f", 0xc1, 0x0, &(0x7f0000000380)="6b4d8efb3d65dfd359aaaf1d835be56a1e1dd5bd9ac1f94173b4ef963b81ac5c17f398a30e0a39c588ab6e1829e501a3a6082c61ea2763058b64fac4338ec36e8d87962d7efd1bb7e0dc14b10579c83c9d0efc5bd8cb41168e32d06e33f9572bab495f14761af6e417158c367cf9af4349c265367775f4856efcd4449004f272376935864a72f095c4ddbfdc6c1d6394ef2bfd98b3f7d38a26d9d2e4c78906f76d82f12ce429ca4097c48545d73e6049d8793c34aed85cea0e49e74b1597bffed2"}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, 0x0, 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b7a", 0x2d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000540)="664f52b39e297bf29ecb3e12e5c9e3aa2169e60975ec21d140e6bc74e82fa86a7e8b22a0a8155a1563dcef8e9d0e8418f57edd7e066a809c6552fc59e7e2f4445be47782e0f867ecd8f3041d6569dcb6379234faf84adc304d551952809e0cb92fca40800b4aa5dff8e365cc79dae4da39aef292a6c6c4a67ade7ed279e8bcd82b7dc1b26ae576dd03181814d09f53d75a1b78d59d7b64740a1b0e14be77d648de3f93d4011369fed873051c92aa7bd7010438d161bdf04cef538c81339ea442e9d2e56e70ef3ff3dc9d663121710d844befc48f2e65f1ca3bc4c2422c7a7496a3cd36a1e68e60ca9d87c26675dbe03ff23d6e57874c21d799e586b6a1f2c87110c87e6110cc80fb5bf7777144c7b86a38fc9b33900a32f638894befb50ca564660d2ed3f73c9b59c6f41b8dd4a7f98200b8ee84498b1fbf6d9035c178507f17624e41dc0f86968ac352d636a32d1dcdc51c247188ae05fc328bf3619a8f8f8a291492f3efd55b28aac23299219b1ccd6056939e5a934f775d891ba12dbcd08123d866b22d15ca5563b42e19c10c8244bc951911f9c33cb9b548219d641ab538cce67815d7a5d3ef1c9410264c4d01db1564a6744bab64eb9340f597ab703696e19d6ee039c06ae3468eccc7d5e755b58e4ce1be57b804719091e390af1a33ef4469263b7c8a7b39f2f5e2594e9c33c18f3fadabcaf70f56f75d1ba114fcbb462a7b079907337a320861d2d2ca8f7a6af6072426bdf9befb1cb0c7c6366cba90a53e77aeb7f55d4e6382fa4db03470b836e55ef120d523e5b880c1a228884fc353d33a56135086a07dd19fb24c4f120715fb7d0681fa60f4bdd9b3d69452cc831c18d0c29a04a1a3c7719ed92a7e39b0f30f1d07df11a79c0e66361ac9ca059b5982f63bb3b5a8b2534d17b8b0b2d4c60000576c1cadb130a75f0e16fbb651dd293318fa0a61af14adb966860640d0eccb01e0715fb4d6204435e791c5590630a555e4b1bff08b5ccff80c6e718f4a6f44d42f15a6fe66e5c2c46145b091c081324fff4ba4cd960889a9a5b42f03f18d0abc3ec3b7e0fe85550009a1d025e412002214afbe33f6e8cafd79ae4c8fd3bd4b634d6957f87f698594e206706fd1633ddb759416fded9a9883e1e83743f1068069cda514a8bf991325c526c825ca13866c87457f819fc16c7be6377e08c74200c12bc1a335271f86048840a515c123d0945c8dd301f6bcec344af79e4cbd0480b84b61cdcdfad92c136154e6cfe2a0be21e315447a6b6d902af40ac2c34d0653470740c7d2751542890e90092fc9361542dd66f3b23774827e95b144188317fa4da5a1a90f5de29fa11a001596cbfa015df4d046bbdc80e277cf082de126678739f33f440e68e8e6ea9a3a2a42116d48aa865d2a7053c999f1dd235232d67c174c61f80fe0864c51ab460acee53bbd7383d216698acf1a1a662656eed101f976a6975f5a231f8928bf94241e8225b55ab9438629c1dbc5f7515cb7edc5255fb01e9acc4d1a6f7d2c7c1491036a33356fa6a5492f8fe2b18ff67e13c3fce65a533418513d8fd7971e881cfb33394ff1be085b32f41d67308159d652cf1f7fb82af4ba1a8791fc126cb4fb816458dd6343f76602562a1c5d5c26611188578818861d1304ea676023ed52cd1c921287a0da8d9e1a904e73f3e7e23c5be01c36df3292485e6153a6f54d36542a04109c9f2fca103fa54ab225533e7a457e4f46be091f65d4e1ed58ebe7189199d3337c80e97e75a7f5ecc1bc35fda24aecff09116e9f17a20adba1fb28a708d9d9a310ffb02f476c5abef53405b7314d4b9fd107bf54f531cb3fab145001f7ecaff502a64f5b57564fe67fee82352e06b469f16a898acee9858fa79e8a59970c49ae4658afaf6a3e9ae423f827d2304394f4f83ef2ad6a5d2a2e1537b298974f39a70ee67c67e3d6853377a2959736688a07f69a540b71b32a7486edc5645f46c2a183bd949f88d018742c95964e9c33c5555e5dcd109d7bab16c32f83214d2a36536b0f840d6292858a29cd9ed48a4b2559548761054f414fb86dfaf76f22e170a13f07738f201b605710932a982df377c1151c587a2cde0d9f24df39b492601560f004e0ed34a94e4c5be815db23535d2039d0c7f0be3d7a6b020445448eac7ab6361e534c060a55424f2379be594cf25cbb0a4d55d1f17bb7a194d520b747e31699d364b4243beca7bf8d8b200a24cdd65c89e0429b9c65b8ce65d81c705849c5d7391410e7f95ad958408f687cea3f1f2b5da410a8791f213074a46ddcff28d0b26cc1c4c4d3e8fa482f9ed9ef86213aa1858c13c63ef9a5bda06229bc55eab0bc505497929b7406397e3f221c4d0ce70133db2e6cd6eb87f25811aae09f9ef88bce04725acc0b8dc85226023411261cadbe439d5fa0215d214755bbcfbd85754b138fbd38435fb7e9ef53cdc2f101f05969fb2eaaa7ad5d6a7c472519924c55245814bf7d830829fd80069bc61bb79e797621f4f21e11ae70483be2f8b565e4c0135d660b4f8bed5ee9e6819f6ec8b19568b19cab675efc379d5acee95d5d8ffcead55d95763b2eddf4d34f6636962ad5a3f2ca8806294593a6a61dbadd574a56460755ea9088277404637b675c5852d745d92bb3f1d4fbd481e89841558d4f1fdb8dec7c02381455362bd5bb279ffad771c0b6f68f12930f993195c59f7b23e1f0e0e36a1624799340d6903071bfdc1a46db2381182a1ca4c4d7d62e65fb533fb0e3456c07ba0e80192a42ee749496367e7c6ed084fb20c57bebbd516eb834032a252774e4d49900b6df8c235ac57c10a01f017063b8e5a4af53b214849384aded0984fec21cd9f200cbe358dee8aab2f269b13a2899cc5880a154c5fd6f23aefe83848678a93a7b0f1dc52e1e0fba6b2218aca85b08f8e856590963100f07b809f8d1b80bbf6e8f623587c1611f73ac5465013ba2165f0d17a966b07b97862fb6912674d653852ea982c97017fe901a1e37c69264fc8b2bba48f128e1128e702b92df350834231f4d4041e434b2485a6c315eddf8bad9a92a56e31d9f3e39ce3c25e5f2e337d2219bb93bba9376d8adc1337c7fcfcef2df6c5d46e9793796162e56c21cdcf1835c342c54c06d8527b0e4c18bbf8b28ea822487074216454602f8424042b87f43506354db4472a85aba8f3dec656d8a913962e09be20d0a81cd6437b19ce569f263e3d16f00206c94b8891b765aea4a0e3103abab83f6d77379b765c37e45b6621f7f82d665ec1a1de1f19be324a8d5ca82d1caed83b4935bcdfbdf51f00712f1e83b241bfb64016971b337a279656829ebd6874e1a0db644ccc013e28544cb13df14b27081681910fd51aa83458685c4ce698b7b7fd6fcbfa3788542151d525b74123be860f092a8f721c73d4693046cc0791c2a9e42c3ae332fcac7d5192797ce7c7abc19b4c913dcc007aeec1c28ca79c7b8741912ddcc1eb5171d0d08f642f743e8c4a241cc0edcef5a09b4f0d7c50545cc6ea94ebda4033ed03e8ef79f7d20aefa432ee1111db8c3af38cf554b8edd82f91a7bc0968a4b9a73a70289e71dd210f2110da1ea25c8a887b9cac6010eb63bba00d4fb73ab449bcf887d15f9cb285b469920188d0df1f526354779667bdd0b3cd4441e211d4707180fc7f841d681615dee474830a3fbedfc50b4a8edb6a03bee38a08ee9af567a383665953e5a2ab6bae02d02b8693635724e0b1e1124948168786ef18bc70f81d531fbeec101d4eb2fba998f9168e1bc242e9d1d163ab1cd1b9ff96ff84ab1eff38048060293cef601dd8bbdb66f0298310669eb7835af78e22a38b13bf8ca6de77b8440a25673fb91298b18a2f8eb567ba982099322fc403510a6b5cf3c3a6ecf9011e914f7134686b1a25b971710349dad3748d148a8779118e26d1adf5adea9a21c06276c2997bdb4adf198434b7f17f377d07cc78a2f56db8b443700541e6aa395bb4a5e43e38f7b6e5a22248f06278e14a5ff7bf0b06388b0655f8f06343568edc7bdb6df32e78147ec78dbad85f37e7d528a7b3862fc40fc52cafd07339f99351d9a509972abee590c22a23872f09221afa46f5ed5613ed7047631209bf8f193c18131a31757cd64880e6cb9aa64fad9d1b943d39fd8b26f2deb5f63c10d1535af0efe76d6e91603fad869fee9916de5b12fed6956441beb4101822f167bb64b35fe584961e9649252c2384a74f12c010a0470bfff7711ff88d74670719890c7d464083538289500395dc65e02ab15241655d5712f7025f4650aca47dbfb72c65ee0a0c52233abccab81f7a0618c95bf44d1a034e10bd7c68bbdb7f8629c24fb6e13730a72f4f91d575313f0ae271f946d8050a30f5139c92bfe25625f44b586b423202aebf39169c1821753b56d04bd39559b38d94c6241dd76c475202cf507656f5d8b2a730ae1e67792a58fed695f372c518c54727feacdb8663d07fa6ea71a7bcdcba46e81566412672646d0406bf93d5e3ce0eb9beb85a65573d2ba2cf31ba73ba4318d20fb9fd0e74c6012c1be2266af3a650f89a5edaa2fe43620f602230c5aa32437721ea4aa37b8a26486d55c5a92d9b2da57551e19d1b91fa5ec1bc20cd95beeba11a190f0b803959f36addd0e16d550d82205f9840fb65282f41b26aa24cb730dfce2aad40d6379e2655d3f938f19a74c6c5d07a44b6487dc11d5619a449cc50a97ef6983a90d730c1e2e8f9010b33f829baeec948d82bf3f3908a96494962ac1f39561430f5a000d7bfe58fdcb98bc03d6ff84a1dcf5fc58890be5a67e32f68df953d920c2438d13a4c6832cfa8ce206fe4e18e7ccb110338224aa956f341bcfe0da0df2476c65960f13a7966b7e2e2d1ee7b5f4189c5cafbe0729b01c9123613288646053da6750377e7e96df9da1718973c59cd81aebf947df58730022e5536996c78fe2a1d5c941a6a7936b2f05620e7694d5cbd2b194f847568dfea9317f3edf648ad37c1e1a7fbed405df7834a1293e8cef547a10aad5e6bcdc85edbf67dc1ddd6383f947bf67a64b13147a108ff93ee42d0423de2f2d9b5b98dcf1020cdfbe1f40eec056b3de1cdad15a4414d70a1fc7b0f41aa604d3f39298c649dcd483d40cb3f3902dd563505d7ed6c4074fb6599f2c8aea5672d4d9def8c2eecc67cf81807b413e829217cddc85da603dce548511911925e0b10f12daf6366c80db2355a12cd77bd92fc7f0a5fa397f8555990cd83355a7b11b1cc337c8c05672c097e069cc47ce09606df85dc4e9f6dd86a30fff28d673075d579ceedb220a11ab5270eb5842670754597e0caaff5494653e364e2ecdea9c43715b21755f0f9e87b87388fcfc12a3f1fff285b5cade95cc6bc485b9fea6364a0d9a6610aa1006559cc80e733cb58cd268f84c6c16eafc490cc9c70d47b9193ec28bb2a5b738b282ad9de81ce5a78864058af5ee728fcb5961fdd8f1fa0e6643cea028b42d49fe25789b0f7fb389b9dcb1b001a96d1621fed97c591b69451222f189fa814a49d10332602eac8f03ccbbcf136d6e116a3a38c5d726cce0c91b936878672122a06bd5bebd08ba9e8c31ffdf9fa3ebaa75ef1b8910ea2fae97ba123771543991634179ebfa4fe78d55b52d1975c003607c5948c01b8246c24426926c529edbf6e083d7d97d30c16b6387ac23dbc8e868041110f96b58b709529b8a7804147bde1b23753f4b28969b3380ac5719f28df38d3dbd6e6e67a19858c162f929a2a146ee40c754d025d99466f66ec88c3046ad4b8190c86265e78e27af", 0xc1, 0x0, &(0x7f0000000380)="6b4d8efb3d65dfd359aaaf1d835be56a1e1dd5bd9ac1f94173b4ef963b81ac5c17f398a30e0a39c588ab6e1829e501a3a6082c61ea2763058b64fac4338ec36e8d87962d7efd1bb7e0dc14b10579c83c9d0efc5bd8cb41168e32d06e33f9572bab495f14761af6e417158c367cf9af4349c265367775f4856efcd4449004f272376935864a72f095c4ddbfdc6c1d6394ef2bfd98b3f7d38a26d9d2e4c78906f76d82f12ce429ca4097c48545d73e6049d8793c34aed85cea0e49e74b1597bffed2"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 1: r0 = syz_io_uring_setup(0x4195, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, 0x0, 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r1, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b7a", 0x2d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, 0x0, 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 1: r0 = syz_io_uring_setup(0x4195, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b7a", 0x2d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000540)="664f52b39e297bf29ecb3e12e5c9e3aa2169e60975ec21d140e6bc74e82fa86a7e8b22a0a8155a1563dcef8e9d0e8418f57edd7e066a809c6552fc59e7e2f4445be47782e0f867ecd8f3041d6569dcb6379234faf84adc304d551952809e0cb92fca40800b4aa5dff8e365cc79dae4da39aef292a6c6c4a67ade7ed279e8bcd82b7dc1b26ae576dd03181814d09f53d75a1b78d59d7b64740a1b0e14be77d648de3f93d4011369fed873051c92aa7bd7010438d161bdf04cef538c81339ea442e9d2e56e70ef3ff3dc9d663121710d844befc48f2e65f1ca3bc4c2422c7a7496a3cd36a1e68e60ca9d87c26675dbe03ff23d6e57874c21d799e586b6a1f2c87110c87e6110cc80fb5bf7777144c7b86a38fc9b33900a32f638894befb50ca564660d2ed3f73c9b59c6f41b8dd4a7f98200b8ee84498b1fbf6d9035c178507f17624e41dc0f86968ac352d636a32d1dcdc51c247188ae05fc328bf3619a8f8f8a291492f3efd55b28aac23299219b1ccd6056939e5a934f775d891ba12dbcd08123d866b22d15ca5563b42e19c10c8244bc951911f9c33cb9b548219d641ab538cce67815d7a5d3ef1c9410264c4d01db1564a6744bab64eb9340f597ab703696e19d6ee039c06ae3468eccc7d5e755b58e4ce1be57b804719091e390af1a33ef4469263b7c8a7b39f2f5e2594e9c33c18f3fadabcaf70f56f75d1ba114fcbb462a7b079907337a320861d2d2ca8f7a6af6072426bdf9befb1cb0c7c6366cba90a53e77aeb7f55d4e6382fa4db03470b836e55ef120d523e5b880c1a228884fc353d33a56135086a07dd19fb24c4f120715fb7d0681fa60f4bdd9b3d69452cc831c18d0c29a04a1a3c7719ed92a7e39b0f30f1d07df11a79c0e66361ac9ca059b5982f63bb3b5a8b2534d17b8b0b2d4c60000576c1cadb130a75f0e16fbb651dd293318fa0a61af14adb966860640d0eccb01e0715fb4d6204435e791c5590630a555e4b1bff08b5ccff80c6e718f4a6f44d42f15a6fe66e5c2c46145b091c081324fff4ba4cd960889a9a5b42f03f18d0abc3ec3b7e0fe85550009a1d025e412002214afbe33f6e8cafd79ae4c8fd3bd4b634d6957f87f698594e206706fd1633ddb759416fded9a9883e1e83743f1068069cda514a8bf991325c526c825ca13866c87457f819fc16c7be6377e08c74200c12bc1a335271f86048840a515c123d0945c8dd301f6bcec344af79e4cbd0480b84b61cdcdfad92c136154e6cfe2a0be21e315447a6b6d902af40ac2c34d0653470740c7d2751542890e90092fc9361542dd66f3b23774827e95b144188317fa4da5a1a90f5de29fa11a001596cbfa015df4d046bbdc80e277cf082de126678739f33f440e68e8e6ea9a3a2a42116d48aa865d2a7053c999f1dd235232d67c174c61f80fe0864c51ab460acee53bbd7383d216698acf1a1a662656eed101f976a6975f5a231f8928bf94241e8225b55ab9438629c1dbc5f7515cb7edc5255fb01e9acc4d1a6f7d2c7c1491036a33356fa6a5492f8fe2b18ff67e13c3fce65a533418513d8fd7971e881cfb33394ff1be085b32f41d67308159d652cf1f7fb82af4ba1a8791fc126cb4fb816458dd6343f76602562a1c5d5c26611188578818861d1304ea676023ed52cd1c921287a0da8d9e1a904e73f3e7e23c5be01c36df3292485e6153a6f54d36542a04109c9f2fca103fa54ab225533e7a457e4f46be091f65d4e1ed58ebe7189199d3337c80e97e75a7f5ecc1bc35fda24aecff09116e9f17a20adba1fb28a708d9d9a310ffb02f476c5abef53405b7314d4b9fd107bf54f531cb3fab145001f7ecaff502a64f5b57564fe67fee82352e06b469f16a898acee9858fa79e8a59970c49ae4658afaf6a3e9ae423f827d2304394f4f83ef2ad6a5d2a2e1537b298974f39a70ee67c67e3d6853377a2959736688a07f69a540b71b32a7486edc5645f46c2a183bd949f88d018742c95964e9c33c5555e5dcd109d7bab16c32f83214d2a36536b0f840d6292858a29cd9ed48a4b2559548761054f414fb86dfaf76f22e170a13f07738f201b605710932a982df377c1151c587a2cde0d9f24df39b492601560f004e0ed34a94e4c5be815db23535d2039d0c7f0be3d7a6b020445448eac7ab6361e534c060a55424f2379be594cf25cbb0a4d55d1f17bb7a194d520b747e31699d364b4243beca7bf8d8b200a24cdd65c89e0429b9c65b8ce65d81c705849c5d7391410e7f95ad958408f687cea3f1f2b5da410a8791f213074a46ddcff28d0b26cc1c4c4d3e8fa482f9ed9ef86213aa1858c13c63ef9a5bda06229bc55eab0bc505497929b7406397e3f221c4d0ce70133db2e6cd6eb87f25811aae09f9ef88bce04725acc0b8dc85226023411261cadbe439d5fa0215d214755bbcfbd85754b138fbd38435fb7e9ef53cdc2f101f05969fb2eaaa7ad5d6a7c472519924c55245814bf7d830829fd80069bc61bb79e797621f4f21e11ae70483be2f8b565e4c0135d660b4f8bed5ee9e6819f6ec8b19568b19cab675efc379d5acee95d5d8ffcead55d95763b2eddf4d34f6636962ad5a3f2ca8806294593a6a61dbadd574a56460755ea9088277404637b675c5852d745d92bb3f1d4fbd481e89841558d4f1fdb8dec7c02381455362bd5bb279ffad771c0b6f68f12930f993195c59f7b23e1f0e0e36a1624799340d6903071bfdc1a46db2381182a1ca4c4d7d62e65fb533fb0e3456c07ba0e80192a42ee749496367e7c6ed084fb20c57bebbd516eb834032a252774e4d49900b6df8c235ac57c10a01f017063b8e5a4af53b214849384aded0984fec21cd9f200cbe358dee8aab2f269b13a2899cc5880a154c5fd6f23aefe83848678a93a7b0f1dc52e1e0fba6b2218aca85b08f8e856590963100f07b809f8d1b80bbf6e8f623587c1611f73ac5465013ba2165f0d17a966b07b97862fb6912674d653852ea982c97017fe901a1e37c69264fc8b2bba48f128e1128e702b92df350834231f4d4041e434b2485a6c315eddf8bad9a92a56e31d9f3e39ce3c25e5f2e337d2219bb93bba9376d8adc1337c7fcfcef2df6c5d46e9793796162e56c21cdcf1835c342c54c06d8527b0e4c18bbf8b28ea822487074216454602f8424042b87f43506354db4472a85aba8f3dec656d8a913962e09be20d0a81cd6437b19ce569f263e3d16f00206c94b8891b765aea4a0e3103abab83f6d77379b765c37e45b6621f7f82d665ec1a1de1f19be324a8d5ca82d1caed83b4935bcdfbdf51f00712f1e83b241bfb64016971b337a279656829ebd6874e1a0db644ccc013e28544cb13df14b27081681910fd51aa83458685c4ce698b7b7fd6fcbfa3788542151d525b74123be860f092a8f721c73d4693046cc0791c2a9e42c3ae332fcac7d5192797ce7c7abc19b4c913dcc007aeec1c28ca79c7b8741912ddcc1eb5171d0d08f642f743e8c4a241cc0edcef5a09b4f0d7c50545cc6ea94ebda4033ed03e8ef79f7d20aefa432ee1111db8c3af38cf554b8edd82f91a7bc0968a4b9a73a70289e71dd210f2110da1ea25c8a887b9cac6010eb63bba00d4fb73ab449bcf887d15f9cb285b469920188d0df1f526354779667bdd0b3cd4441e211d4707180fc7f841d681615dee474830a3fbedfc50b4a8edb6a03bee38a08ee9af567a383665953e5a2ab6bae02d02b8693635724e0b1e1124948168786ef18bc70f81d531fbeec101d4eb2fba998f9168e1bc242e9d1d163ab1cd1b9ff96ff84ab1eff38048060293cef601dd8bbdb66f0298310669eb7835af78e22a38b13bf8ca6de77b8440a25673fb91298b18a2f8eb567ba982099322fc403510a6b5cf3c3a6ecf9011e914f7134686b1a25b971710349dad3748d148a8779118e26d1adf5adea9a21c06276c2997bdb4adf198434b7f17f377d07cc78a2f56db8b443700541e6aa395bb4a5e43e38f7b6e5a22248f06278e14a5ff7bf0b06388b0655f8f06343568edc7bdb6df32e78147ec78dbad85f37e7d528a7b3862fc40fc52cafd07339f99351d9a509972abee590c22a23872f09221afa46f5ed5613ed7047631209bf8f193c18131a31757cd64880e6cb9aa64fad9d1b943d39fd8b26f2deb5f63c10d1535af0efe76d6e91603fad869fee9916de5b12fed6956441beb4101822f167bb64b35fe584961e9649252c2384a74f12c010a0470bfff7711ff88d74670719890c7d464083538289500395dc65e02ab15241655d5712f7025f4650aca47dbfb72c65ee0a0c52233abccab81f7a0618c95bf44d1a034e10bd7c68bbdb7f8629c24fb6e13730a72f4f91d575313f0ae271f946d8050a30f5139c92bfe25625f44b586b423202aebf39169c1821753b56d04bd39559b38d94c6241dd76c475202cf507656f5d8b2a730ae1e67792a58fed695f372c518c54727feacdb8663d07fa6ea71a7bcdcba46e81566412672646d0406bf93d5e3ce0eb9beb85a65573d2ba2cf31ba73ba4318d20fb9fd0e74c6012c1be2266af3a650f89a5edaa2fe43620f602230c5aa32437721ea4aa37b8a26486d55c5a92d9b2da57551e19d1b91fa5ec1bc20cd95beeba11a190f0b803959f36addd0e16d550d82205f9840fb65282f41b26aa24cb730dfce2aad40d6379e2655d3f938f19a74c6c5d07a44b6487dc11d5619a449cc50a97ef6983a90d730c1e2e8f9010b33f829baeec948d82bf3f3908a96494962ac1f39561430f5a000d7bfe58fdcb98bc03d6ff84a1dcf5fc58890be5a67e32f68df953d920c2438d13a4c6832cfa8ce206fe4e18e7ccb110338224aa956f341bcfe0da0df2476c65960f13a7966b7e2e2d1ee7b5f4189c5cafbe0729b01c9123613288646053da6750377e7e96df9da1718973c59cd81aebf947df58730022e5536996c78fe2a1d5c941a6a7936b2f05620e7694d5cbd2b194f847568dfea9317f3edf648ad37c1e1a7fbed405df7834a1293e8cef547a10aad5e6bcdc85edbf67dc1ddd6383f947bf67a64b13147a108ff93ee42d0423de2f2d9b5b98dcf1020cdfbe1f40eec056b3de1cdad15a4414d70a1fc7b0f41aa604d3f39298c649dcd483d40cb3f3902dd563505d7ed6c4074fb6599f2c8aea5672d4d9def8c2eecc67cf81807b413e829217cddc85da603dce548511911925e0b10f12daf6366c80db2355a12cd77bd92fc7f0a5fa397f8555990cd83355a7b11b1cc337c8c05672c097e069cc47ce09606df85dc4e9f6dd86a30fff28d673075d579ceedb220a11ab5270eb5842670754597e0caaff5494653e364e2ecdea9c43715b21755f0f9e87b87388fcfc12a3f1fff285b5cade95cc6bc485b9fea6364a0d9a6610aa1006559cc80e733cb58cd268f84c6c16eafc490cc9c70d47b9193ec28bb2a5b738b282ad9de81ce5a78864058af5ee728fcb5961fdd8f1fa0e6643cea028b42d49fe25789b0f7fb389b9dcb1b001a96d1621fed97c591b69451222f189fa814a49d10332602eac8f03ccbbcf136d6e116a3a38c5d726cce0c91b936878672122a06bd5bebd08ba9e8c31ffdf9fa3ebaa75ef1b8910ea2fae97ba123771543991634179ebfa4fe78d55b52d1975c003607c5948c01b8246c24426926c529edbf6e083d7d97d30c16b6387ac23dbc8e868041110f96b58b709529b8a7804147bde1b23753f4b28969b3380ac5719f28df38d3dbd6e6e67a19858c162f929a2a146ee40c754d025d99466f66ec88c3046ad4b8190c86265e78e27af", 0xc1, 0x0, &(0x7f0000000380)="6b4d8efb3d65dfd359aaaf1d835be56a1e1dd5bd9ac1f94173b4ef963b81ac5c17f398a30e0a39c588ab6e1829e501a3a6082c61ea2763058b64fac4338ec36e8d87962d7efd1bb7e0dc14b10579c83c9d0efc5bd8cb41168e32d06e33f9572bab495f14761af6e417158c367cf9af4349c265367775f4856efcd4449004f272376935864a72f095c4ddbfdc6c1d6394ef2bfd98b3f7d38a26d9d2e4c78906f76d82f12ce429ca4097c48545d73e6049d8793c34aed85cea0e49e74b1597bffed2"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1, 0x8001, 0x8000, r1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, 0x0) exit_group(0x0) 10:13:54 