0, times 0 [ 342.494834][T27425] CPU: 1 PID: 27425 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 342.503422][T27425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 09:39:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:26 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x7a, 0x0, 0x0, 0x0, 0x0) 09:39:26 executing program 5 (fault-call:8 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 342.503443][T27425] Call Trace: [ 342.503451][T27425] dump_stack+0x137/0x19d [ 342.503479][T27425] should_fail+0x23c/0x250 09:39:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 342.503499][T27425] ? io_req_prep_async+0xdc/0x410 [ 342.503518][T27425] __should_failslab+0x81/0x90 [ 342.503550][T27425] should_failslab+0x5/0x20 [ 342.503572][T27425] __kmalloc+0x66/0x340 [ 342.503614][T27425] io_req_prep_async+0xdc/0x410 [ 342.503632][T27425] io_req_defer+0x155/0x4a0 [ 342.503650][T27425] io_submit_sqe+0x157d/0x33d0 [ 342.503668][T27425] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 342.503689][T27425] io_submit_sqes+0x5bd/0xbd0 [ 342.503708][T27425] __se_sys_io_uring_enter+0x1e1/0xa80 [ 342.503753][T27425] __x64_sys_io_uring_enter+0x74/0x80 [ 342.503776][T27425] do_syscall_64+0x4a/0x90 09:39:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0xf4a2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x8, 0x200000) io_uring_enter(r5, 0x36d4, 0x233, 0x0, &(0x7f0000000500)={[0x853]}, 0x8) close(r4) io_uring_enter(r0, 0x302, 0x2, 0x1, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socketpair(0x2, 0x800, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r8, 0x0, 0x8, &(0x7f0000000200)=ANY=[], 0x1) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x16, r9}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cc01000012000c0827bd7000ffdbdf2511083a8a4e224e23611e000009000000438d0000060000000800000005000000090000000723ceef", @ANYRES32=r9, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x40004}, 0x8084) [ 342.503797][T27425] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 342.503820][T27425] RIP: 0033:0x4665f9 [ 342.503834][T27425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 342.503885][T27425] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 342.503904][T27425] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 342.503917][T27425] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 342.503928][T27425] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 342.503939][T27425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.503952][T27425] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 [ 342.685963][T27445] FAULT_INJECTION: forcing a failure. [ 342.685963][T27445] name failslab, interval 1, probability 0, space 0, times 0 [ 342.824243][T27445] CPU: 1 PID: 27445 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 342.824275][T27445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.824285][T27445] Call Trace: [ 342.824294][T27445] dump_stack+0x137/0x19d [ 342.824320][T27445] should_fail+0x23c/0x250 [ 342.824341][T27445] __should_failslab+0x81/0x90 [ 342.824366][T27445] ? io_req_defer+0x198/0x4a0 [ 342.824388][T27445] should_failslab+0x5/0x20 [ 342.869309][T27445] kmem_cache_alloc_trace+0x49/0x310 [ 342.869341][T27445] ? io_prep_async_link+0x335/0x350 [ 342.869364][T27445] io_req_defer+0x198/0x4a0 [ 342.869380][T27445] io_submit_sqe+0x157d/0x33d0 [ 342.869397][T27445] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 342.869514][T27445] io_submit_sqes+0x5bd/0xbd0 [ 342.869533][T27445] __se_sys_io_uring_enter+0x1e1/0xa80 [ 342.869555][T27445] __x64_sys_io_uring_enter+0x74/0x80 [ 342.869576][T27445] do_syscall_64+0x4a/0x90 [ 342.869595][T27445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 342.869631][T27445] RIP: 0033:0x4665f9 [ 342.869644][T27445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 342.869657][T27445] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 342.869735][T27445] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 342.869748][T27445] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 342.869760][T27445] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 342.869770][T27445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.869782][T27445] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:27 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x7b, 0x0, 0x0, 0x0, 0x0) 09:39:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:27 executing program 5 (fault-call:8 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f00000002c0)={0x0, 0x0, 0x24, 0x0, 0x0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:27 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004106) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:27 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x7c, 0x0, 0x0, 0x0, 0x0) [ 343.626116][T27480] FAULT_INJECTION: forcing a failure. [ 343.626116][T27480] name failslab, interval 1, probability 0, space 0, times 0 [ 343.638778][T27480] CPU: 1 PID: 27480 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 09:39:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x8264, 0x4, 0x0, 0x2b8, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:27 executing program 5 (fault-call:8 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 343.638804][T27480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 09:39:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:27 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x7d, 0x0, 0x0, 0x0, 0x0) [ 343.638815][T27480] Call Trace: [ 343.638823][T27480] dump_stack+0x137/0x19d [ 343.638851][T27480] should_fail+0x23c/0x250 [ 343.638870][T27480] __should_failslab+0x81/0x90 [ 343.638995][T27480] ? io_req_defer+0x198/0x4a0 [ 343.639014][T27480] should_failslab+0x5/0x20 [ 343.639037][T27480] kmem_cache_alloc_trace+0x49/0x310 [ 343.639109][T27480] ? io_prep_async_link+0x335/0x350 [ 343.639186][T27480] io_req_defer+0x198/0x4a0 [ 343.639204][T27480] io_submit_sqe+0x157d/0x33d0 [ 343.639248][T27480] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 343.639270][T27480] io_submit_sqes+0x5bd/0xbd0 [ 343.639318][T27480] __se_sys_io_uring_enter+0x1e1/0xa80 [ 343.639340][T27480] __x64_sys_io_uring_enter+0x74/0x80 [ 343.639363][T27480] do_syscall_64+0x4a/0x90 [ 343.639384][T27480] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 343.639405][T27480] RIP: 0033:0x4665f9 [ 343.639420][T27480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 343.639474][T27480] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 343.639495][T27480] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 343.639507][T27480] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 343.639518][T27480] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 343.639529][T27480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.639552][T27480] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 [ 343.772625][T27500] FAULT_INJECTION: forcing a failure. [ 343.772625][T27500] name failslab, interval 1, probability 0, space 0, times 0 [ 343.772650][T27500] CPU: 1 PID: 27500 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 343.772670][T27500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.772680][T27500] Call Trace: [ 343.772688][T27500] dump_stack+0x137/0x19d [ 343.772710][T27500] should_fail+0x23c/0x250 [ 343.772781][T27500] __should_failslab+0x81/0x90 [ 343.772805][T27500] ? io_req_defer+0x198/0x4a0 [ 343.772888][T27500] should_failslab+0x5/0x20 [ 343.772962][T27500] kmem_cache_alloc_trace+0x49/0x310 [ 343.772982][T27500] ? io_prep_async_link+0x335/0x350 [ 343.773006][T27500] io_req_defer+0x198/0x4a0 [ 343.773026][T27500] io_submit_sqe+0x157d/0x33d0 [ 343.773104][T27500] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 343.773198][T27500] io_submit_sqes+0x5bd/0xbd0 [ 343.773216][T27500] __se_sys_io_uring_enter+0x1e1/0xa80 [ 343.773242][T27500] __x64_sys_io_uring_enter+0x74/0x80 [ 343.773337][T27500] do_syscall_64+0x4a/0x90 [ 343.773360][T27500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 343.773383][T27500] RIP: 0033:0x4665f9 [ 343.773395][T27500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 343.773411][T27500] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 343.773430][T27500] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 343.773443][T27500] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 343.773456][T27500] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 343.773469][T27500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.773549][T27500] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(0x0, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:28 executing program 5 (fault-call:8 fault-nth:13): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) io_uring_enter(r3, 0x724c, 0x3202, 0x1, &(0x7f0000000080), 0x8) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x6d74, &(0x7f00000002c0)={0x0, 0x6ebd, 0x10, 0x80, 0x24e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00003df000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0xf5320) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70}, 0x0, 0xffffffffffffffff, r6, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x5, 0x8, 0x7d, 0xf7, 0x0, 0xffffffff7fffffff, 0x180, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000200), 0x6}, 0x0, 0x3, 0x0, 0x8, 0x1ff, 0x85b1, 0x8, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x8, r6, 0x0) 09:39:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:28 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x7e, 0x0, 0x0, 0x0, 0x0) 09:39:28 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x80000008000410a) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) [ 344.701545][T27526] FAULT_INJECTION: forcing a failure. [ 344.701545][T27526] name failslab, interval 1, probability 0, space 0, times 0 [ 344.714348][T27526] CPU: 1 PID: 27526 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 344.723291][T27526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.733404][T27526] Call Trace: [ 344.736690][T27526] dump_stack+0x137/0x19d [ 344.741101][T27526] should_fail+0x23c/0x250 [ 344.745547][T27526] ? io_req_prep_async+0xdc/0x410 [ 344.750685][T27526] __should_failslab+0x81/0x90 [ 344.755473][T27526] should_failslab+0x5/0x20 [ 344.760251][T27526] __kmalloc+0x66/0x340 [ 344.764622][T27526] io_req_prep_async+0xdc/0x410 [ 344.770911][T27526] io_req_defer+0x155/0x4a0 [ 344.775442][T27526] io_submit_sqe+0x157d/0x33d0 [ 344.780231][T27526] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 344.785690][T27526] io_submit_sqes+0x5bd/0xbd0 [ 344.790419][T27526] __se_sys_io_uring_enter+0x1e1/0xa80 [ 344.795891][T27526] __x64_sys_io_uring_enter+0x74/0x80 [ 344.802398][T27526] do_syscall_64+0x4a/0x90 [ 344.806843][T27526] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 344.812966][T27526] RIP: 0033:0x4665f9 [ 344.816950][T27526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 344.837216][T27526] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 09:39:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0}, &(0x7f000057c000/0xb000)=nil, &(0x7f000072f000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = signalfd4(r3, &(0x7f00000002c0)={[0x515]}, 0x8, 0x0) openat(r6, &(0x7f0000000300)='./file0/file0\x00', 0x208000, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r7 = socket$inet(0x2, 0xa, 0x1) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r7, 0x0, &(0x7f00000000c0)="4cfa45945e566e2cc8a0c272692679067a95210f3f2741e5a5ffa6641f", 0x1d, 0x80, 0x1}, 0xfffff800) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) [ 344.846026][T27526] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 344.854188][T27526] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 344.862273][T27526] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 344.871031][T27526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.879022][T27526] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:28 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x82, 0x0, 0x0, 0x0, 0x0) 09:39:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) getxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000180)=""/27, 0x1b) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:28 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x80000008000412e) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:29 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x83, 0x0, 0x0, 0x0, 0x0) 09:39:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000005d40)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f00000068c0)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)="07facafb47d9a76fbfce97fcd3c3b1c310fdefb667b20b66063bc92e6a311640f8465152213ba635d0c33251407208b0b0eeaa660ae50ee01e90b1345839a8236853503df05933e68903628981e9b6f737cbc0f5770582ef2cc9b26180f6", 0x5e}], 0x1}}, {{&(0x7f0000000340)=@ieee802154, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)="82684744af60d2442b5e7e640879781063845601ca02985696e06b5f920f23251b3c39c36dd89662ea7353c23faec290760d9759959fd7e06e415df8389ce2793ea8", 0x42}, {&(0x7f0000000200)="8806b173af46dd5d27e8f56696a2669c2310148df2c40a076c881ed24eea93fc06670255bc684a6710e95d3b1a9a6529a3cca4ba4eca04aefc", 0x39}, {&(0x7f0000000440)="ffafe9414eb0997b6773540aabf01b9a04456b998dbaa1695293b5816f1c6663394f8c7f662ed93eec91f4442ae086a8cbf39c407e6e1b983470d500c9c5e6f2d14f8e38715e5eb72492872d36142151b018b2ae73c77531edf178eebd098a90dfd5e38c2f08cd204639e897c922cfad09d32de37ea984450337f168419807c6806d1d0a195da6d1d9fda3eed064d1cb25970ff24c9ca764dc625fedc3e6a37bba686003261677e24e21a02b20b499e9bc0adade4df9b95c59c13ea4", 0xbc}, {&(0x7f0000000500)="51c8bdfbab51aac5ee5bb411606393f88baf91c3206e84452306a4120fa8ebbb0ee3b6596fee41c7c498e669d4b6b7cdb7b82d2279c437e9d772bab08ae66d9030cc6904a06514674116fe9902487f23c22601ec10f3d398002d9ae4ad5a86e2790b67de2ebc3994ba2f493514825a", 0x6f}, {&(0x7f0000000580)="c4354915ef845485e0f38cb6402d6b2dbf65a97263cab58e16d12c2d061d578e19c204ecb40c71685cbf6a", 0x2b}, {&(0x7f00000005c0)="5c88ec327615c2bf057a061dba3cdf67928aaad02a66d6778defdd36bb5b7be6e0aaf88a95958a0f8b81cd665c9a57d9000cd2c03f45bf9276950b4ee460d91582b9cffe19d85a7cc5f58e96b7276c0a0ccf0aa6515c59fc00e6b0ab2215d6acd0b57dff52e3cfe8e5260c22bf9a53a785171137f1576fcc24e7fe2b4c01a61661d2f44123f3b2b0a4a26bad8b87b84f4064e4815c0845d8a830f87879f7dbd209f07b9afa0f26225d2a34fa5f4d77e49dc825ffa4774683a89e0e3736e5c1becbfc743a7417a44648470af70c964fec791c7104013ed0c6877e3951a29ca12d8434bec03cb1174440bccf", 0xeb}, {&(0x7f00000006c0)="137b480693e90876161d187f93c5cd57b6c31d06785b11b5862f74e4bc666a5be656efa1f386bf31b62c119830888cd6a343a0e1172937593f14631fe422609ce123b1d346380804b02344fc56cd2f228049aa4f9a0b319ea477b7091d3984f8822ac59a6b7e71e14d8b6ab66e7c54c0b1fceae1b2", 0x75}], 0x7, &(0x7f00000007c0)=[{0x70, 0x10e, 0xffff0, "7efb6815ec1d18756357a21a28f3351c504efd41a6218becfcb1d2713bf9e1e78dc09a178c06015870722b3309a8c5e7a7727f2726cad123982e91c58e13cb59e8f3c9837c1e69d8b233bcc8ac5bc3d0514e3d34de5daf6f9ac9de4c6e5dbf94"}, {0x70, 0x10e, 0x101, "d03075e1f34206955f6de80e07596958e5b2563885739aefb6fb6d5a2f71054447b10a334f1cdd58331618960d4d7a79ea1ef3894ee44e865d0ec96ac0f13e6061577f2242f8c5715b5bcd440be70cec6e6517603f26dd9399441270d8a0"}, {0xc8, 0x84, 0xfffffffb, "5bcd83fa363fd8d8c4129ff8e6aa16df13c8870440e3deb3b2cce29334a1520671d428b83328438794b1ddfdacd1b76920718aa3f02bc42fad2e78f5090bf396b983740fbb31a226fbb4756210e174d7b16f6f4dd6c7542b0bf7fbbfe73d5f0d1b9db87fdc7d3703134e1743016f800ed775f3386fda617a0c131e3db8dcafa98841287305db42e0be92b528c01b611cdc89fc7040df3f1e629ee3875ca9026ab89ae5a1584791c2b4b1d1e9381aafc557"}, {0xa8, 0x110, 0x3, "f819eaf5cca7a756a30c6db0aeab95a086f6424d4e7bce0c45755e5967a0f32b97ce6806d50110ddb87cd35b806012bf4cef95ac6fe0ac1491212d265311566a1e50698d16e5ec1c1153e45a4166c18ae6e445209bdab1f95cdf502023547e151ffb9c7a33e3ea97d27fa7388c134a60b3eb36f961fe5b77c9259ebee9373cc035d74d42d1268514dc9876e6377da52c50efed86b397"}, {0xf0, 0x12, 0x401, "0c73a8167b97f27931d96819b5ab23706d7bb2bbdd1feb381df390055d6c921aa5cdc9ccc2fda580161f043615dae3032502c183a7c985ad43b21b38004a2ca4217435086b110b58cc8c503a889c594469604179977b7e9097a9ba8514ba3544112e121683c3a700646f02ffd03e01fde8ca7ee3a6b1e818591b7ba235f20360fdbb79842882a5ce526eade8f1b54fc367a71fb9d8a4b4c94a04f9437765abc7ac45211abdc3bd88eb3163c35d17a95e4419befdfcdb2ee9542ae37bd2d96e08a205722ec4073b24214af929ffc97b85d9bbbc0eb87b04480b48e52e3d"}, {0xffffffffffffff16, 0xff, 0x400, "d2664dd16691a44b0adeabbd7181ead668dca00460ffccbe1d67ac477cef344baeb43fbc791d9e7e5f7a19eaa45026a27560fccb93a8cf4225e4d22c67c3dc63e2223e34d6619b2599648250360c60b1b946ffea8b3cf4e59ad973f217175c7598de2630fc0914e1818151a62491e8d6048f64889fe05ab3e96e18ef8ab4ee6bf823c69933f8ed21c0d89b57ac37addba650c0918566c2184ae65b6ca32229f79939de4118795f09ff25321f0e24fe15e431629ac39e87dd166d769f3aaa97f4bc4e5a91c8ae565ea45f0c108a6b64de8f3dd1740cc23ffecb10004b4b57fcf59aa041d43a7a613339d3db349a084c"}, {0x1010, 0x108, 0x40, "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"}, {0x78, 0x109, 0x9, "8da69c32453d5c0a78549bacabebdc375a103c54951e2d5526d470b5745541b5a15c3314ae48ee6674210e0c667b3e6f4a0fd22cdda6b5b1789f333fbe665f519c85c65096d6b152f93fd39033ba7b3f16aa979fb609c56273334750dd78709d76"}], 0x14c8}}, {{&(0x7f0000001cc0)=@llc={0x1a, 0x0, 0x7f, 0x3f, 0x52, 0x6, @random="81a1a8f33d4f"}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d40)="91b842cde38b617c29c29dd5ec4fbc5b390fbaef0fc6a8a8472455b960ed745dc9d2a03095075123831fc13684", 0x2d}, {&(0x7f0000001d80)="2203f7410622bc2e48133f15ccd77aab37833da885882e88210a52c7558cfe80f897f1e678e9d2ea5cf32384141bce722141b574a637efc77ee9d48e71484befab01e6eb2f88483b07ce35be536a67b646d4c99e3883ccb820695255dc07633115b7189fb2ff046dd4726fd0edaf8ee30ccebcd335cd4483fb01191c1c51aee99b5b27d93fe94fee0e829799fc658b9fe066209ad04398a5a22bb89961752318bea38d60642871bea78762e529", 0xad}, {&(0x7f0000001e40)="7ec2623e08397439977630fb3df012c3a3336e08656a50d09d406c645cc592fa8e9e3e3b3b8ebf270699fea58c0c66dd485b1ba9f4a4b089b159fdd9e028c36356dab67009033a6fee8108fd6b7471d5fa5c3e1ae26f41a2fe24cf87c8f02333afc78937a5267218a8a5df2a6e2707c78919feba20d2990cf9641e8c21e566d4d47c01185bd24494e8fca1f2c75cc04a5892eec7c12d274179bfcd93b473dd924228203600e7ffe38a4666f04e0d7347bba14402956ff3f7adb45b6480f2995704f51c99db5ee29e2c6df4ca3f76f1a6", 0xd0}], 0x3, &(0x7f0000001f80)=[{0x18, 0x6, 0x5, "bb18fa"}], 0x18}}, {{&(0x7f0000001fc0)=@phonet={0x23, 0x6, 0xdc, 0x1f}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002080)="65444d515b72cfdfe2f58355c6e47bf817597e03c771dbf577ed5128daaeb9843d62b92f820eb3069be50c1f02483d73ac22c224e39714648ed112401121456d8fd84687a5f3f2f3ba60fd6913fce4a04eb7589860da61b7dac13b87db64e8d6ff876be10e467d7b139ace262f9cba693a18a4c2ab32f80050b847ce6655f85d4d33d854997fcce6e245814ec3cf96390bdcdd419fe48e6b10df037a8cb83db601df3bba891df9c383ce1350ab613af652d9c120ff953a6a2658bc1547f7c95c33c8c9b9aacbf9", 0xc7}, {&(0x7f0000002180)="c3f71401ff7cb0f17e7392eff6db9483ae493f924ff108e50de812e840a92e2a8ccdeb03773386694faac4fbb06af7b99739b3788beaff176ca821c1f6263bd6abc5c10c704ca36da87f67128a6e92e2faf12a39534ce6c6e86210952eaf2b4432d524dcc7d6a18e10a3cade358d468434fa2d84dfd66f11ae62044ab7ae34d26ab7e23dd9dfcf04fc5f", 0x8a}, {&(0x7f0000002240)="5258e3d1bb119b5ecaca10c82917223ca0c01435751f5194e314f09a2f8442b485e17eea9ec46f081ec6ffab9f514a70343cdf786ed500549eea5999b59cf49a75da87f60bff1ccd701a339f4097799afe74141973690dc13b21765011b4e65b14a6f310b54fcf31c2be42fdf5d0c61f71104ccbd4beedd6f3cb5ad09043c4cab3", 0x81}, {&(0x7f0000002300)="d0f179208b9d955753470ff00e3766c842313b3341b865a65841a4d7086b5c52cd46abd0", 0x24}, {&(0x7f0000002340)="46e1edec1be66bdeb87bc3fadf7c380d8ab464c205f9bbabc9a3727568d5cc9607ff835c2f244af1c5991d972d1e8b5cb78fed451d214b30b14b78c8f0e8da5ca70a6d49a565dc4430de5059308cdb62eb9b8f8c4e0a8d42720ed6d9043f241c5657d215296448db3898a08c93762449148f9bf318b48d123d1023d8d6d245cd1f1c3e38494f6bed9dece701e3b44189248f3665aeff064e1f89901a6de37631e13fa98ee855d6d8f10908e4bd1b2772cb001bf93175c0b09cf4d752e3c1c38d575f5731616fae741a3f5109396bda6305a827c9c6702a571a3129b64a2427a4ae69100faaadf9ebebe8a087b22b687bd6f637d67b00ee3be1", 0xf9}, {&(0x7f0000002440)="f13521f41f30753b685bd67eadfd2e81a122e4a91946772757413f27f300728d57124401c6357f5d0bcf847fa3dda571f218c64b0a99ee7938c4a7f83a042b6d8936049944ca782eee4b4bd8fe9d4feffc775229076b051eb49c1e747ee357dc4330a4480a0c5c86b28ae03908331b", 0x6f}], 0x6}}, {{&(0x7f0000002540)=@ethernet={0x6, @multicast}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000025c0)="d1f4d8793c0cac2525c9a243f9bfe761ecebae77615670eafa73c58fd49fe8cb71c6d752c5f0ec28daee14e3d1700602c76afa3ce7739027882be14038a89302a466ae882cf09ce3235799f289f526bb466c35f8b15dbddca20cb643ed9913deaf5a28", 0x63}, {&(0x7f0000002640)="0257f398fd034fa2c6ef317d55357ec1594b5eaa858534eff6ea046df8cd5e08bc6e70d1d5f01507ae4b62bcab12ab7206d317d14f0e4ee634fdcc5f436065e19eea0c9699678d0afcb2ed4881226d149209f94a10746ca9509456c5fd8fae1d9e51a9de886f2b703b6c3f5faf429cabf2866f4f3659a89da545481ffae470990af5582005", 0x85}, {&(0x7f0000002700)="ef42de36587c3e2efc6fce627f6d35a9dd7aa9831bf23fb3cc1f199981cfad0cdceafbff1264d6f49c996a42ebee74aa0b602addd388d40860de34a0d9a2d4047e3924a253b3b4b08b7bb428f8a126447fdcdbcba91e593dca633cb290291c7140348f37ddd2d1418037d63b0c2704c70649941c3e7bc5d17afb14eb5c21308b85fae0920e6a898e1539bca19803526f2c560a9f61cb665f0103da46005b5e26f8fecfc2891f402a08d767a14795a1b1fc869d467d6ea002d15e057840fe836826850706cb1ec36b8ac6b3d306c3bea83c2669386da9c7", 0xd7}, {&(0x7f0000002800)="18a4f709605791f01c09f1660b8514d52824df76aa0cc536dc3194d037bbdb68c1d7aa0dd8559bd4c6e941de8d8adf821cb06244476fd862d035499c7d04647ccdda3204edd98782ec9b9be23d494dba99515e29c8e7110857853617fe1bbe14c8598e37c672475a4f265426b2db7466fce83df81752e8d51568d3f7fbbfbde80267b2d8db2e789a23017455ebf5fa34c0c16dd86de9d4112868b11adf7d66a50179", 0xa2}, {&(0x7f00000028c0)="ec28f23443939fd135bb756fda7b30c11956f6c1b8e5d35a75b7ef27d1856a745971f3c005db483ff7868a2fbb863803f2289c657d4ab610dc0d2b2f0193d18bc76d42f2d33e2fcb5ddf746abcbc2e979647d5e02f0635a4c6c27d5fb0d6566585986ea4be6eeb6a2067dc4c9e2a2cf95642955e15d74f6ec7f484a7fd15f57d595827f287443f433d8ff23910e6f8f40c5268340a49a7c02c74eb19b617f04f4421c5aa5158b6b10f0e5ec6dd4e9fad3d6edd48ea2b4affdb9bf69921c1899a0354506706c7d2c2f0a12d64ffb236d56cb78f794a0ac4bfbdd0cd870108b8d00795c60c6ee4", 0xe6}], 0x5}}, {{&(0x7f0000002a40)=@l2={0x1f, 0x5f, @any, 0x0, 0x1}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002ac0)="d3cf103bcd880e7c17d1e8ec67f3b0f24c52d008cb67a83213ef15487d4f3540527b99146b9a84e6f16c172072abaef3354dbf6a233486095ac33cc0e5a2a94426b8d442501bf79013", 0x49}, {&(0x7f0000002b40)="2898989110015f314e04014658f35fc6deedb91c902768ee9a8fc4b9007f1ff7b429c592dba30d058ad44a6b2441224cf98853f1551157e7351779", 