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000540)="664f52b39e297bf29ecb3e12e5c9e3aa2169e60975ec21d140e6bc74e82fa86a7e8b22a0a8155a1563dcef8e9d0e8418f57edd7e066a809c6552fc59e7e2f4445be47782e0f867ecd8f3041d6569dcb6379234faf84adc304d551952809e0cb92fca40800b4aa5dff8e365cc79dae4da39aef292a6c6c4a67ade7ed279e8bcd82b7dc1b26ae576dd03181814d09f53d75a1b78d59d7b64740a1b0e14be77d648de3f93d4011369fed873051c92aa7bd7010438d161bdf04cef538c81339ea442e9d2e56e70ef3ff3dc9d663121710d844befc48f2e65f1ca3bc4c2422c7a7496a3cd36a1e68e60ca9d87c26675dbe03ff23d6e57874c21d799e586b6a1f2c87110c87e6110cc80fb5bf7777144c7b86a38fc9b33900a32f638894befb50ca564660d2ed3f73c9b59c6f41b8dd4a7f98200b8ee84498b1fbf6d9035c178507f17624e41dc0f86968ac352d636a32d1dcdc51c247188ae05fc328bf3619a8f8f8a291492f3efd55b28aac23299219b1ccd6056939e5a934f775d891ba12dbcd08123d866b22d15ca5563b42e19c10c8244bc951911f9c33cb9b548219d641ab538cce67815d7a5d3ef1c9410264c4d01db1564a6744bab64eb9340f597ab703696e19d6ee039c06ae3468eccc7d5e755b58e4ce1be57b804719091e390af1a33ef4469263b7c8a7b39f2f5e2594e9c33c18f3fadabcaf70f56f75d1ba114fcbb462a7b079907337a320861d2d2ca8f7a6af6072426bdf9befb1cb0c7c6366cba90a53e77aeb7f55d4e6382fa4db03470b836e55ef120d523e5b880c1a228884fc353d33a56135086a07dd19fb24c4f120715fb7d0681fa60f4bdd9b3d69452cc831c18d0c29a04a1a3c7719ed92a7e39b0f30f1d07df11a79c0e66361ac9ca059b5982f63bb3b5a8b2534d17b8b0b2d4c60000576c1cadb130a75f0e16fbb651dd293318fa0a61af14adb966860640d0eccb01e0715fb4d6204435e791c5590630a555e4b1bff08b5ccff80c6e718f4a6f44d42f15a6fe66e5c2c46145b091c081324fff4ba4cd960889a9a5b42f03f18d0abc3ec3b7e0fe85550009a1d025e412002214afbe33f6e8cafd79ae4c8fd3bd4b634d6957f87f698594e206706fd1633ddb759416fded9a9883e1e83743f1068069cda514a8bf991325c526c825ca13866c87457f819fc16c7be6377e08c74200c12bc1a335271f86048840a515c123d0945c8dd301f6bcec344af79e4cbd0480b84b61cdcdfad92c136154e6cfe2a0be21e315447a6b6d902af40ac2c34d0653470740c7d2751542890e90092fc9361542dd66f3b23774827e95b144188317fa4da5a1a90f5de29fa11a001596cbfa015df4d046bbdc80e277cf082de126678739f33f440e68e8e6ea9a3a2a42116d48aa865d2a7053c999f1dd235232d67c174c61f80fe0864c51ab460acee53bbd7383d216698acf1a1a662656eed101f976a6975f5a231f8928bf94241e8225b55ab9438629c1dbc5f7515cb7edc5255fb01e9acc4d1a6f7d2c7c1491036a33356fa6a5492f8fe2b18ff67e13c3fce65a533418513d8fd7971e881cfb33394ff1be085b32f41d67308159d652cf1f7fb82af4ba1a8791fc126cb4fb816458dd6343f76602562a1c5d5c26611188578818861d1304ea676023ed52cd1c921287a0da8d9e1a904e73f3e7e23c5be01c36df3292485e6153a6f54d36542a04109c9f2fca103fa54ab225533e7a457e4f46be091f65d4e1ed58ebe7189199d3337c80e97e75a7f5ecc1bc35fda24aecff09116e9f17a20adba1fb28a708d9d9a310ffb02f476c5abef53405b7314d4b9fd107bf54f531cb3fab145001f7ecaff502a64f5b57564fe67fee82352e06b469f16a898acee9858fa79e8a59970c49ae4658afaf6a3e9ae423f827d2304394f4f83ef2ad6a5d2a2e1537b298974f39a70ee67c67e3d6853377a2959736688a07f69a540b71b32a7486edc5645f46c2a183bd949f88d018742c95964e9c33c5555e5dcd109d7bab16c32f83214d2a36536b0f840d6292858a29cd9ed48a4b2559548761054f414fb86dfaf76f22e170a13f07738f201b605710932a982df377c1151c587a2cde0d9f24df39b492601560f004e0ed34a94e4c5be815db23535d2039d0c7f0be3d7a6b020445448eac7ab6361e534c060a55424f2379be594cf25cbb0a4d55d1f17bb7a194d520b747e31699d364b4243beca7bf8d8b200a24cdd65c89e0429b9c65b8ce65d81c705849c5d7391410e7f95ad958408f687cea3f1f2b5da410a8791f213074a46ddcff28d0b26cc1c4c4d3e8fa482f9ed9ef86213aa1858c13c63ef9a5bda06229bc55eab0bc505497929b7406397e3f221c4d0ce70133db2e6cd6eb87f25811aae09f9ef88bce04725acc0b8dc85226023411261cadbe439d5fa0215d214755bbcfbd85754b138fbd38435fb7e9ef53cdc2f101f05969fb2eaaa7ad5d6a7c472519924c55245814bf7d830829fd80069bc61bb79e797621f4f21e11ae70483be2f8b565e4c0135d660b4f8bed5ee9e6819f6ec8b19568b19cab675efc379d5acee95d5d8ffcead55d95763b2eddf4d34f6636962ad5a3f2ca8806294593a6a61dbadd574a56460755ea9088277404637b675c5852d745d92bb3f1d4fbd481e89841558d4f1fdb8dec7c02381455362bd5bb279ffad771c0b6f68f12930f993195c59f7b23e1f0e0e36a1624799340d6903071bfdc1a46db2381182a1ca4c4d7d62e65fb533fb0e3456c07ba0e80192a42ee749496367e7c6ed084fb20c57bebbd516eb834032a252774e4d49900b6df8c235ac57c10a01f017063b8e5a4af53b214849384aded0984fec21cd9f200cbe358dee8aab2f269b13a2899cc5880a154c5fd6f23aefe83848678a93a7b0f1dc52e1e0fba6b2218aca85b08f8e856590963100f07b809f8d1b80bbf6e8f623587c1611f73ac5465013ba2165f0d17a966b07b97862fb6912674d653852ea982c97017fe901a1e37c69264fc8b2bba48f128e1128e702b92df350834231f4d4041e434b2485a6c315eddf8bad9a92a56e31d9f3e39ce3c25e5f2e337d2219bb93bba9376d8adc1337c7fcfcef2df6c5d46e9793796162e56c21cdcf1835c342c54c06d8527b0e4c18bbf8b28ea822487074216454602f8424042b87f43506354db4472a85aba8f3dec656d8a913962e09be20d0a81cd6437b19ce569f263e3d16f00206c94b8891b765aea4a0e3103abab83f6d77379b765c37e45b6621f7f82d665ec1a1de1f19be324a8d5ca82d1caed83b4935bcdfbdf51f00712f1e83b241bfb64016971b337a279656829ebd6874e1a0db644ccc013e28544cb13df14b27081681910fd51aa83458685c4ce698b7b7fd6fcbfa3788542151d525b74123be860f092a8f721c73d4693046cc0791c2a9e42c3ae332fcac7d5192797ce7c7abc19b4c913dcc007aeec1c28ca79c7b8741912ddcc1eb5171d0d08f642f743e8c4a241cc0edcef5a09b4f0d7c50545cc6ea94ebda4033ed03e8ef79f7d20aefa432ee1111db8c3af38cf554b8edd82f91a7bc0968a4b9a73a70289e71dd210f2110da1ea25c8a887b9cac6010eb63bba00d4fb73ab449bcf887d15f9cb285b469920188d0df1f526354779667bdd0b3cd4441e211d4707180fc7f841d681615dee474830a3fbedfc50b4a8edb6a03bee38a08ee9af567a383665953e5a2ab6bae02d02b8693635724e0b1e1124948168786ef18bc70f81d531fbeec101d4eb2fba998f9168e1bc242e9d1d163ab1cd1b9ff96ff84ab1eff38048060293cef601dd8bbdb66f0298310669eb7835af78e22a38b13bf8ca6de77b8440a25673fb91298b18a2f8eb567ba982099322fc403510a6b5cf3c3a6ecf9011e914f7134686b1a25b971710349dad3748d148a8779118e26d1adf5adea9a21c06276c2997bdb4adf198434b7f17f377d07cc78a2f56db8b443700541e6aa395bb4a5e43e38f7b6e5a22248f06278e14a5ff7bf0b06388b0655f8f06343568edc7bdb6df32e78147ec78dbad85f37e7d528a7b3862fc40fc52cafd07339f99351d9a509972abee590c22a23872f09221afa46f5ed5613ed7047631209bf8f193c18131a31757cd64880e6cb9aa64fad9d1b943d39fd8b26f2deb5f63c10d1535af0efe76d6e91603fad869fee9916de5b12fed6956441beb4101822f167bb64b35fe584961e9649252c2384a74f12c010a0470bfff7711ff88d74670719890c7d464083538289500395dc65e02ab15241655d5712f7025f4650aca47dbfb72c65ee0a0c52233abccab81f7a0618c95bf44d1a034e10bd7c68bbdb7f8629c24fb6e13730a72f4f91d575313f0ae271f946d8050a30f5139c92bfe25625f44b586b423202aebf39169c1821753b56d04bd39559b38d94c6241dd76c475202cf507656f5d8b2a730ae1e67792a58fed695f372c518c54727feacdb8663d07fa6ea71a7bcdcba46e81566412672646d0406bf93d5e3ce0eb9beb85a65573d2ba2cf31ba73ba4318d20fb9fd0e74c6012c1be2266af3a650f89a5edaa2fe43620f602230c5aa32437721ea4aa37b8a26486d55c5a92d9b2da57551e19d1b91fa5ec1bc20cd95beeba11a190f0b803959f36addd0e16d550d82205f9840fb65282f41b26aa24cb730dfce2aad40d6379e2655d3f938f19a74c6c5d07a44b6487dc11d5619a449cc50a97ef6983a90d730c1e2e8f9010b33f829baeec948d82bf3f3908a96494962ac1f39561430f5a000d7bfe58fdcb98bc03d6ff84a1dcf5fc58890be5a67e32f68df953d920c2438d13a4c6832cfa8ce206fe4e18e7ccb110338224aa956f341bcfe0da0df2476c65960f13a7966b7e2e2d1ee7b5f4189c5cafbe0729b01c9123613288646053da6750377e7e96df9da1718973c59cd81aebf947df58730022e5536996c78fe2a1d5c941a6a7936b2f05620e7694d5cbd2b194f847568dfea9317f3edf648ad37c1e1a7fbed405df7834a1293e8cef547a10aad5e6bcdc85edbf67dc1ddd6383f947bf67a64b13147a108ff93ee42d0423de2f2d9b5b98dcf1020cdfbe1f40eec056b3de1cdad15a4414d70a1fc7b0f41aa604d3f39298c649dcd483d40cb3f3902dd563505d7ed6c4074fb6599f2c8aea5672d4d9def8c2eecc67cf81807b413e829217cddc85da603dce548511911925e0b10f12daf6366c80db2355a12cd77bd92fc7f0a5fa397f8555990cd83355a7b11b1cc337c8c05672c097e069cc47ce09606df85dc4e9f6dd86a30fff28d673075d579ceedb220a11ab5270eb5842670754597e0caaff5494653e364e2ecdea9c43715b21755f0f9e87b87388fcfc12a3f1fff285b5cade95cc6bc485b9fea6364a0d9a6610aa1006559cc80e733cb58cd268f84c6c16eafc490cc9c70d47b9193ec28bb2a5b738b282ad9de81ce5a78864058af5ee728fcb5961fdd8f1fa0e6643cea028b42d49fe25789b0f7fb389b9dcb1b001a96d1621fed97c591b69451222f189fa814a49d10332602eac8f03ccbbcf136d6e116a3a38c5d726cce0c91b936878672122a06bd5bebd08ba9e8c31ffdf9fa3ebaa75ef1b8910ea2fae97ba123771543991634179ebfa4fe78d55b52d1975c003607c5948c01b8246c24426926c529edbf6e083d7d97d30c16b6387ac23dbc8e868041110f96b58b709529b8a7804147bde1b23753f4b28969b3380ac5719f28df38d3dbd6e6e67a19858c162f929a2a146ee40c754d025d99466f66ec88c3046ad4b8190c86265e78e27af", 0xc1, 0x0, &(0x7f0000000380)="6b4d8efb3d65dfd359aaaf1d835be56a1e1dd5bd9ac1f94173b4ef963b81ac5c17f398a30e0a39c588ab6e1829e501a3a6082c61ea2763058b64fac4338ec36e8d87962d7efd1bb7e0dc14b10579c83c9d0efc5bd8cb41168e32d06e33f9572bab495f14761af6e417158c367cf9af4349c265367775f4856efcd4449004f272376935864a72f095c4ddbfdc6c1d6394ef2bfd98b3f7d38a26d9d2e4c78906f76d82f12ce429ca4097c48545d73e6049d8793c34aed85cea0e49e74b1597bffed2"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1, 0x8001, 0x8000, r1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, 0x0) exit_group(0x0) 10:13:54 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, 0x0) exit_group(0x0) 10:13:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000540)="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", 0xc1, 0x0, &(0x7f0000000380)="6b4d8efb3d65dfd359aaaf1d835be56a1e1dd5bd9ac1f94173b4ef963b81ac5c17f398a30e0a39c588ab6e1829e501a3a6082c61ea2763058b64fac4338ec36e8d87962d7efd1bb7e0dc14b10579c83c9d0efc5bd8cb41168e32d06e33f9572bab495f14761af6e417158c367cf9af4349c265367775f4856efcd4449004f272376935864a72f095c4ddbfdc6c1d6394ef2bfd98b3f7d38a26d9d2e4c78906f76d82f12ce429ca4097c48545d73e6049d8793c34aed85cea0e49e74b1597bffed2"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 4: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6, 0x0, 0xa8}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x8000}) 10:13:54 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000540)="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", 0xc1, 0x0, &(0x7f0000000380)="6b4d8efb3d65dfd359aaaf1d835be56a1e1dd5bd9ac1f94173b4ef963b81ac5c17f398a30e0a39c588ab6e1829e501a3a6082c61ea2763058b64fac4338ec36e8d87962d7efd1bb7e0dc14b10579c83c9d0efc5bd8cb41168e32d06e33f9572bab495f14761af6e417158c367cf9af4349c265367775f4856efcd4449004f272376935864a72f095c4ddbfdc6c1d6394ef2bfd98b3f7d38a26d9d2e4c78906f76d82f12ce429ca4097c48545d73e6049d8793c34aed85cea0e49e74b1597bffed2"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:54 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000540)="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", 0xc1, 0x0, &(0x7f0000000380)="6b4d8efb3d65dfd359aaaf1d835be56a1e1dd5bd9ac1f94173b4ef963b81ac5c17f398a30e0a39c588ab6e1829e501a3a6082c61ea2763058b64fac4338ec36e8d87962d7efd1bb7e0dc14b10579c83c9d0efc5bd8cb41168e32d06e33f9572bab495f14761af6e417158c367cf9af4349c265367775f4856efcd4449004f272376935864a72f095c4ddbfdc6c1d6394ef2bfd98b3f7d38a26d9d2e4c78906f76d82f12ce429ca4097c48545d73e6049d8793c34aed85cea0e49e74b1597bffed2"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:54 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000540)="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", 0xc1, 0x0, &(0x7f0000000380)="6b4d8efb3d65dfd359aaaf1d835be56a1e1dd5bd9ac1f94173b4ef963b81ac5c17f398a30e0a39c588ab6e1829e501a3a6082c61ea2763058b64fac4338ec36e8d87962d7efd1bb7e0dc14b10579c83c9d0efc5bd8cb41168e32d06e33f9572bab495f14761af6e417158c367cf9af4349c265367775f4856efcd4449004f272376935864a72f095c4ddbfdc6c1d6394ef2bfd98b3f7d38a26d9d2e4c78906f76d82f12ce429ca4097c48545d73e6049d8793c34aed85cea0e49e74b1597bffed2"}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x7f, 0x6, 0x5, 0x3d, 0x0, 0x2, 0x21001, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x5, 0x10001}, 0x8100, 0x1, 0x4, 0x9, 0x4, 0x7fffffff, 0x800, 0x0, 0x7f, 0x0, 0xffffffffffff0001}, r0, 0xd, 0xffffffffffffffff, 0x3) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000540)="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", 0xc1, 0x0, &(0x7f0000000380)="6b4d8efb3d65dfd359aaaf1d835be56a1e1dd5bd9ac1f94173b4ef963b81ac5c17f398a30e0a39c588ab6e1829e501a3a6082c61ea2763058b64fac4338ec36e8d87962d7efd1bb7e0dc14b10579c83c9d0efc5bd8cb41168e32d06e33f9572bab495f14761af6e417158c367cf9af4349c265367775f4856efcd4449004f272376935864a72f095c4ddbfdc6c1d6394ef2bfd98b3f7d38a26d9d2e4c78906f76d82f12ce429ca4097c48545d73e6049d8793c34aed85cea0e49e74b1597bffed2"}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 10:13:55 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000540)="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", 0xc1, 0x0, &(0x7f0000000380)="6b4d8efb3d65dfd359aaaf1d835be56a1e1dd5bd9ac1f94173b4ef963b81ac5c17f398a30e0a39c588ab6e1829e501a3a6082c61ea2763058b64fac4338ec36e8d87962d7efd1bb7e0dc14b10579c83c9d0efc5bd8cb41168e32d06e33f9572bab495f14761af6e417158c367cf9af4349c265367775f4856efcd4449004f272376935864a72f095c4ddbfdc6c1d6394ef2bfd98b3f7d38a26d9d2e4c78906f76d82f12ce429ca4097c48545d73e6049d8793c34aed85cea0e49e74b1597bffed2"}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r2, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x8001, 0x8000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r1, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 10:13:55 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4efb, 0x5000000, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e", 0x29}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e", 0x29}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e", 0x29}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087", 0x23}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087", 0x23}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087", 0x23}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a1", 0x17}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a1", 0x17}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, 0x0, 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, 0x0, 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a1", 0x17}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, 0x0, 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4efb, 0x20000, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4efb, 0x2000, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, 0x0) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, 0x0) exit_group(0x0) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4efb, 0x8, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, 0x0) exit_group(0x0) 10:13:55 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:55 executing program 0: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r0, 0xc020660b, &(0x7f0000000040)={0x4, 0x0, 0xc0, 0x6}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x8000}) 10:13:55 executing program 1: syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:55 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 0: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r0, 0xc020660b, &(0x7f0000000040)={0x4, 0x0, 0xc0, 0x6}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x8000}) 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 0: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r0, 0xc020660b, &(0x7f0000000040)={0x4, 0x0, 0xc0, 0x6}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x8000}) 10:13:56 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 1: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r0, 0xc020660b, &(0x7f0000000040)={0x3, 0x0, 0xc0, 0x6}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x8000}) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x4efb, 0xfffffff5, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x4efb, 0xfffffffe, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x4efb, 0xf5ffffff, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x1f00, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b7a3d", 0x2e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f00000001c0)={0x9f, 0x0, 0x1}) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f5}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b7a3d", 0x2e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f00000001c0)={0x9f, 0x0, 0x1}) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b7a3d", 0x2e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f00000001c0)={0x9f, 0x0, 0x1}) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b7a3d", 0x2e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f00000001c0)={0x9f, 0x0, 0x1}) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 1) 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) (fail_nth: 1) 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) [ 496.308992][ T2449] FAULT_INJECTION: forcing a failure. [ 496.308992][ T2449] name failslab, interval 1, probability 0, space 0, times 0 [ 496.326470][ T2449] CPU: 1 PID: 2449 Comm: syz-executor.0 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 496.336646][ T2449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.346698][ T2449] Call Trace: [ 496.349981][ T2449] dump_stack_lvl+0x1e2/0x24b [ 496.354638][ T2449] ? devkmsg_release+0x127/0x127 [ 496.359555][ T2449] ? show_regs_print_info+0x18/0x18 [ 496.364733][ T2449] ? __mod_memcg_lruvec_state+0x136/0x310 [ 496.370439][ T2449] dump_stack+0x15/0x1d [ 496.374571][ T2449] should_fail+0x3c0/0x510 [ 496.378975][ T2449] __should_failslab+0x9f/0xe0 [ 496.383717][ T2449] should_failslab+0x9/0x20 [ 496.388197][ T2449] kmem_cache_alloc_bulk+0x30/0x3f0 [ 496.393460][ T2449] io_submit_sqes+0x6bf/0x2da0 [ 496.398214][ T2449] ? _kstrtoull+0x3cb/0x4d0 [ 496.402697][ T2449] ? io_uring_add_task_file+0x290/0x290 [ 496.408224][ T2449] ? security_file_permission+0xa8/0xc0 [ 496.413751][ T2449] ? __kasan_check_write+0x14/0x20 [ 496.418839][ T2449] ? mutex_lock+0xa6/0x110 [ 496.423235][ T2449] ? io_uring_add_task_file+0x127/0x290 [ 496.428759][ T2449] ? __fdget+0x1b5/0x240 [ 496.432993][ T2449] __se_sys_io_uring_enter+0x322/0x12b0 [ 496.438515][ T2449] ? __fget_files+0x39e/0x3d0 [ 496.443171][ T2449] ? __kasan_check_write+0x14/0x20 [ 496.448260][ T2449] ? fput_many+0x47/0x1a0 [ 496.452573][ T2449] ? __x64_sys_io_uring_enter+0x100/0x100 [ 496.458268][ T2449] ? __ia32_sys_read+0x90/0x90 [ 496.463194][ T2449] ? debug_smp_processor_id+0x1c/0x20 [ 496.468546][ T2449] __x64_sys_io_uring_enter+0xe5/0x100 [ 496.473983][ T2449] do_syscall_64+0x31/0x70 [ 496.478377][ T2449] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.484260][ T2449] RIP: 0033:0x7f1a2f062e99 [ 496.488656][ T2449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 2) 10:13:56 executing program 5: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) wait4(r0, &(0x7f0000000040), 0x20000000, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000080), 0x80000000, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) [ 496.508853][ T2449] RSP: 002b:00007f1a2e1d9168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 496.517259][ T2449] RAX: ffffffffffffffda RBX: 00007f1a2f175f60 RCX: 00007f1a2f062e99 [ 496.525217][ T2449] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000003 [ 496.533173][ T2449] RBP: 00007f1a2e1d91d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 496.541213][ T2449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.549163][ T2449] R13: 00007fff39d37d6f R14: 00007f1a2e1d9300 R15: 0000000000022000 10:13:56 executing program 5: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) wait4(r0, &(0x7f0000000040), 0x20000000, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000080), 0x80000000, &(0x7f0000000100)) exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) wait4(r0, &(0x7f0000000040), 0x20000000, 0x0) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000080), 0x80000000, &(0x7f0000000100)) (async) exit_group(0x0) (async) 10:13:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:56 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:56 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) (async) wait4(r0, &(0x7f0000000040), 0x20000000, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000080), 0x80000000, &(0x7f0000000100)) (async) exit_group(0x0) 10:13:56 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) ptrace$setregs(0xf, r0, 0x55, 0xffffffffffffffff) [ 496.604821][ T2497] FAULT_INJECTION: forcing a failure. [ 496.604821][ T2497] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 496.625527][ T2497] CPU: 1 PID: 2497 Comm: syz-executor.0 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 496.635702][ T2497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.645752][ T2497] Call Trace: [ 496.649047][ T2497] dump_stack_lvl+0x1e2/0x24b [ 496.653721][ T2497] ? show_regs_print_info+0x18/0x18 [ 496.658918][ T2497] ? debug_smp_processor_id+0x1c/0x20 [ 496.664289][ T2497] dump_stack+0x15/0x1d [ 496.668443][ T2497] should_fail+0x3c0/0x510 [ 496.672860][ T2497] should_fail_alloc_page+0x4f/0x60 [ 496.678073][ T2497] __alloc_pages_nodemask+0x1b9/0x820 [ 496.683439][ T2497] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 496.688970][ T2497] ? __this_cpu_preempt_check+0x1c/0x20 [ 496.694498][ T2497] ? __mod_memcg_lruvec_state+0x136/0x310 [ 496.700195][ T2497] ? __this_cpu_preempt_check+0x1c/0x20 [ 496.705719][ T2497] allocate_slab+0x6b/0x350 [ 496.710203][ T2497] ___slab_alloc+0x143/0x2f0 [ 496.714774][ T2497] ? io_submit_sqes+0x6bf/0x2da0 [ 496.719699][ T2497] kmem_cache_alloc_bulk+0x167/0x3f0 [ 496.724962][ T2497] io_submit_sqes+0x6bf/0x2da0 [ 496.729707][ T2497] ? _kstrtoull+0x3cb/0x4d0 [ 496.734202][ T2497] ? io_uring_add_task_file+0x290/0x290 [ 496.739732][ T2497] ? security_file_permission+0xa8/0xc0 [ 496.745261][ T2497] ? __kasan_check_write+0x14/0x20 [ 496.750349][ T2497] ? mutex_lock+0xa6/0x110 [ 496.754748][ T2497] ? io_uring_add_task_file+0x127/0x290 [ 496.760270][ T2497] ? __fdget+0x1b5/0x240 [ 496.764580][ T2497] __se_sys_io_uring_enter+0x322/0x12b0 [ 496.770108][ T2497] ? __fget_files+0x39e/0x3d0 [ 496.774848][ T2497] ? __kasan_check_write+0x14/0x20 [ 496.779937][ T2497] ? fput_many+0x47/0x1a0 [ 496.784248][ T2497] ? __x64_sys_io_uring_enter+0x100/0x100 [ 496.789947][ T2497] ? __ia32_sys_read+0x90/0x90 [ 496.794814][ T2497] ? debug_smp_processor_id+0x1c/0x20 [ 496.800227][ T2497] __x64_sys_io_uring_enter+0xe5/0x100 [ 496.805669][ T2497] do_syscall_64+0x31/0x70 [ 496.810243][ T2497] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.816120][ T2497] RIP: 0033:0x7f1a2f062e99 [ 496.820604][ T2497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 496.840207][ T2497] RSP: 002b:00007f1a2e1d9168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 3) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) ptrace$setregs(0xf, r0, 0x55, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) ptrace$setregs(0xf, r0, 0x55, 0xffffffffffffffff) (async) 10:13:57 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 5: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) ptrace$setregs(0xf, r0, 0x55, 0xffffffffffffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) [ 496.848602][ T2497] RAX: ffffffffffffffda RBX: 00007f1a2f175f60 RCX: 00007f1a2f062e99 [ 496.856554][ T2497] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000003 [ 496.864690][ T2497] RBP: 00007f1a2e1d91d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 496.872642][ T2497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.880614][ T2497] R13: 00007fff39d37d6f R14: 00007f1a2e1d9300 R15: 0000000000022000 10:13:57 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 496.926715][ T2633] FAULT_INJECTION: forcing a failure. [ 496.926715][ T2633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.942699][ T2633] CPU: 1 PID: 2633 Comm: syz-executor.0 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 496.952877][ T2633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.962930][ T2633] Call Trace: [ 496.966201][ T2633] dump_stack_lvl+0x1e2/0x24b [ 496.970852][ T2633] ? show_regs_print_info+0x18/0x18 [ 496.976024][ T2633] dump_stack+0x15/0x1d [ 496.980153][ T2633] should_fail+0x3c0/0x510 [ 496.984541][ T2633] should_fail_usercopy+0x1a/0x20 [ 496.989536][ T2633] _copy_from_user+0x20/0xd0 [ 496.994109][ T2633] kstrtouint_from_user+0xd6/0x2a0 [ 496.999217][ T2633] ? kstrtol_from_user+0x310/0x310 [ 497.004316][ T2633] ? snprintf+0xd6/0x120 [ 497.008560][ T2633] ? memset+0x35/0x40 [ 497.012522][ T2633] proc_fail_nth_write+0xa5/0x290 [ 497.017571][ T2633] ? security_file_permission+0x9d/0xc0 [ 497.023125][ T2633] ? proc_fail_nth_read+0x220/0x220 [ 497.028319][ T2633] ? security_file_permission+0xa8/0xc0 [ 497.033843][ T2633] ? rw_verify_area+0x1d1/0x370 [ 497.038670][ T2633] ? proc_fail_nth_read+0x220/0x220 [ 497.043847][ T2633] vfs_write+0x369/0xf20 [ 497.048094][ T2633] ? kernel_write+0x3c0/0x3c0 [ 497.052749][ T2633] ? __kasan_check_write+0x14/0x20 [ 497.057834][ T2633] ? mutex_lock+0xa6/0x110 [ 497.062225][ T2633] ? mutex_trylock+0xb0/0xb0 [ 497.066791][ T2633] ? __fget_files+0x39e/0x3d0 [ 497.071442][ T2633] ? __fdget_pos+0x269/0x300 [ 497.076008][ T2633] ? ksys_write+0x77/0x2b0 [ 497.080403][ T2633] ksys_write+0x186/0x2b0 [ 497.084711][ T2633] ? __x64_sys_io_uring_enter+0x100/0x100 [ 497.090410][ T2633] ? __ia32_sys_read+0x90/0x90 [ 497.095155][ T2633] ? debug_smp_processor_id+0x1c/0x20 [ 497.100531][ T2633] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 497.106579][ T2633] __x64_sys_write+0x7b/0x90 [ 497.111149][ T2633] do_syscall_64+0x31/0x70 [ 497.115539][ T2633] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 497.121409][ T2633] RIP: 0033:0x7f1a2f0159af [ 497.125797][ T2633] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 497.145387][ T2633] RSP: 002b:00007f1a2e1d9160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 497.153802][ T2633] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1a2f0159af [ 497.161753][ T2633] RDX: 0000000000000001 RSI: 00007f1a2e1d91e0 RDI: 0000000000000005 [ 497.169706][ T2633] RBP: 00007f1a2e1d91d0 R08: 0000000000000000 R09: 00000000f5ffffff 10:13:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000040), 0x20000000, &(0x7f0000000100)) exit_group(0x0) [ 497.177655][ T2633] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 497.185616][ T2633] R13: 00007fff39d37d6f R14: 00007f1a2e1d9300 R15: 0000000000022000 10:13:57 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x4, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000040), 0x20000000, &(0x7f0000000100)) (async) exit_group(0x0) 10:13:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x8, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async, rerun: 32) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async, rerun: 32) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) (async, rerun: 64) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 64) wait4(r0, &(0x7f0000000040), 0x20000000, &(0x7f0000000100)) (async) exit_group(0x0) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x2000, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6", 0x16}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6", 0x16}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x800000, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) ptrace$setregs(0xd, r2, 0x4d40, &(0x7f0000000680)="15a4a122bd88ccf8c0d9f41eb29b6bce747d581ad09163733bceb59064479deaf9f95dad3e17cd99ed874a50045865674e40fc56cc87bb6e69a47941379d90858a3782613a359b918534d12d9e49b97444bee2b2aa77205102fe04788ece3528ed3484d034a3899db389ed26e5bc7c3bf1c45a303d09f0e401c09b2415171592841afe72116abb7fdb6a1f0d9e6c17e85d650f638c2ebd0231c5ad0bcec23d5a7b83459fc2515c272a79628d2af9e3acb50c9d969c4b5dea6986cae802c9915358db3cf4cbcbab7d0be289cd05e1a45b65e65e481e5eaff267fca14f44a6f2a7748fdd6aa03fe88263446b39ab7883c8cb") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)="002c0d95650bdb79c8db4f7151963cef2d41312548643597280f6a6f82d5e39d57c00d3a06600f7df7f311e3f82c4652a85ce7cacc1e496bde321a64fadf5fb6a5ac72d5875960f054c4") wait4(r0, &(0x7f0000000000), 0x8, &(0x7f00000005c0)) clone(0x2c00, &(0x7f00000001c0)="e5e33b82137e829cae59977c6e4a5ad84e2f5f18e96fbc0b56e87b5bfb479215f77b801edab5923a3ab2747b6fadf9ad2bb63f5d59f209fc63629831c44b6eb95c0eff3e1eb425cef011630cb4a917deb97c971492eec2c6f6527125a08aa8", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="bb1f0d36447f5c1173ab58037d06206d17d32a9dfec48e0dfd0604cc35d6111b27eda1344e97ae9c78287fa3dcb52ab29de1918d9197be820a766878b0f663765a26c3256039fdc7aa97cbe8f6ee492c40c041feb908c4e27cd6cc99a3edac25716e9a350b4108a9ae97a63763682d076a71d2671ed38f2b768159537176737bab97bcc923f10cee58212300b8a3b0a22a1f5c8cd84e9ed5b8dbc451306e4ab4b293352d82507bc5f777ac5cc30c086457987fbe9cb84d55") exit_group(0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f0000000380)=""/53, 0x35}], 0x2, &(0x7f0000000580)=[{&(0x7f0000000500)=""/75, 0x4b}], 0x1, 0x0) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6", 0x16}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x4000000, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) ptrace$setregs(0xd, r2, 0x4d40, &(0x7f0000000680)="15a4a122bd88ccf8c0d9f41eb29b6bce747d581ad09163733bceb59064479deaf9f95dad3e17cd99ed874a50045865674e40fc56cc87bb6e69a47941379d90858a3782613a359b918534d12d9e49b97444bee2b2aa77205102fe04788ece3528ed3484d034a3899db389ed26e5bc7c3bf1c45a303d09f0e401c09b2415171592841afe72116abb7fdb6a1f0d9e6c17e85d650f638c2ebd0231c5ad0bcec23d5a7b83459fc2515c272a79628d2af9e3acb50c9d969c4b5dea6986cae802c9915358db3cf4cbcbab7d0be289cd05e1a45b65e65e481e5eaff267fca14f44a6f2a7748fdd6aa03fe88263446b39ab7883c8cb") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)="002c0d95650bdb79c8db4f7151963cef2d41312548643597280f6a6f82d5e39d57c00d3a06600f7df7f311e3f82c4652a85ce7cacc1e496bde321a64fadf5fb6a5ac72d5875960f054c4") wait4(r0, &(0x7f0000000000), 0x8, &(0x7f00000005c0)) clone(0x2c00, &(0x7f00000001c0)="e5e33b82137e829cae59977c6e4a5ad84e2f5f18e96fbc0b56e87b5bfb479215f77b801edab5923a3ab2747b6fadf9ad2bb63f5d59f209fc63629831c44b6eb95c0eff3e1eb425cef011630cb4a917deb97c971492eec2c6f6527125a08aa8", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="bb1f0d36447f5c1173ab58037d06206d17d32a9dfec48e0dfd0604cc35d6111b27eda1344e97ae9c78287fa3dcb52ab29de1918d9197be820a766878b0f663765a26c3256039fdc7aa97cbe8f6ee492c40c041feb908c4e27cd6cc99a3edac25716e9a350b4108a9ae97a63763682d076a71d2671ed38f2b768159537176737bab97bcc923f10cee58212300b8a3b0a22a1f5c8cd84e9ed5b8dbc451306e4ab4b293352d82507bc5f777ac5cc30c086457987fbe9cb84d55") exit_group(0x0) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f0000000380)=""/53, 0x35}], 0x2, &(0x7f0000000580)=[{&(0x7f0000000500)=""/75, 0x4b}], 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) inotify_init1(0x0) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) (async) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) (async) ptrace$setregs(0xd, r2, 0x4d40, &(0x7f0000000680)="15a4a122bd88ccf8c0d9f41eb29b6bce747d581ad09163733bceb59064479deaf9f95dad3e17cd99ed874a50045865674e40fc56cc87bb6e69a47941379d90858a3782613a359b918534d12d9e49b97444bee2b2aa77205102fe04788ece3528ed3484d034a3899db389ed26e5bc7c3bf1c45a303d09f0e401c09b2415171592841afe72116abb7fdb6a1f0d9e6c17e85d650f638c2ebd0231c5ad0bcec23d5a7b83459fc2515c272a79628d2af9e3acb50c9d969c4b5dea6986cae802c9915358db3cf4cbcbab7d0be289cd05e1a45b65e65e481e5eaff267fca14f44a6f2a7748fdd6aa03fe88263446b39ab7883c8cb") (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)="002c0d95650bdb79c8db4f7151963cef2d41312548643597280f6a6f82d5e39d57c00d3a06600f7df7f311e3f82c4652a85ce7cacc1e496bde321a64fadf5fb6a5ac72d5875960f054c4") (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f00000005c0)) (async) clone(0x2c00, &(0x7f00000001c0)="e5e33b82137e829cae59977c6e4a5ad84e2f5f18e96fbc0b56e87b5bfb479215f77b801edab5923a3ab2747b6fadf9ad2bb63f5d59f209fc63629831c44b6eb95c0eff3e1eb425cef011630cb4a917deb97c971492eec2c6f6527125a08aa8", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="bb1f0d36447f5c1173ab58037d06206d17d32a9dfec48e0dfd0604cc35d6111b27eda1344e97ae9c78287fa3dcb52ab29de1918d9197be820a766878b0f663765a26c3256039fdc7aa97cbe8f6ee492c40c041feb908c4e27cd6cc99a3edac25716e9a350b4108a9ae97a63763682d076a71d2671ed38f2b768159537176737bab97bcc923f10cee58212300b8a3b0a22a1f5c8cd84e9ed5b8dbc451306e4ab4b293352d82507bc5f777ac5cc30c086457987fbe9cb84d55") (async) exit_group(0x0) (async) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f0000000380)=""/53, 0x35}], 0x2, &(0x7f0000000580)=[{&(0x7f0000000500)=""/75, 0x4b}], 0x1, 0x0) (async) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df000000000000", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) ptrace$setregs(0xd, r2, 0x4d40, &(0x7f0000000680)="15a4a122bd88ccf8c0d9f41eb29b6bce747d581ad09163733bceb59064479deaf9f95dad3e17cd99ed874a50045865674e40fc56cc87bb6e69a47941379d90858a3782613a359b918534d12d9e49b97444bee2b2aa77205102fe04788ece3528ed3484d034a3899db389ed26e5bc7c3bf1c45a303d09f0e401c09b2415171592841afe72116abb7fdb6a1f0d9e6c17e85d650f638c2ebd0231c5ad0bcec23d5a7b83459fc2515c272a79628d2af9e3acb50c9d969c4b5dea6986cae802c9915358db3cf4cbcbab7d0be289cd05e1a45b65e65e481e5eaff267fca14f44a6f2a7748fdd6aa03fe88263446b39ab7883c8cb") (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)="002c0d95650bdb79c8db4f7151963cef2d41312548643597280f6a6f82d5e39d57c00d3a06600f7df7f311e3f82c4652a85ce7cacc1e496bde321a64fadf5fb6a5ac72d5875960f054c4") wait4(r0, &(0x7f0000000000), 0x8, &(0x7f00000005c0)) clone(0x2c00, &(0x7f00000001c0)="e5e33b82137e829cae59977c6e4a5ad84e2f5f18e96fbc0b56e87b5bfb479215f77b801edab5923a3ab2747b6fadf9ad2bb63f5d59f209fc63629831c44b6eb95c0eff3e1eb425cef011630cb4a917deb97c971492eec2c6f6527125a08aa8", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="bb1f0d36447f5c1173ab58037d06206d17d32a9dfec48e0dfd0604cc35d6111b27eda1344e97ae9c78287fa3dcb52ab29de1918d9197be820a766878b0f663765a26c3256039fdc7aa97cbe8f6ee492c40c041feb908c4e27cd6cc99a3edac25716e9a350b4108a9ae97a63763682d076a71d2671ed38f2b768159537176737bab97bcc923f10cee58212300b8a3b0a22a1f5c8cd84e9ed5b8dbc451306e4ab4b293352d82507bc5f777ac5cc30c086457987fbe9cb84d55") (async, rerun: 64) exit_group(0x0) (rerun: 64) process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f0000000380)=""/53, 0x35}], 0x2, &(0x7f0000000580)=[{&(0x7f0000000500)=""/75, 0x4b}], 0x1, 0x0) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x8000000, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df000000000000", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df000000000000", 0x21}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x20000000, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b0", 0x27}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b0", 0x27}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async, rerun: 32) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async, rerun: 32) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 32) wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000100)) (rerun: 32) exit_group(0x0) 10:13:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0xeffdffff, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b0", 0x27}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1f", 0x2a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0xfffffdef, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1f", 0x2a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async, rerun: 32) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (rerun: 32) wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000100)) (async) exit_group(0x0) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x4, 0x0, 0xf5ffffff) 10:13:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1f", 0x2a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x8, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x2000, 0x0, 0xf5ffffff) 10:13:57 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c6f7765060069c65e11e3d0a50fd630"]) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000a00)=""/111, 0x6f}, {0x0}, {0x0}, {&(0x7f0000000d00)=""/239, 0xef}, {0x0}, {&(0x7f0000000e80)=""/120, 0x78}, {&(0x7f0000000f00)=""/167, 0xa7}, {&(0x7f0000001040)=""/200, 0xc8}], 0x9, &(0x7f0000002880)=ANY=[@ANYBLOB="180000000000000001000000", @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000c6b33c42d53cf36a2ecd31f4bda363f6882cc54bae3de0bf35bd489fbdc7cfb68949c36d5b6239110054ec85b656328d276a6f947d9a3e3d58a6ac0712bab21d3f5a526fbaef9909533928669192b32ebb760867b502f3e10590d610e5b870acfdb301096d72f9ea04f486a21bfc58f0ebce8432465f882fec9ee82417af6c1ba31ed6ca308690c8dde8096a4ec03ccf1e47ae39cf32e6000c1eb55091169548c5915ecd1a95e3c0ebbf80dfcfdcd33bc499c6968d36", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000002740)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/247, 0xf7}], 0x2, &(0x7f00000027c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000003f80)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000004240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}}, {{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {&(0x7f00000025c0)=""/105, 0x69}, {&(0x7f0000004400)=""/243, 0xf3}, {&(0x7f0000004500)=""/196, 0xc4}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000b00)=""/112, 0x70}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000004a40)=""/174, 0xae}, {&(0x7f0000004b00)=""/194, 0xc2}, {0x0}], 0x3, &(0x7f0000000580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x5, 0x10004, &(0x7f0000005380)={0x0, 0x3938700}) stat(&(0x7f0000005480)='./file3\x00', &(0x7f00000004c0)) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 10:13:57 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x800000, 0x0, 0xf5ffffff) 10:13:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:57 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:57 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea", 0x2b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async, rerun: 32) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async, rerun: 32) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c6f7765060069c65e11e3d0a50fd630"]) (async) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus/file0\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) (async, rerun: 32) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000a00)=""/111, 0x6f}, {0x0}, {0x0}, {&(0x7f0000000d00)=""/239, 0xef}, {0x0}, {&(0x7f0000000e80)=""/120, 0x78}, {&(0x7f0000000f00)=""/167, 0xa7}, {&(0x7f0000001040)=""/200, 0xc8}], 0x9, &(0x7f0000002880)=ANY=[@ANYBLOB="180000000000000001000000", @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000c6b33c42d53cf36a2ecd31f4bda363f6882cc54bae3de0bf35bd489fbdc7cfb68949c36d5b6239110054ec85b656328d276a6f947d9a3e3d58a6ac0712bab21d3f5a526fbaef9909533928669192b32ebb760867b502f3e10590d610e5b870acfdb301096d72f9ea04f486a21bfc58f0ebce8432465f882fec9ee82417af6c1ba31ed6ca308690c8dde8096a4ec03ccf1e47ae39cf32e6000c1eb55091169548c5915ecd1a95e3c0ebbf80dfcfdcd33bc499c6968d36", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000002740)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/247, 0xf7}], 0x2, &(0x7f00000027c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000003f80)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000004240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}}, {{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {&(0x7f00000025c0)=""/105, 0x69}, {&(0x7f0000004400)=""/243, 0xf3}, {&(0x7f0000004500)=""/196, 0xc4}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000b00)=""/112, 0x70}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000004a40)=""/174, 0xae}, {&(0x7f0000004b00)=""/194, 0xc2}, {0x0}], 0x3, &(0x7f0000000580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x5, 0x10004, &(0x7f0000005380)={0x0, 0x3938700}) (async, rerun: 32) stat(&(0x7f0000005480)='./file3\x00', &(0x7f00000004c0)) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x4000000, 0x0, 0xf5ffffff) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x8000000, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c6f7765060069c65e11e3d0a50fd630"]) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000a00)=""/111, 0x6f}, {0x0}, {0x0}, {&(0x7f0000000d00)=""/239, 0xef}, {0x0}, {&(0x7f0000000e80)=""/120, 0x78}, {&(0x7f0000000f00)=""/167, 0xa7}, {&(0x7f0000001040)=""/200, 0xc8}], 0x9, &(0x7f0000002880)=ANY=[@ANYBLOB="180000000000000001000000", @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000c6b33c42d53cf36a2ecd31f4bda363f6882cc54bae3de0bf35bd489fbdc7cfb68949c36d5b6239110054ec85b656328d276a6f947d9a3e3d58a6ac0712bab21d3f5a526fbaef9909533928669192b32ebb760867b502f3e10590d610e5b870acfdb301096d72f9ea04f486a21bfc58f0ebce8432465f882fec9ee82417af6c1ba31ed6ca308690c8dde8096a4ec03ccf1e47ae39cf32e6000c1eb55091169548c5915ecd1a95e3c0ebbf80dfcfdcd33bc499c6968d36", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000002740)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/247, 0xf7}], 0x2, &(0x7f00000027c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000003f80)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000004240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}}, {{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {&(0x7f00000025c0)=""/105, 0x69}, {&(0x7f0000004400)=""/243, 0xf3}, {&(0x7f0000004500)=""/196, 0xc4}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000b00)=""/112, 0x70}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000004a40)=""/174, 0xae}, {&(0x7f0000004b00)=""/194, 0xc2}, {0x0}], 0x3, &(0x7f0000000580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x5, 0x10004, &(0x7f0000005380)={0x0, 0x3938700}) stat(&(0x7f0000005480)='./file3\x00', &(0x7f00000004c0)) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c6f7765060069c65e11e3d0a50fd630"]) (async) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus/file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000a00)=""/111, 0x6f}, {0x0}, {0x0}, {&(0x7f0000000d00)=""/239, 0xef}, {0x0}, {&(0x7f0000000e80)=""/120, 0x78}, {&(0x7f0000000f00)=""/167, 0xa7}, {&(0x7f0000001040)=""/200, 0xc8}], 0x9, &(0x7f0000002880)=ANY=[@ANYBLOB="180000000000000001000000", @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000c6b33c42d53cf36a2ecd31f4bda363f6882cc54bae3de0bf35bd489fbdc7cfb68949c36d5b6239110054ec85b656328d276a6f947d9a3e3d58a6ac0712bab21d3f5a526fbaef9909533928669192b32ebb760867b502f3e10590d610e5b870acfdb301096d72f9ea04f486a21bfc58f0ebce8432465f882fec9ee82417af6c1ba31ed6ca308690c8dde8096a4ec03ccf1e47ae39cf32e6000c1eb55091169548c5915ecd1a95e3c0ebbf80dfcfdcd33bc499c6968d36", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000002740)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/247, 0xf7}], 0x2, &(0x7f00000027c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000003f80)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000004240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}}, {{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {&(0x7f00000025c0)=""/105, 0x69}, {&(0x7f0000004400)=""/243, 0xf3}, {&(0x7f0000004500)=""/196, 0xc4}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000b00)=""/112, 0x70}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000004a40)=""/174, 0xae}, {&(0x7f0000004b00)=""/194, 0xc2}, {0x0}], 0x3, &(0x7f0000000580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x5, 0x10004, &(0x7f0000005380)={0x0, 0x3938700}) (async) stat(&(0x7f0000005480)='./file3\x00', &(0x7f00000004c0)) (async) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) (async) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xd75, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x40, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x20000000, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0xeffdffff, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xd75, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x40, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xd75, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) (async) mkdir(0x0, 0x0) (async) chdir(&(0x7f0000000380)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) (async) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r1, 0x0, 0x5) (async) tkill(r1, 0x38) (async) ptrace$cont(0x18, r1, 0x40, 0x0) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) (async) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0xfffffdef, 0x0, 0xf5ffffff) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x10000000000, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x80000000000000, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xd75, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x40, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xd75, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) (async) mkdir(0x0, 0x0) (async) chdir(&(0x7f0000000380)='./file0\x00') (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f0000002580)=ANY=[], 0x16) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) (async) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r1, 0x0, 0x5) (async) tkill(r1, 0x38) (async) ptrace$cont(0x18, r1, 0x40, 0x0) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) (async) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x400000000000000, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x800000000000000, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) wait4(r1, &(0x7f0000000080), 0x8, &(0x7f00000001c0)) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x2000000000000000, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) wait4(r1, &(0x7f0000000080), 0x8, &(0x7f00000001c0)) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0xeffdffff00000000, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) pwrite64(r0, &(0x7f0000000080), 0x0, 0x101) r1 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r1, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async, rerun: 64) r0 = gettid() (rerun: 64) wait4(0x0, 0x0, 0x80000002, 0x0) (async, rerun: 64) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async, rerun: 64) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) wait4(r1, &(0x7f0000000080), 0x8, &(0x7f00000001c0)) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) pwrite64(r0, &(0x7f0000000080), 0x0, 0x101) (async) r1 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r1, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) wait4(0x0, &(0x7f00000001c0), 0x80000000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) wait4(r0, &(0x7f0000000080), 0x1000000, 0x0) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x38) (async) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) (async) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) (async) wait4(0x0, &(0x7f00000001c0), 0x80000000, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) wait4(r0, &(0x7f0000000080), 0x1000000, 0x0) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) pwrite64(r0, &(0x7f0000000080), 0x0, 0x101) (async) r1 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r1, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) (async) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) (async) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) wait4(0x0, &(0x7f00000001c0), 0x80000000, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) wait4(r0, &(0x7f0000000080), 0x1000000, 0x0) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) io_uring_enter(r0, 0x7952, 0xda69, 0x1, &(0x7f0000000000)={[0xe7]}, 0x8) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 64) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) io_uring_enter(r0, 0x7952, 0xda69, 0x1, &(0x7f0000000000)={[0xe7]}, 0x8) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) wait4(0x0, &(0x7f0000000100), 0x4, &(0x7f0000000200)) exit_group(0x0) ptrace$setregs(0xf, r0, 0x3, &(0x7f0000000040)="5554239c1a634f0c68ce0447826c827e16147d8bdd1276d9a3c4e23afbf1d9f7b368ca05becd0e6b323f38cc5b39fe22997eb32bd0f680755c926f4180f84ec0c490eb9c95d788e0dbd1eea36457960a72b009b00e1c08fd96b01b9abda54ff99acd9497b3592850a19810") 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async) wait4(0x0, &(0x7f0000000100), 0x4, &(0x7f0000000200)) exit_group(0x0) (async, rerun: 64) ptrace$setregs(0xf, r0, 0x3, &(0x7f0000000040)="5554239c1a634f0c68ce0447826c827e16147d8bdd1276d9a3c4e23afbf1d9f7b368ca05becd0e6b323f38cc5b39fe22997eb32bd0f680755c926f4180f84ec0c490eb9c95d788e0dbd1eea36457960a72b009b00e1c08fd96b01b9abda54ff99acd9497b3592850a19810") (rerun: 64) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async, rerun: 64) io_uring_enter(r0, 0x7952, 0xda69, 0x1, &(0x7f0000000000)={[0xe7]}, 0x8) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) wait4(0x0, &(0x7f0000000100), 0x4, &(0x7f0000000200)) exit_group(0x0) ptrace$setregs(0xf, r0, 0x3, &(0x7f0000000040)="5554239c1a634f0c68ce0447826c827e16147d8bdd1276d9a3c4e23afbf1d9f7b368ca05becd0e6b323f38cc5b39fe22997eb32bd0f680755c926f4180f84ec0c490eb9c95d788e0dbd1eea36457960a72b009b00e1c08fd96b01b9abda54ff99acd9497b3592850a19810") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) inotify_init1(0x0) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) (async) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) (async) inotify_init1(0x0) (async) fcntl$setown(r3, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000140)) (async) ptrace$setopts(0x4206, r4, 0x0, 0x0) (async) rt_sigqueueinfo(r4, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async) wait4(0x0, &(0x7f0000000100), 0x4, &(0x7f0000000200)) (async) exit_group(0x0) (async) ptrace$setregs(0xf, r0, 0x3, &(0x7f0000000040)="5554239c1a634f0c68ce0447826c827e16147d8bdd1276d9a3c4e23afbf1d9f7b368ca05becd0e6b323f38cc5b39fe22997eb32bd0f680755c926f4180f84ec0c490eb9c95d788e0dbd1eea36457960a72b009b00e1c08fd96b01b9abda54ff99acd9497b3592850a19810") (async) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) wait4(r0, &(0x7f0000000040), 0x80000000, &(0x7f00000001c0)) exit_group(0x0) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) wait4(r0, &(0x7f0000000040), 0x80000000, &(0x7f00000001c0)) exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) wait4(r0, &(0x7f0000000040), 0x80000000, &(0x7f00000001c0)) (async) exit_group(0x0) (async) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x81) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) wait4(r0, &(0x7f0000000040), 0x80000000, &(0x7f00000001c0)) exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) wait4(r0, &(0x7f0000000040), 0x80000000, &(0x7f00000001c0)) (async) exit_group(0x0) (async) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x81) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$cont(0x18, r1, 0x81, 0x8) clone3(&(0x7f00000024c0)={0x804080, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, {0x27}, &(0x7f0000002440)=""/77, 0x4d, &(0x7f0000000180)=""/11, &(0x7f0000000380)=[0x0], 0x1}, 0x58) ptrace$setopts(0x4206, r3, 0x9, 0x100008) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x7df, &(0x7f00000001c0)="8b3affa8ad77809113c923abacc2d32c3bc2b30596036ab1e5c42b179cd0f81056fa4c1109fb347fb5e3333ca4bd596598f147bd0fa0c5094c425c72022c8133d31264055d0ef2fc4cf3c70d33f2aa7f044c37c343e175d96c79e97783099559a226c06c5083fb61715b95fa29ce979189bf4b411560d92179d68ca79a5f4c40b96e11aceb526a7d3d1b4af18c2ba65ca1f6092a9c4e0dfafe017bb25c4bfc2cb29a798b721844baefd57ab23165017d4523d23a09ff1ed918611b66f14582b8f2e001d330ecf4aaa5eddbc37df77d3614388fbc9191078c07968c36febe60eeb63925622e84ef09") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r4 = getpgrp(r2) wait4(r4, &(0x7f0000000000), 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x0, &(0x7f0000000040)=0xd) exit_group(0x0) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$cont(0x18, r1, 0x81, 0x8) clone3(&(0x7f00000024c0)={0x804080, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, {0x27}, &(0x7f0000002440)=""/77, 0x4d, &(0x7f0000000180)=""/11, &(0x7f0000000380)=[0x0], 0x1}, 0x58) ptrace$setopts(0x4206, r3, 0x9, 0x100008) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x7df, &(0x7f00000001c0)="8b3affa8ad77809113c923abacc2d32c3bc2b30596036ab1e5c42b179cd0f81056fa4c1109fb347fb5e3333ca4bd596598f147bd0fa0c5094c425c72022c8133d31264055d0ef2fc4cf3c70d33f2aa7f044c37c343e175d96c79e97783099559a226c06c5083fb61715b95fa29ce979189bf4b411560d92179d68ca79a5f4c40b96e11aceb526a7d3d1b4af18c2ba65ca1f6092a9c4e0dfafe017bb25c4bfc2cb29a798b721844baefd57ab23165017d4523d23a09ff1ed918611b66f14582b8f2e001d330ecf4aaa5eddbc37df77d3614388fbc9191078c07968c36febe60eeb63925622e84ef09") (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) r4 = getpgrp(r2) wait4(r4, &(0x7f0000000000), 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x0, &(0x7f0000000040)=0xd) (async) exit_group(0x0) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x81) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 498.494445][ T5187] cgroup: fork rejected by pids controller in /syz4 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$cont(0x18, r1, 0x81, 0x8) (async) clone3(&(0x7f00000024c0)={0x804080, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, {0x27}, &(0x7f0000002440)=""/77, 0x4d, &(0x7f0000000180)=""/11, &(0x7f0000000380)=[0x0], 0x1}, 0x58) ptrace$setopts(0x4206, r3, 0x9, 0x100008) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x7df, &(0x7f00000001c0)="8b3affa8ad77809113c923abacc2d32c3bc2b30596036ab1e5c42b179cd0f81056fa4c1109fb347fb5e3333ca4bd596598f147bd0fa0c5094c425c72022c8133d31264055d0ef2fc4cf3c70d33f2aa7f044c37c343e175d96c79e97783099559a226c06c5083fb61715b95fa29ce979189bf4b411560d92179d68ca79a5f4c40b96e11aceb526a7d3d1b4af18c2ba65ca1f6092a9c4e0dfafe017bb25c4bfc2cb29a798b721844baefd57ab23165017d4523d23a09ff1ed918611b66f14582b8f2e001d330ecf4aaa5eddbc37df77d3614388fbc9191078c07968c36febe60eeb63925622e84ef09") (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r4 = getpgrp(r2) wait4(r4, &(0x7f0000000000), 0x8, &(0x7f00000002c0)) (async) sched_setscheduler(r0, 0x0, &(0x7f0000000040)=0xd) (async) exit_group(0x0) 10:13:58 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) getpeername$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:58 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) getpeername$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) getpeername$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x20000, &(0x7f0000000240)="c228cd967cb341643332304f9bb4341d3093c2024b5c2b2835f06ed111e8aef357cd138cba08aee68e8861c0b38626253d300cfaf336c9359b5290868112973a65b3b92533799d489fd34877d45db9bb14d0", &(0x7f0000000080), &(0x7f00000002c0), &(0x7f0000000400)="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") r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) dup3(r1, r2, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x1, 0x0, 0x1}, &(0x7f00000001c0)=[{}]) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) clone(0x20000, &(0x7f0000000240)="c228cd967cb341643332304f9bb4341d3093c2024b5c2b2835f06ed111e8aef357cd138cba08aee68e8861c0b38626253d300cfaf336c9359b5290868112973a65b3b92533799d489fd34877d45db9bb14d0", &(0x7f0000000080), &(0x7f00000002c0), &(0x7f0000000400)="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") (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async, rerun: 32) tkill(r0, 0x38) (rerun: 32) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) dup3(r1, r2, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x1, 0x0, 0x1}, &(0x7f00000001c0)=[{}]) 10:13:59 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) getpeername$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) getpeername$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) clone(0x20000, &(0x7f0000000240)="c228cd967cb341643332304f9bb4341d3093c2024b5c2b2835f06ed111e8aef357cd138cba08aee68e8861c0b38626253d300cfaf336c9359b5290868112973a65b3b92533799d489fd34877d45db9bb14d0", &(0x7f0000000080), &(0x7f00000002c0), &(0x7f0000000400)="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") r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) (async) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000) dup3(r1, r2, 0x0) (async) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x1, 0x0, 0x1}, &(0x7f00000001c0)=[{}]) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 0: syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @private=0xa010101}, 0x8) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) ptrace$setopts(0x4200, r2, 0x4, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x804) wait4(r0, &(0x7f0000000080), 0x4, &(0x7f00000001c0)) exit_group(0x0) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) ptrace$setopts(0x4200, r2, 0x4, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x804) wait4(r0, &(0x7f0000000080), 0x4, &(0x7f00000001c0)) exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) inotify_init1(0x0) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) (async) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) (async) ptrace$setopts(0x4200, r2, 