0x3b}], 0x2, &(0x7f0000002bc0)=[{0xf8, 0x103, 0xffffffff, "42159b946b7a0e69611a92596eff280d124bf327bf2079d6988b6a8afe18fa1fd230b12602bee7aef73e2e8be7395036cf13b1c31b79986c965f393182fcd7ff8d9e5962050e0c8b8b70407e79bb29984e9e3fed7de9465027a86965fc550b62158a74fc667e85c2c1093b96bdb92130fc5671ae652c6c5802f5522b544652cba3cd91df2a76232e65f74c9c79242e7e431d9910d8524194a21d1668e46c0b675942cef3d3c9f94dd9278d584e33bf0e2a813d1a84a998528b7e554e20865c30995e36145ce6410f84c0844544f3d12039bcbbc7cedbf69f06101351e04dc2f4057ca828"}, {0xe0, 0x100, 0xdc, "ccd0f554fca985fd7a7c8dbb8fa29d45f387a2cd5dbac01e7d14bcd2c8aca0c1412189065027a9a6ffa9f072897435cdd4d4c852d89576df5b31f90f486c0365403a0cfec42debe0053ad48ca0be89befdc39858c0306e16c5ee862cb8c63b1a3d1d919273eb070097ded87488c362e9c5c38a58a394d99694496e14b7550cbc7123e83bdab51d33ff2fe78480e803200c974d0bcf27b5065b5746ba311c1915bc44fbf5deddacf89a1d87c6e683e9ee3b14ea2012e10b119b37e422d6c87d315f89ce1a75a8b17b06"}, {0x70, 0x10b, 0xe00000, "14c47d9c5f4e6689ee0e6bacb12f1e01c4d9f101d013544e105b7a534dacd1104c2a2ce0598bac654be747daf7e8c048c250101cb8844505cc1dd4d226933214e14c2e41a03461fedfbd95d6076a0a08865258af8e161b0417b0a1079a"}], 0x248}}, {{&(0x7f0000002e40)=@caif=@rfm={0x25, 0x4, "2304f986d553e8498cbf3c7136d40714"}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002ec0)="7b2f4bbeb63ed25b4c2b73d5d603359c1fbe4753e6158fa5e4f59daeaa7e30d9b1fd0d8255691b29374674b0d07534b8ea49791d6b7221ffd36c2cb274dfec234aebf9c26414712dbacfbdd11fd334bd5b698468934b659588c9b6091ca6b416a70103eb68", 0x65}], 0x1, &(0x7f0000002f80)=[{0x78, 0x104, 0x0, "0a593233b9049de178e12b92bcd3853598fb6a738441190664b873e31f38edfb38c96cc673ee8aa3addcbab1393d91599525f23fe94e6d8c797d8e9e97ec5e852451e0cd4af6c1701971b24189a9ebbc8942102a37aa11d278c5db4856104117dbad33d7ac97ef"}, {0xa8, 0x112, 0xbb, "d61833d45b0ed538ea5ec362e4c4c3ce1b72d6e1b1a523170a752ffda38dabb54172f7d27cf0629c0d1ec7b978d8d0bc30ba5f17dbcd111ac98ad8697d780771642a4c77ada13e6fec9fb9df0225b62854120b9cc0bba97ea549fd0ac2dfeffdc6a31b0f1cd92f17b519f9220f19e5a36a4e45b95a8d47901d97cc161b9af27e5839ebc2408ff22459c445a81aed0bebff16415023"}, {0xd8, 0x11, 0x3f, "7c27185436859e9db6a50e5feab52e6aa36cc69aef68d9807b6d43bd22edcfc81dbaa9bcbfc6f276f635327036421d8d5c70145310636bcab2810c70672f637c052f18983996a311ca58c361653bbd17ad8055a815608fa187eb1c9e2ca02ad036fafe7943f5c7bc09222b1e8cca3b97a72c88226b6a4f8b380b947230eeefaf74fe8347fc8d6af2015eef4666ddbbd1f9f63cd8480e376f33b2f9ce5a24fffed1efc015bb8ba6f0d1f5e27203cb5f21f241687cc552df7786b5a2ac313a19ebe4e263fce3c0"}, {0x80, 0x117, 0x3, "fd782224ef1a7de91a95286dcecf2375c59a712d30644ac6b9b68b5d6f80080efe1ee060ee3a7054327542b69d427406294e88c4d4945a2d9ae6604dc2675610c64f944506aa648bc0019107214ecaa0975d3b846b0e3b0e3dd6d6c725b538345ea6835fc5dc6da68c9d36365b9e7a"}, {0x100, 0x6, 0x7fffffff, "17c999621c81a210917a642960e5508d5b5dd0af4259c786b9618944aed974e7546799679ebec19eac56fda700f99a7bc0437f0924e514b8029ffa08e7789790b8c411bc3aa5366e9cb8afcef49bed1b79887708f37b0ac9b59e23568d7f75cad57b8efcac95c144a870cae399fdeebdd3bc99a27855c69c7651fd3d3d3ae899667000558bc2c6940920fbca1833774073fe04e09e66d0f413878c289cb0d30e013d8affded4dd763f3f4a2ed59e23340465e0e5335a76cb829e5e26100d1278686dc5968612c50e446d5239a32ba4a9403dbf2efa2cd66c6d751e5f7e84e210aaedc4b819e551b8c9"}, {0x88, 0x0, 0x8000, "2020e61251e93531ec35b82342469e91c9b91b357c5c0e970f1a59e6fab960de449af646161801e005f3af78118c3a52ae1f6175213b09bf1c1c310a4136618458677d5d7248749d362c0ab102610c6595fa68c9650bc5bb698508f7e7288ec169becfa8335bc1994c5f4e80b5458eb573d1"}, {0xb8, 0x10b, 0x800000, "5e33a7943a879d3886ecbc290c499df83149a4dee807e0a1897649ce5bc95560afca8a460d90968aeecc7623bea750bad6d995a3a93d21befb5c4faaa268253c88d1cd95f231cbe53bffca819537cfc502d775c2f290d57dd5acc5afbfaaa286b17b6976c2f2041057b44011f7f8de682f2c724ffa5c88f3077a14ad50df79103a7eb4577fe82d16c2e58966b161f1c3b10c910180d54dc13e68a72fec5566b64dc8df517ef0"}, {0x68, 0x11, 0x9, "ca262ed8dffcf17ba4c2e196fbd1c6db2cd2afeaa3cd845d4a4696f3e457c07a6ac02bdbc74339e0ef013a6c6365507de8765d0791ccf601030b6f529cd1904a440f637950490c5cbca6e9dabbab506488"}], 0x520}}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f00000034c0)="59dc9e5261f07b8fdc441df4454091854538808737e94fc8a61d175e5de08802e988010dd98720da119a5501f9e3c540657f8ab9919c461e58ad52e45f584861784c7bd119801df622e91e92113d63fcaf7f39ee885451d1713e579d1139438d13bb0f955e162faa", 0x68}, {&(0x7f0000003540)="410aeefd29cf288b2b8184f6fdbf0795fd666281e8b08fb84e22ae8d6979ee0e5b2a96be335beb6008bd6b1742d7f70b835c831f3473d14b7b20976110fd3d608eee95eb42047bb64d27b0a4dc7d4bf6fc9b45541a51f929a5f241e8967ff5122368b36fc9b030259a89649ffaceed8be012ee", 0x73}, {&(0x7f00000035c0)="12dc37f290a5acee0eb130793d0e2805991325c838968bf02988aa59c066620e3cc1999852cc388ab63707de6fac517219f9bb846b32b2f1619c8572a3b3d9f9e26eac91e9ecb0d50cb311c7264593c7a4f18615d16f4868d30314d0a1162101fecce90812528cad0e2023973e6e76", 0x6f}, {&(0x7f0000003640)="16e510f5c3555590b2cd99db9b839b3b62fad1f14a02bbe33586191ae5178904def0286b8f5ac29cba4e8e166ddc9b9faee928d4b0d3989c39a6a4843fe30cde62f08ad4caf24abca34e5c62a46e5bb6e19ef53add44ae6cce75ec599d092097fb3aca3ae0cc78a6d651e19afc9ab8bbc7451f8f0d0ba9bd46f7f7cd4721cc0dd6f5d1baf8d0fda969a351e1858b96b98c4cea5663acdb7e8c61e73bda6ad8b90b2348f65bfab7ee02ae6908e5b3ae17838de487e8551758618956b2e106d01e58946a19a8", 0xc5}, {&(0x7f0000003740)="21ababf40a9bb8b0eca0db2bac1db28c784cb5dc93c9fa1ddb0ff7396a984b6abaa3931d4797d2144422e762b98d78367d6419ae73dda8e7a6a5b462b614958b1baeada7c852c4a7270760a0d207724ad5f25f1e20d40323734c4a999767191a41160f1b046d", 0x66}, {&(0x7f00000037c0)="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", 0x1000}], 0x6, &(0x7f0000004840)=[{0x38, 0x111, 0x8887, "553154d5cbfca3ebda68ae303b8dee1647bb8b0e85725e4a71a72cedc05a3dd2d3548ea02672cb46"}, {0x30, 0xff, 0x5, "3989921b39066c69377b188806385003caaff72f19f88d41d79b0e846fdc"}, {0x1010, 0x118, 0xfff, "96ea9b2eec64734dd999ce0d80057e11487cbf0397a1d25144540b42fdbba1ffbd3c93c6a7afe01926e548778608840c4a6a7682cb4075d5ef54b3ce8925719bcfaaa32e9b3c494fe65bf81d9bb8fe1c72fcf41e872230aeb542dda41b7b60a3d2a4977daa4399944e5ff3194ac5f2742d08df08787ee7e879aabbd9b9104fcd9ef70c1139581af182aad79f605b5a4d1ea9fc8f1a1bd3b60e0be99a08606ccb0eeb72d8142d4bd0a3d90a9fc5c2136942e1e0fda2f43a4d59cb85f935f532750fb4566222ffd02881e98aa446d1b782ca9fcc3878c31d6ac98e4eaac3e5e232157268620aea2d1a5f13673707e32099713242ad0509019119d6a7dc0cb64d97f9113ddc3ff648e821c57b7b27adeddd9bd08e838b81786c68d0a1cf5354d179e21bd0d53501b71f841a69f77d26140d1731a50fd1f345ec2f3a0dd876d3703109f9f06dcffff12e7200133f5d9fb5180dbdda141bcc73d0c4cbc3641ca72af7118096f4e71d110a199df8dae24018ff6bdc47a298f93b448d05bd477ff04cac3217039770cde193b0bef7e4fdea8ca15f33de867f6da4692813524e8ce2950f0371095f07070c1100736c25bb45b6c640bfc9b6a083ed59cf874ca6196d95c667eb0c28c5a3a8cc6308866e3e356def98a6068dcf88b6a4dfe733e8727ee4640fe2c145d1a5dcdbaaa0103253fa07fb800f621c97053cad92ba684e52c117aaa6215b97df59dfcd8dbdc28244bae68824e8288497cb04ce5a8010ed22549bad37d9a362d81a219fdf3417080e1b73e48f6c136bf36e8a4a3abe21d660b4a22c961e6af5139ba23c1b49329b194e6e7eb579d6b72be5aa4d4896e6a6863ff84c02a9ecc6788e1a4c6993d944699ab97273d1832d95b96f565e25dff5958440d63cffa2ee527812612ad57c444f04fc9717a99aced8e5a2d0e8638c80096f855c4b02627ac2c8bd8ac52030ee078bff070cf78f908137b6c153dd1888a01ce9886bd83c74f93a173bb9c3a1966b0be2c3cf47f484a7ad8c22761fe2407f8d020ce6a5b840e5ea79384fb6869444cccc020d0c72dc60a55ceae7933b1893c0c616e7f3e77649e3d5e0869d5a2e11652a5a8b861ffe8c1aa7389913b6f7787730f63d7b4a4a8468f486b7e52457bed9d6664d04121c25f585eb2d2ededaedf04d8857f8ce1d562188ea5da2f528b9804e135ed8cc6ffe142cbb13c3263f5266e56790f35515ad73cdcb13c4110e54731d931d912c7848f1fb821d0b622c993a149b8d44a6b82e4dd8f371c81c5d1caa915707e10f74e19764429c37adf317c035069107166acec91415d0fba2e920be87931a26177d473699815688844d9531831187a3ec77ad9342cf5e4cb7fbc9b81c5564b27ad46d357fa441760a2086b8b814dad3df645288413ce06e03e02a0c2f6240c52c37ad8a53a14ca2051377d9dccf74166b79e36db75c5e54b8f75e498607d5b1a988f9363ca568d343739ba62c924598afe4a135e60a411f81f42ce666c89d43081ad23a0dd36deace97d5a33de6480e49e4c102d02f8c3e6132d5f5ebce98b914662392ce1ba4c6f048ead12af435ba70abc9dde2ba79d5466af939ef0a50b878ede1b241284c23b13462ef21556dc0f304936a91dbb6341370480c1fa307a1b09a27b99713b1929e7c11bed7277671d7220f84d3808cced3c741863feb7f67bf414f78175cacb7a12829180b8a3d06ed8f0c618203142fcdeee84fa4f6e20bd181301ce9a0f43e424d80098f595407a1cc4d8097a97abdba5a258350cfbe75a1b74af559299f6def0c4fb0687b64a23fef006b1518c27d900c9e77e1e9c703a7ecb0992f0a3977dc581348d2f1df1225a3c31172f5680a6aaf7f7e69fcd93a1d56922d575d29246000822ff24d6e5584ee044c735d8af37f1263a1a54bf2baeaaa8a1dedb8c2c756f4f29b0bd3c1802f5d49f97355b9fff401ae142bb67b54b8fdc671167bcd2fcdbee2292f2c859a03fc55d538f80d707b700d38556e597fdd19fa1856bf09950f00609595769cd6bf06bbb0a3f5b5a7bb57fd60d2350043e1d5373c40e644b20e252d27edcfdfd47d6db41d442b20bec6f59c46ac281b697f358107e49f0e775c6629fdea313b88c400cf09105a68109c5ef81161963a647b8364b2c233e128b0d21b5b89e1d6d4df70815e0b292541560fcbd74382a17b1f872599ed6ba146ca263e2288688cb37b5480f2698e57f173a511309d37a45ae692d942b6b36c732bf168379344cfb89f6fdfd36938cb2d048a0db19132129a8c327858eebfff9007f6ec407019625d33ce1841794b0c7bbeb43e78a2e1846b082994859edc29fc7390a8dba6714f2a395a33ac7c579b4f24f9a448f2cd708eb4d63763a8a5e3db0750134b1f9e7da3649e1bcb48e2fd6ac7e4f64c642d30b03ce2998acc48bca5f0a529275407f071efabb319f7b9bc8a1d075e1d323e8857c25e1ff645904fd2f228e5bd9b19e80f6e12a013e39bd421e7a47349a1f2d3eb23ebb9671cc2ed068dae1ccf39d70812868b0737324f02b4eff2585a46084895162ee999bbb7e1c66a8028d66280898e0b2be9a79c019b6f35b375e2196a745e35ac7169935dcd993ef3afa089f23f4527331370eb307127cd5074b80751b97170e96538fc09a5bb3a543a752cf6d451898d9d8d71b03c909ca66dcd2a371d0a4ae468484cb3c3e8d3d2fd106a82f3a90fcc3a077b06e693acf20e11d880ac6c81cb878b09a67cfb4fa72997956022f47cb922aac0339963ee6bf1b9971158674eeebc09830aaa535fb97f011f25ad5f0e85db0de08547b1a79eba55decf5ca86eb51dc994c4e98949ff318e49b8d88b53183358ef5301ca4200613b2cf599c629682af6d2ec31e322483a08c03dc892f2df9b5c5cd16aa85e8a0eee053a1be9e7bdc8471e770110d91d1a462925ddc602cb4c2dc5db75a7bc06c7d4fe7eea08c48d33cd47ab78f8d65eb0601454f3385e04b582c4fc6e69f737051037c456bbc88be6d6a3cc5822f9e9abfd99dd2599e2f2487061214afccb052c7ef8ce71f3d9ae278af912f607b6dac8f536b7eb995ecad7d1d6a3a4368ee5029a480edcda3ce80ef0bbe77a1184142aa156a8384bdb609ef1c3d5d380855d58bbc9a8faaf26f5111069bfc3a159dbac62d3fa6f8c36662f35558f8569089d3221e3a491b688a30b7ae90982bb424f7a60c62dfa9602a262992130130d83ed48235bba468c618a7bdcfed22f091a564b80d9a998fd64453372d9cf57f8c718949e36f0ee04758b6967a419775a4d87b262f6f5ab0a959ad7bf00da021e17383a4c84b17d9f2422c191be14ad68d0a2c463ede78d591b64a016691bcc609c49a75152e7401723176bd145b103fc1713063ee83fd6dd46cfc31825a58147155143f206e2733cc8cb8b032743e8b57cf3dc8efe825c7c1fc256c38c95822cbb2cbde160aa152045d0346b2fa43ce32a3d858c8d8753030d4f58fa202d0e4862f9cd31f21019a93541989bfa69910dd5c0d285b19efa843cc48382c0a64f6047c7a9d69af104b9719eae7be81877593c05ae9da3d64da082c3ab8681d09d2ead516152e173997b618a2d6b3f9d2b63b5ad84de837dafc34584353b1098351e750c0fe3923211e7eb204eb67d8323b7b2461ab4c3e44ffd8a51984aececca1ef907dd9032529d1abfb2646c83ea644b1e48c684045c3dd0b7587bb0e5c0def06831ddf05887adb6c1455b72029affefa8d752678f1b7a32f6bf74c8a3b05a618626020b780329be9b0e17e19027b55b642f986c18e3a8760714f950df9deaa4bb43c7db0ce98b2109528f9e6e048d588a6c8dd13654e27324fa53f9679d0d341a2f4ebc50e3431c8ff325fcc7794f08310df6670f18a9fc9b7db1fabd45655d13013ecb532292d333644f7d95b7ae063b10bddf8d858a63844970851f8d4f063f3fa0f6ab80b0898990b3676efbe12243d8f2b7fa1abe75dc007bf141131db1c00d684e867e2dd6b857959ffad3398ff9216fe2dd01bf474d1b56a34503ed2b54e468fd59549ad8a195cc81546fa70d6d7368a4be2de89fbc214c859c97f7e738666b213e4be99e5b3234798315c9f946b4b2b799f18412fbf5b834415a93c6083d7589577d1ff0bd5f2618e11a0aa8e93889f800240dbe5872cd18bc9246cd939e7c1c1e9582cd99c8a6b7658d06ba477fa6b5c39943a685a968f9ba3b652aa132bee0b9766b068b8fcc99ab6b992548206e36fc27c189eb520c4aa148c0655a74fffd4a835471c72780d93da5fae250ef8f3d4eb09fb1958a27db1218e36933f8f11d8aa2a6cf33b8b49f295c707943c4cb2d7eff84bed9e18bd4947d43441b100ae5c814c3f3b6759b765ad320f371939219ed80036a9a3cda56454a348056a2f809d3e1ba31e6fc973fbbbd5d293102810cd4a6f51d9b4c1c4d52f19d555ecfc64a1758a94a29ea8d8b22c7fbad94bd45ef9fed0e2f23906d4511b9333e06559744eaaad8703349ac35b76411450d22f2396da77aa94156aa1305ac3904afc6c9bb4a9e3ecc71bcde510220dd6416592281795b66392514798b77447d6fec2470ff3c715005ece01c6b93b92b0e01f49a4dfb33a961c5ff576f4905cc204b4a2ce73925e55c9803349d7257a32594f2e117e0f3f95b85c0786077284ab62518cb9b27d9d1a904252896e09f706ed5c1c928726c16cac987b21c3c37918aa991811c11c11b13b2fede524ee486755112781afe71105f71676f58bcbf3033f4af5fe63c7f5336cee9b9700df3516f911482858f5d443e7a5681b7cc0bc39c68d2f92d8c84307eae4fb48b493413e12e5186c064d5cd854aa5dbcf9e4078bcbafd0ccb6eccc3c787b82f68184a492d6075387445a9f2258c89edf239a490662a75204b8e087f1c3f0ed8fe82acb9a678186a88e9333dfbeebd427be9fa0816cb817b61cc63fac16c5a8dfda1413dc4249edc0af0c1834cfaa4155dc6267f334c767df1ca1b2467c1ec18398954adb659d4432c0b47e33ecf661bf02fb82437c4110f00ad62c093242c78dded7de29136cccd8e356a8057536c1ee3d245ca12a093a1829edd73a15a95205d88d65cd9ab17c87e43d34b0766bf49809b0f49e0e9510fc29d53e3d886f241adfeb7a1812384edad96dc31e9c0f6c4cc88f15d856782320c28352d78f72ff5aa133d8507613400782d10430a60392449098d782ff238364ed527c984fae61c35a2bf33ea4f4d17f94c71375e04610e75b34ccba0d0587e0c5500dad82223c8a9af96cec269ac81f4f283251b685c5b2aef200217753e6282e0927d67e57b496442e4a79dd310711b4eda921d52da9f9fb7d57f431abbe3c6b5c931b696a7daccc2d76c8c553eb0ea9945c566bd6b001de5c2585d7d23908eca4a1455fbaeb71d110d1c3a90e792885b139ce6a79eb7f0216aedceb6a7cb0a00866f6c386fd7b29cfd54cb063ae19db6473e38a0b2056a6355f6a824d7fe01a3292fe30a9a5cbbd73e34ded2cb69efb597af6998fe52b8d5486ec799ee2014876885350ee98da56cf95f334631aaa4793e00f7ffaa4c32e1a4c72f99e250113a4924f6083e8c722d8f02c9416a5235c0e6873aec6a3fd9f5d3f22899ae335479a0a70547bdd21c6905bc5cb453de0d6a9a3f552ea3da95b47332369462da0e792302d36a1de7a45e03013068fcffc757ae17c80dc14ae7a4bba0619adfdcdfe812a21ad58143b8e90002dfb952302970a7eebd4083991371523e9602768a3ef219610574956983ca9f69d076e8ab79c108"}, {0x20, 0x114, 0x4c, "485eeb56d40940359c59315f"}, {0xb0, 0x10e, 0x29be, "d81c31a042832cabb9daae0025b8eb8ebe110b4f7d67040a498767ff4a258b8c73fc75f9efe1cb1652762ad49510dc3f35b7daa493667d557e07bfd8a22dcc5fea360b00c6e8b34981ece05a8d2007d4083e7e7346616094e486508bb552bf2781776fec1a512df088a3be0d2c2d173e90965416ac865cca30aa8968fb0c8a5a0dc68a23dfe65f064397123785244deed23a7b936a94db071fbd2d620c"}, {0x48, 0x114, 0x7177, "12af2af7eda7d8a5f0afb2d929511f70a67be4f6f605b5a0d338375e862a4b7f10e1092c49aa4014a742846a7dc21734ca61"}, {0x20, 0x119, 0x400, "3f702b7d5ca16b86beb6f7f8"}, {0xe8, 0xff, 0x1, "532eb0a348cd50586685fc3a6810eb1a8e7545a986dff26dc5f17e406c6b25d6d151166e89720ef6ce545ddc62ad01439c9a903706e0816a2729ef5cd1724d00feaa2386904b5f707ddbed74f7477adf695d3e01113aa7866a91c025800c928a6a29ffe7a24b456304bd146a5b25120e9665b65542b88341e387370d570c7ee5ed87fe5eed05cc9ae332b6e0985288b1f6536df9d1548a8ad945438e11e1d1562f929a691576bba6165043b336a19801947f349f745ebbd40cbb765c1e7def03ecc099003f9fe20652c9f924b8644e005ffcc112"}, {0xf8, 0x10d, 0x5f2, "bddc76a90a1c92e4a0c4ea9fe848741e5ca5fc1fdc0ea0c23a23087eedc8434627262051d7d50e0faadb9849a82799be5331905c9bfe7ac80d74ba7aecaaff8be1b4dbacfd693060df5383b501d5a8a070bbe7e5711e88b7d79a5fef9fd6a35ab6be78f41329e0567dfef99d070ea6325ed934f323fd1c3b01ae5785451417b8858edf439467533f4540c04a39f820497b354e640a4f50ac8b2413b481b19f8193dbaf4524839a9459b20ba268e8be1ba561a3f254832219ebf28e83c51ee89c2d5f6dc0ba08d40bc6259d1b32e9a65f6e100eb076d74f8a9ca1ce688860bf820b"}], 0x1390}}, {{&(0x7f0000005c00)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000005c80)="acc6fbac37fd526120c5eea90e2687e4f13a861c886033a126d202aa711b3870e13de524b2a1ce27f72e4e38a6f48f9865be27e38fe46d36b8a8e4b6eb1ecc17cf04b0fe5f2f1b81142d9f1d9e74f304c894fa84a4138d859b8418f3a9cbf65b1e3067e7f378141ee484c12e4c6d269af6bedcaa94f747c6dd4b404229196db571223ac119d5f125dc7edb62d4e3022201447b63a1383c1768715fa38dfd2f15be35022d45bd86ac2b7010c97260eabe", 0xb0}, {&(0x7f0000005d40)}], 0x2}}, {{&(0x7f0000005dc0)=@pppoe={0x18, 0x0, {0x1, @remote, 'ipvlan0\x00'}}, 0x80, &(0x7f0000006480)=[{&(0x7f0000005e40)="84b6847eef69e7683e2bf2ef52c500fe065fe9d6fda58745db2f70a868407265cbeca6aaadbc54cf5e55b359f5dadb0c9f06fcf47b96f725386031d93e076e3495bdd190073182b492e102b57961dfdfedddeab3a877e5fd7b1f58397cc55f61cbef4483f729313c0c844de69de3fb74f65404c9902fe2b8db9404f62193349e05408bb3a7abd077841e0cb6b20b02c75853d4e5632dff1a5f86482aded9c3a50eb43c395723fab086429f653bc34b87b763b3062df9df8af16a4676045e9fe4b700c5", 0xc3}, {&(0x7f0000005f40)="86695039bf8d46304a6cf46e3bcd03179ab505735ebdffbe447116f2b7031270eb8441d9db122866630c98413bae0119b1392d47d030dffbb8f43f69572697591f04f78abef5baa7e529c27d538b8d959b4541731f15ec6e0002ac5de42fea155d0dd4ba720510bb7fb8a58c37dfa3ce06d005adbabea845876731b3ba7da61a188a01e8a5565cd89cc7e6a1603979", 0x8f}, {&(0x7f0000006000)="1536d356389b7acad17c61b0d29013125ce9e0124150d02687690a766c9e889f4d1a34c4beec6e", 0x27}, {&(0x7f0000006040)="bd8c2a50b2eea8fc4fca82cdf1e41889c9d748d43f548c35cbd2b25f42ff1aba7399d30c3b25a1447883b1fb6223d8afda0f3b019415e9f624dd4b5f75ed56df5ae154669fd41a8acf059ee7ee8352eeb86d985c7aa4366709c33d459079877683686c21b50ea9093cf3b7846258ff9b8d3b1c061ab77b9df70c7a0f59db20b626bf6f2f651e60c73d8f0d8a8fb03c0646a367da823871adfce1307cc0ba1be75ad267ef6a7e47637464915010393ec4c5558e8ea25b3ce978a8083d013d3e52b8a7ef6c41", 0xc5}, {&(0x7f0000006140)="6f2dbec5ea91cfb8747042f3542b55e4786ce5089c207d6a1f4fa2602d8b530825251b399a802abb535e5559d6ef41cc924852b4b69c122d14b833c06ee7f501732a9f9af90e9e12ba38232176eb4fdad58dd2f00186a2e919d009cb88d2358eea4433913e30dd056d1c10b909b745fa7df448115d2d121d32d2396d3ea19a37ddc1c047d46c415aa8eb11371e7a681e81f098d285f3c3dda25f1969d3ffc3431ebcce400de8cd5c5be6966b3c1595f1341bcd7a2a700d3bd5e55e16b7a0f91a0233cf", 0xc3}, {&(0x7f0000006240)="3ed4bc53b94fba5788a63e41eeac6f47b0", 0x11}, {&(0x7f0000006280)="32ee44d272303a43127be8b52856b45de901a56ff2a6217422d6c1262cf6c7d8c67913e43418fba10f6b49997e7900b9c0a0a66ead8bf44e2877ba2afb27de0bca61f84cb614d93214ca315e9dd1f5ade53da66ffe731e12941c3b46de0fea3e73b367aaa9b4d1a204d26c5b29490db7873a907394afbf1b7026012ac1599060533cac78d3f43032666eb8e7270223929655f29e0909e522e0ae5c10ad3eb53fad24cb65a1250cbf451837e4971d949e70c10d8bbbcffc9bae2fdfea31ffe6d33bc325c677b7e903be89b79e7c8cb5ea3359bd5f348e15d01b114027a241f52ff2d191dd5a0d74e6172f9e03", 0xec}, {&(0x7f0000006380)="11e6f32ca0961df74e9245b3edf099b611b95823d4e157abdd29dc30c135686f5249ad927a3a7cf47788a2f4702babbe217f9f104e792f99d9f9852fc0c2b931e4dee0308e812c2475b068", 0x4b}, {&(0x7f0000006400)="a43970e826bf0636eb1a01d9b727f73042ca45e54c9969f9b2f509aed5844c46f7a35c9d50bceed273d7af62a4567a0aa46578cc150ea493225dd9df050fabaee1f0fd23c8a04b3703dc7de15ab8d1e2", 0x50}], 0x9, &(0x7f0000006540)=[{0x48, 0x112, 0x1ff, "524751c5f3c4e146a72e2f005c7a2f86cb009c0b9983130d31336d5f73fbb54912abd6c85fdea9028d2ff99b36a73d7efdeb380af4"}, {0x20, 0x112, 0x2, "5988965dbeb5bc2cf2ed1fd349625a42"}, {0x18, 0x10c, 0x401, "bcf7"}, {0xe8, 0x112, 0x300000, "74dfb89567b1f5479984c749d8d38cf3624844b0afcff39fd7c889bb1cac56be5838c3b7958bc2cc8791548dbbb4a540ae4a675424f63cfc989e90fa95812aa8845ff33b487a843e0cf8f2bfa27d47ad742d08ae48fed8f8ea2ffd33291f0c9a33f50885978aada2fa558d5e42bfae94f4e8fa8624cb8271d27c2bf2dffa43bc8fc36c45299e8d24af9ab19ec9374ed72b5205f59c84b3f9c14094334cf41d15357e76df6c622c0747f437039933e0b9c541c31d98c10d95b53e10be012ebcc103d67131e057de921f625e02ef513db24c4a69c137d2fed7"}, {0x90, 0x1, 0x1, "ac2aaba8375bab28f314a85b35fbd242b3f8be6aef5ce3500a2ab4612afbe49747d52e59f4ceb5f12b458cb05095d40f8de77452e2f42e6cbf8b6f9f4b44dc6507ce674d4c8054c2fce3787be1e4d42953d5f8bd2e03c2b784261e990fb2b5946196f228162447a9858426361848a0d2f239ee356b1ef41eb14be3775e9f"}, {0xc0, 0x117, 0x3f, "c6a45a888eab7eab7907b658611cd52c6e9139dd2ecde280b5e48e3ca2b65a0c236d7c6fe10474d58b94ef325e1f83d75dd06d39f12d2bbc1c93b5f5c40626e1cdb5edcf0b3f2d4b64b9a824aba49287bf8706539175a3687313ccb1fb2e0b25cca5c1df1eddb676408b05bf831c8627a23b89418eca2cc47a09b534a2609f34ada286cecbe6b9afb9e1fa7fad711bb7f6ee02642ad39e2e274535f0f9eeea8e3dc1935e68440b428b786b"}, {0xa0, 0x103, 0x5, "6f453525f24fce2c3861723ae44097899759c7dec1d5e2de1378b80f6a6900b71e8bad1715eb3f60c89f80b0f571e7b4728cd6f4a34969decb28a918ed0e8c27586759eae47d04a2bc678a1f6f6ac1e89d0205b4d2a80c09f2f794581c62b2c0526314363cd43eeab6aa91e114d2e82895210676f2e126db33b1f08d4d1600ced540bc4f10d3fb2a50df2555a57e"}], 0x358}}], 0xa, 0x24044075) lseek(r5, 0x5, 0x0) 09:39:29 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x80000008000414f) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:29 executing program 5 (fault-call:8 fault-nth:14): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 345.968466][T27583] FAULT_INJECTION: forcing a failure. [ 345.968466][T27583] name failslab, interval 1, probability 0, space 0, times 0 [ 345.981132][T27583] CPU: 1 PID: 27583 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 345.989816][T27583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.000814][T27583] Call Trace: [ 346.004095][T27583] dump_stack+0x137/0x19d [ 346.008451][T27583] should_fail+0x23c/0x250 [ 346.012872][T27583] __should_failslab+0x81/0x90 09:39:29 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x84, 0x0, 0x0, 0x0, 0x0) [ 346.017717][T27583] ? io_req_defer+0x198/0x4a0 [ 346.022494][T27583] should_failslab+0x5/0x20 [ 346.027068][T27583] kmem_cache_alloc_trace+0x49/0x310 [ 346.032372][T27583] ? io_prep_async_link+0x335/0x350 [ 346.037585][T27583] io_req_defer+0x198/0x4a0 [ 346.042150][T27583] io_submit_sqe+0x157d/0x33d0 [ 346.046921][T27583] ? kmem_cache_alloc_bulk+0x28c/0x340 09:39:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 346.052417][T27583] io_submit_sqes+0x5bd/0xbd0 [ 346.052443][T27583] __se_sys_io_uring_enter+0x1e1/0xa80 09:39:29 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x85, 0x0, 0x0, 0x0, 0x0) 09:39:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 346.052485][T27583] __x64_sys_io_uring_enter+0x74/0x80 [ 346.052554][T27583] do_syscall_64+0x4a/0x90 09:39:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = syz_io_uring_setup(0x3da, &(0x7f0000000080)={0x0, 0xaf47, 0x0, 0x0, 0x288, 0x0, r0}, &(0x7f00001e9000/0x3000)=nil, &(0x7f00001d0000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000200)) preadv(r5, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/66, 0x42}, {&(0x7f0000000340)=""/93, 0x5d}], 0x2, 0x2, 0x3ff) [ 346.052574][T27583] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 346.052626][T27583] RIP: 0033:0x4665f9 09:39:29 