0x4, 0x40) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x804) (async) wait4(r0, &(0x7f0000000080), 0x4, &(0x7f00000001c0)) (async) exit_group(0x0) (async) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) ptrace$setopts(0x4200, r2, 0x4, 0x40) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x804) wait4(r0, &(0x7f0000000080), 0x4, &(0x7f00000001c0)) exit_group(0x0) 10:13:59 executing program 0: syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 32) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) (rerun: 32) fallocate(r3, 0x1, 0x0, 0x7fffffff) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async, rerun: 64) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @private=0xa010101}, 0x8) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) tkill(r2, 0x41) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 0: syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @private=0xa010101}, 0x8) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) fallocate(r3, 0x1, 0x0, 0x7fffffff) (async) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @private=0xa010101}, 0x8) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) (async) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async, rerun: 32) r1 = inotify_init1(0x0) (rerun: 32) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) (async) tkill(r2, 0x41) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, 0x0, 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, 0x0, 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) tkill(r2, 0x41) (async) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, 0x0, 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0xc4000000, &(0x7f00000002c0)="ec58b27b449b", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000400)="ad719845fc45b3230bcaf464a0e35899253b29c3e1955f31402f5cfcc73ec663fdfc39301fee5264c9fe6e075d04c0e40f64430d9e41f025a71f21c34a44d5045e02a58ecf95112a746f") wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) clone(0x4db2aefa626e4646, &(0x7f0000000040)="75bc3c79e60fcbf1915721c5b43b0d418977f345b47597a0cd7f5cf8e99ec1e7de943ae5a9370565e8aa6099fde21c5a283895049e948e27b2e01723c7503c9c15aab8fab4aae8627db661e39633b73358c0b1ec813b8ec1514e6ff1d116c028195fbd6cb328ecfa294a3896437065b5ded6a681c651", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="fbc803fc326e9c72b34567ebb38e2f025f57081c29ce1ed8aa910a140fa711dc25e30843eecfe8ebb2cea245f094f77fcffa7f7e9e1b5f5ce97d0d644b02e7a27230ec164fd3a099e31a8bec151ad24666d32b1590b1af3298e22b") exit_group(0x0) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x4e93, &(0x7f0000000080)={0x0, 0xf1fe, 0x1, 0x1, 0x398, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r4}}, 0x74f) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd_index=0x5, 0x1, 0x80000000, 0x179, 0x2, 0x1, {0x1, r4}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x4e93, &(0x7f0000000080)={0x0, 0xf1fe, 0x1, 0x1, 0x398, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r4}}, 0x74f) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd_index=0x5, 0x1, 0x80000000, 0x179, 0x2, 0x1, {0x1, r4}}, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, 0x0) exit_group(0x0) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0xc4000000, &(0x7f00000002c0)="ec58b27b449b", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000400)="ad719845fc45b3230bcaf464a0e35899253b29c3e1955f31402f5cfcc73ec663fdfc39301fee5264c9fe6e075d04c0e40f64430d9e41f025a71f21c34a44d5045e02a58ecf95112a746f") (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) (async, rerun: 32) ptrace$cont(0x18, r0, 0x0, 0x0) (async, rerun: 32) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 32) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async, rerun: 32) clone(0x4db2aefa626e4646, &(0x7f0000000040)="75bc3c79e60fcbf1915721c5b43b0d418977f345b47597a0cd7f5cf8e99ec1e7de943ae5a9370565e8aa6099fde21c5a283895049e948e27b2e01723c7503c9c15aab8fab4aae8627db661e39633b73358c0b1ec813b8ec1514e6ff1d116c028195fbd6cb328ecfa294a3896437065b5ded6a681c651", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="fbc803fc326e9c72b34567ebb38e2f025f57081c29ce1ed8aa910a140fa711dc25e30843eecfe8ebb2cea245f094f77fcffa7f7e9e1b5f5ce97d0d644b02e7a27230ec164fd3a099e31a8bec151ad24666d32b1590b1af3298e22b") (async) exit_group(0x0) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, 0x0) exit_group(0x0) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, 0x0) exit_group(0x0) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x4e93, &(0x7f0000000080)={0x0, 0xf1fe, 0x1, 0x1, 0x398, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r4}}, 0x74f) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd_index=0x5, 0x1, 0x80000000, 0x179, 0x2, 0x1, {0x1, r4}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) syz_io_uring_setup(0x4e93, &(0x7f0000000080)={0x0, 0xf1fe, 0x1, 0x1, 0x398, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014a000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r4}}, 0x74f) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd_index=0x5, 0x1, 0x80000000, 0x179, 0x2, 0x1, {0x1, r4}}, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) 10:13:59 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0xc4000000, &(0x7f00000002c0)="ec58b27b449b", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000400)="ad719845fc45b3230bcaf464a0e35899253b29c3e1955f31402f5cfcc73ec663fdfc39301fee5264c9fe6e075d04c0e40f64430d9e41f025a71f21c34a44d5045e02a58ecf95112a746f") wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) clone(0x4db2aefa626e4646, &(0x7f0000000040)="75bc3c79e60fcbf1915721c5b43b0d418977f345b47597a0cd7f5cf8e99ec1e7de943ae5a9370565e8aa6099fde21c5a283895049e948e27b2e01723c7503c9c15aab8fab4aae8627db661e39633b73358c0b1ec813b8ec1514e6ff1d116c028195fbd6cb328ecfa294a3896437065b5ded6a681c651", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="fbc803fc326e9c72b34567ebb38e2f025f57081c29ce1ed8aa910a140fa711dc25e30843eecfe8ebb2cea245f094f77fcffa7f7e9e1b5f5ce97d0d644b02e7a27230ec164fd3a099e31a8bec151ad24666d32b1590b1af3298e22b") exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) clone(0xc4000000, &(0x7f00000002c0)="ec58b27b449b", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000400)="ad719845fc45b3230bcaf464a0e35899253b29c3e1955f31402f5cfcc73ec663fdfc39301fee5264c9fe6e075d04c0e40f64430d9e41f025a71f21c34a44d5045e02a58ecf95112a746f") (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) clone(0x4db2aefa626e4646, &(0x7f0000000040)="75bc3c79e60fcbf1915721c5b43b0d418977f345b47597a0cd7f5cf8e99ec1e7de943ae5a9370565e8aa6099fde21c5a283895049e948e27b2e01723c7503c9c15aab8fab4aae8627db661e39633b73358c0b1ec813b8ec1514e6ff1d116c028195fbd6cb328ecfa294a3896437065b5ded6a681c651", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="fbc803fc326e9c72b34567ebb38e2f025f57081c29ce1ed8aa910a140fa711dc25e30843eecfe8ebb2cea245f094f77fcffa7f7e9e1b5f5ce97d0d644b02e7a27230ec164fd3a099e31a8bec151ad24666d32b1590b1af3298e22b") (async) exit_group(0x0) (async) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2000}], 0x1, &(0x7f0000000140), &(0x7f0000000180)={[0x6]}, 0x8) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@util={0x25, "79ec1ab20955c98e7d084a7f5d36fde4"}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)="87f0a035fd2a5e464066d0228636b791649d235a46469251ad54acca1a5f9cecfa487fa9cccae9f0a49615098233724bd0a2d38f71e362d33018f8e128d356e2fa8c81b8527a957a6687903b4c92abcafa000000a8aa3a0eefbd26c12fd95932aa7b63377c9188339c3dec867f58a13a41a0db377edc47a60daa0ae98f5f7a9ee0733293e7b72bc47b8554785aaa6a07f0a963eb540bab080426c7e0a46bd1256fc9d5708d283585939f60953f18be869364f03a96eaa84ec0da58f35e98f0c043db4d7e66c6901ac7948cf840d026b11df05a2401", 0xd5}, {&(0x7f0000000500)="26db619ef858da9af0b54843180f7d7df57845019c20a0cf862322eaed00ac304c99588b8e033a12c2dcd1c3d141ed3c9fc01724bd2c14b79f20841947ad1de729455a51409343f289e7d3e3b2", 0x4d}, {&(0x7f0000000580)="eb2d547d79d82fc78af4a15c59ef01fb02dda59906c0e1864ec53f96e57381efd542950b17a60a959b4ce435c2dafa9b149bc92ae51f46563d8f434a25ff6bfa00f35d0ec05fb7cb9b5fbdab45bfc8a33c48fc6757cdfe3e6f49d1aa93dfc3d355eb3a", 0x63}, {&(0x7f0000000680)="969a15f2ab1773291d520db669182499a479ad1a7c55321499ef204c526a3ebf28ee95c8bbda8d6ede322f1158df73176b3f271b15009678c627c9c57f27bbc999fc35aba8379f4b5414e427a18ae165350713d96d00a0492aa5a5232ce7", 0x5e}, {&(0x7f0000000380)="7506dc75950591711b7dd9615a7e54ac46d97198bb0841cc89a63da330d872d5faf42dd6c51a7577e52852fef5cb38c1f5", 0x31}], 0x5}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}}, 0x400c848) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xf, r0, 0x3, &(0x7f0000000040)="da588bfe8526b0c48b1b4e1c46596c1ee6b72bc13d3d336d13cc060fe5c956798bb386afd1baf86c83bc2e96763ed6d7b706d1ca85d9c92cb389fcbfd6e732cf3c5b57") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = getpgid(r0) wait4(r2, &(0x7f0000000000), 0x1, &(0x7f00000001c0)) exit_group(0x0) clone(0x2001400, &(0x7f0000000600)="02e4bd50619db0abf460ea8a90b751184eadbd776d5c4cb2141a0989762eb06c3951527e9aca18cee142d9428ef6b2f4eb4dcd63e04841902697", &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="83d99df1b6abd064e3731a3725006c2288ad460e824497f1d269f8ff376b15a27a701b97d7371452ace0035293dcdd1fd4d2d3af0f8636687970683e8fefca10d09a38a0fc344b6d25b177c4c20c4b522fcc6c04d153496ba03fdb4d03be3a1604bbde6fa1723cda3fabcaab2ea5b18f8c63fe3101c9c83218d542ab3c8caa8f3f79b44b3fc6f1eadee6544a36fbbe11e5639391588bc1a40a808194fe377eef8d8d4d72") 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x401, 0x0) r1 = socket(0x10, 0x3, 0x0) dup3(r1, r1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f00000002c0)="2a1318bb3c0bd60e8023c2a3aad3a810e31a63794d805c210a3d48c23c6f93265c7529cbcd2276ddf96672e72711915b7448c34958593711ac48ec52827b4d5642a70a303ef7e4af2a4df6", 0x4b) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0xd8, "37de60e26060b60eede406690033fc7accc2a2670734e417da86202780b21b348103b637a841db491829f8e5414fc6c3ebdc7ff291a1492e03d01b8a18af014f3d800a5aeebbd0914f04b3e775177dbd26fb4cb050d4c116618ad5bdd4f61b93829cd717211459397a70067b415d19d116cb03409dbb775068657b639e892c5418adbe4e453ac12f8ef6b3cbb2760044e65e5c2b837738a6150e95dc9c1166d9c828b660ec305a12228ddd4e0bffffffffffffff59df484d138975e197850e88ccfdd08b2c541d522ed7ae33a696f1df7544d50f66be686e"}, &(0x7f0000000280)=0xfc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', r4, 0x29, 0xec, 0x20, 0xe09d9de7, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x39}, 0x20, 0x1, 0x9, 0x9}}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10201}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x54, 0x2e, 0x502, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0xf}, {0xffff, 0xb}, {0x6}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r9, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r9, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) io_uring_enter(r9, 0x5ede, 0xbd1b, 0x3, &(0x7f0000000000)={[0x200]}, 0x8) io_uring_enter(r5, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b0", 0x27}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2000}], 0x1, &(0x7f0000000140), &(0x7f0000000180)={[0x6]}, 0x8) (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@util={0x25, "79ec1ab20955c98e7d084a7f5d36fde4"}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)="87f0a035fd2a5e464066d0228636b791649d235a46469251ad54acca1a5f9cecfa487fa9cccae9f0a49615098233724bd0a2d38f71e362d33018f8e128d356e2fa8c81b8527a957a6687903b4c92abcafa000000a8aa3a0eefbd26c12fd95932aa7b63377c9188339c3dec867f58a13a41a0db377edc47a60daa0ae98f5f7a9ee0733293e7b72bc47b8554785aaa6a07f0a963eb540bab080426c7e0a46bd1256fc9d5708d283585939f60953f18be869364f03a96eaa84ec0da58f35e98f0c043db4d7e66c6901ac7948cf840d026b11df05a2401", 0xd5}, {&(0x7f0000000500)="26db619ef858da9af0b54843180f7d7df57845019c20a0cf862322eaed00ac304c99588b8e033a12c2dcd1c3d141ed3c9fc01724bd2c14b79f20841947ad1de729455a51409343f289e7d3e3b2", 0x4d}, {&(0x7f0000000580)="eb2d547d79d82fc78af4a15c59ef01fb02dda59906c0e1864ec53f96e57381efd542950b17a60a959b4ce435c2dafa9b149bc92ae51f46563d8f434a25ff6bfa00f35d0ec05fb7cb9b5fbdab45bfc8a33c48fc6757cdfe3e6f49d1aa93dfc3d355eb3a", 0x63}, {&(0x7f0000000680)="969a15f2ab1773291d520db669182499a479ad1a7c55321499ef204c526a3ebf28ee95c8bbda8d6ede322f1158df73176b3f271b15009678c627c9c57f27bbc999fc35aba8379f4b5414e427a18ae165350713d96d00a0492aa5a5232ce7", 0x5e}, {&(0x7f0000000380)="7506dc75950591711b7dd9615a7e54ac46d97198bb0841cc89a63da330d872d5faf42dd6c51a7577e52852fef5cb38c1f5", 0x31}], 0x5}, 0x0) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}}, 0x400c848) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async, rerun: 64) tkill(r0, 0x33) (async, rerun: 64) ptrace$setregs(0xf, r0, 0x3, &(0x7f0000000040)="da588bfe8526b0c48b1b4e1c46596c1ee6b72bc13d3d336d13cc060fe5c956798bb386afd1baf86c83bc2e96763ed6d7b706d1ca85d9c92cb389fcbfd6e732cf3c5b57") (async, rerun: 64) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 64) r2 = getpgid(r0) wait4(r2, &(0x7f0000000000), 0x1, &(0x7f00000001c0)) exit_group(0x0) (async) clone(0x2001400, &(0x7f0000000600)="02e4bd50619db0abf460ea8a90b751184eadbd776d5c4cb2141a0989762eb06c3951527e9aca18cee142d9428ef6b2f4eb4dcd63e04841902697", &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="83d99df1b6abd064e3731a3725006c2288ad460e824497f1d269f8ff376b15a27a701b97d7371452ace0035293dcdd1fd4d2d3af0f8636687970683e8fefca10d09a38a0fc344b6d25b177c4c20c4b522fcc6c04d153496ba03fdb4d03be3a1604bbde6fa1723cda3fabcaab2ea5b18f8c63fe3101c9c83218d542ab3c8caa8f3f79b44b3fc6f1eadee6544a36fbbe11e5639391588bc1a40a808194fe377eef8d8d4d72") 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b0", 0x27}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b0", 0x27}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x401, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) dup3(r1, r1, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f00000002c0)="2a1318bb3c0bd60e8023c2a3aad3a810e31a63794d805c210a3d48c23c6f93265c7529cbcd2276ddf96672e72711915b7448c34958593711ac48ec52827b4d5642a70a303ef7e4af2a4df6", 0x4b) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async, rerun: 64) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0xd8, "37de60e26060b60eede406690033fc7accc2a2670734e417da86202780b21b348103b637a841db491829f8e5414fc6c3ebdc7ff291a1492e03d01b8a18af014f3d800a5aeebbd0914f04b3e775177dbd26fb4cb050d4c116618ad5bdd4f61b93829cd717211459397a70067b415d19d116cb03409dbb775068657b639e892c5418adbe4e453ac12f8ef6b3cbb2760044e65e5c2b837738a6150e95dc9c1166d9c828b660ec305a12228ddd4e0bffffffffffffff59df484d138975e197850e88ccfdd08b2c541d522ed7ae33a696f1df7544d50f66be686e"}, &(0x7f0000000280)=0xfc) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', r4, 0x29, 0xec, 0x20, 0xe09d9de7, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x39}, 0x20, 0x1, 0x9, 0x9}}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10201}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x54, 0x2e, 0x502, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0xf}, {0xffff, 0xb}, {0x6}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r9, 0x1, 0x0, 0x7fffffff) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r9, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (rerun: 64) io_uring_enter(r9, 0x5ede, 0xbd1b, 0x3, &(0x7f0000000000)={[0x200]}, 0x8) (async) io_uring_enter(r5, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2000}], 0x1, &(0x7f0000000140), &(0x7f0000000180)={[0x6]}, 0x8) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@util={0x25, "79ec1ab20955c98e7d084a7f5d36fde4"}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)="87f0a035fd2a5e464066d0228636b791649d235a46469251ad54acca1a5f9cecfa487fa9cccae9f0a49615098233724bd0a2d38f71e362d33018f8e128d356e2fa8c81b8527a957a6687903b4c92abcafa000000a8aa3a0eefbd26c12fd95932aa7b63377c9188339c3dec867f58a13a41a0db377edc47a60daa0ae98f5f7a9ee0733293e7b72bc47b8554785aaa6a07f0a963eb540bab080426c7e0a46bd1256fc9d5708d283585939f60953f18be869364f03a96eaa84ec0da58f35e98f0c043db4d7e66c6901ac7948cf840d026b11df05a2401", 0xd5}, {&(0x7f0000000500)="26db619ef858da9af0b54843180f7d7df57845019c20a0cf862322eaed00ac304c99588b8e033a12c2dcd1c3d141ed3c9fc01724bd2c14b79f20841947ad1de729455a51409343f289e7d3e3b2", 0x4d}, {&(0x7f0000000580)="eb2d547d79d82fc78af4a15c59ef01fb02dda59906c0e1864ec53f96e57381efd542950b17a60a959b4ce435c2dafa9b149bc92ae51f46563d8f434a25ff6bfa00f35d0ec05fb7cb9b5fbdab45bfc8a33c48fc6757cdfe3e6f49d1aa93dfc3d355eb3a", 0x63}, {&(0x7f0000000680)="969a15f2ab1773291d520db669182499a479ad1a7c55321499ef204c526a3ebf28ee95c8bbda8d6ede322f1158df73176b3f271b15009678c627c9c57f27bbc999fc35aba8379f4b5414e427a18ae165350713d96d00a0492aa5a5232ce7", 0x5e}, {&(0x7f0000000380)="7506dc75950591711b7dd9615a7e54ac46d97198bb0841cc89a63da330d872d5faf42dd6c51a7577e52852fef5cb38c1f5", 0x31}], 0x5}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}}, 0x400c848) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xf, r0, 0x3, &(0x7f0000000040)="da588bfe8526b0c48b1b4e1c46596c1ee6b72bc13d3d336d13cc060fe5c956798bb386afd1baf86c83bc2e96763ed6d7b706d1ca85d9c92cb389fcbfd6e732cf3c5b57") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = getpgid(r0) wait4(r2, &(0x7f0000000000), 0x1, &(0x7f00000001c0)) exit_group(0x0) clone(0x2001400, &(0x7f0000000600)="02e4bd50619db0abf460ea8a90b751184eadbd776d5c4cb2141a0989762eb06c3951527e9aca18cee142d9428ef6b2f4eb4dcd63e04841902697", &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="83d99df1b6abd064e3731a3725006c2288ad460e824497f1d269f8ff376b15a27a701b97d7371452ace0035293dcdd1fd4d2d3af0f8636687970683e8fefca10d09a38a0fc344b6d25b177c4c20c4b522fcc6c04d153496ba03fdb4d03be3a1604bbde6fa1723cda3fabcaab2ea5b18f8c63fe3101c9c83218d542ab3c8caa8f3f79b44b3fc6f1eadee6544a36fbbe11e5639391588bc1a40a808194fe377eef8d8d4d72") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2000}], 0x1, &(0x7f0000000140), &(0x7f0000000180)={[0x6]}, 0x8) (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@util={0x25, "79ec1ab20955c98e7d084a7f5d36fde4"}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)="87f0a035fd2a5e464066d0228636b791649d235a46469251ad54acca1a5f9cecfa487fa9cccae9f0a49615098233724bd0a2d38f71e362d33018f8e128d356e2fa8c81b8527a957a6687903b4c92abcafa000000a8aa3a0eefbd26c12fd95932aa7b63377c9188339c3dec867f58a13a41a0db377edc47a60daa0ae98f5f7a9ee0733293e7b72bc47b8554785aaa6a07f0a963eb540bab080426c7e0a46bd1256fc9d5708d283585939f60953f18be869364f03a96eaa84ec0da58f35e98f0c043db4d7e66c6901ac7948cf840d026b11df05a2401", 0xd5}, {&(0x7f0000000500)="26db619ef858da9af0b54843180f7d7df57845019c20a0cf862322eaed00ac304c99588b8e033a12c2dcd1c3d141ed3c9fc01724bd2c14b79f20841947ad1de729455a51409343f289e7d3e3b2", 0x4d}, {&(0x7f0000000580)="eb2d547d79d82fc78af4a15c59ef01fb02dda59906c0e1864ec53f96e57381efd542950b17a60a959b4ce435c2dafa9b149bc92ae51f46563d8f434a25ff6bfa00f35d0ec05fb7cb9b5fbdab45bfc8a33c48fc6757cdfe3e6f49d1aa93dfc3d355eb3a", 0x63}, {&(0x7f0000000680)="969a15f2ab1773291d520db669182499a479ad1a7c55321499ef204c526a3ebf28ee95c8bbda8d6ede322f1158df73176b3f271b15009678c627c9c57f27bbc999fc35aba8379f4b5414e427a18ae165350713d96d00a0492aa5a5232ce7", 0x5e}, {&(0x7f0000000380)="7506dc75950591711b7dd9615a7e54ac46d97198bb0841cc89a63da330d872d5faf42dd6c51a7577e52852fef5cb38c1f5", 0x31}], 0x5}, 0x0) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}}, 0x400c848) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) tkill(r0, 0x33) (async) ptrace$setregs(0xf, r0, 0x3, &(0x7f0000000040)="da588bfe8526b0c48b1b4e1c46596c1ee6b72bc13d3d336d13cc060fe5c956798bb386afd1baf86c83bc2e96763ed6d7b706d1ca85d9c92cb389fcbfd6e732cf3c5b57") (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) getpgid(r0) (async) wait4(r2, &(0x7f0000000000), 0x1, &(0x7f00000001c0)) (async) exit_group(0x0) (async) clone(0x2001400, &(0x7f0000000600)="02e4bd50619db0abf460ea8a90b751184eadbd776d5c4cb2141a0989762eb06c3951527e9aca18cee142d9428ef6b2f4eb4dcd63e04841902697", &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="83d99df1b6abd064e3731a3725006c2288ad460e824497f1d269f8ff376b15a27a701b97d7371452ace0035293dcdd1fd4d2d3af0f8636687970683e8fefca10d09a38a0fc344b6d25b177c4c20c4b522fcc6c04d153496ba03fdb4d03be3a1604bbde6fa1723cda3fabcaab2ea5b18f8c63fe3101c9c83218d542ab3c8caa8f3f79b44b3fc6f1eadee6544a36fbbe11e5639391588bc1a40a808194fe377eef8d8d4d72") (async) 10:13:59 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b0", 0x27}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000040)="256c67237c0b55cee2fb638c3226a444f733b8dec36d83efa53552c2f6b1aee6729fb074c00ce1a06d1dd07e6c1c7fb1b90c1c1e860451c596d9c51b402dcdf6d7a53b737c1fd742917b370068fab5db729c6d461513bde2b8de7c02") ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c8000001900020026bd7000fddbdf2502802080ff03d00100020000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x401, 0x0) r1 = socket(0x10, 0x3, 0x0) dup3(r1, r1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f00000002c0)="2a1318bb3c0bd60e8023c2a3aad3a810e31a63794d805c210a3d48c23c6f93265c7529cbcd2276ddf96672e72711915b7448c34958593711ac48ec52827b4d5642a70a303ef7e4af2a4df6", 0x4b) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0xd8, "37de60e26060b60eede406690033fc7accc2a2670734e417da86202780b21b348103b637a841db491829f8e5414fc6c3ebdc7ff291a1492e03d01b8a18af014f3d800a5aeebbd0914f04b3e775177dbd26fb4cb050d4c116618ad5bdd4f61b93829cd717211459397a70067b415d19d116cb03409dbb775068657b639e892c5418adbe4e453ac12f8ef6b3cbb2760044e65e5c2b837738a6150e95dc9c1166d9c828b660ec305a12228ddd4e0bffffffffffffff59df484d138975e197850e88ccfdd08b2c541d522ed7ae33a696f1df7544d50f66be686e"}, &(0x7f0000000280)=0xfc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', r4, 0x29, 0xec, 0x20, 0xe09d9de7, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x39}, 0x20, 0x1, 0x9, 0x9}}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10201}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x54, 0x2e, 0x502, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0xf}, {0xffff, 0xb}, {0x6}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r9, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r9, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) io_uring_enter(r9, 0x5ede, 0xbd1b, 0x3, &(0x7f0000000000)={[0x200]}, 0x8) io_uring_enter(r5, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_open_dev$mouse(&(0x7f00000000c0), 0x401, 0x0) (async) socket(0x10, 0x3, 0x0) (async) dup3(r1, r1, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f00000002c0)="2a1318bb3c0bd60e8023c2a3aad3a810e31a63794d805c210a3d48c23c6f93265c7529cbcd2276ddf96672e72711915b7448c34958593711ac48ec52827b4d5642a70a303ef7e4af2a4df6", 0x4b) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0xd8, "37de60e26060b60eede406690033fc7accc2a2670734e417da86202780b21b348103b637a841db491829f8e5414fc6c3ebdc7ff291a1492e03d01b8a18af014f3d800a5aeebbd0914f04b3e775177dbd26fb4cb050d4c116618ad5bdd4f61b93829cd717211459397a70067b415d19d116cb03409dbb775068657b639e892c5418adbe4e453ac12f8ef6b3cbb2760044e65e5c2b837738a6150e95dc9c1166d9c828b660ec305a12228ddd4e0bffffffffffffff59df484d138975e197850e88ccfdd08b2c541d522ed7ae33a696f1df7544d50f66be686e"}, &(0x7f0000000280)=0xfc) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', r4, 0x29, 0xec, 0x20, 0xe09d9de7, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x39}, 0x20, 0x1, 0x9, 0x9}}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10201}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x54, 0x2e, 0x502, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0xf}, {0xffff, 0xb}, {0x6}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x4}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) (async) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) fallocate(r9, 0x1, 0x0, 0x7fffffff) (async) ioctl$FS_IOC_RESVSP(r9, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async) io_uring_enter(r9, 0x5ede, 0xbd1b, 0x3, &(0x7f0000000000)={[0x200]}, 0x8) (async) io_uring_enter(r5, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b0", 0x27}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000040)="256c67237c0b55cee2fb638c3226a444f733b8dec36d83efa53552c2f6b1aee6729fb074c00ce1a06d1dd07e6c1c7fb1b90c1c1e860451c596d9c51b402dcdf6d7a53b737c1fd742917b370068fab5db729c6d461513bde2b8de7c02") (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c8000001900020026bd7000fddbdf2502802080ff03d00100020000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b0", 0x27}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:13:59 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:13:59 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 1) 10:13:59 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) (async) ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000040)="256c67237c0b55cee2fb638c3226a444f733b8dec36d83efa53552c2f6b1aee6729fb074c00ce1a06d1dd07e6c1c7fb1b90c1c1e860451c596d9c51b402dcdf6d7a53b737c1fd742917b370068fab5db729c6d461513bde2b8de7c02") ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c8000001900020026bd7000fddbdf2502802080ff03d00100020000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) [ 499.660812][ T7933] FAULT_INJECTION: forcing a failure. [ 499.660812][ T7933] name failslab, interval 1, probability 0, space 0, times 0 [ 499.673863][ T7933] CPU: 0 PID: 7933 Comm: syz-executor.3 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 499.684113][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.694195][ T7933] Call Trace: [ 499.697468][ T7933] dump_stack_lvl+0x1e2/0x24b [ 499.702124][ T7933] ? devkmsg_release+0x127/0x127 [ 499.707059][ T7933] ? show_regs_print_info+0x18/0x18 [ 499.712234][ T7933] ? __kasan_check_write+0x14/0x20 [ 499.717331][ T7933] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 499.722764][ T7933] dump_stack+0x15/0x1d [ 499.727035][ T7933] should_fail+0x3c0/0x510 [ 499.731427][ T7933] __should_failslab+0x9f/0xe0 [ 499.736168][ T7933] should_failslab+0x9/0x20 [ 499.740653][ T7933] kmem_cache_alloc_bulk+0x30/0x3f0 [ 499.745926][ T7933] io_submit_sqes+0x6bf/0x2da0 [ 499.750664][ T7933] ? _kstrtoull+0x3cb/0x4d0 [ 499.755147][ T7933] ? io_uring_add_task_file+0x290/0x290 [ 499.760669][ T7933] ? security_file_permission+0xa8/0xc0 [ 499.766191][ T7933] ? __kasan_check_write+0x14/0x20 [ 499.771277][ T7933] ? mutex_lock+0xa6/0x110 [ 499.775673][ T7933] ? io_uring_add_task_file+0x127/0x290 [ 499.781193][ T7933] ? __fdget+0x1b5/0x240 [ 499.785413][ T7933] __se_sys_io_uring_enter+0x322/0x12b0 [ 499.791023][ T7933] ? __fget_files+0x39e/0x3d0 [ 499.795686][ T7933] ? __kasan_check_write+0x14/0x20 [ 499.800774][ T7933] ? fput_many+0x47/0x1a0 [ 499.805113][ T7933] ? __x64_sys_io_uring_enter+0x100/0x100 [ 499.810815][ T7933] ? __ia32_sys_read+0x90/0x90 [ 499.815559][ T7933] ? debug_smp_processor_id+0x1c/0x20 [ 499.820938][ T7933] __x64_sys_io_uring_enter+0xe5/0x100 [ 499.826387][ T7933] do_syscall_64+0x31/0x70 [ 499.830779][ T7933] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.836669][ T7933] RIP: 0033:0x7ffa3bf06e99 [ 499.841061][ T7933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:14:00 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) io_uring_enter(r0, 0x32b7, 0xe7aa, 0x0, &(0x7f0000000000)={[0x3af]}, 0x8) 10:14:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x24000a00, &(0x7f00000001c0)="9c1b025d41f6147684b6d03983c32b2ead77a73caf1a73a8a0f22f15eb1ebabe043405cff43cdc24939cc28d70c1e8afaef715171a11ba5d8ff5bc78bafc95fbbc38357752ce63fa2ee8ba8aa11cda824ea0f8683221f01417dd61adebf5f60b8b5c05ad54a61fc641aa2d02f1ad2333dc35d0010e691499b159ac071873781221aa757c17", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="230e61ce51095c778635f9d5d4a6ac544bd6901a2e7d4a71c7cd92a45d594276c74eb58fb457848adad8344b3907f21670") r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x33}, {0x0}, {0x0}, {&(0x7f00000003c0)="668935ca87dd77ecfffb50210876000000897094e7b126b097eaa769be36b2fb7bc8575aa867b6c7533b3338069f2e6c6d277aaa97454504d3dad8cd04bf2fe347fa47552fb3ca59fb71d3605005542e1d9f28939d5bead11a6e2b9a0b269855de8faa4cc2acca1c1c7279abc68b8b02e384f39d5f16aeaa3b01b70ea25fca84508fedbc9d2fef9bd4773aca1daaf30f5983183d0f80c69dad2955a9f3db4a4fb3ba07cf5d6bc77530b7375efdc9af4d3d2d61d74272ee067046d150fb51f34a8909c5723c106b7242ecc26808b948f8aa7fa432920f3a1036b29559ee3b80f27abf47095423bd2cf87a5931aff41534ae8247aa8f74c4ad56563cf949d6d6d716c13d4674da25abdb311d3f0af664e3e83a17d5e4a7ede03cf9a1b5c8b0d1822593f1e2d63ccd4ba8d28c09e4c95361c23b05fc4ea6959695cd71f43582039859438557a85b843f5d7181a4e9cf0d07a461db8bfe2728a4e9ee1013ee6305b38b8dadc5158ad89f8d3091e9eebe80eee476d284b2c5b5b6", 0x178}], 0x4, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() clone(0x1800, &(0x7f0000000580)="db4d5185d45be09414929e5695121169baaa34a80a8665657bcad5b9bbe78778e718a288dae9554a32d4b81ae4d45c9f4bbe2de06e3d5e629d6374c7d4b1e0ac3d3398a4891b01a17a519a03edaae560fecc3bb3bff700a7e61f473965feada24ba006e04c10b5752f698518f1a0dbceb3aa72656b330de428fa2105143ae64d7f003d5398ee39ab6652661801dffcdf33680d15b0242df970aa55b7303b36b0f71aded3d7769c4e62b1e9f800183549a9d29a3f19bf21c92aebe839f3062b423d76a015c0f792e942", &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="a7cda84fc2563e849e6ea77bdcbba8b6de442ee9ab3812e8263585e7e4d00f782628c8ad73a0bcdb95f5c4e056c82da7adf3923fad2a35c026c1c08408d01a28ea65d4d2b2346d0f72b679bc7f7e928eb3c6316b") clone(0x10000, &(0x7f00000002c0)="982a022da45d017f89204e7053fdb0548306855286392f0152e1e0974b9c5eb4cfb08f4917bd3756dd5227604a236c275558f8c3c1f0a99702877a4a5b1828e0338ddc25dd368fae7cb1b6688032406894c1731b082c3fed806608576850f19ef864ff84107c5647fd0cd5aa5973cc5974fd276a80", &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000540)="9f4f5eaed08ddf2b176b20f950080fcbc3830a7a90ab7ab71f") ptrace$cont(0x20, r1, 0x101, 0x1000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) clone(0x2000, &(0x7f0000000780)="044b15ef5298d96a4fb0b14550d5cdc2c639b1c2b50af8e8b425453384950d40a048eaf78d9fa27a3eeddbbaf94f61d2ee3e4da4c6bd71f7e7c6969097910921f4c5c3e33a28f51f3bd56758fca0a8479456a23565325878f456172b5739596c3be2bfbdc5b9df3e2d796e", &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="80c5c81d90a37a20b8905b4c0c992c73df2fc98dc7c4fadbec26a47636c833f2e9af6dbdd11eaef26d8b7a3f5b448f5780ac0b93f19d111ced898412df2486a1e9b788a80b96fdd4d47f6aa788dc307126836d014e15b975c0f5edafb5d6455f2a093d0dd65d58a2cae336d3ede112a6b5829d10185fb8e908542ba541acd1de87dec6823f10edb9a7e8120f461b2d") [ 499.860817][ T7933] RSP: 002b:00007ffa3b07d168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 499.869211][ T7933] RAX: ffffffffffffffda RBX: 00007ffa3c019f60 RCX: 00007ffa3bf06e99 [ 499.877161][ T7933] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 499.885110][ T7933] RBP: 00007ffa3b07d1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 499.893057][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.901008][ T7933] R13: 00007fff1f05cd0f R14: 00007ffa3b07d300 R15: 0000000000022000 10:14:00 executing program 2: r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 2) 10:14:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) (fail_nth: 1) 10:14:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:14:00 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x24000a00, &(0x7f00000001c0)="9c1b025d41f6147684b6d03983c32b2ead77a73caf1a73a8a0f22f15eb1ebabe043405cff43cdc24939cc28d70c1e8afaef715171a11ba5d8ff5bc78bafc95fbbc38357752ce63fa2ee8ba8aa11cda824ea0f8683221f01417dd61adebf5f60b8b5c05ad54a61fc641aa2d02f1ad2333dc35d0010e691499b159ac071873781221aa757c17", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="230e61ce51095c778635f9d5d4a6ac544bd6901a2e7d4a71c7cd92a45d594276c74eb58fb457848adad8344b3907f21670") r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x33}, {0x0}, {0x0}, {&(0x7f00000003c0)="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", 0x178}], 0x4, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() clone(0x1800, &(0x7f0000000580)="db4d5185d45be09414929e5695121169baaa34a80a8665657bcad5b9bbe78778e718a288dae9554a32d4b81ae4d45c9f4bbe2de06e3d5e629d6374c7d4b1e0ac3d3398a4891b01a17a519a03edaae560fecc3bb3bff700a7e61f473965feada24ba006e04c10b5752f698518f1a0dbceb3aa72656b330de428fa2105143ae64d7f003d5398ee39ab6652661801dffcdf33680d15b0242df970aa55b7303b36b0f71aded3d7769c4e62b1e9f800183549a9d29a3f19bf21c92aebe839f3062b423d76a015c0f792e942", &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="a7cda84fc2563e849e6ea77bdcbba8b6de442ee9ab3812e8263585e7e4d00f782628c8ad73a0bcdb95f5c4e056c82da7adf3923fad2a35c026c1c08408d01a28ea65d4d2b2346d0f72b679bc7f7e928eb3c6316b") clone(0x10000, &(0x7f00000002c0)="982a022da45d017f89204e7053fdb0548306855286392f0152e1e0974b9c5eb4cfb08f4917bd3756dd5227604a236c275558f8c3c1f0a99702877a4a5b1828e0338ddc25dd368fae7cb1b6688032406894c1731b082c3fed806608576850f19ef864ff84107c5647fd0cd5aa5973cc5974fd276a80", &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000540)="9f4f5eaed08ddf2b176b20f950080fcbc3830a7a90ab7ab71f") ptrace$cont(0x20, r1, 0x101, 0x1000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) clone(0x2000, &(0x7f0000000780)="044b15ef5298d96a4fb0b14550d5cdc2c639b1c2b50af8e8b425453384950d40a048eaf78d9fa27a3eeddbbaf94f61d2ee3e4da4c6bd71f7e7c6969097910921f4c5c3e33a28f51f3bd56758fca0a8479456a23565325878f456172b5739596c3be2bfbdc5b9df3e2d796e", &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="80c5c81d90a37a20b8905b4c0c992c73df2fc98dc7c4fadbec26a47636c833f2e9af6dbdd11eaef26d8b7a3f5b448f5780ac0b93f19d111ced898412df2486a1e9b788a80b96fdd4d47f6aa788dc307126836d014e15b975c0f5edafb5d6455f2a093d0dd65d58a2cae336d3ede112a6b5829d10185fb8e908542ba541acd1de87dec6823f10edb9a7e8120f461b2d") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) clone(0x24000a00, &(0x7f00000001c0)="9c1b025d41f6147684b6d03983c32b2ead77a73caf1a73a8a0f22f15eb1ebabe043405cff43cdc24939cc28d70c1e8afaef715171a11ba5d8ff5bc78bafc95fbbc38357752ce63fa2ee8ba8aa11cda824ea0f8683221f01417dd61adebf5f60b8b5c05ad54a61fc641aa2d02f1ad2333dc35d0010e691499b159ac071873781221aa757c17", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="230e61ce51095c778635f9d5d4a6ac544bd6901a2e7d4a71c7cd92a45d594276c74eb58fb457848adad8344b3907f21670") (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x33}, {0x0}, {0x0}, {&(0x7f00000003c0)="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", 0x178}], 0x4, 0x1) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) gettid() (async) clone(0x1800, &(0x7f0000000580)="db4d5185d45be09414929e5695121169baaa34a80a8665657bcad5b9bbe78778e718a288dae9554a32d4b81ae4d45c9f4bbe2de06e3d5e629d6374c7d4b1e0ac3d3398a4891b01a17a519a03edaae560fecc3bb3bff700a7e61f473965feada24ba006e04c10b5752f698518f1a0dbceb3aa72656b330de428fa2105143ae64d7f003d5398ee39ab6652661801dffcdf33680d15b0242df970aa55b7303b36b0f71aded3d7769c4e62b1e9f800183549a9d29a3f19bf21c92aebe839f3062b423d76a015c0f792e942", &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="a7cda84fc2563e849e6ea77bdcbba8b6de442ee9ab3812e8263585e7e4d00f782628c8ad73a0bcdb95f5c4e056c82da7adf3923fad2a35c026c1c08408d01a28ea65d4d2b2346d0f72b679bc7f7e928eb3c6316b") (async) clone(0x10000, &(0x7f00000002c0)="982a022da45d017f89204e7053fdb0548306855286392f0152e1e0974b9c5eb4cfb08f4917bd3756dd5227604a236c275558f8c3c1f0a99702877a4a5b1828e0338ddc25dd368fae7cb1b6688032406894c1731b082c3fed806608576850f19ef864ff84107c5647fd0cd5aa5973cc5974fd276a80", &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000540)="9f4f5eaed08ddf2b176b20f950080fcbc3830a7a90ab7ab71f") (async) ptrace$cont(0x20, r1, 0x101, 0x1000) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) clone(0x2000, &(0x7f0000000780)="044b15ef5298d96a4fb0b14550d5cdc2c639b1c2b50af8e8b425453384950d40a048eaf78d9fa27a3eeddbbaf94f61d2ee3e4da4c6bd71f7e7c6969097910921f4c5c3e33a28f51f3bd56758fca0a8479456a23565325878f456172b5739596c3be2bfbdc5b9df3e2d796e", &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="80c5c81d90a37a20b8905b4c0c992c73df2fc98dc7c4fadbec26a47636c833f2e9af6dbdd11eaef26d8b7a3f5b448f5780ac0b93f19d111ced898412df2486a1e9b788a80b96fdd4d47f6aa788dc307126836d014e15b975c0f5edafb5d6455f2a093d0dd65d58a2cae336d3ede112a6b5829d10185fb8e908542ba541acd1de87dec6823f10edb9a7e8120f461b2d") (async) 10:14:00 executing program 2: r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) io_uring_enter(r0, 0x32b7, 0xe7aa, 0x0, &(0x7f0000000000)={[0x3af]}, 0x8) 10:14:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) clone(0x24000a00, &(0x7f00000001c0)="9c1b025d41f6147684b6d03983c32b2ead77a73caf1a73a8a0f22f15eb1ebabe043405cff43cdc24939cc28d70c1e8afaef715171a11ba5d8ff5bc78bafc95fbbc38357752ce63fa2ee8ba8aa11cda824ea0f8683221f01417dd61adebf5f60b8b5c05ad54a61fc641aa2d02f1ad2333dc35d0010e691499b159ac071873781221aa757c17", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="230e61ce51095c778635f9d5d4a6ac544bd6901a2e7d4a71c7cd92a45d594276c74eb58fb457848adad8344b3907f21670") (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x33}, {0x0}, {0x0}, {&(0x7f00000003c0)="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", 0x178}], 0x4, 0x1) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async, rerun: 64) ptrace$cont(0x18, r0, 0x0, 0x0) (async, rerun: 64) r1 = gettid() clone(0x1800, &(0x7f0000000580)="db4d5185d45be09414929e5695121169baaa34a80a8665657bcad5b9bbe78778e718a288dae9554a32d4b81ae4d45c9f4bbe2de06e3d5e629d6374c7d4b1e0ac3d3398a4891b01a17a519a03edaae560fecc3bb3bff700a7e61f473965feada24ba006e04c10b5752f698518f1a0dbceb3aa72656b330de428fa2105143ae64d7f003d5398ee39ab6652661801dffcdf33680d15b0242df970aa55b7303b36b0f71aded3d7769c4e62b1e9f800183549a9d29a3f19bf21c92aebe839f3062b423d76a015c0f792e942", &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="a7cda84fc2563e849e6ea77bdcbba8b6de442ee9ab3812e8263585e7e4d00f782628c8ad73a0bcdb95f5c4e056c82da7adf3923fad2a35c026c1c08408d01a28ea65d4d2b2346d0f72b679bc7f7e928eb3c6316b") clone(0x10000, &(0x7f00000002c0)="982a022da45d017f89204e7053fdb0548306855286392f0152e1e0974b9c5eb4cfb08f4917bd3756dd5227604a236c275558f8c3c1f0a99702877a4a5b1828e0338ddc25dd368fae7cb1b6688032406894c1731b082c3fed806608576850f19ef864ff84107c5647fd0cd5aa5973cc5974fd276a80", &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000540)="9f4f5eaed08ddf2b176b20f950080fcbc3830a7a90ab7ab71f") ptrace$cont(0x20, r1, 0x101, 0x1000) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) (async) clone(0x2000, &(0x7f0000000780)="044b15ef5298d96a4fb0b14550d5cdc2c639b1c2b50af8e8b425453384950d40a048eaf78d9fa27a3eeddbbaf94f61d2ee3e4da4c6bd71f7e7c6969097910921f4c5c3e33a28f51f3bd56758fca0a8479456a23565325878f456172b5739596c3be2bfbdc5b9df3e2d796e", &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="80c5c81d90a37a20b8905b4c0c992c73df2fc98dc7c4fadbec26a47636c833f2e9af6dbdd11eaef26d8b7a3f5b448f5780ac0b93f19d111ced898412df2486a1e9b788a80b96fdd4d47f6aa788dc307126836d014e15b975c0f5edafb5d6455f2a093d0dd65d58a2cae336d3ede112a6b5829d10185fb8e908542ba541acd1de87dec6823f10edb9a7e8120f461b2d") 10:14:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0xc606, r0, 0x0, 0x4c) getpid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) tkill(r2, 0xf) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000100)) exit_group(0x0) 10:14:00 executing program 2: r0 = syz_io_uring_setup(0x183, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 500.003220][ T8172] FAULT_INJECTION: forcing a failure. [ 500.003220][ T8172] name failslab, interval 1, probability 0, space 0, times 0 [ 500.026275][ T8172] CPU: 1 PID: 8172 Comm: syz-executor.3 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 500.036455][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.046513][ T8172] Call Trace: 10:14:00 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) io_uring_enter(r0, 0x32b7, 0xe7aa, 0x0, &(0x7f0000000000)={[0x3af]}, 0x8) 10:14:00 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 500.049810][ T8172] dump_stack_lvl+0x1e2/0x24b [ 500.054487][ T8172] ? devkmsg_release+0x127/0x127 [ 500.059433][ T8172] ? show_regs_print_info+0x18/0x18 [ 500.064639][ T8172] ? __kasan_check_write+0x14/0x20 [ 500.069757][ T8172] ? __io_queue_sqe+0x1561/0x2fa0 [ 500.074784][ T8172] dump_stack+0x15/0x1d [ 500.078950][ T8172] should_fail+0x3c0/0x510 [ 500.083382][ T8172] __should_failslab+0x9f/0xe0 [ 500.088153][ T8172] should_failslab+0x9/0x20 [ 500.092657][ T8172] kmem_cache_alloc_bulk+0x30/0x3f0 [ 500.097855][ T8172] io_submit_sqes+0x6bf/0x2da0 [ 500.102630][ T8172] ? io_uring_add_task_file+0x290/0x290 [ 500.108174][ T8172] ? security_file_permission+0xa8/0xc0 [ 500.113697][ T8172] ? __kasan_check_write+0x14/0x20 [ 500.118783][ T8172] ? mutex_lock+0xa6/0x110 [ 500.123175][ T8172] ? io_uring_add_task_file+0x127/0x290 [ 500.128693][ T8172] ? __fdget+0x1b5/0x240 [ 500.132908][ T8172] __se_sys_io_uring_enter+0x322/0x12b0 [ 500.138426][ T8172] ? __fget_files+0x39e/0x3d0 [ 500.143080][ T8172] ? __kasan_check_write+0x14/0x20 [ 500.148183][ T8172] ? fput_many+0x47/0x1a0 [ 500.152497][ T8172] ? __x64_sys_io_uring_enter+0x100/0x100 [ 500.158320][ T8172] ? __ia32_sys_read+0x90/0x90 [ 500.163075][ T8172] ? debug_smp_processor_id+0x1c/0x20 [ 500.168431][ T8172] __x64_sys_io_uring_enter+0xe5/0x100 [ 500.173870][ T8172] do_syscall_64+0x31/0x70 [ 500.178268][ T8172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 500.184148][ T8172] RIP: 0033:0x7ffa3bf06e99 [ 500.188541][ T8172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.208234][ T8172] RSP: 002b:00007ffa3b07d168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 500.216627][ T8172] RAX: ffffffffffffffda RBX: 00007ffa3c019f60 RCX: 00007ffa3bf06e99 [ 500.224577][ T8172] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 500.232521][ T8172] RBP: 00007ffa3b07d1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 500.240477][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 10:14:00 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 3) 10:14:00 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) r1 = inotify_init1(0x0) ioprio_set$pid(0x2, r0, 0x4007) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) rt_sigqueueinfo(r2, 0x41, &(0x7f0000000040)={0xf, 0x80, 0xfff}) exit_group(0x0) 10:14:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async, rerun: 64) r0 = gettid() (rerun: 64) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0xc606, r0, 0x0, 0x4c) getpid() (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) (async) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async) tkill(r2, 0xf) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000100)) (async) exit_group(0x0) 10:14:00 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'decodes', ' ', 'mem'}, 0xc) r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='targed PCI\b?:8:14.f\x00'], 0x14) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 500.248464][ T8172] R13: 00007fff1f05cd0f R14: 00007ffa3b07d300 R15: 0000000000022000 10:14:00 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) r1 = inotify_init1(0x0) ioprio_set$pid(0x2, r0, 0x4007) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) rt_sigqueueinfo(r2, 0x41, &(0x7f0000000040)={0xf, 0x80, 0xfff}) (async) exit_group(0x0) 10:14:00 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'decodes', ' ', 'mem'}, 0xc) r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='targed PCI\b?:8:14.f\x00'], 0x14) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'decodes', ' ', 'mem'}, 0xc) (async) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='targed PCI\b?:8:14.f\x00'], 0x14) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) 10:14:00 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) r1 = inotify_init1(0x0) ioprio_set$pid(0x2, r0, 0x4007) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) rt_sigqueueinfo(r2, 0x41, &(0x7f0000000040)={0xf, 0x80, 0xfff}) exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) inotify_init1(0x0) (async) ioprio_set$pid(0x2, r0, 0x4007) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) (async) ptrace$setopts(0x4206, r2, 0x0, 0x0) (async) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async) rt_sigqueueinfo(r2, 0x41, &(0x7f0000000040)={0xf, 0x80, 0xfff}) (async) exit_group(0x0) (async) 10:14:00 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0xc606, r0, 0x0, 0x4c) getpid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) tkill(r2, 0xf) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000100)) exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0xc606, r0, 0x0, 0x4c) (async) getpid() (async) inotify_init1(0x0) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) (async) ptrace$setopts(0x4206, r2, 0x0, 0x0) (async) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async) tkill(r2, 0xf) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000100)) (async) exit_group(0x0) (async) [ 500.323702][ T8602] FAULT_INJECTION: forcing a failure. [ 500.323702][ T8602] name failslab, interval 1, probability 0, space 0, times 0 [ 500.338846][ T8602] CPU: 1 PID: 8602 Comm: syz-executor.3 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 500.349012][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.359075][ T8602] Call Trace: [ 500.362368][ T8602] dump_stack_lvl+0x1e2/0x24b [ 500.367049][ T8602] ? devkmsg_release+0x127/0x127 [ 500.371989][ T8602] ? show_regs_print_info+0x18/0x18 [ 500.377198][ T8602] ? __kasan_check_write+0x14/0x20 [ 500.382408][ T8602] ? __io_queue_sqe+0x1561/0x2fa0 [ 500.387435][ T8602] dump_stack+0x15/0x1d [ 500.391592][ T8602] should_fail+0x3c0/0x510 [ 500.396010][ T8602] __should_failslab+0x9f/0xe0 [ 500.400777][ T8602] should_failslab+0x9/0x20 [ 500.405287][ T8602] kmem_cache_alloc_bulk+0x30/0x3f0 [ 500.410485][ T8602] io_submit_sqes+0x6bf/0x2da0 [ 500.415261][ T8602] ? io_uring_add_task_file+0x290/0x290 [ 500.420801][ T8602] ? security_file_permission+0xa8/0xc0 [ 500.426350][ T8602] ? __kasan_check_write+0x14/0x20 [ 500.431458][ T8602] ? mutex_lock+0xa6/0x110 [ 500.435859][ T8602] ? io_uring_add_task_file+0x127/0x290 [ 500.441385][ T8602] ? __fdget+0x1b5/0x240 [ 500.445603][ T8602] __se_sys_io_uring_enter+0x322/0x12b0 [ 500.451122][ T8602] ? __fget_files+0x39e/0x3d0 [ 500.455948][ T8602] ? __kasan_check_write+0x14/0x20 [ 500.461031][ T8602] ? fput_many+0x47/0x1a0 [ 500.465337][ T8602] ? __x64_sys_io_uring_enter+0x100/0x100 [ 500.471146][ T8602] ? __ia32_sys_read+0x90/0x90 [ 500.475886][ T8602] ? debug_smp_processor_id+0x1c/0x20 [ 500.481233][ T8602] __x64_sys_io_uring_enter+0xe5/0x100 [ 500.486664][ T8602] do_syscall_64+0x31/0x70 [ 500.491172][ T8602] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 500.497036][ T8602] RIP: 0033:0x7ffa3bf06e99 [ 500.501427][ T8602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:14:00 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 4) 10:14:00 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x9, 0xdf}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000001500)) rt_sigqueueinfo(r3, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) r4 = gettid() clone3(&(0x7f0000000340)={0x1c0eb080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x1d}, &(0x7f0000000280)=""/134, 0x86, &(0x7f0000000140), &(0x7f0000000180)=[r4, r4], 0x2}, 0x58) clone(0x180100, &(0x7f0000000400)="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", &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)="2b8ffcb1febe098aa6ecc4d2fd5869588cadebd23e767c7e73c24ee2970d8782425198c89ab3abe8cb95fc3e50b64df3fdf7e7c885c19b9c928df4e8d558f58fd1c2ff10c7730f24981f02e1402cda298b02ba35f464") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x4, &(0x7f00000001c0)) exit_group(0x0) 10:14:00 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:14:00 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'decodes', ' ', 'mem'}, 0xc) r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='targed PCI\b?:8:14.f\x00'], 0x14) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'decodes', ' ', 'mem'}, 0xc) (async) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='targed PCI\b?:8:14.f\x00'], 0x14) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) 10:14:00 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 500.521074][ T8602] RSP: 002b:00007ffa3b07d168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 500.529464][ T8602] RAX: ffffffffffffffda RBX: 00007ffa3c019f60 RCX: 00007ffa3bf06e99 [ 500.537544][ T8602] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 500.545490][ T8602] RBP: 00007ffa3b07d1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 500.553436][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.561424][ T8602] R13: 00007fff1f05cd0f R14: 00007ffa3b07d300 R15: 0000000000022000 10:14:00 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) 10:14:00 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:00 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x9, 0xdf}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000001500)) rt_sigqueueinfo(r3, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) r4 = gettid() clone3(&(0x7f0000000340)={0x1c0eb080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x1d}, &(0x7f0000000280)=""/134, 0x86, &(0x7f0000000140), &(0x7f0000000180)=[r4, r4], 0x2}, 0x58) clone(0x180100, &(0x7f0000000400)="52fcfab0a7e2fd52c979c5f0f9c703f5146ffba2b6b6aa3b7ea616cd56ff45c563f9f1f11733963c3296ce026eb4a898952f6e55adc71ab9ea80a881039ca379c4380605d8b02e9c536e55977127c23b367e3440cbc0bbf11f2da4f4b19603586e5bc2fbea447541b310e5a4986e5677f1e70e23cfe1c6d20017fcb9f9a9d36da6573de0c762ef66e2735dad7281e2d9f5149eb6fb1ddc927f6d1eddade1b8506b87e437215928ec0875c52125b2098b08df7a2b9ddb601bc20ca81b48ec7438cd53b8b83906a2afdc3156ada41b9b56c806458aba7de2f731f1e5295fa478ea284ad46f17c83cd9b7688e3e813c5806f372936184ddd0cca7b631615a5607a05272fff3273ef545f60bf0a9dc7a685b8cc9895bbdf94fdcf54defeadc1a76ed5cb8d580641d4a6b08743ec03f74b8bd599595d501260f5337e64e822d51f93896aaaf89b0ba7fb39938bb56fb2e0774939ed4f0eaadd9c94bed43e517b5ad702a4f606bb56e4d3cd51e1aa1e5bf665abce0097e807806ff529e2bec7cde08e17c14921877cf6a5e98791e24ec5e84df7a655a49e2a7185cce68257c2f3d353c5b392397dbb97360f5150de05dadcaa8898eb7b464a527b44954e6f0334721cae9d0427631cf272117e6e8bc685118b241f660a369a1debce947972b32365cf83f52e7b4bcc785a24c99e54a69b239e000e930a57f15dc32be61b7c3f14402feef510a8a23cc91b07d558515aa76dc6b9be32b515b905d9c79080ed355ebe8f79ff0b4d5b82224583ecb0e3e210dea42bda00655aab73c472b1bfd2fbf030ae3c45b0fe2ebf087d9112240dd1d550d0e1fb8907851bc6fe631c6affb8b9a305a718e4f7cd3e8ffa34310de3dac1aaac1e025f1162260aacbe2eceb70a12a84c954add220b216b4389520a199a024779d10eb693fdf918854df40fb21c08fd84917816b33f911436bcb24ff96a3f2786cba907aee5896ab928d9a09bf76610638034b89a2f8d9e7dbc42ef97e5f8abe12b1f8f41158f7a1273914a0e2663bbebf097fd727055908c12f47f409ad1410510dde08e2d1995a050f6a76932b2202a468e52152ffa702e4a88483dd75fbcf0bdd697ca86583e854bd2670ce021faea9be539c6457fd3f39cdcfb5b2eef141b1fde47b6e529b1a554a23f56ee399f8128c910f1e1de690f4afb9597f6b180afd5658bd94bfbbbd2f9043849a3425f55f811eacb7b7470166f222708c76f4f6bd24fbea0c7523c5f5f032fbba5823080779b5a655336dccb23f21ac2be559e8de5fea83d447c16aeb1fe4a3cfeb995d0e48bf741afa5f45228d9a96f650c8046be7ec7155e1d3da8e590e0a174b5062a2bb1afb305da5d281b0a73bee7fddbcc2190dca091affd83979ef1a755d686b3b2743106be1c2563aa157398c40ea1b392464c8b9ce1db5d62954c32446e3506b8b3076e39c45f9501a1d4bd440f6ca8c321f9985f7265b4b398e75b72496c5b9db20dfae778ca5ff3aa5e3d81f1ad1f0a01ff6060536b9298065fbe7e84ae98103e5983736d83d66ef2f6e5e201c79f8fbbc378f33fa194f56677c4bc36e17fa4f61e2e060516c3b8416592e1110909143ac6f074715e37b6e00f6c6775eeb95aed8d0a32f9a7b03c0fe711cc84265c6a87f0b500d6fb4f7cd3d506c2eef3dad396fcc6fc5cf9a7c0d5fc1c125f8a77cc6d838c5d7694577e93c962291812376fa3668453ee0761e9f374bb732f61143c8ad311d900771b46d9c18dd1903a71070ec2d7c20ce376e5a1b89bb9ad5067b269083effd6917367b9c79fa1c183433ba8f97c2ca128981fb29eb6716bf4f0bfb051fcf7947d787eb24ddc235462fced8bbc2925fdf021f79320dd441e2a977b1cf3237a619b4de14da874914ddd9db6f7747fc5f0ef7e871756fa8fcf89cf7600cc76ad191dd4dd165c29a8122c1e1de1c0e363635dfc1d3d944f2469379f563cc09486449a52961f4e45b4dbfba4fe4df10c705874fb14b24b2e4b7b910e8792947223e4af0c527b56c55b6c054f257b79d28379d6464b126bcbb8539ed9305f6038c2b82fe2abf91faf5e61a57289a7290f00cd8cf389a59c90c16873e4771e443de6803d566519af1a3da3bfe8bf86f02648b5db9b0d619c7fd3601e206faf4c0743e8aba5752fdea7454f7e34f3b9bab7e4e428ca4d11193c9c220841b1f2ce57895a5a0e28f054137b879620b26f7357c754cc8882e26135c9ff10948dba2c5dc9138187c0f94a86b3dac1dd0bac13b13fafd5456364d67c8343017fe3f3731161915e4203d359ab68c4d642827d7f064b0cae2f86a1c3903904baff40177a2065d92801850489068890b4c5415437a81d40949e0cf45cd03761faf5a6edae516fdbeb1cf16460c9b2fa13b14cd12617efa7bb1dff495148d722fb950ae8e46d12350edbacb2d7280299c333cf5e7d764dd98be824118c00b0676ab9ad4097ad805ef543e389020406a011cec1f41877378e3079665c2b6bae54001a60b03c010d43f5486ee2686f6ed73ae1b76c6638543d806c8b614be106dfc73aa28736182e794ba75e16734244ae5977f51887223590bc33f19dabc742ecabc2bb85715c684e601362446042d6047017934091fe5abc9a67397984f4240432844613eb0387d1133cff2af4783e16863d28dd7f9fb28a396e04a289cb075db58602d47a66aac8751cd1d47de6f4abf1a87b0c30901e55fb2fa4b5e1dd14b3382fd24477b209a89e85dbb578ee2e150fb1ed2b6d74524f4a7224586ef0894cc989b20957d320fd8c88244b72f95b03311976dbdc57d060212c0941020b813a3919708fe2f3bad82c2207625730ecbc1c6907ae5d07f6054a19f63eb74d7f97bea96166764c6bd68a92e4bd2176c7b3a33595ea82cf7ad38a306adaae20b2fda07b31279528f084203c55ab00aa42bc4250d1db8636d5bb7cc54cfaa734bab892d08649566db272f7214da0b7e97af2c55b59abbbca0233d97d74fec443a2e424efc6df57d5d706520f870820da439249263e00cbcff7b09b505e185790aa4668483ff734f8fa1c88525e68c60552ad8e77e5863c41bb6751080f330a47e605308f52a759f9b39fedbc28ef3c95a7e69033dbe605a751eefdf1eab2220c312f94e3b5603ccf05a0915e558df3c7b55f9f4c07210fa2dfdf1d0339f7ebbc0e15f27120f0fc42210871a62092478a9c45ff7a7da837f0445f66391654328ea2e7b1b346b5ffcce3e1124b7e56f86a479348fb8a878e55f416e489ec35f5f899c348ae1e7a57a4f479af36f33202b0ca86317fc9be9de2f27c6c444de1bbc101bd75ffa179791695daff604e4f0eade4dc8764d4aec08debf2ec5d8d790c664d8b1d261b95acb90e078c485fdd6e232aedd5dc4c2d17bc136772ed60d2f927aa0accfbad6418fa494357f966c15a9c3f03be6d60b7196a99a64089f00a2008e1fe6039fd66d294801b7ab35c7f75d04c562cd3dfe495b4b64e071735bde350a9ea6ad657b6f98d78751bed1cdf2a5012b76cbdc1250fff494f1ea600df490b257ae592207197aa6b54fbeed7b7ded0580fbe6d7d61911a982c28165c027f6c4dc475c1cee56a41a8d2d541ee9f3260a3a299aeeea42a521c3e5346a3ed5781b7111d0af4d26abf5370af18d55f3f50fbdadccf79fad2280515a5b877f54d93eaf3afa20fbcb248cb2e9e63b6a522987d1e167d9dfe817f2befe4e59f059c7e359375e8db4afb2c547685c11aaeefd419e0b0a300ae55279c9837e7230e0e2120cb5906f3e156083033a3c888717d3bd3fc5baed733aaeea5c608a4f40e060554d1d434a6b714cbdd80d79e2ab7f3ab0ba759c9d5b920e4d86998efb210c328c46135f3b337ca7cbb084d9e2f668826f2f31098d72386e14e13d569f5746fd4968b0f9ca4f62dfa0bd1a17d0ec6d4aba8a3e2db285cc35301bc5d0b21e1ffb4e5988f0104d76b44ba85e840f588a81752de0851b7c49ccc2096d4bff4009b638038964f0f2b733ff2ad8ca8c4a7a51cd1466d142c04853a9e7083d900b11b3d66ee5c0db0763cf32076cbc65acf8fe9d9ea7e1d4a37bd06a83157b4b7f933c5802ed16d239dcb65503e3b634c976fe4018e8f007059a0ff4348f06207109789a7629edf2d584359a14bcf3b2935bec8a7523b22c581c45884ac87e1ba34328ee949ebfd18405a40c9a52656e3f2bbead1dc36a8e3674500bec9de5507371e412618dd655f82722eec54b1e8cd1033ee069a4d7220dae3dde42de5ae61188e3231cffebe0ce01dc024a60d4c3b4010aed854e86053ce60b7a05c6b91872edfc6aa18dde031fae1537e8c6fa97aa7c23c1b127c6ef5aa8c1182b1ad2dfee8e941f1bdb46018a15205314c83f19f2e60be2afcf667740f1abc7f11538d881da2ca87b6e88d95c3aee09f9a5f6b80df91733d154bd96f4180d52f588d17c8ca3bcdbe5fac3d02b47965e97d734643fa59d77819cdc0115defd793b374df50941916f52e8983e2db18f47fe251c5c136619364842208c9ff80486f4704472066c9a9cc46f44adf87da9f8723103e86dcdcbfad0fc789fb99bf7630be8ac55c8070f18e57b501f3de939977349af903f71b3831d6cbde03a4aa0ec7244be4e6cb3154a96fa1315376e3241187f67e2fee54622e8d6ec5f1b7dec3863d4b014a31557570bc898f17788a4e3877fa96598ac9db6df3d2a39952dfc9cd076c21ca3dd0869d41163fa6b0174719c04fcc84870fdc4512569b839f92902906a67965fef307392a99ab5d9209268e108e52546cb95b6e6a8200da6916b0acec95814d7094870bcc2640a0ca863b6b079982a060e18eabc6a164019f70aa0cbe3d6756ef6dea100e68dceb848de285205c3976f5a0ea6d5242b5886815a764f3cb5286dc63c871b081d27f06f2b0cf2b0d5f06b050a3843a644e728c8e72c0eed7c827ca925cde8e6cfb17c70f1fb46c21c75ccc6482701d58256b94dde6e277a69209ab80c29ac0b5e936470e4b4a865f751aa583d8a6e48276c327df67d0a979a0b2526d3dbc1a8a77065c08a868bc943ef4062c3741b7557cf65c79490816dcf1cd67cbfff43b6932260b81cc2e7ee029320e1bd710dac3370a8a9dfb750f7eb0e512b931ac33c0538b916fc7363642e1b986addb5c218afd69be59a982f9b21571242353644c5ac3fbcbbc853d1c9610390fbcbfa9883b1beb3cdc18fd0825886b99b2e34c5026ca155394b1e680afcc95b79d88d70665ecebf6310d03d8bde44729c038a145dfd8793748a531c45f5c32284fa0ddcd89e1240fec12094c42d629428e0ef3307766f2fbf267f034252bc271920a76ac4e7e49079ea2c3294b726b75e369a0f9a13b0074994dc9344d67c86b3ee546bcd97fe8c69f6d825edd8febd44f502fab2f61feadb7568ae0d8007d8f021a4d73a48610c5c23956f381e0bf64f7ba8f06b9495b99f5f08d931fd0f8e8affdd6c0197cd6c01a58e06a53d6f47362c536b21c26bdedbebf836b7dae9f3974d7cf0af9c21b5a64f5f481379d231efc2e87e5a0a265f3fc92217d801b904b0f915746efe416db85799ca93e604e099649f0bfb7d1cc0283f5d94cd4ba0f7b75f7f592ebaa59a7f3cdb89cfa15cb98cec6b370b1c38ee52ccf2d822b024100753e933346ba419fe7e591d745acdcd6bf5b6cf41e2abbaa4b4729a2dee3470ac129c5a49478f66395ff262dab7c0b206ba208ef792a02d6fa23c31f62c2781c5040cbe3af29a3161bfe319486c4443c33b095c89f4886db775e988fadd4303c87d38a83e9a1f", &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)="2b8ffcb1febe098aa6ecc4d2fd5869588cadebd23e767c7e73c24ee2970d8782425198c89ab3abe8cb95fc3e50b64df3fdf7e7c885c19b9c928df4e8d558f58fd1c2ff10c7730f24981f02e1402cda298b02ba35f464") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x4, &(0x7f00000001c0)) exit_group(0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) inotify_init1(0x0) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x9, 