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x86, 0x0, 0x0, 0x0, 0x0) [ 346.052640][T27583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:39:29 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:29 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x87, 0x0, 0x0, 0x0, 0x0) 09:39:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) [ 346.052655][T27583] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 346.052676][T27583] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 346.052820][T27583] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 346.052833][T27583] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 346.052843][T27583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.052854][T27583] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:30 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:30 executing program 5 (fault-call:8 fault-nth:15): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:30 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x88, 0x0, 0x0, 0x0, 0x0) 09:39:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 346.679032][T27660] FAULT_INJECTION: forcing a failure. [ 346.679032][T27660] name failslab, interval 1, probability 0, space 0, times 0 [ 346.691690][T27660] CPU: 1 PID: 27660 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 346.700136][T27660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.710979][T27660] Call Trace: [ 346.714260][T27660] dump_stack+0x137/0x19d [ 346.718702][T27660] should_fail+0x23c/0x250 [ 346.723142][T27660] ? io_req_prep_async+0xdc/0x410 09:39:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 346.728169][T27660] __should_failslab+0x81/0x90 [ 346.732948][T27660] should_failslab+0x5/0x20 [ 346.737477][T27660] __kmalloc+0x66/0x340 [ 346.741646][T27660] io_req_prep_async+0xdc/0x410 [ 346.746556][T27660] io_req_defer+0x155/0x4a0 [ 346.751059][T27660] io_submit_sqe+0x157d/0x33d0 [ 346.755833][T27660] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 346.761388][T27660] io_submit_sqes+0x5bd/0xbd0 [ 346.766072][T27660] __se_sys_io_uring_enter+0x1e1/0xa80 [ 346.771689][T27660] __x64_sys_io_uring_enter+0x74/0x80 09:39:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 346.777076][T27660] do_syscall_64+0x4a/0x90 [ 346.781641][T27660] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 346.787655][T27660] RIP: 0033:0x4665f9 [ 346.791553][T27660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 346.811372][T27660] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 346.819792][T27660] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 09:39:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 346.827795][T27660] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 346.835796][T27660] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 346.843781][T27660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.851756][T27660] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:30 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r8, r6, r0, r5], 0x9) 09:39:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1c}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:30 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x89, 0x0, 0x0, 0x0, 0x0) 09:39:30 executing program 5 (fault-call:8 fault-nth:16): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) 09:39:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 347.022100][T27692] FAULT_INJECTION: forcing a failure. [ 347.022100][T27692] name failslab, interval 1, probability 0, space 0, times 0 09:39:30 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x8a, 0x0, 0x0, 0x0, 0x0) 09:39:30 executing program 5 (fault-call:8 fault-nth:17): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 347.022124][T27692] CPU: 1 PID: 27692 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 347.022209][T27692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 09:39:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 347.022220][T27692] Call Trace: [ 347.022227][T27692] dump_stack+0x137/0x19d [ 347.022252][T27692] should_fail+0x23c/0x250 [ 347.022270][T27692] __should_failslab+0x81/0x90 [ 347.022292][T27692] ? io_req_defer+0x198/0x4a0 [ 347.022309][T27692] should_failslab+0x5/0x20 [ 347.022398][T27692] kmem_cache_alloc_trace+0x49/0x310 [ 347.022420][T27692] ? io_prep_async_link+0x335/0x350 [ 347.022456][T27692] io_req_defer+0x198/0x4a0 [ 347.022473][T27692] io_submit_sqe+0x157d/0x33d0 [ 347.022490][T27692] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 347.022511][T27692] io_submit_sqes+0x5bd/0xbd0 [ 347.022527][T27692] __se_sys_io_uring_enter+0x1e1/0xa80 [ 347.022627][T27692] __x64_sys_io_uring_enter+0x74/0x80 [ 347.022654][T27692] do_syscall_64+0x4a/0x90 [ 347.022675][T27692] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 347.022699][T27692] RIP: 0033:0x4665f9 [ 347.022736][T27692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 347.022750][T27692] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 347.022776][T27692] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 347.022789][T27692] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 347.022801][T27692] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 347.022814][T27692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.022826][T27692] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 [ 347.176919][T27718] FAULT_INJECTION: forcing a failure. [ 347.176919][T27718] name failslab, interval 1, probability 0, space 0, times 0 [ 347.176951][T27718] CPU: 1 PID: 27718 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 347.176970][T27718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.176979][T27718] Call Trace: [ 347.176986][T27718] dump_stack+0x137/0x19d [ 347.177122][T27718] should_fail+0x23c/0x250 [ 347.177143][T27718] __should_failslab+0x81/0x90 [ 347.177166][T27718] ? io_req_defer+0x198/0x4a0 [ 347.177182][T27718] should_failslab+0x5/0x20 [ 347.177205][T27718] kmem_cache_alloc_trace+0x49/0x310 [ 347.177285][T27718] ? io_prep_async_link+0x335/0x350 [ 347.177308][T27718] io_req_defer+0x198/0x4a0 [ 347.177325][T27718] io_submit_sqe+0x157d/0x33d0 [ 347.177344][T27718] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 347.177367][T27718] io_submit_sqes+0x5bd/0xbd0 [ 347.177387][T27718] __se_sys_io_uring_enter+0x1e1/0xa80 [ 347.177424][T27718] __x64_sys_io_uring_enter+0x74/0x80 [ 347.177452][T27718] do_syscall_64+0x4a/0x90 [ 347.177475][T27718] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 347.177508][T27718] RIP: 0033:0x4665f9 [ 347.177521][T27718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 347.177538][T27718] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 347.177558][T27718] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 347.177571][T27718] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 347.177584][T27718] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 347.177597][T27718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.177607][T27718] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:31 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) write$P9_RCLUNK(r1, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7) 09:39:31 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x8b, 0x0, 0x0, 0x0, 0x0) 09:39:31 executing program 5 (fault-call:8 fault-nth:18): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = accept4$inet6(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0) r6 = socket(0x10, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) preadv(0xffffffffffffffff, &(0x7f0000001a00)=[{&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/244, 0xf4}, {&(0x7f0000001540)=""/90, 0x5a}, {&(0x7f00000015c0)=""/124, 0x7c}, {&(0x7f0000001640)=""/234, 0xea}, {&(0x7f0000001740)=""/190, 0xbe}, {&(0x7f0000001800)=""/83, 0x53}, {&(0x7f0000001880)=""/171, 0xab}, {&(0x7f0000001940)=""/177, 0xb1}], 0xa, 0x4, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r8) keyctl$chown(0x4, r9, r7, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local, @in6=@local, 0x4e24, 0x5, 0x4e23, 0x4, 0x2, 0x20, 0x80, 0x64, 0x0, r7}, {0x10001, 0x101, 0x33f, 0x8d41, 0x9a04, 0x5, 0x0, 0x100000001}, {0x0, 0x1, 0x8, 0x20}, 0x3, 0x6e6bbf, 0x1, 0x0, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x2b}, 0x2, @in=@private=0xa010100, 0x3501, 0x2, 0x2, 0x81, 0x5, 0x0, 0x200}}, 0xe8) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(0xffffffffffffffff, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 347.787623][T27747] FAULT_INJECTION: forcing a failure. [ 347.787623][T27747] name failslab, interval 1, probability 0, space 0, times 0 [ 347.800289][T27747] CPU: 0 PID: 27747 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 347.808771][T27747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.818841][T27747] Call Trace: [ 347.822135][T27747] dump_stack+0x137/0x19d [ 347.826522][T27747] should_fail+0x23c/0x250 [ 347.831047][T27747] __should_failslab+0x81/0x90 09:39:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 347.835996][T27747] ? io_req_defer+0x198/0x4a0 [ 347.840683][T27747] should_failslab+0x5/0x20 [ 347.845342][T27747] kmem_cache_alloc_trace+0x49/0x310 [ 347.850736][T27747] ? io_prep_async_link+0x335/0x350 [ 347.856073][T27747] io_req_defer+0x198/0x4a0 [ 347.860691][T27747] io_submit_sqe+0x157d/0x33d0 [ 347.865511][T27747] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 347.870994][T27747] io_submit_sqes+0x5bd/0xbd0 09:39:31 executing program 5 (fault-call:8 fault-nth:19): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x32eb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000180)) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x30, r3, 0x6c3d4000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x80202, 0xa0) openat(r6, &(0x7f00000000c0)='./file0/file0/file0\x00', 0x100, 0xba) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:31 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x8c, 0x0, 0x0, 0x0, 0x0) [ 347.871022][T27747] __se_sys_io_uring_enter+0x1e1/0xa80 [ 347.871049][T27747] __x64_sys_io_uring_enter+0x74/0x80 [ 347.871100][T27747] do_syscall_64+0x4a/0x90 [ 347.871173][T27747] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 347.871198][T27747] RIP: 0033:0x4665f9 [ 347.871212][T27747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 347.871228][T27747] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 347.871247][T27747] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 347.871260][T27747] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 347.871326][T27747] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 347.871339][T27747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.871351][T27747] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 [ 348.003160][T27769] FAULT_INJECTION: forcing a failure. [ 348.003160][T27769] name failslab, interval 1, probability 0, space 0, times 0 [ 348.003184][T27769] CPU: 1 PID: 27769 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 348.003204][T27769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.003215][T27769] Call Trace: [ 348.003222][T27769] dump_stack+0x137/0x19d [ 348.003246][T27769] should_fail+0x23c/0x250 [ 348.003327][T27769] ? io_req_prep_async+0xdc/0x410 [ 348.003344][T27769] __should_failslab+0x81/0x90 [ 348.003431][T27769] should_failslab+0x5/0x20 [ 348.003454][T27769] __kmalloc+0x66/0x340 [ 348.003510][T27769] io_req_prep_async+0xdc/0x410 [ 348.003526][T27769] io_req_defer+0x155/0x4a0 [ 348.003545][T27769] io_submit_sqe+0x157d/0x33d0 [ 348.003565][T27769] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 348.003588][T27769] io_submit_sqes+0x5bd/0xbd0 [ 348.003607][T27769] __se_sys_io_uring_enter+0x1e1/0xa80 [ 348.003663][T27769] __x64_sys_io_uring_enter+0x74/0x80 [ 348.003688][T27769] do_syscall_64+0x4a/0x90 [ 348.003711][T27769] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 348.003789][T27769] RIP: 0033:0x4665f9 [ 348.003804][T27769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 348.003822][T27769] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 348.003842][T27769] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 348.003855][T27769] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 348.003867][T27769] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 348.003940][T27769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.003952][T27769] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:31 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x800) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) dup(r3) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r4, r5], 0x7) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x1da4, &(0x7f0000000300)={0x0, 0x620a, 0x4, 0x0, 0x2ac, 0x0, r6}, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) 09:39:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x5, 0x2, 0x8, 0x9, 0x0, 0x1, 0x4000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x4}, 0x2090, 0x2, 0x0, 0x0, 0x382, 0x8, 0xfe00, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:31 executing program 5 (fault-call:8 fault-nth:20): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:31 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x8d, 0x0, 0x0, 0x0, 0x0) [ 348.477402][T27795] FAULT_INJECTION: forcing a failure. [ 348.477402][T27795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.490911][T27795] CPU: 1 PID: 27795 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 348.499346][T27795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.509590][T27795] Call Trace: [ 348.512908][T27795] dump_stack+0x137/0x19d [ 348.517280][T27795] should_fail+0x23c/0x250 [ 348.521740][T27795] __alloc_pages+0xe7/0x310 [ 348.526774][T27795] kmem_getpages+0x1a/0xd0 [ 348.531659][T27795] cache_grow_begin+0x4c/0x1a0 [ 348.536519][T27795] cache_alloc_refill+0x326/0x3d0 [ 348.541552][T27795] ? should_fail+0xd6/0x250 [ 348.546366][T27795] ? io_req_prep_async+0xdc/0x410 [ 348.551412][T27795] __kmalloc+0x2ba/0x340 [ 348.555774][T27795] ? io_req_prep_async+0xdc/0x410 [ 348.560932][T27795] io_req_prep_async+0xdc/0x410 [ 348.566019][T27795] io_req_defer+0x155/0x4a0 [ 348.570529][T27795] io_submit_sqe+0x157d/0x33d0 [ 348.575921][T27795] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 348.581460][T27795] io_submit_sqes+0x5bd/0xbd0 [ 348.586216][T27795] __se_sys_io_uring_enter+0x1e1/0xa80 [ 348.591718][T27795] __x64_sys_io_uring_enter+0x74/0x80 [ 348.597186][T27795] do_syscall_64+0x4a/0x90 [ 348.602597][T27795] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 348.609168][T27795] RIP: 0033:0x4665f9 [ 348.613082][T27795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 348.632988][T27795] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 348.641488][T27795] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 348.649461][T27795] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 348.657470][T27795] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 348.665441][T27795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:39:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 348.673470][T27795] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:32 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x8e, 0x0, 0x0, 0x0, 0x0) 09:39:32 executing program 5 (fault-call:8 fault-nth:21): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) ftruncate(r5, 0x5) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:32 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, r1], 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 348.830150][T27825] FAULT_INJECTION: forcing a failure. [ 348.830150][T27825] name failslab, interval 1, probability 0, space 0, times 0 [ 348.842908][T27825] CPU: 1 PID: 27825 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 348.851337][T27825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.861396][T27825] Call Trace: [ 348.864682][T27825] dump_stack+0x137/0x19d [ 348.869020][T27825] should_fail+0x23c/0x250 [ 348.873517][T27825] __should_failslab+0x81/0x90 [ 348.878351][T27825] ? io_req_defer+0x198/0x4a0 [ 348.883210][T27825] should_failslab+0x5/0x20 [ 348.887777][T27825] kmem_cache_alloc_trace+0x49/0x310 [ 348.893090][T27825] ? io_prep_async_link+0x335/0x350 [ 348.898331][T27825] io_req_defer+0x198/0x4a0 [ 348.902972][T27825] io_submit_sqe+0x157d/0x33d0 09:39:32 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x8f, 0x0, 0x0, 0x0, 0x0) [ 348.903028][T27825] ? kmem_cache_alloc_bulk+0x28c/0x340 09:39:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000000c0)=""/25, 0x19}], 0x2, 0x0, 0x4f) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x9, 0x7f, 0x7f, 0x100000001, 0x2, 0x3e, 0x0, 0x2a1, 0x40, 0x23b, 0x9, 0x7f, 0x38, 0x2, 0x2, 0x1, 0x800}, [{0x0, 0x1ff, 0x5, 0x7d61, 0x4, 0x100, 0xc3, 0x8}, {0x70000000, 0x5, 0x8, 0x1, 0x10000, 0x1, 0x5}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1ab0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1ff) [ 348.903057][T27825] io_submit_sqes+0x5bd/0xbd0 09:39:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 09:39:32 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x90, 0x0, 0x0, 0x0, 0x0) [ 348.903076][T27825] __se_sys_io_uring_enter+0x1e1/0xa80 [ 348.903101][T27825] __x64_sys_io_uring_enter+0x74/0x80 09:39:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 348.903126][T27825] do_syscall_64+0x4a/0x90 [ 348.903147][T27825] entry_SYSCALL_64_after_hwframe+0x44/0xae 09:39:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0xf7, 0x0, 0x1, 0xba, 0x0, 0x0, 0x40000, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffaf, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x2, 0x7fc000, 0x4, 0x5, 0x7f, 0x1, 0x40, 0x0, 0x5, 0x0, 0x8}, r4, 0xe, r3, 0x2) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000340)={{r5}, 0x0, &(0x7f00000000c0), 0x1000, 0x1, [0x6, 0x8, 0xfffffffffffffbff, 0x4]}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x503382, 0x0) inotify_add_watch(r6, &(0x7f0000000180)='./file0/file0\x00', 0x20000208) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) [ 348.903229][T27825] RIP: 0033:0x4665f9 09:39:32 executing program 5 (fault-call:8 fault-nth:22): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:32 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x91, 0x0, 0x0, 0x0, 0x0) 09:39:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 348.903243][T27825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 348.903259][T27825] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 348.903345][T27825] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 348.903358][T27825] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 348.903372][T27825] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 348.903385][T27825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.903397][T27825] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 [ 349.248146][T27873] FAULT_INJECTION: forcing a failure. [ 349.248146][T27873] name failslab, interval 1, probability 0, space 0, times 0 [ 349.248293][T27873] CPU: 1 PID: 27873 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 349.248312][T27873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.248321][T27873] Call Trace: [ 349.248328][T27873] dump_stack+0x137/0x19d [ 349.248351][T27873] should_fail+0x23c/0x250 [ 349.248369][T27873] __should_failslab+0x81/0x90 [ 349.248471][T27873] ? io_req_defer+0x198/0x4a0 [ 349.248490][T27873] should_failslab+0x5/0x20 [ 349.248514][T27873] kmem_cache_alloc_trace+0x49/0x310 [ 349.248534][T27873] ? io_prep_async_link+0x335/0x350 [ 349.248595][T27873] io_req_defer+0x198/0x4a0 [ 349.248611][T27873] io_submit_sqe+0x157d/0x33d0 [ 349.248627][T27873] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 349.248647][T27873] io_submit_sqes+0x5bd/0xbd0 [ 349.248708][T27873] __se_sys_io_uring_enter+0x1e1/0xa80 [ 349.248732][T27873] __x64_sys_io_uring_enter+0x74/0x80 [ 349.248755][T27873] do_syscall_64+0x4a/0x90 [ 349.248776][T27873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 349.248866][T27873] RIP: 0033:0x4665f9 [ 349.248881][T27873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 349.248899][T27873] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 349.248918][T27873] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 349.248930][T27873] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 349.248941][T27873] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 349.248992][T27873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.249010][T27873] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 09:39:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:33 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 09:39:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) accept$unix(r3, &(0x7f0000000080), &(0x7f0000000180)=0x6e) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:33 executing program 5 (fault-call:8 fault-nth:23): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:33 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x40028, 0x0, 0x0, 0x0, 0x341b07a}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000300)={0x1ff, 0x863f, 0x1, 'queue1\x00', 0x1}) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r6, 0x5e81, 0xae74, 0x3, &(0x7f0000000180)={[0x400]}, 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000001c0), 0x10000167}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r7], 0x7) [ 349.677427][T27897] FAULT_INJECTION: forcing a failure. [ 349.677427][T27897] name failslab, interval 1, probability 0, space 0, times 0 [ 349.690176][T27897] CPU: 1 PID: 27897 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 349.698600][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.708692][T27897] Call Trace: [ 349.708771][T27897] dump_stack+0x137/0x19d [ 349.708797][T27897] should_fail+0x23c/0x250 [ 349.708839][T27897] __should_failslab+0x81/0x90 [ 349.708860][T27897] ? io_req_defer+0x198/0x4a0 [ 349.708878][T27897] should_failslab+0x5/0x20 [ 349.708966][T27897] kmem_cache_alloc_trace+0x49/0x310 [ 349.709008][T27897] ? io_prep_async_link+0x335/0x350 [ 349.709035][T27897] io_req_defer+0x198/0x4a0 [ 349.709053][T27897] io_submit_sqe+0x157d/0x33d0 [ 349.709070][T27897] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 349.709166][T27897] io_submit_sqes+0x5bd/0xbd0 [ 349.709185][T27897] __se_sys_io_uring_enter+0x1e1/0xa80 [ 349.709211][T27897] __x64_sys_io_uring_enter+0x74/0x80 09:39:33 executing program 3 (fault-call:7 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 349.709236][T27897] do_syscall_64+0x4a/0x90 [ 349.781185][T27897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 349.781218][T27897] RIP: 0033:0x4665f9 [ 349.781232][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 349.781247][T27897] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 349.819181][T27897] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 09:39:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:33 executing program 5 (fault-call:8 fault-nth:24): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 349.819201][T27897] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 09:39:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = pidfd_open(0xffffffffffffffff, 0x0) mmap(&(0x7f0000377000/0x4000)=nil, 0x4000, 0x3000004, 0x1010, r5, 0x2348c000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2007, @fd=r4, 0xffffffff, 0x0, 0x0, 0x11}, 0x9) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='o-\'\x00', 0x0, 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x1010, r7, 0xc9f5e000) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount_setattr(r6, &(0x7f0000000080)='./file0/file0\x00', 0x800, &(0x7f00000000c0)={0x8, 0x70, 0x80000, {r3}}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 09:39:33 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x93, 0x0, 0x0, 0x0, 0x0) [ 349.819213][T27897] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 09:39:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:33 executing program 3 (fault-call:7 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 349.819225][T27897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.819237][T27897] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:33 executing program 5 (fault-call:8 fault-nth:25): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 349.883039][T27914] FAULT_INJECTION: forcing a failure. [ 349.883039][T27914] name failslab, interval 1, probability 0, space 0, times 0 [ 349.883063][T27914] CPU: 0 PID: 27914 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 349.883082][T27914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.883092][T27914] Call Trace: [ 349.883099][T27914] dump_stack+0x137/0x19d [ 349.883124][T27914] should_fail+0x23c/0x250 [ 349.883142][T27914] __should_failslab+0x81/0x90 09:39:33 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x94, 0x0, 0x0, 0x0, 0x0) [ 349.883212][T27914] should_failslab+0x5/0x20 [ 349.883236][T27914] kmem_cache_alloc_bulk+0x40/0x340 [ 349.883258][T27914] io_submit_sqes+0x4a3/0xbd0 [ 349.883276][T27914] __se_sys_io_uring_enter+0x1e1/0xa80 [ 349.883300][T27914] __x64_sys_io_uring_enter+0x74/0x80 [ 349.883359][T27914] do_syscall_64+0x4a/0x90 [ 349.883389][T27914] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 349.883410][T27914] RIP: 0033:0x4665f9 09:39:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = dup(r0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r8) keyctl$chown(0x4, r9, r7, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), 0x210080, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c76657273696f6e3d3970323030302c616669643d3078666666666666666666666666666666642c636f6e866578743d756e636f6e66696e65645f752c7569643c", @ANYRESDEC=r7, @ANYBLOB="2c008baad4c6775672f0"]) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x1010, r5, 0xadba5000) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) signalfd(r5, &(0x7f0000000080)={[0x2]}, 0x8) io_uring_enter(r3, 0x5a5f, 0x0, 0x2, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) [ 349.883422][T27914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 349.883438][T27914] RSP: 002b:00007f7508750188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 349.883457][T27914] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 349.883469][T27914] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000004 [ 349.883481][T27914] RBP: 00007f75087501d0 R08: 0000000000000000 R09: 0000000000000000 [ 349.883491][T27914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:39:33 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x95, 0x0, 0x0, 0x0, 0x0) [ 349.883502][T27914] R13: 00007ffd7557af3f R14: 00007f7508750300 R15: 0000000000022000 [ 349.976369][T27924] FAULT_INJECTION: forcing a failure. [ 349.976369][T27924] name failslab, interval 1, probability 0, space 0, times 0 [ 349.976392][T27924] CPU: 0 PID: 27924 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 349.976411][T27924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.976422][T27924] Call Trace: [ 349.976430][T27924] dump_stack+0x137/0x19d [ 349.976454][T27924] should_fail+0x23c/0x250 [ 349.976472][T27924] ? io_req_prep_async+0xdc/0x410 [ 349.976506][T27924] __should_failslab+0x81/0x90 [ 349.976577][T27924] should_failslab+0x5/0x20 [ 349.976600][T27924] __kmalloc+0x66/0x340 [ 349.976633][T27924] io_req_prep_async+0xdc/0x410 [ 349.976653][T27924] io_req_defer+0x155/0x4a0 [ 349.976671][T27924] io_submit_sqe+0x157d/0x33d0 [ 349.976723][T27924] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 349.976744][T27924] io_submit_sqes+0x5bd/0xbd0 [ 349.976821][T27924] __se_sys_io_uring_enter+0x1e1/0xa80 [ 349.976877][T27924] __x64_sys_io_uring_enter+0x74/0x80 [ 349.976899][T27924] do_syscall_64+0x4a/0x90 [ 349.976920][T27924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 349.976941][T27924] RIP: 0033:0x4665f9 [ 349.976953][T27924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 349.976989][T27924] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 349.977008][T27924] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 349.977022][T27924] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 349.977034][T27924] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 349.977047][T27924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.977060][T27924] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 [ 350.067866][T27936] FAULT_INJECTION: forcing a failure. [ 350.067866][T27936] name failslab, interval 1, probability 0, space 0, times 0 [ 350.239058][T27947] FAULT_INJECTION: forcing a failure. [ 350.239058][T27947] name failslab, interval 1, probability 0, space 0, times 0 [ 350.248622][T27936] CPU: 0 PID: 27936 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 350.248647][T27936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.248656][T27936] Call Trace: [ 350.248664][T27936] dump_stack+0x137/0x19d [ 350.448633][T27936] should_fail+0x23c/0x250 [ 350.448662][T27936] ? io_issue_sqe+0x400e/0x6620 [ 350.448680][T27936] __should_failslab+0x81/0x90 [ 350.448703][T27936] should_failslab+0x5/0x20 [ 350.448783][T27936] __kmalloc+0x66/0x340 [ 350.448803][T27936] io_issue_sqe+0x400e/0x6620 [ 350.448821][T27936] ? avc_has_perm+0x59/0x150 [ 350.448987][T27936] ? __list_del_entry_valid+0x54/0xc0 [ 350.449009][T27936] ? rmqueue+0x43/0xd00 [ 350.449027][T27936] ? mntput_no_expire+0x64/0x730 [ 350.449050][T27936] ? mntput+0x45/0x70 [ 350.449071][T27936] ? get_page_from_freelist+0x53e/0x800 [ 350.449089][T27936] ? fget_many+0x178/0x1a0 [ 350.449135][T27936] ? io_prep_rw+0x6b5/0x700 [ 350.449153][T27936] __io_queue_sqe+0xe9/0x360 [ 350.449170][T27936] io_submit_sqe+0x18b7/0x33d0 [ 350.449235][T27936] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 350.449257][T27936] io_submit_sqes+0x5bd/0xbd0 [ 350.449276][T27936] __se_sys_io_uring_enter+0x1e1/0xa80 [ 350.449301][T27936] __x64_sys_io_uring_enter+0x74/0x80 [ 350.449378][T27936] do_syscall_64+0x4a/0x90 [ 350.449401][T27936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 350.449425][T27936] RIP: 0033:0x4665f9 [ 350.449441][T27936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 350.449457][T27936] RSP: 002b:00007f7508750188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 350.449489][T27936] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 350.449501][T27936] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000004 [ 350.449514][T27936] RBP: 00007f75087501d0 R08: 0000000000000000 R09: 0000000000000000 [ 350.449526][T27936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.449539][T27936] R13: 00007ffd7557af3f R14: 00007f7508750300 R15: 0000000000022000 [ 350.449561][T27947] CPU: 1 PID: 27947 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 350.449582][T27947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.449591][T27947] Call Trace: [ 350.449595][T27947] dump_stack+0x137/0x19d [ 350.449615][T27947] should_fail+0x23c/0x250 [ 350.449707][T27947] ? io_req_prep_async+0xdc/0x410 [ 350.449725][T27947] __should_failslab+0x81/0x90 [ 350.449747][T27947] should_failslab+0x5/0x20 [ 350.449770][T27947] __kmalloc+0x66/0x340 [ 350.449790][T27947] io_req_prep_async+0xdc/0x410 [ 350.449887][T27947] io_req_defer+0x155/0x4a0 [ 350.449905][T27947] io_submit_sqe+0x157d/0x33d0 [ 350.449920][T27947] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 350.449978][T27947] io_submit_sqes+0x5bd/0xbd0 [ 350.449993][T27947] __se_sys_io_uring_enter+0x1e1/0xa80 [ 350.450015][T27947] __x64_sys_io_uring_enter+0x74/0x80 [ 350.716777][T27947] do_syscall_64+0x4a/0x90 [ 350.716806][T27947] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 350.716855][T27947] RIP: 0033:0x4665f9 [ 350.716871][T27947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 350.716887][T27947] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 350.716906][T27947] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 350.716918][T27947] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 350.716930][T27947] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 350.716942][T27947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.798412][T27947] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:34 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x5762, &(0x7f0000000180)={0x0, 0x74e2, 0x20, 0x1, 0x18d, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000380)=0xffff, 0x0, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r8 = dup2(0xffffffffffffffff, r2) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r7], 0x7) 09:39:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:34 executing program 5 (fault-call:8 fault-nth:26): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:34 executing program 3 (fault-call:7 fault-nth:2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0xd5, 0x4, &(0x7f0000000640)=[{&(0x7f00000002c0)="ca35f046d1a9326c1fbba7eeb9e43468a9207ddef22933f52db6e09ea47f78126b1116998c6c1c8ded3894df864ec55c3bc34302224c363646470e0aaa7d4d110f744120646eb21dd893ac398860a3dea3d037c004f101211fd00550f43c0099bd56ad5c97fa89f1524d407651ac8691ab175e8340009618b94ec3dfa361fba41e5df299525910b5c4baf2cfe334e3810086121b92bcb4e5ab24e85c0692f4677a43d44b18ea240f0110246b7b20a5bccf73cf273b0f2270b0e0e9613e5ecffebd3c561d1d5e1b3043", 0xc9, 0x61e5}, {&(0x7f00000003c0)="124019e394c4c1328ae6d1dcbca7ece7ddf1079f58ec3cd9fb75bf52bb8339ea973aa439f1d51685f3f905364ad1f81e3abbbc13d250686dd47b831770bec81dc222d083972e3171466a82e50f28ec5fcfe99055fefdd5ec578acfcba98f7b8dde0e3810d2", 0x65, 0xffffffffffffe941}, {&(0x7f0000000440)="461c0815abc8f430997a2d31be83212c5eb444e03e64a65baba0f4e278ac76549f27e84e73b49f4e8f89745afd948a9a187dfeba5c7062ef293c32df4051620e8901fb7225ff46c749cfbf4bf366d6398f40caf59bd23c5644511a7189568b16746728cd550eed76afc4aa2905520f100e4196bbcba93d4127ab1fef972adfa3cf1f9bdb03fab0f6f85e594ba7e035c83ae5ec98ad6f0ea9f05065932bf472f2b752622d9945b21bd9cefacf3b91d43e2d0afaf55d4027f43ce6f5f6ac2b9c936c5b79aaaf1bb2a4ced171f3de101c6213c94c6b3a4c55d3ca42e53c2f0a1609a56a69dbce94fc2a551d89e73a293a5dd3d45c7d", 0xf4, 0x81}, {&(0x7f0000000540)="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", 0xff, 0x1}], 0x400, &(0x7f0000000180)={[{'\x00'}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@appraise}]}) 09:39:34 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x96, 0x0, 0x0, 0x0, 0x0) [ 350.941196][T27971] FAULT_INJECTION: forcing a failure. [ 350.941196][T27971] name failslab, interval 1, probability 0, space 0, times 0 [ 350.954136][T27971] CPU: 1 PID: 27971 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 350.962910][T27971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.974071][T27971] Call Trace: [ 350.977370][T27971] dump_stack+0x137/0x19d [ 350.982144][T27971] should_fail+0x23c/0x250 [ 350.982171][T27971] __should_failslab+0x81/0x90 [ 350.982225][T27971] should_failslab+0x5/0x20 [ 350.982247][T27971] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 350.982270][T27971] ? rmqueue+0x43/0xd00 [ 350.982287][T27971] ? create_io_worker+0x6c/0x3c0 [ 350.982308][T27971] create_io_worker+0x6c/0x3c0 [ 350.982366][T27971] io_wqe_enqueue+0x464/0x500 [ 350.982385][T27971] io_wq_enqueue+0x3a/0x40 [ 350.982416][T27971] io_queue_async_work+0x174/0x230 [ 350.982443][T27971] __io_queue_sqe+0x34a/0x360 [ 350.982459][T27971] io_submit_sqe+0x18b7/0x33d0 [ 350.982543][T27971] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 350.982567][T27971] io_submit_sqes+0x5bd/0xbd0 [ 350.982586][T27971] __se_sys_io_uring_enter+0x1e1/0xa80 [ 350.982618][T27971] __x64_sys_io_uring_enter+0x74/0x80 [ 350.982643][T27971] do_syscall_64+0x4a/0x90 [ 350.982664][T27971] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 350.982687][T27971] RIP: 0033:0x4665f9 [ 350.982701][T27971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 350.982762][T27971] RSP: 002b:00007f7508750188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 350.982781][T27971] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 350.982793][T27971] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000004 [ 350.982805][T27971] RBP: 00007f75087501d0 R08: 0000000000000000 R09: 0000000000000000 [ 350.982817][T27971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.982829][T27971] R13: 00007ffd7557af3f R14: 00007f7508750300 R15: 0000000000022000 [ 350.994353][T27972] FAULT_INJECTION: forcing a failure. [ 350.994353][T27972] name failslab, interval 1, probability 0, space 0, times 0 [ 351.000519][T27973] loop4: detected capacity change from 0 to 16361 [ 351.001149][T27972] CPU: 1 PID: 27972 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 351.182298][T27972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.182313][T27972] Call Trace: [ 351.182321][T27972] dump_stack+0x137/0x19d [ 351.182347][T27972] should_fail+0x23c/0x250 [ 351.182429][T27972] ? io_req_prep_async+0xdc/0x410 [ 351.193348][T27993] FAULT_INJECTION: forcing a failure. [ 351.193348][T27993] name failslab, interval 1, probability 0, space 0, times 0 [ 351.195861][T27972] __should_failslab+0x81/0x90 [ 351.227346][T27972] should_failslab+0x5/0x20 [ 351.231873][T27972] __kmalloc+0x66/0x340 [ 351.236060][T27972] io_req_prep_async+0xdc/0x410 [ 351.241095][T27972] io_req_defer+0x155/0x4a0 [ 351.245633][T27972] io_submit_sqe+0x157d/0x33d0 [ 351.250625][T27972] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 351.256129][T27972] io_submit_sqes+0x5bd/0xbd0 [ 351.260815][T27972] __se_sys_io_uring_enter+0x1e1/0xa80 [ 351.266384][T27972] __x64_sys_io_uring_enter+0x74/0x80 [ 351.271870][T27972] do_syscall_64+0x4a/0x90 [ 351.276305][T27972] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 351.282840][T27972] RIP: 0033:0x4665f9 [ 351.286750][T27972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 351.306461][T27972] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 351.314897][T27972] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 351.322875][T27972] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 351.330852][T27972] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 09:39:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:34 executing program 3 (fault-call:7 fault-nth:3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 351.338833][T27972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.346807][T27972] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 [ 351.354806][T27993] CPU: 0 PID: 27993 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 351.363255][T27993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.373312][T27993] Call Trace: [ 351.376587][T27993] dump_stack+0x137/0x19d [ 351.380919][T27993] should_fail+0x23c/0x250 [ 351.385359][T27993] __should_failslab+0x81/0x90 09:39:34 executing program 5 (fault-call:8 fault-nth:27): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:34 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x97, 0x0, 0x0, 0x0, 0x0) [ 351.390134][T27993] should_failslab+0x5/0x20 [ 351.394641][T27993] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 351.400430][T27993] ? rmqueue+0x43/0xd00 [ 351.400453][T27993] ? create_io_worker+0x6c/0x3c0 09:39:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 351.400482][T27993] create_io_worker+0x6c/0x3c0 [ 351.400501][T27993] ? get_page_from_freelist+0x53e/0x800 09:39:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f00000002c0), &(0x7f0000000080)='./file0/file0\x00', 0x10, 0x1000, 0x1}, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000465000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00007b3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006f8000/0x3000)=nil, &(0x7f0000116000/0x3000)=nil, &(0x7f00002f6000/0x1000)=nil, &(0x7f000047a000/0x2000)=nil, &(0x7f000067b000/0x3000)=nil, &(0x7f000032d000/0x4000)=nil, &(0x7f00000003c0)="e1355afee9e5aae7e1b2e8701d1479c2cfa3e54679c6d39794a7e3da41315efb95ce6a5395036cfb09ba6a4d8fb397b800f9f8d7b4570ae2f2b9e74d93a57737cb51b70e544408526fcd18358f7fc4686169dbba59c775c45a71f6e212e986d4a885b697734f1cf8b1f60014c2a86034355e688b88e19f21782b4ac645187e06021763a5d0da12a2ac768277da53cf9ba1092210fe71cbf6d4ee32010e41486de205be30972f24c8a5975c5d9b3b1cfb5c8d5c653b91936a4284d54b866df8f3340fd9607a68c9ccc1f13b040e4294dabe2d005f4a22fb3fa583a5ada30c799ff4ce301684dfd4c11b860365c535c0278ffaa113", 0xf4, r4}, 0x68) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) [ 351.400520][T27993] io_wqe_enqueue+0x464/0x500 [ 351.400537][T27993] io_wq_enqueue+0x3a/0x40 [ 351.400585][T27993] io_queue_async_work+0x174/0x230 [ 351.400648][T27993] __io_queue_sqe+0x34a/0x360 [ 351.400663][T27993] io_submit_sqe+0x18b7/0x33d0 [ 351.400679][T27993] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 351.400759][T27993] io_submit_sqes+0x5bd/0xbd0 [ 351.400778][T27993] __se_sys_io_uring_enter+0x1e1/0xa80 [ 351.400835][T27993] __x64_sys_io_uring_enter+0x74/0x80 [ 351.400858][T27993] do_syscall_64+0x4a/0x90 [ 351.400880][T27993] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 351.400959][T27993] RIP: 0033:0x4665f9 [ 351.400974][T27993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 351.400989][T27993] RSP: 002b:00007f7508750188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 351.401007][T27993] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 351.401018][T27993] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000004 [ 351.401042][T27993] RBP: 00007f75087501d0 R08: 0000000000000000 R09: 0000000000000000 [ 351.401052][T27993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.401064][T27993] R13: 00007ffd7557af3f R14: 00007f7508750300 R15: 0000000000022000 [ 351.476658][T28000] loop4: detected capacity change from 0 to 16361 [ 351.541849][T28010] FAULT_INJECTION: forcing a failure. [ 351.541849][T28010] name failslab, interval 1, probability 0, space 0, times 0 [ 351.541872][T28010] CPU: 1 PID: 28010 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 351.541891][T28010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.541901][T28010] Call Trace: [ 351.541909][T28010] dump_stack+0x137/0x19d [ 351.541959][T28010] should_fail+0x23c/0x250 [ 351.541981][T28010] ? io_req_prep_async+0xdc/0x410 [ 351.542001][T28010] __should_failslab+0x81/0x90 [ 351.542022][T28010] should_failslab+0x5/0x20 [ 351.542045][T28010] __kmalloc+0x66/0x340 [ 351.542147][T28010] io_req_prep_async+0xdc/0x410 [ 351.542167][T28010] io_req_defer+0x155/0x4a0 [ 351.542184][T28010] io_submit_sqe+0x157d/0x33d0 [ 351.542200][T28010] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 351.542220][T28010] io_submit_sqes+0x5bd/0xbd0 [ 351.542302][T28010] __se_sys_io_uring_enter+0x1e1/0xa80 [ 351.542327][T28010] __x64_sys_io_uring_enter+0x74/0x80 [ 351.542350][T28010] do_syscall_64+0x4a/0x90 [ 351.542373][T28010] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 351.542473][T28010] RIP: 0033:0x4665f9 [ 351.542486][T28010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 351.542503][T28010] RSP: 002b:00007f33f22b8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 09:39:35 executing program 5 (fault-call:8 fault-nth:28): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:35 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x98, 0x0, 0x0, 0x0, 0x0) [ 351.542525][T28010] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 351.542581][T28010] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 351.542593][T28010] RBP: 00007f33f22b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 351.542604][T28010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.542615][T28010] R13: 00007ffcf2acbbff R14: 00007f33f22b8300 R15: 0000000000022000 09:39:35 executing program 3 (fault-call:7 fault-nth:4): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:35 executing program 4: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x95, 0x0, 0x0, 0x0, 0x0) 09:39:35 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000440)={0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1020}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x10}, {r1, 0x1893723b8334c450}, {}, {r4, 0x3}, {0xffffffffffffffff, 0xa599}, {0xffffffffffffffff, 0x8}, {r2}, {0xffffffffffffffff, 0xf001}], 0x20000000000002a9, &(0x7f0000000a00)={r5, r6+10000000}, &(0x7f0000000a40)={[0x4]}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r7, 0x0, 0x800000080004105) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) io_uring_enter(0xffffffffffffffff, 0x3455, 0x5337, 0x1, &(0x7f0000000200)={[0x40]}, 0x8) r9 = syz_open_procfs$userns(0x0, &(0x7f0000000180)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6400) fchown(r9, r10, 0xffffffffffffffff) sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r8], 0x7) [ 352.124906][T28034] FAULT_INJECTION: forcing a failure. [ 352.124906][T28034] name failslab, interval 1, probability 0, space 0, times 0 [ 352.137585][T28034] CPU: 1 PID: 28034 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 352.146002][T28034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.156152][T28034] Call Trace: [ 352.159452][T28034] dump_stack+0x137/0x19d [ 352.163813][T28034] should_fail+0x23c/0x250 [ 352.168230][T28034] ? io_issue_sqe+0x400e/0x6620 09:39:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:35 executing program 4 (fault-call:8 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) [ 352.173078][T28034] __should_failslab+0x81/0x90 [ 352.177850][T28034] should_failslab+0x5/0x20 [ 352.182370][T28034] __kmalloc+0x66/0x340 [ 352.186528][T28034] io_issue_sqe+0x400e/0x6620 [ 352.191208][T28034] ? rmqueue+0x43/0xd00 [ 352.195377][T28034] ? avc_has_perm+0x59/0x150 [ 352.199972][T28034] ? ___cache_free+0x3c/0x300 [ 352.204653][T28034] ? create_io_thread+0x81/0xa0 [ 352.209502][T28034] ? kfree+0xf0/0x1d0 [ 352.213482][T28034] ? create_io_worker+0x153/0x3c0 [ 352.218515][T28034] ? get_page_from_freelist+0x53e/0x800 [ 352.224068][T28034] ? io_wqe_enqueue+0x464/0x500 [ 352.228982][T28034] ? io_wq_enqueue+0x3a/0x40 [ 352.233579][T28034] ? io_prep_rw+0x6b5/0x700 [ 352.238690][T28034] __io_queue_sqe+0xe9/0x360 [ 352.243374][T28034] io_submit_sqe+0x18b7/0x33d0 [ 352.248208][T28034] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 352.253725][T28034] io_submit_sqes+0x5bd/0xbd0 [ 352.258409][T28034] __se_sys_io_uring_enter+0x1e1/0xa80 [ 352.263886][T28034] __x64_sys_io_uring_enter+0x74/0x80 [ 352.269284][T28034] do_syscall_64+0x4a/0x90 [ 352.273707][T28034] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 352.279614][T28034] RIP: 0033:0x4665f9 [ 352.279831][T28046] FAULT_INJECTION: forcing a failure. [ 352.279831][T28046] name failslab, interval 1, probability 0, space 0, times 0 [ 352.283607][T28034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 352.316525][T28034] RSP: 002b:00007f7508750188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 352.324947][T28034] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 352.332929][T28034] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000004 [ 352.340914][T28034] RBP: 00007f75087501d0 R08: 0000000000000000 R09: 0000000000000000 [ 352.349098][T28034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.357142][T28034] R13: 00007ffd7557af3f R14: 00007f7508750300 R15: 0000000000022000 [ 352.365212][T28046] CPU: 0 PID: 28046 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 352.373644][T28046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.383703][T28046] Call Trace: [ 352.387091][T28046] dump_stack+0x137/0x19d [ 352.391495][T28046] should_fail+0x23c/0x250 [ 352.396029][T28046] __should_failslab+0x81/0x90 [ 352.400841][T28046] ? alloc_pipe_info+0xac/0x350 [ 352.405703][T28046] should_failslab+0x5/0x20 [ 352.405731][T28046] kmem_cache_alloc_trace+0x49/0x310 09:39:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(0x0, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 352.405752][T28046] alloc_pipe_info+0xac/0x350 09:39:35 executing program 4 (fault-call:8 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:35 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x99, 0x0, 0x0, 0x0, 0x0) [ 352.405775][T28046] splice_direct_to_actor+0x5f7/0x650 [ 352.405795][T28046] ? do_splice_direct+0x170/0x170 [ 352.405818][T28046] ? security_file_permission+0x87/0xa0 09:39:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) [ 352.405836][T28046] ? rw_verify_area+0x136/0x250 [ 352.405859][T28046] do_splice_direct+0xf5/0x170 [ 352.405877][T28046] do_sendfile+0x773/0xda0 09:39:36 executing program 4 (fault-call:8 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:36 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x9a, 0x0, 0x0, 0x0, 0x0) [ 352.405921][T28046] __x64_sys_sendfile64+0xf2/0x130 [ 352.405939][T28046] do_syscall_64+0x4a/0x90 [ 352.405959][T28046] ? irqentry_exit_to_user_mode+0x5/0x20 [ 352.405982][T28046] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 352.406038][T28046] RIP: 0033:0x4665f9 [ 352.406052][T28046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 352.406067][T28046] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 352.406086][T28046] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 352.406098][T28046] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 352.406109][T28046] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 352.406121][T28046] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000001 [ 352.406132][T28046] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 [ 352.567614][T28063] FAULT_INJECTION: forcing a failure. [ 352.567614][T28063] name failslab, interval 1, probability 0, space 0, times 0 [ 352.567650][T28063] CPU: 0 PID: 28063 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 352.567677][T28063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.567698][T28063] Call Trace: [ 352.567706][T28063] dump_stack+0x137/0x19d [ 352.567732][T28063] should_fail+0x23c/0x250 [ 352.567801][T28063] ? kcalloc+0x32/0x40 [ 352.567825][T28063] __should_failslab+0x81/0x90 [ 352.567848][T28063] should_failslab+0x5/0x20 [ 352.567872][T28063] __kmalloc+0x66/0x340 [ 352.567892][T28063] ? kmem_cache_alloc_trace+0x215/0x310 [ 352.567962][T28063] ? alloc_pipe_info+0xac/0x350 [ 352.567987][T28063] kcalloc+0x32/0x40 [ 352.568009][T28063] alloc_pipe_info+0x1be/0x350 [ 352.568032][T28063] splice_direct_to_actor+0x5f7/0x650 [ 352.568052][T28063] ? do_splice_direct+0x170/0x170 [ 352.568124][T28063] ? do_splice_direct+0xd8/0x170 [ 352.568144][T28063] ? do_splice_direct+0x170/0x170 [ 352.568163][T28063] do_splice_direct+0xf5/0x170 09:39:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 09:39:36 executing program 4 (fault-call:8 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) [ 352.568183][T28063] do_sendfile+0x773/0xda0 [ 352.568201][T28063] __x64_sys_sendfile64+0xf2/0x130 [ 352.568219][T28063] do_syscall_64+0x4a/0x90 [ 352.568244][T28063] ? irqentry_exit_to_user_mode+0x5/0x20 [ 352.568277][T28063] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 352.568300][T28063] RIP: 0033:0x4665f9 [ 352.568313][T28063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 352.568331][T28063] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 352.568351][T28063] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 352.568380][T28063] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 352.568391][T28063] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 352.568403][T28063] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000001 [ 352.568414][T28063] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 [ 352.698126][T28075] FAULT_INJECTION: forcing a failure. [ 352.698126][T28075] name failslab, interval 1, probability 0, space 0, times 0 [ 352.698253][T28075] CPU: 1 PID: 28075 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 352.698278][T28075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.698288][T28075] Call Trace: [ 352.698295][T28075] dump_stack+0x137/0x19d [ 352.698322][T28075] should_fail+0x23c/0x250 [ 352.698343][T28075] __should_failslab+0x81/0x90 [ 352.698431][T28075] should_failslab+0x5/0x20 [ 352.698456][T28075] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 352.698499][T28075] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 352.698524][T28075] ? __kmalloc_node+0x30/0x40 [ 352.698576][T28075] __kmalloc_node+0x30/0x40 [ 352.698598][T28075] kvmalloc_node+0x81/0xf0 [ 352.698614][T28075] seq_read_iter+0x145/0x910 [ 352.698697][T28075] generic_file_splice_read+0x22a/0x310 [ 352.698781][T28075] ? splice_shrink_spd+0x60/0x60 [ 352.698828][T28075] splice_direct_to_actor+0x2aa/0x650 [ 352.698847][T28075] ? do_splice_direct+0x170/0x170 [ 352.698866][T28075] do_splice_direct+0xf5/0x170 [ 352.698885][T28075] do_sendfile+0x773/0xda0 [ 352.698901][T28075] __x64_sys_sendfile64+0xf2/0x130 [ 352.698919][T28075] do_syscall_64+0x4a/0x90 [ 352.698966][T28075] ? irqentry_exit_to_user_mode+0x5/0x20 [ 352.698990][T28075] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 352.699015][T28075] RIP: 0033:0x4665f9 [ 352.699028][T28075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 352.699042][T28075] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 352.699058][T28075] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 352.699143][T28075] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 352.699153][T28075] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 352.699164][T28075] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000001 [ 352.699176][T28075] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 [ 353.129189][T28089] FAULT_INJECTION: forcing a failure. [ 353.129189][T28089] name failslab, interval 1, probability 0, space 0, times 0 [ 353.129312][T28089] CPU: 1 PID: 28089 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 353.129336][T28089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.129346][T28089] Call Trace: [ 353.129354][T28089] dump_stack+0x137/0x19d [ 353.129377][T28089] should_fail+0x23c/0x250 [ 353.129395][T28089] __should_failslab+0x81/0x90 [ 353.129418][T28089] ? cgroup_show_path+0x67/0x240 [ 353.129456][T28089] should_failslab+0x5/0x20 [ 353.129480][T28089] kmem_cache_alloc_trace+0x49/0x310 [ 353.129573][T28089] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 353.129596][T28089] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 353.129620][T28089] ? cgroup_finalize_control+0xb90/0xb90 [ 353.129639][T28089] cgroup_show_path+0x67/0x240 [ 353.129718][T28089] ? cgroup_finalize_control+0xb90/0xb90 [ 353.129756][T28089] kernfs_sop_show_path+0xa1/0xd0 [ 353.129774][T28089] ? kernfs_sop_show_options+0xb0/0xb0 [ 353.129793][T28089] show_mountinfo+0xfc/0x4e0 [ 353.129816][T28089] m_show+0x34/0x40 [ 353.129837][T28089] seq_read_iter+0x60b/0x910 [ 353.129928][T28089] generic_file_splice_read+0x22a/0x310 [ 353.129986][T28089] ? splice_shrink_spd+0x60/0x60 [ 353.130004][T28089] splice_direct_to_actor+0x2aa/0x650 [ 353.130023][T28089] ? do_splice_direct+0x170/0x170 [ 353.130041][T28089] do_splice_direct+0xf5/0x170 [ 353.130057][T28089] do_sendfile+0x773/0xda0 [ 353.130102][T28089] __x64_sys_sendfile64+0xf2/0x130 [ 353.130121][T28089] do_syscall_64+0x4a/0x90 [ 353.130142][T28089] ? irqentry_exit_to_user_mode+0x5/0x20 [ 353.130167][T28089] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 353.130190][T28089] RIP: 0033:0x4665f9 [ 353.130202][T28089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 353.130217][T28089] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 353.130236][T28089] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 09:39:37 executing program 2: r0 = syz_io_uring_setup(0x1bf2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000180)={[0x1]}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3, 0x0, 0x0, 0x0, 0x0) 09:39:37 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x9b, 0x0, 0x0, 0x0, 0x0) 09:39:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 09:39:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(0x0, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 353.130248][T28089] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 353.130261][T28089] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 353.130275][T28089] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000001 [ 353.130287][T28089] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 09:39:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4, 0x0, 0x0, 0x0, 0x0) 09:39:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3, 0x0, 0x0, 0x0, 0x0) 09:39:37 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x9c, 0x0, 0x0, 0x0, 0x0) 09:39:37 executing program 4 (fault-call:8 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5, 0x0, 0x0, 0x0, 0x0) 09:39:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4, 0x0, 0x0, 0x0, 0x0) [ 354.002062][T28132] FAULT_INJECTION: forcing a failure. [ 354.002062][T28132] name failslab, interval 1, probability 0, space 0, times 0 09:39:37 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x9d, 0x0, 0x0, 0x0, 0x0) [ 354.002131][T28132] CPU: 0 PID: 28132 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 354.002217][T28132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.002227][T28132] Call Trace: [ 354.002234][T28132] dump_stack+0x137/0x19d [ 354.002259][T28132] should_fail+0x23c/0x250 [ 354.002279][T28132] __should_failslab+0x81/0x90 [ 354.002302][T28132] ? cgroup_show_path+0x67/0x240 [ 354.002393][T28132] should_failslab+0x5/0x20 [ 354.002415][T28132] kmem_cache_alloc_trace+0x49/0x310 [ 354.002436][T28132] ? cgroup_finalize_control+0xb90/0xb90 [ 354.002454][T28132] cgroup_show_path+0x67/0x240 [ 354.002472][T28132] ? cgroup_finalize_control+0xb90/0xb90 [ 354.002491][T28132] kernfs_sop_show_path+0xa1/0xd0 [ 354.002558][T28132] ? kernfs_sop_show_options+0xb0/0xb0 [ 354.002577][T28132] show_mountinfo+0xfc/0x4e0 [ 354.002599][T28132] m_show+0x34/0x40 [ 354.002620][T28132] seq_read_iter+0x60b/0x910 [ 354.002637][T28132] generic_file_splice_read+0x22a/0x310 [ 354.002688][T28132] ? splice_shrink_spd+0x60/0x60 [ 354.002707][T28132] splice_direct_to_actor+0x2aa/0x650 [ 354.002728][T28132] ? do_splice_direct+0x170/0x170 [ 354.002747][T28132] do_splice_direct+0xf5/0x170 [ 354.002812][T28132] do_sendfile+0x773/0xda0 [ 354.002830][T28132] __x64_sys_sendfile64+0xf2/0x130 [ 354.002846][T28132] do_syscall_64+0x4a/0x90 [ 354.002902][T28132] ? irqentry_exit_to_user_mode+0x5/0x20 [ 354.002927][T28132] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 354.002969][T28132] RIP: 0033:0x4665f9 [ 354.002983][T28132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 354.002998][T28132] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 354.003089][T28132] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 354.003102][T28132] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 354.003113][T28132] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 354.003125][T28132] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000001 [ 354.003137][T28132] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 09:39:38 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x92c2, 0x24402) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)=',]/^\\-\x00') io_uring_enter(r3, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$inet(0x2, 0x2, 0xff) sendfile(r5, r6, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r7, r8], 0x7) 09:39:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5, 0x0, 0x0, 0x0, 0x0) 09:39:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) 09:39:38 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x9e, 0x0, 0x0, 0x0, 0x0) 09:39:38 executing program 4 (fault-call:8 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(0x0, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 354.775110][T28168] FAULT_INJECTION: forcing a failure. [ 354.775110][T28168] name failslab, interval 1, probability 0, space 0, times 0 [ 354.788249][T28168] CPU: 1 PID: 28168 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 354.796685][T28168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.806741][T28168] Call Trace: [ 354.810035][T28168] dump_stack+0x137/0x19d [ 354.815101][T28168] should_fail+0x23c/0x250 [ 354.819551][T28168] __should_failslab+0x81/0x90 [ 354.824392][T28168] ? cgroup_show_path+0x67/0x240 [ 354.829348][T28168] should_failslab+0x5/0x20 [ 354.833860][T28168] kmem_cache_alloc_trace+0x49/0x310 [ 354.839161][T28168] ? cgroup_finalize_control+0xb90/0xb90 [ 354.844802][T28168] cgroup_show_path+0x67/0x240 [ 354.849572][T28168] ? cgroup_finalize_control+0xb90/0xb90 [ 354.855213][T28168] kernfs_sop_show_path+0xa1/0xd0 [ 354.860309][T28168] ? kernfs_sop_show_options+0xb0/0xb0 [ 354.865792][T28168] show_mountinfo+0xfc/0x4e0 [ 354.865823][T28168] m_show+0x34/0x40 [ 354.865848][T28168] seq_read_iter+0x60b/0x910 [ 354.865867][T28168] generic_file_splice_read+0x22a/0x310 [ 354.865888][T28168] ? splice_shrink_spd+0x60/0x60 [ 354.889440][T28168] splice_direct_to_actor+0x2aa/0x650 [ 354.889469][T28168] ? do_splice_direct+0x170/0x170 [ 354.889506][T28168] do_splice_direct+0xf5/0x170 [ 354.904647][T28168] do_sendfile+0x773/0xda0 [ 354.904671][T28168] __x64_sys_sendfile64+0xf2/0x130 [ 354.904688][T28168] do_syscall_64+0x4a/0x90 [ 354.904711][T28168] ? irqentry_exit_to_user_mode+0x5/0x20 [ 354.904742][T28168] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 354.930378][T28168] RIP: 0033:0x4665f9 [ 354.930397][T28168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 354.930412][T28168] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 354.930431][T28168] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 09:39:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x7, 0x0, 0x0, 0x0, 0x0) 09:39:38 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x9f, 0x0, 0x0, 0x0, 0x0) [ 354.930442][T28168] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 354.930453][T28168] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 354.986877][T28168] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000001 [ 354.986893][T28168] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 09:39:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) 09:39:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x8, 0x0, 0x0, 0x0, 0x0) 09:39:38 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xa0, 0x0, 0x0, 0x0, 0x0) 09:39:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x7, 0x0, 0x0, 0x0, 0x0) 09:39:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x9, 0x0, 0x0, 0x0, 0x0) 09:39:38 executing program 2: r0 = syz_io_uring_setup(0x368d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xef, 0x0, 0x0}, &(0x7f000014c000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x4c15, 0xa916, 0x3, &(0x7f0000000180)={[0x80]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r7, &(0x7f00000001c0)='./file0/file0\x00', 0x40802, 0x180) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:38 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xa1, 0x0, 0x0, 0x0, 0x0) 09:39:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x8, 0x0, 0x0, 0x0, 0x0) 09:39:38 executing program 4 (fault-call:8 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) [ 355.510533][T28240] FAULT_INJECTION: forcing a failure. [ 355.510533][T28240] name failslab, interval 1, probability 0, space 0, times 0 [ 355.523322][T28240] CPU: 1 PID: 28240 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 355.531854][T28240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.542100][T28240] Call Trace: [ 355.545385][T28240] dump_stack+0x137/0x19d [ 355.553321][T28240] should_fail+0x23c/0x250 [ 355.557802][T28240] __should_failslab+0x81/0x90 [ 355.562976][T28240] ? cgroup_show_path+0x67/0x240 [ 355.568054][T28240] should_failslab+0x5/0x20 [ 355.572638][T28240] kmem_cache_alloc_trace+0x49/0x310 [ 355.577969][T28240] ? cgroup_finalize_control+0xb90/0xb90 [ 355.583791][T28240] cgroup_show_path+0x67/0x240 [ 355.588586][T28240] ? cgroup_finalize_control+0xb90/0xb90 [ 355.594231][T28240] kernfs_sop_show_path+0xa1/0xd0 [ 355.599263][T28240] ? kernfs_sop_show_options+0xb0/0xb0 [ 355.604785][T28240] show_mountinfo+0xfc/0x4e0 [ 355.609396][T28240] m_show+0x34/0x40 [ 355.613217][T28240] seq_read_iter+0x60b/0x910 [ 355.617838][T28240] generic_file_splice_read+0x22a/0x310 [ 355.623479][T28240] ? splice_shrink_spd+0x60/0x60 [ 355.628436][T28240] splice_direct_to_actor+0x2aa/0x650 [ 355.633830][T28240] ? do_splice_direct+0x170/0x170 [ 355.638855][T28240] do_splice_direct+0xf5/0x170 [ 355.643667][T28240] do_sendfile+0x773/0xda0 [ 355.648097][T28240] __x64_sys_sendfile64+0xf2/0x130 [ 355.653227][T28240] do_syscall_64+0x4a/0x90 09:39:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa, 0x0, 0x0, 0x0, 0x0) 09:39:39 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xa2, 0x0, 0x0, 0x0, 0x0) 09:39:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x9, 0x0, 0x0, 0x0, 0x0) 09:39:39 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5125, &(0x7f0000000180)={0x0, 0x73a0, 0x2, 0x1, 0x325, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000737000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r7], 0x7) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) [ 355.657713][T28240] ? irqentry_exit_to_user_mode+0x5/0x20 [ 355.663376][T28240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 355.669290][T28240] RIP: 0033:0x4665f9 [ 355.673342][T28240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 355.693417][T28240] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 355.701846][T28240] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 355.709921][T28240] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 355.717896][T28240] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 355.725873][T28240] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000001 [ 355.733869][T28240] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 09:39:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb, 0x0, 0x0, 0x0, 0x0) 09:39:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa, 0x0, 0x0, 0x0, 0x0) 09:39:39 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xa3, 0x0, 0x0, 0x0, 0x0) 09:39:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc, 0x0, 0x0, 0x0, 0x0) 09:39:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb, 0x0, 0x0, 0x0, 0x0) 09:39:39 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xa4, 0x0, 0x0, 0x0, 0x0) 09:39:39 executing program 4 (fault-call:8 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) [ 356.378988][T28300] FAULT_INJECTION: forcing a failure. [ 356.378988][T28300] name failslab, interval 1, probability 0, space 0, times 0 [ 356.391826][T28300] CPU: 0 PID: 28300 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 356.400437][T28300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.410861][T28300] Call Trace: [ 356.414167][T28300] dump_stack+0x137/0x19d [ 356.418537][T28300] should_fail+0x23c/0x250 [ 356.422968][T28300] __should_failslab+0x81/0x90 [ 356.427748][T28300] ? cgroup_show_path+0x67/0x240 [ 356.432689][T28300] should_failslab+0x5/0x20 [ 356.437239][T28300] kmem_cache_alloc_trace+0x49/0x310 [ 356.442528][T28300] ? cgroup_finalize_control+0xb90/0xb90 [ 356.448163][T28300] cgroup_show_path+0x67/0x240 [ 356.452935][T28300] ? cgroup_finalize_control+0xb90/0xb90 [ 356.458579][T28300] kernfs_sop_show_path+0xa1/0xd0 [ 356.463614][T28300] ? kernfs_sop_show_options+0xb0/0xb0 [ 356.469101][T28300] show_mountinfo+0xfc/0x4e0 [ 356.473791][T28300] m_show+0x34/0x40 [ 356.477619][T28300] seq_read_iter+0x60b/0x910 [ 356.482210][T28300] generic_file_splice_read+0x22a/0x310 [ 356.487843][T28300] ? splice_shrink_spd+0x60/0x60 [ 356.492792][T28300] splice_direct_to_actor+0x2aa/0x650 [ 356.498165][T28300] ? do_splice_direct+0x170/0x170 [ 356.503187][T28300] do_splice_direct+0xf5/0x170 [ 356.507970][T28300] do_sendfile+0x773/0xda0 [ 356.512403][T28300] __x64_sys_sendfile64+0xf2/0x130 [ 356.517714][T28300] do_syscall_64+0x4a/0x90 [ 356.522136][T28300] ? irqentry_exit_to_user_mode+0x5/0x20 [ 356.527880][T28300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 356.533792][T28300] RIP: 0033:0x4665f9 [ 356.537695][T28300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 356.557554][T28300] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 356.565977][T28300] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 356.573962][T28300] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 356.581942][T28300] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 356.589923][T28300] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000001 [ 356.597906][T28300] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 09:39:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:40 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000002080)={0xb9a, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc, 0x0, 0x0, 0x0, 0x0) 09:39:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd, 0x0, 0x0, 0x0, 0x0) 09:39:40 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xa5, 0x0, 0x0, 0x0, 0x0) 09:39:40 executing program 4 (fault-call:8 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) [ 356.753404][T28309] FAULT_INJECTION: forcing a failure. [ 356.753404][T28309] name failslab, interval 1, probability 0, space 0, times 0 [ 356.766255][T28309] CPU: 1 PID: 28309 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 356.774711][T28309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.784768][T28309] Call Trace: [ 356.788057][T28309] dump_stack+0x137/0x19d [ 356.792398][T28309] should_fail+0x23c/0x250 [ 356.796810][T28309] __should_failslab+0x81/0x90 09:39:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xe, 0x0, 0x0, 0x0, 0x0) [ 356.801576][T28309] ? cgroup_show_path+0x67/0x240 [ 356.806530][T28309] should_failslab+0x5/0x20 [ 356.811156][T28309] kmem_cache_alloc_trace+0x49/0x310 [ 356.816523][T28309] ? cgroup_finalize_control+0xb90/0xb90 [ 356.822230][T28309] cgroup_show_path+0x67/0x240 [ 356.826998][T28309] ? cgroup_finalize_control+0xb90/0xb90 [ 356.832633][T28309] kernfs_sop_show_path+0xa1/0xd0 [ 356.837703][T28309] ? kernfs_sop_show_options+0xb0/0xb0 [ 356.843183][T28309] show_mountinfo+0xfc/0x4e0 [ 356.847856][T28309] m_show+0x34/0x40 [ 356.851673][T28309] seq_read_iter+0x60b/0x910 [ 356.856272][T28309] generic_file_splice_read+0x22a/0x310 [ 356.861897][T28309] ? splice_shrink_spd+0x60/0x60 [ 356.866875][T28309] splice_direct_to_actor+0x2aa/0x650 [ 356.872304][T28309] ? do_splice_direct+0x170/0x170 [ 356.877422][T28309] do_splice_direct+0xf5/0x170 [ 356.882195][T28309] do_sendfile+0x773/0xda0 [ 356.886636][T28309] __x64_sys_sendfile64+0xf2/0x130 [ 356.891752][T28309] do_syscall_64+0x4a/0x90 [ 356.896448][T28309] ? irqentry_exit_to_user_mode+0x5/0x20 09:39:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xf, 0x0, 0x0, 0x0, 0x0) [ 356.902136][T28309] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 356.908111][T28309] RIP: 0033:0x4665f9 [ 356.912033][T28309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 356.931640][T28309] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 356.940055][T28309] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 09:39:40 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xa6, 0x0, 0x0, 0x0, 0x0) [ 356.948058][T28309] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 356.956036][T28309] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 356.964040][T28309] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000001 [ 356.972039][T28309] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 09:39:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x10, 0x0, 0x0, 0x0, 0x0) 09:39:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd, 0x0, 0x0, 0x0, 0x0) 09:39:40 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xa7, 0x0, 0x0, 0x0, 0x0) 09:39:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x11, 0x0, 0x0, 0x0, 0x0) 09:39:41 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x100133, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000001780)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@nl=@proc, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f00000005c0)=""/111, 0x6f}], 0x6, &(0x7f0000001700)=""/127, 0x7f}}, 0x10001) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r7, r8], 0x7) 09:39:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xe, 0x0, 0x0, 0x0, 0x0) 09:39:41 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xa8, 0x0, 0x0, 0x0, 0x0) 09:39:41 executing program 4 (fault-call:8 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) [ 357.868218][T28367] FAULT_INJECTION: forcing a failure. [ 357.868218][T28367] name failslab, interval 1, probability 0, space 0, times 0 [ 357.880980][T28367] CPU: 0 PID: 28367 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 357.889406][T28367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.899513][T28367] Call Trace: [ 357.902816][T28367] dump_stack+0x137/0x19d [ 357.907152][T28367] should_fail+0x23c/0x250 [ 357.911569][T28367] __should_failslab+0x81/0x90 [ 357.916436][T28367] ? cgroup_show_path+0x67/0x240 [ 357.921374][T28367] should_failslab+0x5/0x20 [ 357.925927][T28367] kmem_cache_alloc_trace+0x49/0x310 [ 357.931304][T28367] ? cgroup_finalize_control+0xb90/0xb90 [ 357.936998][T28367] cgroup_show_path+0x67/0x240 [ 357.941796][T28367] ? cgroup_finalize_control+0xb90/0xb90 [ 357.951027][T28367] kernfs_sop_show_path+0xa1/0xd0 [ 357.956088][T28367] ? kernfs_sop_show_options+0xb0/0xb0 [ 357.961577][T28367] show_mountinfo+0xfc/0x4e0 [ 357.966220][T28367] m_show+0x34/0x40 [ 357.970038][T28367] seq_read_iter+0x60b/0x910 [ 357.974656][T28367] generic_file_splice_read+0x22a/0x310 [ 357.980493][T28367] ? splice_shrink_spd+0x60/0x60 [ 357.985450][T28367] splice_direct_to_actor+0x2aa/0x650 [ 357.990968][T28367] ? do_splice_direct+0x170/0x170 [ 357.996196][T28367] do_splice_direct+0xf5/0x170 [ 358.001075][T28367] do_sendfile+0x773/0xda0 [ 358.006261][T28367] __x64_sys_sendfile64+0xf2/0x130 [ 358.011428][T28367] do_syscall_64+0x4a/0x90 09:39:41 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xa9, 0x0, 0x0, 0x0, 0x0) 09:39:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xf, 0x0, 0x0, 0x0, 0x0) 09:39:41 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xaa, 0x0, 0x0, 0x0, 0x0) [ 358.015849][T28367] ? irqentry_exit_to_user_mode+0x5/0x20 [ 358.021514][T28367] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 358.027704][T28367] RIP: 0033:0x4665f9 [ 358.031716][T28367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 358.051340][T28367] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 09:39:41 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xab, 0x0, 0x0, 0x0, 0x0) 09:39:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x12, 0x0, 0x0, 0x0, 0x0) 09:39:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x10, 0x0, 0x0, 0x0, 0x0) [ 358.051368][T28367] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 358.051382][T28367] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 358.051395][T28367] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 358.051407][T28367] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000002 [ 358.051420][T28367] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 09:39:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:42 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xac, 0x0, 0x0, 0x0, 0x0) 09:39:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x11, 0x0, 0x0, 0x0, 0x0) 09:39:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x13, 0x0, 0x0, 0x0, 0x0) 09:39:42 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000380)=0xc) r9 = openat2(r5, &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)={0x2, 0x69, 0x1a}, 0x18) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x3f, 0xa2, 0x0, 0x46, 0x0, 0x5, 0x80000, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x88d4, 0x1, @perf_config_ext={0xab5, 0x138a1e36}, 0x40, 0x4, 0x6, 0x0, 0x400, 0x40, 0x6, 0x0, 0x707}, r8, 0x1, r9, 0x9) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) write(r2, &(0x7f0000000180)="2d6eca424bd03a9c4e21050d048bf9fea0570387d3e3ba", 0x17) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r7], 0x7) 09:39:42 executing program 4 (fault-call:8 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x14, 0x0, 0x0, 0x0, 0x0) 09:39:42 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xad, 0x0, 0x0, 0x0, 0x0) 09:39:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x12, 0x0, 0x0, 0x0, 0x0) 09:39:42 executing program 4 (fault-call:8 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) [ 359.067677][T28424] FAULT_INJECTION: forcing a failure. [ 359.067677][T28424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 359.081477][T28424] CPU: 1 PID: 28424 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 359.081512][T28424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.081522][T28424] Call Trace: [ 359.081530][T28424] dump_stack+0x137/0x19d [ 359.081556][T28424] should_fail+0x23c/0x250 [ 359.081577][T28424] __alloc_pages+0xe7/0x310 [ 359.081670][T28424] alloc_pages+0x21d/0x310 [ 359.081688][T28424] push_pipe+0x267/0x370 09:39:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x15, 0x0, 0x0, 0x0, 0x0) [ 359.081708][T28424] _copy_to_iter+0x35d/0xdd0 [ 359.081758][T28424] ? __check_object_size+0x7a/0x310 [ 359.081781][T28424] ? __virt_addr_valid+0x12a/0x1a0 [ 359.081802][T28424] seq_read_iter+0x7f0/0x910 [ 359.081821][T28424] generic_file_splice_read+0x22a/0x310 [ 359.081863][T28424] ? splice_shrink_spd+0x60/0x60 [ 359.081882][T28424] splice_direct_to_actor+0x2aa/0x650 [ 359.081902][T28424] ? do_splice_direct+0x170/0x170 [ 359.081922][T28424] do_splice_direct+0xf5/0x170 [ 359.081942][T28424] do_sendfile+0x773/0xda0 09:39:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x16, 0x0, 0x0, 0x0, 0x0) [ 359.082019][T28424] __x64_sys_sendfile64+0xf2/0x130 [ 359.082035][T28424] do_syscall_64+0x4a/0x90 [ 359.082122][T28424] ? irqentry_exit_to_user_mode+0x5/0x20 [ 359.082147][T28424] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 359.082172][T28424] RIP: 0033:0x4665f9 [ 359.082187][T28424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 359.082206][T28424] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 359.082225][T28424] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 359.082239][T28424] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 359.082308][T28424] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 359.082333][T28424] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000002 [ 359.082346][T28424] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 [ 359.233650][T28443] FAULT_INJECTION: forcing a failure. [ 359.233650][T28443] name failslab, interval 1, probability 0, space 0, times 0 [ 359.406331][T28443] CPU: 1 PID: 28443 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 359.406363][T28443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.406374][T28443] Call Trace: [ 359.406382][T28443] dump_stack+0x137/0x19d [ 359.406411][T28443] should_fail+0x23c/0x250 [ 359.406431][T28443] ? kmalloc_array+0x2d/0x40 [ 359.441516][T28443] __should_failslab+0x81/0x90 [ 359.441545][T28443] should_failslab+0x5/0x20 [ 359.441567][T28443] __kmalloc+0x66/0x340 [ 359.441625][T28443] ? splice_from_pipe+0xc0/0xc0 [ 359.441657][T28443] kmalloc_array+0x2d/0x40 [ 359.441676][T28443] iter_file_splice_write+0xc1/0x750 [ 359.470855][T28443] ? __mnt_drop_write+0x12/0x20 [ 359.470892][T28443] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 359.470915][T28443] ? splice_from_pipe+0xc0/0xc0 [ 359.470984][T28443] direct_splice_actor+0x80/0xa0 [ 359.491396][T28443] splice_direct_to_actor+0x345/0x650 [ 359.491424][T28443] ? do_splice_direct+0x170/0x170 [ 359.491475][T28443] do_splice_direct+0xf5/0x170 [ 359.491574][T28443] do_sendfile+0x773/0xda0 [ 359.491596][T28443] __x64_sys_sendfile64+0xf2/0x130 [ 359.491615][T28443] do_syscall_64+0x4a/0x90 [ 359.491715][T28443] ? irqentry_exit_to_user_mode+0x5/0x20 [ 359.491739][T28443] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 359.491764][T28443] RIP: 0033:0x4665f9 [ 359.491779][T28443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 359.491795][T28443] RSP: 002b:00007f7b9a00d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 359.491815][T28443] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 359.491828][T28443] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 359.491916][T28443] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 359.491928][T28443] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000002 [ 359.491940][T28443] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 09:39:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x13, 0x0, 0x0, 0x0, 0x0) 09:39:43 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xae, 0x0, 0x0, 0x0, 0x0) 09:39:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x17, 0x0, 0x0, 0x0, 0x0) 09:39:43 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0x7e35, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:43 executing program 4 (fault-call:8 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x14, 0x0, 0x0, 0x0, 0x0) 09:39:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x18, 0x0, 0x0, 0x0, 0x0) 09:39:43 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xaf, 0x0, 0x0, 0x0, 0x0) 09:39:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x15, 0x0, 0x0, 0x0, 0x0) 09:39:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x19, 0x0, 0x0, 0x0, 0x0) 09:39:43 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xb0, 0x0, 0x0, 0x0, 0x0) [ 360.636135][T28484] FAULT_INJECTION: forcing a failure. [ 360.636135][T28484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.649473][T28484] CPU: 0 PID: 28484 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 360.658100][T28484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.668682][T28484] Call Trace: [ 360.672144][T28484] dump_stack+0x137/0x19d [ 360.676501][T28484] should_fail+0x23c/0x250 [ 360.680948][T28484] should_fail_usercopy+0x16/0x20 [ 360.686058][T28484] _copy_to_user+0x1c/0x90 [ 360.690516][T28484] simple_read_from_buffer+0xab/0x120 [ 360.695956][T28484] proc_fail_nth_read+0xf6/0x140 [ 360.700905][T28484] ? rw_verify_area+0x136/0x250 [ 360.705776][T28484] ? proc_fault_inject_write+0x200/0x200 [ 360.711418][T28484] vfs_read+0x154/0x5d0 [ 360.715580][T28484] ? __fget_light+0x3f/0x260 [ 360.720181][T28484] ? __fget_light+0x21b/0x260 [ 360.724867][T28484] ? __cond_resched+0x11/0x40 [ 360.729580][T28484] ksys_read+0xce/0x180 [ 360.733773][T28484] __x64_sys_read+0x3e/0x50 [ 360.738920][T28484] do_syscall_64+0x4a/0x90 [ 360.743347][T28484] ? irqentry_exit_to_user_mode+0x5/0x20 [ 360.749027][T28484] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 360.755032][T28484] RIP: 0033:0x41937c [ 360.758946][T28484] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 360.778822][T28484] RSP: 002b:00007f7b9a00d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.787282][T28484] RAX: ffffffffffffffda RBX: 000000000000082d RCX: 000000000041937c [ 360.795393][T28484] RDX: 000000000000000f RSI: 00007f7b9a00d1e0 RDI: 0000000000000006 [ 360.803472][T28484] RBP: 00007f7b9a00d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 360.811574][T28484] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000002 [ 360.819550][T28484] R13: 00007fff8f5cd82f R14: 00007f7b9a00d300 R15: 0000000000022000 09:39:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:44 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000300)=""/166, 0xa6}], 0x1) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1a, 0x0, 0x0, 0x0, 0x0) 09:39:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x16, 0x0, 0x0, 0x0, 0x0) 09:39:44 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xb1, 0x0, 0x0, 0x0, 0x0) 09:39:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1b, 0x0, 0x0, 0x0, 0x0) 09:39:45 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x0, 0x0, 0x0) 09:39:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x17, 0x0, 0x0, 0x0, 0x0) 09:39:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1c, 0x0, 0x0, 0x0, 0x0) 09:39:45 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)={{0x0, 0x7, 0xb3, 0x0, 0x3f, 0x7, 0x8001, 0x97ce, 0xbf, 0x3, 0x7fffffff, 0xac9, 0xfffffffffffffff9, 0x5, 0x400}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000180)={{r2, 0x8000000000000, 0x49, 0x7, 0x200, 0x1, 0x7, 0x9b00, 0xe08d, 0x4, 0x1f, 0x9, 0x3, 0x37, 0x100000000}, 0x10, [0x0, 0x0]}) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r7], 0x7) 09:39:45 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xb3, 0x0, 0x0, 0x0, 0x0) 09:39:46 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x18, 0x0, 0x0, 0x0, 0x0) 09:39:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1d, 0x0, 0x0, 0x0, 0x0) 09:39:46 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xb4, 0x0, 0x0, 0x0, 0x0) 09:39:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x7ffff000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:46 executing program 2: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x936, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x4543, 0xd99e, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x758b, 0xe944, 0x1, &(0x7f0000000340)={[0x1f]}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r7, r8], 0x7) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000440)={{r9}, 0x1ff, 0xffffffffffffff00, 0x1000}) 09:39:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x19, 0x0, 0x0, 0x0, 0x0) 09:39:46 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xb5, 0x0, 0x0, 0x0, 0x0) 09:39:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1e, 0x0, 0x0, 0x0, 0x0) 09:39:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1a, 0x0, 0x0, 0x0, 0x0) 09:39:46 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xb6, 0x0, 0x0, 0x0, 0x0) 09:39:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x21, 0x0, 0x0, 0x0, 0x0) 09:39:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:47 executing program 2: r0 = syz_io_uring_setup(0x43df, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2ea, 0x0, 0x0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x58}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x4580}, {r2, 0xc024}], 0x2, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000300)={[0x7]}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r7], 0x7) 09:39:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1b, 0x0, 0x0, 0x0, 0x0) 09:39:47 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xb7, 0x0, 0x0, 0x0, 0x0) 09:39:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22, 0x0, 0x0, 0x0, 0x0) 09:39:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080000010) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1c, 0x0, 0x0, 0x0, 0x0) 09:39:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x23, 0x0, 0x0, 0x0, 0x0) 09:39:47 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xb8, 0x0, 0x0, 0x0, 0x0) 09:39:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1d, 0x0, 0x0, 0x0, 0x0) 09:39:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x24, 0x0, 0x0, 0x0, 0x0) 09:39:47 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r5 = socket$inet6(0xa, 0x80000, 0x80) signalfd(r5, &(0x7f00000001c0)={[0x5]}, 0x8) sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0xd) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r7], 0x7) 09:39:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:48 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xb9, 0x0, 0x0, 0x0, 0x0) 09:39:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004104) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1e, 0x0, 0x0, 0x0, 0x0) 09:39:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x25, 0x0, 0x0, 0x0, 0x0) 09:39:48 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) sendfile(0xffffffffffffffff, r3, 0x0, 0x8) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r4, r5], 0x7) 09:39:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x26, 0x0, 0x0, 0x0, 0x0) 09:39:48 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xba, 0x0, 0x0, 0x0, 0x0) 09:39:48 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x14c, r7, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xed4, 0x75}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x44b}, @NL80211_ATTR_SCAN_SUPP_RATES={0x100, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xfb, 0x0, "787babc858e8b9339f8021460d20366c732d6a9b871d90695619d82807bd38db7b096d006427a2493959e24534c390badc54ec4308d9573444f38dec1f71e2b59d9c05f180452dd7607c6f409cbc4e10b1b799b09b3324a6f265eb699ccb4e05cc1faa4fb246ca6481d4bb7798acfb356679c0d30aa4384d3cd41c2bb41611d5d84073582a158701f3063d850b6c99c67d90a13f324c6593c8cfca4def37ea86e4b530d7f9a201c3e924be2669038a99d2052a0894f87b5cb106d2aa6d381feab886e1c03142f0b2db1beb7059760eca1b3ce173793359071af90eb933812c936b52ac4a837f8b9f6121f2c1b7fbe5816a3d4f20043e88"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffc}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008080}, 0x5) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r8], 0x7) 09:39:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x21, 0x0, 0x0, 0x0, 0x0) 09:39:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x27, 0x0, 0x0, 0x0, 0x0) 09:39:48 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xbb, 0x0, 0x0, 0x0, 0x0) 09:39:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22, 0x0, 0x0, 0x0, 0x0) 09:39:49 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xbc, 0x0, 0x0, 0x0, 0x0) 09:39:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x28, 0x0, 0x0, 0x0, 0x0) 09:39:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004106) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:49 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0xb69c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000738000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) splice(r4, &(0x7f00000001c0)=0x5, r2, &(0x7f0000000300)=0x9, 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000340)=0x3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r7], 0x7) 09:39:49 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xbd, 0x0, 0x0, 0x0, 0x0) 09:39:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x29, 0x0, 0x0, 0x0, 0x0) 09:39:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x23, 0x0, 0x0, 0x0, 0x0) 09:39:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0x0) 09:39:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x24, 0x0, 0x0, 0x0, 0x0) 09:39:49 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xbe, 0x0, 0x0, 0x0, 0x0) 09:39:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:50 executing program 2: r0 = syz_io_uring_setup(0x47fe, &(0x7f0000000240)={0x0, 0xe09, 0x20, 0xffffffff}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000580), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000540)=0x4005, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/38, 0x26}, {&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f0000000440)=""/208, 0xd0}], 0x3, 0xfffffff8, 0x7) sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}, {{&(0x7f00000017c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="ee305fd615804d9b2ed72740388111498bbe55a936e6d792386d00ba0ad074600869893f6d261e27edabd3925c47c82f92fbc125ddbf64551ce44bbfa32ec026685e7eb208f3d26aca18a4e5256d52106a03dc24cc5db0bbbfd8933db77a298d799b25dcffb703c1dd075a0b60dc5d5377d9b573fa56ae5a7e", 0x79}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000600)="b660008b05ebaa2283a6195794562852482e862f690ba78586232fc1d8233bc4d7a0a1c2b051", 0x26}], 0x4}}], 0x2, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2b, 0x0, 0x0, 0x0, 0x0) 09:39:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x25, 0x0, 0x0, 0x0, 0x0) 09:39:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x80000008000410a) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:50 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xbf, 0x0, 0x0, 0x0, 0x0) 09:39:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2c, 0x0, 0x0, 0x0, 0x0) 09:39:50 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xc0, 0x0, 0x0, 0x0, 0x0) 09:39:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x26, 0x0, 0x0, 0x0, 0x0) 09:39:50 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xc1, 0x0, 0x0, 0x0, 0x0) 09:39:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2d, 0x0, 0x0, 0x0, 0x0) 09:39:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x27, 0x0, 0x0, 0x0, 0x0) 09:39:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x80000008000412e) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:51 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xc2, 0x0, 0x0, 0x0, 0x0) 09:39:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2e, 0x0, 0x0, 0x0, 0x0) 09:39:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x28, 0x0, 0x0, 0x0, 0x0) 09:39:51 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = memfd_create(&(0x7f00000017c0)='{\x00', 0x2) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000001800)={0x3, 0x1, 0x1000, &(0x7f0000002080)=""/4096}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r7], 0x7) 09:39:52 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xc3, 0x0, 0x0, 0x0, 0x0) 09:39:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2f, 0x0, 0x0, 0x0, 0x0) 09:39:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x29, 0x0, 0x0, 0x0, 0x0) 09:39:52 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xc4, 0x0, 0x0, 0x0, 0x0) 09:39:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0x0) 09:39:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x30, 0x0, 0x0, 0x0, 0x0) 09:39:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2b, 0x0, 0x0, 0x0, 0x0) 09:39:53 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xc5, 0x0, 0x0, 0x0, 0x0) 09:39:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x80000008000414f) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x31, 0x0, 0x0, 0x0, 0x0) 09:39:53 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xff, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000880), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa24}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa013}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1790, &(0x7f0000000180)={0x0, 0x4167, 0x8, 0x3, 0x251, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_enter(r3, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) preadv(r5, &(0x7f0000000800)=[{&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/103, 0x67}, {&(0x7f0000000680)=""/170, 0xaa}, {&(0x7f0000000740)=""/143, 0x8f}, {&(0x7f0000000380)=""/55, 0x37}, {&(0x7f00000005c0)=""/74, 0x4a}], 0x6, 0x3fc, 0x3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x3a529000) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r7], 0x7) 09:39:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x32, 0x0, 0x0, 0x0, 0x0) 09:39:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2c, 0x0, 0x0, 0x0, 0x0) 09:39:53 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xc6, 0x0, 0x0, 0x0, 0x0) 09:39:53 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xc7, 0x0, 0x0, 0x0, 0x0) 09:39:53 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x6, 0x101, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x0, &(0x7f0000000700)="5c86c5cd77") ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)="be9ff483111ec7c05a6e35766a9c5cd98ed812fee8ee677c468e2d01bb01fd560342c1891c9b259ef048c5ac173518e9cd261fa6cbe6a89b00bbcac9c7a8fc13d6d5661f30c63f72be485d2065e695187bb1482dff9c9d341184640629dc64bb37212a404898297b90eb535ba521052c06a3f59c8a96155e941ed41bc723c4062d6dc6418cd0808ff3") ptrace$getregset(0x4204, r2, 0x2, &(0x7f00000005c0)={0x0, 0x10}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) 09:39:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2d, 0x0, 0x0, 0x0, 0x0) 09:39:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x33, 0x0, 0x0, 0x0, 0x0) 09:39:54 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2e, 0x0, 0x0, 0x0, 0x0) 09:39:54 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xc8, 0x0, 0x0, 0x0, 0x0) 09:39:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x34, 0x0, 0x0, 0x0, 0x0) 09:39:54 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xc9, 0x0, 0x0, 0x0, 0x0) 09:39:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2f, 0x0, 0x0, 0x0, 0x0) 09:39:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x30, 0x0, 0x0, 0x0, 0x0) 09:39:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp, 0x0, 0x401, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:54 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xca, 0x0, 0x0, 0x0, 0x0) 09:39:55 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x35, 0x0, 0x0, 0x0, 0x0) 09:39:55 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000737000/0x11000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x31, 0x0, 0x0, 0x0, 0x0) 09:39:55 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xcb, 0x0, 0x0, 0x0, 0x0) 09:39:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x302, 0x2, 0x3, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000040)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r3, 0x298c, 0x6561, 0x0, &(0x7f0000000100)={[0x1ff]}, 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x32, 0x0, 0x0, 0x0, 0x0) 09:39:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x36, 0x0, 0x0, 0x0, 0x0) 09:39:55 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xcc, 0x0, 0x0, 0x0, 0x0) 09:39:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x33, 0x0, 0x0, 0x0, 0x0) 09:39:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x80010, r0, 0xf995000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r2, &(0x7f00000000c0)=@ceph_nfs_confh={0x10, 0x2, {0x1, 0x7}}, 0x80040) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x37, 0x0, 0x0, 0x0, 0x0) 09:39:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:56 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xcd, 0x0, 0x0, 0x0, 0x0) 09:39:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x34, 0x0, 0x0, 0x0, 0x0) 09:39:56 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x100000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x38, 0x0, 0x0, 0x0, 0x0) 09:39:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000100)=""/27, 0x1b}], 0x1, 0xbf, 0x23b1) r2 = openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x20000, 0x100) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x35, 0x0, 0x0, 0x0, 0x0) 09:39:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x39, 0x0, 0x0, 0x0, 0x0) 09:39:56 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xce, 0x0, 0x0, 0x0, 0x0) 09:39:56 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x4800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x36, 0x0, 0x0, 0x0, 0x0) 09:39:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3a, 0x0, 0x0, 0x0, 0x0) 09:39:57 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:57 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xcf, 0x0, 0x0, 0x0, 0x0) 09:39:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x37, 0x0, 0x0, 0x0, 0x0) 09:39:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2007, @fd_index=0x1, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x110, r0, 0x65bd8000) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3b, 0x0, 0x0, 0x0, 0x0) 09:39:57 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_enter(r0, 0x6030, 0x1cc4, 0x2, &(0x7f0000000180)={[0x6]}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:58 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xd0, 0x0, 0x0, 0x0, 0x0) 09:39:58 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xd1, 0x0, 0x0, 0x0, 0x0) 09:39:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3c, 0x0, 0x0, 0x0, 0x0) 09:39:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)={0x581800, 0x104, 0x2}, 0x18) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0xb4c03000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x38, 0x0, 0x0, 0x0, 0x0) 09:39:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d, 0x0, 0x0, 0x0, 0x0) 09:39:59 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:39:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x39, 0x0, 0x0, 0x0, 0x0) 09:39:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3e, 0x0, 0x0, 0x0, 0x0) 09:39:59 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xd2, 0x0, 0x0, 0x0, 0x0) 09:39:59 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') connect$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x40, 0x120) pwritev2(r7, &(0x7f0000000880)=[{&(0x7f0000000380)="6f3f940e42ff06f50848e1579eb8b6091e4c81c317b80ab039", 0x19}, {&(0x7f0000000440)="e68bec040329aa8fe67fb84fcd7228496268d778e456ca300c2ea62a3f92d130379c28c065c0a715b61a602a6759d3431605933e01811fc2efbb45e0c78a64fdfc4205be5ed23d106aaf8f66c9e70c749365bba4080ad1d614448ca2e2793b4721e0d6981b83cf41c516e6ec19a7336b4b9a2564356c1e93684112e52e94513bc5943c5052667dd5663c95e31d21e0e1395d1a92d094f4c352fb431779a61b63e2cc6ca0dd773c5f2446f3b5eff50e92b75daac2f5e454c9", 0xb8}, {&(0x7f0000000500)="56c332550a5042aca8b0ff9cfdf998dd0b6434c5b91fcd26b7308155008fb06a2ec31b51828186c9286a5b8246f24c2067870e23c26b13a74b77eef306b5e3dc27b1c2bc2629a0a225066ef1227fd31a85311cc368b9ab4bf666c2ab850c8a4f6acd2e28b724d777eaabfb6ba28c1c75b338b82a3c24724b12801413f1a6a2f3930b86b9070ab886679c08c040435e57a7c571f6f384ea49371371", 0x9b}, {&(0x7f00000005c0)="a261d52b3ee14645bcbce1a9afe72381fa70ab26dab78da6576cacb77189bc1ea65d80e43fe4d663d3a70cdbb0c43f070ea4b0a77b9115a1def9cfb5a3cdb0dfad6535a06d29d770c4cfac1117598dd0979800e5165a90da093ced1fa137de33b55e062724cd659f8c55e52b9e0e9ab7579337505f7fdbda52028cd9048393d9", 0x80}, {&(0x7f0000000680)="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", 0xfc}, {&(0x7f0000000780)="c2cca29a457016a355f257d9e9d06f650d1e04190d5df102c49f1874cd001b7d36a915a72f8ee5b921c2e89017aecc8cb50c590767b05888e39b3edd", 0x3c}, {&(0x7f00000007c0)="cefc3398b9ac61b5403596d703ad1327e75d50e20b90012e4221b2ca8aaac3d976aa4d03a2b299b8e5639d18db3631493704ebc25a825268e403aa451cd839cdd449be981308f863e6c714a5404aaa14d340ac66cce388ca66560f0c430ccb8ba2c05d6f0aac1b2607e09ca2166c10c7db5d6969342f6175e298e680502ee3ca13dc4b93be8db3635eaeb14e3bb61251f4b4dd3200fd79a1deb0c8fcaf34dbc1433f6dfef42779f90c13879d", 0xac}], 0x7, 0x0, 0x1, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)={'syz0', "68a92a46ed7ffa9bfa9b4d86cf02bfdf315384f7dc88571e19d49e391d5027e46d81f9aed7d50c97cb80316ff697bc8183c698e691e479f5e3ed"}, 0x3e) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) perf_event_open(&(0x7f0000000940)={0x6, 0x80, 0x1, 0x4, 0x0, 0x2, 0x0, 0x4, 0xb5513105e9aa2ae3, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000900), 0x4}, 0x3008, 0xffffffffffffccbc, 0x1ff, 0x4, 0x5, 0x8001, 0x83d5, 0x0, 0x420454ab, 0x0, 0xffff}, 0x0, 0x3, r4, 0x9) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:39:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x420200, 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) ftruncate(0xffffffffffffffff, 0x3) io_uring_enter(0xffffffffffffffff, 0x2125, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_io_uring_setup(0xe59, &(0x7f0000000180)={0x0, 0x4, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x171b, 0x2c65, 0x1, &(0x7f0000000040)={[0x42b]}, 0x8) sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:39:59 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xd3, 0x0, 0x0, 0x0, 0x0) 09:39:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x41, 0x0, 0x0, 0x0, 0x0) 09:39:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3a, 0x0, 0x0, 0x0, 0x0) 09:39:59 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xd4, 0x0, 0x0, 0x0, 0x0) 09:39:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x42, 0x0, 0x0, 0x0, 0x0) 09:39:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3b, 0x0, 0x0, 0x0, 0x0) 09:40:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:40:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x43, 0x0, 0x0, 0x0, 0x0) 09:40:00 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xd5, 0x0, 0x0, 0x0, 0x0) 09:40:00 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) fsync(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r7, 0x3462, 0x8323, 0x2, &(0x7f00000001c0)={[0x20]}, 0x8) 09:40:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3c, 0x0, 0x0, 0x0, 0x0) 09:40:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r3, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d, 0x0, 0x0, 0x0, 0x0) 09:40:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x44, 0x0, 0x0, 0x0, 0x0) 09:40:00 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xd6, 0x0, 0x0, 0x0, 0x0) 09:40:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3e, 0x0, 0x0, 0x0, 0x0) 09:40:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x45, 0x0, 0x0, 0x0, 0x0) 09:40:00 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xd7, 0x0, 0x0, 0x0, 0x0) 09:40:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:40:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x41, 0x0, 0x0, 0x0, 0x0) 09:40:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x46, 0x0, 0x0, 0x0, 0x0) 09:40:01 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xd8, 0x0, 0x0, 0x0, 0x0) 09:40:01 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r1, 0x8000000) syz_io_uring_setup(0x2231, &(0x7f0000000180)={0x0, 0x32d7, 0x0, 0x1, 0x35a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000001d40), &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001d00)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r1, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f0000000680)=""/132, 0x84}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000940)=""/206, 0xce}, {&(0x7f0000000380)}, {&(0x7f00000005c0)=""/50, 0x32}, {&(0x7f0000000a40)=""/246, 0xf6}, {&(0x7f0000000b40)=""/236, 0xec}], 0x9, &(0x7f0000000d00)=""/4096, 0x1000}, 0x0, 0x100, 0x1, {0x3}}, 0x8000) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x800000080004105) syz_io_uring_submit(r4, r3, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r9, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r8, r9], 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 09:40:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x42, 0x0, 0x0, 0x0, 0x0) 09:40:01 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xd9, 0x0, 0x0, 0x0, 0x0) 09:40:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x47, 0x0, 0x0, 0x0, 0x0) 09:40:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x43, 0x0, 0x0, 0x0, 0x0) 09:40:01 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xda, 0x0, 0x0, 0x0, 0x0) 09:40:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x48, 0x0, 0x0, 0x0, 0x0) 09:40:02 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:40:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="a2f1e8dd715298f282f6ce0972b25b693db12e02d9742fcb4463c282d8a6dc584edfbfcbf6a5d760dda847b9c2f24eebe3ac02d73e7db3eee03c3c10ad7c1953d7bb35b949519b4e503f31", 0x4b) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) r2 = accept$packet(r1, 0x0, &(0x7f0000000140)) preadv(r2, &(0x7f0000001940)=[{&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000180)=""/4, 0x4}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/201, 0xc9}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000300)=""/146, 0x92}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/196, 0xc4}, {&(0x7f0000000240)=""/60, 0x3c}, {&(0x7f0000001840)=""/242, 0xf2}], 0xa, 0x6, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x682, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:02 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xdb, 0x0, 0x0, 0x0, 0x0) 09:40:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x49, 0x0, 0x0, 0x0, 0x0) 09:40:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x44, 0x0, 0x0, 0x0, 0x0) 09:40:02 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:40:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x45, 0x0, 0x0, 0x0, 0x0) 09:40:02 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xdc, 0x0, 0x0, 0x0, 0x0) 09:40:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4a, 0x0, 0x0, 0x0, 0x0) 09:40:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x46, 0x0, 0x0, 0x0, 0x0) 09:40:02 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xdd, 0x0, 0x0, 0x0, 0x0) 09:40:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xd86, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @can, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, @nfc={0x27, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x8000, 0x6}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x2, 0x6, 0x8, 0x8, 0x0, 0x100000001, 0x408, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000200), 0x1}, 0x8000, 0xfffffffffffffff8, 0x200, 0x3, 0x6, 0x1000, 0x2, 0x0, 0x2d, 0x0, 0x4}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x9) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) sendfile(r1, r0, &(0x7f0000000240)=0x1f, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x8001, 0x9, 0x4, 0x65, 0x3}}) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x3, 0x81, 0x80, 0x7f, 0x0, 0x5, 0x50009, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x40465, 0x3, 0x2, 0x1, 0x7, 0xfffffff8, 0xfa, 0x0, 0x200, 0x0, 0x20}, r4, 0x10, r5, 0x1) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/bus\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1071fa7, 0x0) 09:40:03 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:40:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4b, 0x0, 0x0, 0x0, 0x0) 09:40:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x47, 0x0, 0x0, 0x0, 0x0) 09:40:03 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r7 = open(&(0x7f0000000180)='./file0/file0\x00', 0x800082, 0x30) io_uring_enter(r7, 0x783a, 0xbe10, 0x1, &(0x7f00000001c0)={[0x7]}, 0x8) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:40:03 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xde, 0x0, 0x0, 0x0, 0x0) 09:40:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r5 = fsmount(r1, 0x1, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r2) sendfile(r3, r4, 0x0, 0x800000080004105) sendfile(r1, r0, &(0x7f0000000040)=0x93, 0x80000000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4c, 0x0, 0x0, 0x0, 0x0) 09:40:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x48, 0x0, 0x0, 0x0, 0x0) 09:40:04 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xdf, 0x0, 0x0, 0x0, 0x0) 09:40:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4d, 0x0, 0x0, 0x0, 0x0) 09:40:04 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x49, 0x0, 0x0, 0x0, 0x0) 09:40:04 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xe0, 0x0, 0x0, 0x0, 0x0) 09:40:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:40:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x3, 0x1, 0x7f, 0x0, 0x1, 0xc024c, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xe54, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x400, 0x200, 0xd6, 0x7, 0x5, 0x100, 0xf0, 0x0, 0x20000000}, 0xffffffffffffffff, 0xe, r1, 0x8) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4e, 0x0, 0x0, 0x0, 0x0) 09:40:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4a, 0x0, 0x0, 0x0, 0x0) 09:40:05 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xe1, 0x0, 0x0, 0x0, 0x0) 09:40:05 executing program 2: modify_ldt$write2(0x11, &(0x7f00000004c0)={0x2, 0x20000800, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x738e, &(0x7f0000000180)={0x0, 0xea1d, 0x2, 0x2, 0x12b, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_enter(r3, 0x39fb, 0x4000003, 0x2, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000380)='net/icmp\x00') sendfile(r4, r6, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r7, r8], 0x7) 09:40:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4f, 0x0, 0x0, 0x0, 0x0) 09:40:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4b, 0x0, 0x0, 0x0, 0x0) 09:40:05 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xe2, 0x0, 0x0, 0x0, 0x0) 09:40:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x50, 0x0, 0x0, 0x0, 0x0) 09:40:05 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xe3, 0x0, 0x0, 0x0, 0x0) 09:40:05 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x11d0, 0x2, 0x0, 0x229}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000737000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0xfffffffd, &(0x7f0000000080)={0x0, 0x140e, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) io_uring_enter(r0, 0x270, 0xfbd9, 0x3, &(0x7f0000000180)={[0x7]}, 0x8) 09:40:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 09:40:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4c, 0x0, 0x0, 0x0, 0x0) 09:40:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2007, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x51, 0x0, 0x0, 0x0, 0x0) 09:40:06 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xe4, 0x0, 0x0, 0x0, 0x0) 09:40:06 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000180)=0x8, 0x4) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0xfffffffc}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r7], 0x7) 09:40:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x52, 0x0, 0x0, 0x0, 0x0) 09:40:06 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xe5, 0x0, 0x0, 0x0, 0x0) 09:40:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4d, 0x0, 0x0, 0x0, 0x0) 09:40:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x53, 0x0, 0x0, 0x0, 0x0) 09:40:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4e, 0x0, 0x0, 0x0, 0x0) 09:40:06 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xe6, 0x0, 0x0, 0x0, 0x0) 09:40:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9f, 0x0) 09:40:07 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xdc, 0x41, 0x20, 0x70bd2d, 0x25dfdbfd, {0x1c}, [@generic="1894236470f186f695dffa9b588590d01b1daab8cd20cb8b40c1d8479a479b28ba8192170074958af2285ef84cd62b11695becb0f6d485f345fde7290297621c733987bb78695c87b76ead0a4e0dab5dbbed238cafde051c5b9419fc14f4aa5c9b0164797ba26ab7f39976c3f1df7cbba6f30c65f335d9745de145a0ba8f4f5794b72c5407bfc8c8fcb77a72d22063c819eac16d6784038baee70ace83d7a9b6441b3f5ae874137ce37832bbaf2a5dc62859f5637b94d443dd1fd8e6c031c37ecc92f71fae19c2"]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x28849dacbb19953f) sendfile(r2, r3, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10010, r3, 0x55d46000) r4 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x76, 0x3f, 0xfc, 0x5, 0x0, 0x200, 0xbd430, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x9, 0xa3c}, 0x0, 0x3, 0x25, 0x9, 0x8, 0xff, 0x0, 0x0, 0x7, 0x0, 0xd74}, 0xffffffffffffffff, 0xd, r0, 0x1) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x5c, 0xfde, 0x3f, 0xceb3, 0x6}, {0x1, 0x7, 0x961, 0xffffffffffffffff, 0xfffffffffffffff7}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 09:40:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4f, 0x0, 0x0, 0x0, 0x0) 09:40:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x54, 0x0, 0x0, 0x0, 0x0) 09:40:07 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000480)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xfffffffc, 0x8, 0x200000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_setup(0x6d9c, &(0x7f0000000300)={0x0, 0x9f31, 0x1, 0x3, 0xb6}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ee6000/0x12000)=nil, &(0x7f0000000380), &(0x7f0000000440)) io_uring_enter(r7, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:40:07 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xe7, 0x0, 0x0, 0x0, 0x0) 09:40:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x50, 0x0, 0x0, 0x0, 0x0) 09:40:07 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xe8, 0x0, 0x0, 0x0, 0x0) 09:40:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x55, 0x0, 0x0, 0x0, 0x0) 09:40:07 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x4023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x20, 0x8000}, 0x1001c, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:40:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x51, 0x0, 0x0, 0x0, 0x0) 09:40:07 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xe9, 0x0, 0x0, 0x0, 0x0) 09:40:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x56, 0x0, 0x0, 0x0, 0x0) 09:40:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9f, 0x0) 09:40:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x52, 0x0, 0x0, 0x0, 0x0) 09:40:08 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xea, 0x0, 0x0, 0x0, 0x0) 09:40:08 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) r5 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file0\x00', 0xfffffffffffffffa, 0x7, &(0x7f0000000800)=[{&(0x7f0000000440)="0ec17a98eee85d95ead2e128b7782f843e63769e7400afa4e3ab1ef792dcf8492e6d97c5eebc993269af64c5e8d19918e7314e2b40bb27d5295b1e1155df1bee5e2a05a8dbbc2277de7ec58568a28295898f4f202c94b54f0b917b21321d8e23521e0f32632962928a723108e3d8302f679dda8341ebd4b93ed0b754f633ba5355b34916ce4dc095dc7342f9f0d3710bd0b33d939c2d5582ae5392139b9f1e6b1c0099f4442520f9473c5a0d647b7bb7f33ee7c664ab6262305e6f4b66799a6d1c10dee07206", 0xc6, 0x101}, {&(0x7f0000000300)="145a734133f3c75d9a406443601f74aea5d196", 0x13, 0x7ff}, {&(0x7f0000000340)="0c48d84817342aa38508132226e64933c776a28ff0f46fe974d2f839771e399a54c6ab35dca64b17cc0902768db4cd60eacb4173023414a76ebada913aae18dbaabca55b03a5c2896c101b4a6da52198c4dd041a33086baef8d12e04", 0x5c, 0x800}, {&(0x7f0000000540)="e64cf2ed82e2984b69495e8b9c224463c3d525f4c02931ad83fa6a694bb28187cea369b5d975c85711c5684ff16499598710dca896cc2a96f68fe42c225c71907b2745eee6d1b55f4a8249db6d0442bb3f67414805b763475e45d5320e1aebea49cd4d5d0ccd332e34905395aacee0f588a960b475f3dc0035293d686162cdbcba5aa65f750e71d9ba658907295da039424094c656e3d7f23fe5efc01d747e1d9cdbf82b085049fa9c7a1dd13b7153d613c0c6d2aba7e2a15f1d3e761ce6896694cedfcaf55f749eb91a3e12840e3aeff60691de823c8696fdb48d4e0883fa3f540dc768e50ddb74bf7f3e8cdb2c646a17", 0xf1, 0x9}, {&(0x7f0000000680)="9b1551d3b8af75e59186616e289e91ec041c4d93deb7ba358ad4344f836db47a7321c28d0fdb86bb0138d6d599a3d54fa515d663b27a20184dbd6003e842242d1cf9970267d996e7", 0x48, 0x20}, {&(0x7f0000000980)="4b6fff1a8087773856e36866c5507ae5b225cb70f69391dc6bfcf7971049df69906364566138fa1cacf6b0f096406436176884c4116cbb79ca95346eb3c394552b5cf7bcb61616d389a867f55281b3d2ab38fa13f910ddcdde6de94805366905db850e2c39741811e00118254f8da40701f598882fb03b9d776c2934dc0552ecc696d9e339f6674607d5bc764dcdd9d30db05227df817c22e9cdee78c2a1c9f71c293bf4da19df69", 0xfeb3, 0x100000001}, {&(0x7f00000007c0)="5787a3105708f020", 0x8, 0x6f9}], 0x800800, &(0x7f00000008c0)={[{@fat=@sys_immutable}, {@fat=@discard}, {@dots}, {@nodots}, {@fat=@errors_remount}, {@nodots}, {@nodots}], [{@uid_eq={'uid', 0x3d, 0xee01}}]}) openat(r5, &(0x7f0000000940)='./file0/file0/file0\x00', 0x0, 0x8) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r7], 0x7) 09:40:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x53, 0x0, 0x0, 0x0, 0x0) 09:40:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x57, 0x0, 0x0, 0x0, 0x0) 09:40:08 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xeb, 0x0, 0x0, 0x0, 0x0) [ 385.708022][T29686] loop2: detected capacity change from 0 to 264192 09:40:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x54, 0x0, 0x0, 0x0, 0x0) 09:40:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x58, 0x0, 0x0, 0x0, 0x0) 09:40:09 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xec, 0x0, 0x0, 0x0, 0x0) 09:40:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x84, 0x0, 0x0, 0x0, 0xffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0), 0x0) [ 385.952438][T29686] loop2: detected capacity change from 0 to 264192 09:40:09 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xed, 0x0, 0x0, 0x0, 0x0) 09:40:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x55, 0x0, 0x0, 0x0, 0x0) 09:40:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x59, 0x0, 0x0, 0x0, 0x0) 09:40:09 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') fsetxattr(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="2ce11c11dd3b6f73782e6d6f756e74696e666f27"], &(0x7f0000000300)='\\\x00', 0x2, 0x2) sendfile(r4, r5, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000180)) sendmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r7], 0x7) 09:40:09 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @a}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount_setattr(r4, &(0x7f0000000100)='./file0/file0\x00', 0x1900, &(0x7f0000000140)={0x2, 0x100000, 0x100000, {r3}}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') fcntl$dupfd(r0, 0x406, r5) sendfile(r2, r6, 0x0, 0x9) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) [ 386.769024][T29740] ================================================================== [ 386.777139][T29740] BUG: KCSAN: data-race in compact_zone / compact_zone [ 386.784092][T29740] [ 386.786435][T29740] write to 0xffff88823fffad90 of 8 bytes by task 29742 on cpu 1: [ 386.794455][T29740] compact_zone+0x14a5/0x1da0 09:40:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9f, 0x0) 09:40:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x56, 0x0, 0x0, 0x0, 0x0) [ 386.794487][T29740] try_to_compact_pages+0x317/0x840 [ 386.794506][T29740] __alloc_pages_direct_compact+0x65/0x320 09:40:10 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xee, 0x0, 0x0, 0x0, 0x0) [ 386.794526][T29740] __alloc_pages_slowpath+0x5d4/0xb70 [ 386.794544][T29740] __alloc_pages+0x242/0x310 [ 386.794560][T29740] alloc_pages+0x21d/0x310 09:40:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5a, 0x0, 0x0, 0x0, 0x0) 09:40:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x57, 0x0, 0x0, 0x0, 0x0) [ 386.794578][T29740] __get_free_pages+0x8/0x30 [ 386.794601][T29740] io_uring_create+0x815/0x1870 09:40:10 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xef, 0x0, 0x0, 0x0, 0x0) 09:40:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x58, 0x0, 0x0, 0x0, 0x0) [ 386.794621][T29740] __x64_sys_io_uring_setup+0xe1/0x120 [ 386.794652][T29740] do_syscall_64+0x4a/0x90 [ 386.794674][T29740] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 386.794698][T29740] [ 386.794709][T29740] read to 0xffff88823fffad90 of 8 bytes by task 29740 on cpu 0: [ 386.794726][T29740] compact_zone+0x1481/0x1da0 [ 386.794744][T29740] try_to_compact_pages+0x317/0x840 [ 386.794767][T29740] __alloc_pages_direct_compact+0x65/0x320 [ 386.794787][T29740] __alloc_pages_slowpath+0x29a/0xb70 [ 386.794805][T29740] __alloc_pages+0x242/0x310 [ 386.794820][T29740] alloc_pages+0x21d/0x310 [ 386.794837][T29740] __get_free_pages+0x8/0x30 [ 386.794853][T29740] io_uring_create+0x815/0x1870 [ 386.794872][T29740] __x64_sys_io_uring_setup+0xe1/0x120 [ 386.794896][T29740] do_syscall_64+0x4a/0x90 [ 386.794916][T29740] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 386.794938][T29740] [ 386.794940][T29740] Reported by Kernel Concurrency Sanitizer on: [ 386.794946][T29740] CPU: 0 PID: 29740 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 386.794967][T29740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.794983][T29740] ================================================================== 09:40:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) 09:40:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5b, 0x0, 0x0, 0x0, 0x0) 09:40:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) ioctl$FIOCLEX(r1, 0x5451) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:10 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xf0, 0x0, 0x0, 0x0, 0x0) 09:40:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x59, 0x0, 0x0, 0x0, 0x0) 09:40:10 executing program 2: syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x2, 0x1e2, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r5], 0x7) 09:40:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5a, 0x0, 0x0, 0x0, 0x0) 09:40:11 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xf1, 0x0, 0x0, 0x0, 0x0) 09:40:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5c, 0x0, 0x0, 0x0, 0x0) 09:40:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = pidfd_open(0xffffffffffffffff, 0x0) io_submit(0x0, 0x4, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffc, 0xffffffffffffffff, &(0x7f00000000c0)="ff4e534fa0e72b898c97bb1cab8a1ffa3e035d09515ee992ca059d576ae121d5ab29942ec713e4c2930541a6796f58fcc7986e182abc6d8f0038ae329e53c3e6ddda76f7158a159fafbdabd275ae78d6fa7c53abb7c3993824b92ee654f0df0a2ca789c7cf1fbcf7e9843063595018b3c72f0e7beab02e", 0x77, 0x100, 0x0, 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000440)="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", 0xfe, 0x6, 0x0, 0x2, r2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x7, r3, &(0x7f0000000200)="3a0bc0f67f14f56ffce4740d278b7dd192ea4945dbd97f32f91d849b01f749465d3634bbc2a3c98b790e752b3f02153fd5d99bfa0d65d3a65c4899ab6d3a48435aeef04ae4e38b511751bad4d1af218e7948aeb8cf4d6e389f1da0d2e19f5cd6b3e28692d4a6b8ecfca9640b40cda0f2eea4cfb91849063e4d436d724df1d8e862db1ed2b53a4a1546", 0x89, 0x1, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x1ff, 0xffffffffffffffff, &(0x7f0000000300)="f4431c546f6fbbf4d960fed63d0be2674180a4298cf0160b2b65adc37df2afaab5dc48616658c198f77429983d88c92e2d8af8c5eb6e2878dd3517ff530f9f666fe0aaa0397e99a73fd6f4415fab21082439f9ef", 0x54, 0xffffffffffff0000, 0x0, 0x2}]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5b, 0x0, 0x0, 0x0, 0x0) 09:40:11 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xf2, 0x0, 0x0, 0x0, 0x0) 09:40:11 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xf3, 0x0, 0x0, 0x0, 0x0) 09:40:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5d, 0x0, 0x0, 0x0, 0x0) 09:40:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) 09:40:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5c, 0x0, 0x0, 0x0, 0x0) 09:40:11 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) mbind(&(0x7f0000737000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x1, 0x6, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:40:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1, 0x6}, 0x0, 0x0, 0x0, 0x5, 0x400}, 0x0, 0x3, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) syz_io_uring_setup(0x35f8, &(0x7f00000000c0)={0x0, 0x55d5, 0x0, 0xfffffffe, 0x63, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0xe5a, &(0x7f0000000180)={0x0, 0xfffffffe, 0x2}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$LOOP_SET_FD(r2, 0x4c00, r6) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL, 0x20) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000002000)={0x8, &(0x7f0000002080)=[{0x66ac, 0xcf, &(0x7f0000001a00)="56d3183b3c82e7d06c1e480bfb4ceddcf4f49903a61cf4baad123d966e27e93792f7e4a22434bae1a7820df9a567397351244a6371299ec72eb7ff6a060388cd7949cc7811c833562692c383ca0231570de1936300d59d2cea1c1112b20af82187a393bf387da5033e48fdbfb6f8a98077ea45993b1a6ced3fdd90d563b243ac6fd412235df00c0b24d3ebe2d24e690415be1028b0eb9ae85d57011d32f085b0742d5f58553ec77944d6e8a3b3317062d76433a480647f823a8d6e6821e994af0d04b866e7ba43b402e9bbd8543b4a", 0x0, 0x1}, {0xb6, 0xfb, &(0x7f0000001b00)="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", 0x1, 0x1}, {0x9, 0xf1, &(0x7f0000001c00)="ac4bb555148e4a5c9f75e5e5ec8e3ffcf29d35711b0b1a6a308526a73e5cf1d8699e4417b536d0ff8c3888a1a6711edb506b189f675f60c2fea567e07b94fec57150672ca3b6a766bbb3c45fb4447781e3988244de4463be52da0dcb99feb16de9231f6b532b216f911e29b352317c9789ae1b4b0c9b7ac789ccedf812949e36782c5d97da5e6391cc4ecda7ec5a4487195518f778769a39725dec4c16017291200417cdf2d743c25efd143e71defc27e05cf3d9513446cc778296c443f09baef7739650402e06163317569a720db4224a99465f3f40153f6e762b193c873ebe3a35215ce671eb39b24a123514d3ac3edc", 0x1}, {0x6642, 0x54, &(0x7f0000001d00)="14becf31bc3e17025430a0ac0fdf3c3b0589bba9b4f4b3ac5e3065289fa5cfa5d3f2704e0fb1e9a62a79ea5f408b87d9c6c23b886573f3cc56a95ad9b4a5a76308bfb22a7f04f6889d1d9ef64554e8762881227a"}, {0x0, 0x3d, &(0x7f0000001d80)="4f9eb9bdcbcc91fc24785b89154b5eca4c3ffcbda3b3da7d99a406eba7e6786c03d89bba644bead0c87a5a5315be4c2a9bcc43c9146c03ff3402d88dfb", 0x1}, {0xab3d, 0x5c, &(0x7f0000001dc0)="ccbfa17100c039f6afc6e54904ccbd909b1357db2a0394104df700aa850abfad9d6ecfb4a77b5e6d772552f4c3793c49022f2d900f01ad5a490d0d108fc5f6a24383d0dca079978ee7b2b9843a99656788e876fdf5adb138f957282d", 0x1, 0x1}, {0x3aa8, 0xd8, &(0x7f0000001e40)="809301028c73dcf41b015e1673fc935a787b0b9eb5507428544057e770c9d2480e4b42fba9fc0472ddc2ef7771e03f157580d5491abfcec79070020b4631ec84865e09d24a6d5e403b184aad00995039bc8dbab658252a2d53fac9df3b04a94a233c9da729605a5a41394d69659fec5ef94f9b5ae099a8afa823a28825ec136fb914beecaf1c408d7391532c8cdf2d6cfd30f53d7ca6d3fac70ca22480d652e268d4f81d394c5f23cbc3fe938c355e1145a9f02b4e53a19ecd82aae44dc0867d51cda1859ca67fbe20cb753a9065a175642a5f2306e24447", 0x1, 0x1}, {0xffff, 0xad, &(0x7f0000001f40)="c1ff0953f7474e88b1222ed53c36c2f1a66f82426983e1dee61872aff23a9001bec9590eec5121175c9f560739ceb534982523d27e2a2e4a2a6e8af3ca0f4459117e6eeac5f972f41e2a7f37af85c01b92b6a324d010a43d1526a5efeeb23e16a021ecb171aad7e4c7ea91ab113099c9a08c3e7a5642ab127133611a60e5dd58d3ffbf68d92148416990851d51e17dd4d3c540193b187a970df83f1d8dbfe82b8cc29517b99a09da4747761420"}]}) syz_io_uring_submit(r3, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7ff, 0x0, &(0x7f0000002180)="3a73aeca141d45aa909a3d726647dcfef90b0db1181e116a9a09aa7ff323a4033580cc49bd865bf95b87e2c71db05a8f611685dc2d643b2919e157c52f73a7480d20b4d7e99b09fd59d9d14610e8a71a084c29317e4cb5cc192b50a8082610be1c88299b23478a306608e728fe42a536b39875cd72cdfb4b2a6c619e2b0ccb02a9842b61fbdc942774e460bdb972bbe39fc7f0bb878e68316e94b6bdbd5c78f96a26492b6ae5c9760488054c9b27b6ff3b0eb0bb271d10e8b28e89391eafba70883a22309384643a8122c3bf3fc34a362058508dfa6d5713feeb554f582e9809c6043e2168e41991e3", 0x9, 0x0, 0x0, {0x2, r7}}, 0x0) 09:40:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5d, 0x0, 0x0, 0x0, 0x0) 09:40:12 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xf4, 0x0, 0x0, 0x0, 0x0) 09:40:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5e, 0x0, 0x0, 0x0, 0x0) 09:40:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5e, 0x0, 0x0, 0x0, 0x0) 09:40:12 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xf5, 0x0, 0x0, 0x0, 0x0) 09:40:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x6, 0x2, 0x0}, 0xfffffffd) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="077cb224fa5a28556e0c0a2d62c5774cccea7e739d084e501eac2062aa44c0137da4ff51fa76e83500d820c666aaadb8ecc6b779340616a9548e48b3dfeccce8c13646a2953da19bccb3de910a52ec", 0x4f}], 0x1}}], 0x4000000000001d0, 0x24044075) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {}, {r0, 0x2106}, {r0, 0x2004}, {0xffffffffffffffff, 0xb00a}, {r1, 0x3116}], 0x5, &(0x7f0000000180)={0x77359400}, &(0x7f0000000100)={[0x7ffb]}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) [ 389.865872][T29879] syz-executor.1 (29879) used greatest stack depth: 10440 bytes left 09:40:13 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xf6, 0x0, 0x0, 0x0, 0x0) 09:40:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5f, 0x0, 0x0, 0x0, 0x0) 09:40:13 executing program 2: r0 = syz_io_uring_setup(0x29e1, &(0x7f0000000240)={0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x80000004, 0x4, 0x0, 0x27}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0xc2d5, 0x0, 0x1, r4}]) io_pgetevents(0x0, 0x8, 0x2, &(0x7f0000000180)=[{}, {}], &(0x7f00000001c0)={0x0, 0x989680}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') sendfile(r5, r6, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x8) 09:40:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 390.011802][T29871] syz-executor.1 (29871) used greatest stack depth: 10280 bytes left 09:40:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x60, 0x0, 0x0, 0x0, 0x0) 09:40:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5f, 0x0, 0x0, 0x0, 0x0) 09:40:13 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xf7, 0x0, 0x0, 0x0, 0x0) 09:40:13 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x100000d, 0x40010, r3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:40:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x61, 0x0, 0x0, 0x0, 0x0) 09:40:13 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xf8, 0x0, 0x0, 0x0, 0x0) 09:40:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x60, 0x0, 0x0, 0x0, 0x0) 09:40:14 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f0000000040)=[{r2, 0x8011}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={[0x101]}, 0x8) io_uring_enter(r1, 0x883, 0xdb61, 0x1, &(0x7f0000000240)={[0x8]}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/205, 0xcd}, {&(0x7f0000000280)=""/9, 0x9}, {&(0x7f0000000180)=""/5, 0x5}], 0x4, 0x0, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:14 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xf9, 0x0, 0x0, 0x0, 0x0) 09:40:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x62, 0x0, 0x0, 0x0, 0x0) 09:40:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x61, 0x0, 0x0, 0x0, 0x0) 09:40:14 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000300), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) readahead(r0, 0xb3be00000000000, 0x44) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000180)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000001c0)={0xe03, 0x13, 0xa209}) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) sendfile(r3, 0xffffffffffffffff, &(0x7f00000000c0)=0x6144, 0xfffffffffffffffa) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0), 0x0) 09:40:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) 09:40:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x62, 0x0, 0x0, 0x0, 0x0) 09:40:15 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:40:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x63, 0x0, 0x0, 0x0, 0x0) 09:40:15 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xfa, 0x0, 0x0, 0x0, 0x0) 09:40:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2000, @fd_index=0x3, 0x1ff, 0x0, 0x0, 0x6, 0x1, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(r0) io_uring_enter(r1, 0x90a, 0x44e7, 0x3, &(0x7f00000000c0)={[0x3]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000040)={0x6, 0x1, 0x9, 0x2, 0x9, "b1e142ab9e0710857d889aa4c796cda6f277fb"}) sendfile(r2, r3, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x63, 0x0, 0x0, 0x0, 0x0) 09:40:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x64, 0x0, 0x0, 0x0, 0x0) 09:40:15 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xfb, 0x0, 0x0, 0x0, 0x0) 09:40:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x64, 0x0, 0x0, 0x0, 0x0) 09:40:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x65, 0x0, 0x0, 0x0, 0x0) 09:40:15 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000280)='./file1\x00') r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) [ 392.439243][T29979] syz-executor.1 (29979) used greatest stack depth: 10072 bytes left 09:40:15 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xfc, 0x0, 0x0, 0x0, 0x0) 09:40:16 executing program 2: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x85, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000737000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_io_uring_setup(0xe59, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6934, &(0x7f0000000180)={0x0, 0xe270, 0x0, 0x1, 0x378, 0x0, r4}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) sendfile(r3, 0xffffffffffffffff, 0x0, 0x800000080004105) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x24044075) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r6], 0x7) 09:40:16 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xfd, 0x0, 0x0, 0x0, 0x0) 09:40:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x66, 0x0, 0x0, 0x0, 0x0) 09:40:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x0, @fd_index=0x2, 0x714, 0x0, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x278b, 0xf267, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) 09:40:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x2a000400) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x65, 0x0, 0x0, 0x0, 0x0) 09:40:16 executing program 0: r0 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xfffffffffffffe5c}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0xfe, 0x0, 0x0, 0x0, 0x0)