0xdf}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1}, 0x0) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) (async) ptrace$setopts(0x4206, r3, 0x0, 0x0) (async) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000001500)) (async) rt_sigqueueinfo(r3, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async) gettid() (async) clone3(&(0x7f0000000340)={0x1c0eb080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x1d}, &(0x7f0000000280)=""/134, 0x86, &(0x7f0000000140), &(0x7f0000000180)=[r4, r4], 0x2}, 0x58) (async) clone(0x180100, &(0x7f0000000400)="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", &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)="2b8ffcb1febe098aa6ecc4d2fd5869588cadebd23e767c7e73c24ee2970d8782425198c89ab3abe8cb95fc3e50b64df3fdf7e7c885c19b9c928df4e8d558f58fd1c2ff10c7730f24981f02e1402cda298b02ba35f464") (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) tkill(r0, 0x38) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x4, &(0x7f00000001c0)) (async) exit_group(0x0) (async) [ 500.619147][ T9034] FAULT_INJECTION: forcing a failure. [ 500.619147][ T9034] name failslab, interval 1, probability 0, space 0, times 0 [ 500.631995][ T9034] CPU: 1 PID: 9034 Comm: syz-executor.3 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 500.642241][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.652300][ T9034] Call Trace: [ 500.655595][ T9034] dump_stack_lvl+0x1e2/0x24b [ 500.660275][ T9034] ? devkmsg_release+0x127/0x127 10:14:01 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x7303, &(0x7f0000000080)={0x0, 0x39f6, 0x8, 0x2, 0x1b3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000100)=0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) recvmsg(r6, &(0x7f0000000700)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000680)=""/124, 0x7c}], 0x3, &(0x7f0000000600)=""/30, 0x1e}, 0x40000000) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0xfffffffffffffffc, 0x0}, 0x0) r10 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r10, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) syz_io_uring_submit(r7, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r10, 0x0, &(0x7f0000000180)="0a2ad0ee3d487d1e41", 0x9, 0x8801}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x10, 0x10001, 0x8, 0x9, 0x1050, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x40) [ 500.665220][ T9034] ? show_regs_print_info+0x18/0x18 [ 500.670425][ T9034] ? __kasan_check_write+0x14/0x20 [ 500.675536][ T9034] ? __io_queue_sqe+0x1561/0x2fa0 [ 500.680669][ T9034] dump_stack+0x15/0x1d [ 500.684825][ T9034] should_fail+0x3c0/0x510 [ 500.689242][ T9034] __should_failslab+0x9f/0xe0 [ 500.694009][ T9034] should_failslab+0x9/0x20 [ 500.698512][ T9034] kmem_cache_alloc_bulk+0x30/0x3f0 [ 500.703708][ T9034] io_submit_sqes+0x6bf/0x2da0 [ 500.708469][ T9034] ? io_uring_add_task_file+0x290/0x290 [ 500.714087][ T9034] ? security_file_permission+0xa8/0xc0 [ 500.719622][ T9034] ? __kasan_check_write+0x14/0x20 [ 500.724716][ T9034] ? mutex_lock+0xa6/0x110 [ 500.729112][ T9034] ? io_uring_add_task_file+0x127/0x290 [ 500.734663][ T9034] ? __fdget+0x1b5/0x240 [ 500.738926][ T9034] __se_sys_io_uring_enter+0x322/0x12b0 [ 500.744448][ T9034] ? __fget_files+0x39e/0x3d0 [ 500.749102][ T9034] ? __kasan_check_write+0x14/0x20 [ 500.754185][ T9034] ? fput_many+0x47/0x1a0 [ 500.758488][ T9034] ? __x64_sys_io_uring_enter+0x100/0x100 [ 500.764181][ T9034] ? __ia32_sys_read+0x90/0x90 [ 500.768920][ T9034] ? debug_smp_processor_id+0x1c/0x20 [ 500.774267][ T9034] __x64_sys_io_uring_enter+0xe5/0x100 [ 500.779699][ T9034] do_syscall_64+0x31/0x70 [ 500.784097][ T9034] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 500.789961][ T9034] RIP: 0033:0x7ffa3bf06e99 [ 500.794349][ T9034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:14:01 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 5) 10:14:01 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:01 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:01 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) 10:14:01 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x9, 0xdf}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000001500)) (async) rt_sigqueueinfo(r3, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async) r4 = gettid() clone3(&(0x7f0000000340)={0x1c0eb080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x1d}, &(0x7f0000000280)=""/134, 0x86, &(0x7f0000000140), &(0x7f0000000180)=[r4, r4], 0x2}, 0x58) (async) clone(0x180100, &(0x7f0000000400)="52fcfab0a7e2fd52c979c5f0f9c703f5146ffba2b6b6aa3b7ea616cd56ff45c563f9f1f11733963c3296ce026eb4a898952f6e55adc71ab9ea80a881039ca379c4380605d8b02e9c536e55977127c23b367e3440cbc0bbf11f2da4f4b19603586e5bc2fbea447541b310e5a4986e5677f1e70e23cfe1c6d20017fcb9f9a9d36da6573de0c762ef66e2735dad7281e2d9f5149eb6fb1ddc927f6d1eddade1b8506b87e437215928ec0875c52125b2098b08df7a2b9ddb601bc20ca81b48ec7438cd53b8b83906a2afdc3156ada41b9b56c806458aba7de2f731f1e5295fa478ea284ad46f17c83cd9b7688e3e813c5806f372936184ddd0cca7b631615a5607a05272fff3273ef545f60bf0a9dc7a685b8cc9895bbdf94fdcf54defeadc1a76ed5cb8d580641d4a6b08743ec03f74b8bd599595d501260f5337e64e822d51f93896aaaf89b0ba7fb39938bb56fb2e0774939ed4f0eaadd9c94bed43e517b5ad702a4f606bb56e4d3cd51e1aa1e5bf665abce0097e807806ff529e2bec7cde08e17c14921877cf6a5e98791e24ec5e84df7a655a49e2a7185cce68257c2f3d353c5b392397dbb97360f5150de05dadcaa8898eb7b464a527b44954e6f0334721cae9d0427631cf272117e6e8bc685118b241f660a369a1debce947972b32365cf83f52e7b4bcc785a24c99e54a69b239e000e930a57f15dc32be61b7c3f14402feef510a8a23cc91b07d558515aa76dc6b9be32b515b905d9c79080ed355ebe8f79ff0b4d5b82224583ecb0e3e210dea42bda00655aab73c472b1bfd2fbf030ae3c45b0fe2ebf087d9112240dd1d550d0e1fb8907851bc6fe631c6affb8b9a305a718e4f7cd3e8ffa34310de3dac1aaac1e025f1162260aacbe2eceb70a12a84c954add220b216b4389520a199a024779d10eb693fdf918854df40fb21c08fd84917816b33f911436bcb24ff96a3f2786cba907aee5896ab928d9a09bf76610638034b89a2f8d9e7dbc42ef97e5f8abe12b1f8f41158f7a1273914a0e2663bbebf097fd727055908c12f47f409ad1410510dde08e2d1995a050f6a76932b2202a468e52152ffa702e4a88483dd75fbcf0bdd697ca86583e854bd2670ce021faea9be539c6457fd3f39cdcfb5b2eef141b1fde47b6e529b1a554a23f56ee399f8128c910f1e1de690f4afb9597f6b180afd5658bd94bfbbbd2f9043849a3425f55f811eacb7b7470166f222708c76f4f6bd24fbea0c7523c5f5f032fbba5823080779b5a655336dccb23f21ac2be559e8de5fea83d447c16aeb1fe4a3cfeb995d0e48bf741afa5f45228d9a96f650c8046be7ec7155e1d3da8e590e0a174b5062a2bb1afb305da5d281b0a73bee7fddbcc2190dca091affd83979ef1a755d686b3b2743106be1c2563aa157398c40ea1b392464c8b9ce1db5d62954c32446e3506b8b3076e39c45f9501a1d4bd440f6ca8c321f9985f7265b4b398e75b72496c5b9db20dfae778ca5ff3aa5e3d81f1ad1f0a01ff6060536b9298065fbe7e84ae98103e5983736d83d66ef2f6e5e201c79f8fbbc378f33fa194f56677c4bc36e17fa4f61e2e060516c3b8416592e1110909143ac6f074715e37b6e00f6c6775eeb95aed8d0a32f9a7b03c0fe711cc84265c6a87f0b500d6fb4f7cd3d506c2eef3dad396fcc6fc5cf9a7c0d5fc1c125f8a77cc6d838c5d7694577e93c962291812376fa3668453ee0761e9f374bb732f61143c8ad311d900771b46d9c18dd1903a71070ec2d7c20ce376e5a1b89bb9ad5067b269083effd6917367b9c79fa1c183433ba8f97c2ca128981fb29eb6716bf4f0bfb051fcf7947d787eb24ddc235462fced8bbc2925fdf021f79320dd441e2a977b1cf3237a619b4de14da874914ddd9db6f7747fc5f0ef7e871756fa8fcf89cf7600cc76ad191dd4dd165c29a8122c1e1de1c0e363635dfc1d3d944f2469379f563cc09486449a52961f4e45b4dbfba4fe4df10c705874fb14b24b2e4b7b910e8792947223e4af0c527b56c55b6c054f257b79d28379d6464b126bcbb8539ed9305f6038c2b82fe2abf91faf5e61a57289a7290f00cd8cf389a59c90c16873e4771e443de6803d566519af1a3da3bfe8bf86f02648b5db9b0d619c7fd3601e206faf4c0743e8aba5752fdea7454f7e34f3b9bab7e4e428ca4d11193c9c220841b1f2ce57895a5a0e28f054137b879620b26f7357c754cc8882e26135c9ff10948dba2c5dc9138187c0f94a86b3dac1dd0bac13b13fafd5456364d67c8343017fe3f3731161915e4203d359ab68c4d642827d7f064b0cae2f86a1c3903904baff40177a2065d92801850489068890b4c5415437a81d40949e0cf45cd03761faf5a6edae516fdbeb1cf16460c9b2fa13b14cd12617efa7bb1dff495148d722fb950ae8e46d12350edbacb2d7280299c333cf5e7d764dd98be824118c00b0676ab9ad4097ad805ef543e389020406a011cec1f41877378e3079665c2b6bae54001a60b03c010d43f5486ee2686f6ed73ae1b76c6638543d806c8b614be106dfc73aa28736182e794ba75e16734244ae5977f51887223590bc33f19dabc742ecabc2bb85715c684e601362446042d6047017934091fe5abc9a67397984f4240432844613eb0387d1133cff2af4783e16863d28dd7f9fb28a396e04a289cb075db58602d47a66aac8751cd1d47de6f4abf1a87b0c30901e55fb2fa4b5e1dd14b3382fd24477b209a89e85dbb578ee2e150fb1ed2b6d74524f4a7224586ef0894cc989b20957d320fd8c88244b72f95b03311976dbdc57d060212c0941020b813a3919708fe2f3bad82c2207625730ecbc1c6907ae5d07f6054a19f63eb74d7f97bea96166764c6bd68a92e4bd2176c7b3a33595ea82cf7ad38a306adaae20b2fda07b31279528f084203c55ab00aa42bc4250d1db8636d5bb7cc54cfaa734bab892d08649566db272f7214da0b7e97af2c55b59abbbca0233d97d74fec443a2e424efc6df57d5d706520f870820da439249263e00cbcff7b09b505e185790aa4668483ff734f8fa1c88525e68c60552ad8e77e5863c41bb6751080f330a47e605308f52a759f9b39fedbc28ef3c95a7e69033dbe605a751eefdf1eab2220c312f94e3b5603ccf05a0915e558df3c7b55f9f4c07210fa2dfdf1d0339f7ebbc0e15f27120f0fc42210871a62092478a9c45ff7a7da837f0445f66391654328ea2e7b1b346b5ffcce3e1124b7e56f86a479348fb8a878e55f416e489ec35f5f899c348ae1e7a57a4f479af36f33202b0ca86317fc9be9de2f27c6c444de1bbc101bd75ffa179791695daff604e4f0eade4dc8764d4aec08debf2ec5d8d790c664d8b1d261b95acb90e078c485fdd6e232aedd5dc4c2d17bc136772ed60d2f927aa0accfbad6418fa494357f966c15a9c3f03be6d60b7196a99a64089f00a2008e1fe6039fd66d294801b7ab35c7f75d04c562cd3dfe495b4b64e071735bde350a9ea6ad657b6f98d78751bed1cdf2a5012b76cbdc1250fff494f1ea600df490b257ae592207197aa6b54fbeed7b7ded0580fbe6d7d61911a982c28165c027f6c4dc475c1cee56a41a8d2d541ee9f3260a3a299aeeea42a521c3e5346a3ed5781b7111d0af4d26abf5370af18d55f3f50fbdadccf79fad2280515a5b877f54d93eaf3afa20fbcb248cb2e9e63b6a522987d1e167d9dfe817f2befe4e59f059c7e359375e8db4afb2c547685c11aaeefd419e0b0a300ae55279c9837e7230e0e2120cb5906f3e156083033a3c888717d3bd3fc5baed733aaeea5c608a4f40e060554d1d434a6b714cbdd80d79e2ab7f3ab0ba759c9d5b920e4d86998efb210c328c46135f3b337ca7cbb084d9e2f668826f2f31098d72386e14e13d569f5746fd4968b0f9ca4f62dfa0bd1a17d0ec6d4aba8a3e2db285cc35301bc5d0b21e1ffb4e5988f0104d76b44ba85e840f588a81752de0851b7c49ccc2096d4bff4009b638038964f0f2b733ff2ad8ca8c4a7a51cd1466d142c04853a9e7083d900b11b3d66ee5c0db0763cf32076cbc65acf8fe9d9ea7e1d4a37bd06a83157b4b7f933c5802ed16d239dcb65503e3b634c976fe4018e8f007059a0ff4348f06207109789a7629edf2d584359a14bcf3b2935bec8a7523b22c581c45884ac87e1ba34328ee949ebfd18405a40c9a52656e3f2bbead1dc36a8e3674500bec9de5507371e412618dd655f82722eec54b1e8cd1033ee069a4d7220dae3dde42de5ae61188e3231cffebe0ce01dc024a60d4c3b4010aed854e86053ce60b7a05c6b91872edfc6aa18dde031fae1537e8c6fa97aa7c23c1b127c6ef5aa8c1182b1ad2dfee8e941f1bdb46018a15205314c83f19f2e60be2afcf667740f1abc7f11538d881da2ca87b6e88d95c3aee09f9a5f6b80df91733d154bd96f4180d52f588d17c8ca3bcdbe5fac3d02b47965e97d734643fa59d77819cdc0115defd793b374df50941916f52e8983e2db18f47fe251c5c136619364842208c9ff80486f4704472066c9a9cc46f44adf87da9f8723103e86dcdcbfad0fc789fb99bf7630be8ac55c8070f18e57b501f3de939977349af903f71b3831d6cbde03a4aa0ec7244be4e6cb3154a96fa1315376e3241187f67e2fee54622e8d6ec5f1b7dec3863d4b014a31557570bc898f17788a4e3877fa96598ac9db6df3d2a39952dfc9cd076c21ca3dd0869d41163fa6b0174719c04fcc84870fdc4512569b839f92902906a67965fef307392a99ab5d9209268e108e52546cb95b6e6a8200da6916b0acec95814d7094870bcc2640a0ca863b6b079982a060e18eabc6a164019f70aa0cbe3d6756ef6dea100e68dceb848de285205c3976f5a0ea6d5242b5886815a764f3cb5286dc63c871b081d27f06f2b0cf2b0d5f06b050a3843a644e728c8e72c0eed7c827ca925cde8e6cfb17c70f1fb46c21c75ccc6482701d58256b94dde6e277a69209ab80c29ac0b5e936470e4b4a865f751aa583d8a6e48276c327df67d0a979a0b2526d3dbc1a8a77065c08a868bc943ef4062c3741b7557cf65c79490816dcf1cd67cbfff43b6932260b81cc2e7ee029320e1bd710dac3370a8a9dfb750f7eb0e512b931ac33c0538b916fc7363642e1b986addb5c218afd69be59a982f9b21571242353644c5ac3fbcbbc853d1c9610390fbcbfa9883b1beb3cdc18fd0825886b99b2e34c5026ca155394b1e680afcc95b79d88d70665ecebf6310d03d8bde44729c038a145dfd8793748a531c45f5c32284fa0ddcd89e1240fec12094c42d629428e0ef3307766f2fbf267f034252bc271920a76ac4e7e49079ea2c3294b726b75e369a0f9a13b0074994dc9344d67c86b3ee546bcd97fe8c69f6d825edd8febd44f502fab2f61feadb7568ae0d8007d8f021a4d73a48610c5c23956f381e0bf64f7ba8f06b9495b99f5f08d931fd0f8e8affdd6c0197cd6c01a58e06a53d6f47362c536b21c26bdedbebf836b7dae9f3974d7cf0af9c21b5a64f5f481379d231efc2e87e5a0a265f3fc92217d801b904b0f915746efe416db85799ca93e604e099649f0bfb7d1cc0283f5d94cd4ba0f7b75f7f592ebaa59a7f3cdb89cfa15cb98cec6b370b1c38ee52ccf2d822b024100753e933346ba419fe7e591d745acdcd6bf5b6cf41e2abbaa4b4729a2dee3470ac129c5a49478f66395ff262dab7c0b206ba208ef792a02d6fa23c31f62c2781c5040cbe3af29a3161bfe319486c4443c33b095c89f4886db775e988fadd4303c87d38a83e9a1f", &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)="2b8ffcb1febe098aa6ecc4d2fd5869588cadebd23e767c7e73c24ee2970d8782425198c89ab3abe8cb95fc3e50b64df3fdf7e7c885c19b9c928df4e8d558f58fd1c2ff10c7730f24981f02e1402cda298b02ba35f464") ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) tkill(r0, 0x38) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x4, &(0x7f00000001c0)) exit_group(0x0) 10:14:01 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async, rerun: 64) syz_io_uring_setup(0x7303, &(0x7f0000000080)={0x0, 0x39f6, 0x8, 0x2, 0x1b3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000100)=0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) (async) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) recvmsg(r6, &(0x7f0000000700)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000680)=""/124, 0x7c}], 0x3, &(0x7f0000000600)=""/30, 0x1e}, 0x40000000) (async) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0xfffffffffffffffc, 0x0}, 0x0) r10 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r10, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async, rerun: 64) syz_io_uring_submit(r7, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r10, 0x0, &(0x7f0000000180)="0a2ad0ee3d487d1e41", 0x9, 0x8801}, 0x2c) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x10, 0x10001, 0x8, 0x9, 0x1050, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x40) [ 500.814093][ T9034] RSP: 002b:00007ffa3b07d168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 500.822484][ T9034] RAX: ffffffffffffffda RBX: 00007ffa3c019f60 RCX: 00007ffa3bf06e99 [ 500.830433][ T9034] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 500.838422][ T9034] RBP: 00007ffa3b07d1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 500.846369][ T9034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.854319][ T9034] R13: 00007fff1f05cd0f R14: 00007ffa3b07d300 R15: 0000000000022000 10:14:01 executing program 1: clone(0x4000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1800, &(0x7f00000001c0)="b8c4cc2f1ddad4b29549cfea34394ad3aa17c18d1607d73eeee8b322c6d0d048fd0f1cf469f8032baaeb4c733b58972247c44ea56a55bdfbdee970c00dd178fc6002f75b71af6095ebcc817b0a6ff464d9d710ed9a3c0292aae4c7d9771bb2ce2b8dfa060bc3bd277ed348629d3d4637ce5211647dc27fa10666375dcb3b79c7d6ad2e7a1ee729616bbb729ffaaefb2705364bc6b557a0619211", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="638c3656032672fc83f9a00704671338241be19b14c0af97ab877ee61f1e33c211cf218834c60b5f4f1a1d48834dea0c7ad41938b91b55bd076ba3bfbf1446d817315e2aac7c9e412016dada0318aaa405") r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:14:01 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:01 executing program 1: clone(0x4000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1800, &(0x7f00000001c0)="b8c4cc2f1ddad4b29549cfea34394ad3aa17c18d1607d73eeee8b322c6d0d048fd0f1cf469f8032baaeb4c733b58972247c44ea56a55bdfbdee970c00dd178fc6002f75b71af6095ebcc817b0a6ff464d9d710ed9a3c0292aae4c7d9771bb2ce2b8dfa060bc3bd277ed348629d3d4637ce5211647dc27fa10666375dcb3b79c7d6ad2e7a1ee729616bbb729ffaaefb2705364bc6b557a0619211", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="638c3656032672fc83f9a00704671338241be19b14c0af97ab877ee61f1e33c211cf218834c60b5f4f1a1d48834dea0c7ad41938b91b55bd076ba3bfbf1446d817315e2aac7c9e412016dada0318aaa405") r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) clone(0x4000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) clone(0x1800, &(0x7f00000001c0)="b8c4cc2f1ddad4b29549cfea34394ad3aa17c18d1607d73eeee8b322c6d0d048fd0f1cf469f8032baaeb4c733b58972247c44ea56a55bdfbdee970c00dd178fc6002f75b71af6095ebcc817b0a6ff464d9d710ed9a3c0292aae4c7d9771bb2ce2b8dfa060bc3bd277ed348629d3d4637ce5211647dc27fa10666375dcb3b79c7d6ad2e7a1ee729616bbb729ffaaefb2705364bc6b557a0619211", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="638c3656032672fc83f9a00704671338241be19b14c0af97ab877ee61f1e33c211cf218834c60b5f4f1a1d48834dea0c7ad41938b91b55bd076ba3bfbf1446d817315e2aac7c9e412016dada0318aaa405") (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) 10:14:01 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x7303, &(0x7f0000000080)={0x0, 0x39f6, 0x8, 0x2, 0x1b3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000100)=0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) recvmsg(r6, &(0x7f0000000700)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000680)=""/124, 0x7c}], 0x3, &(0x7f0000000600)=""/30, 0x1e}, 0x40000000) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0xfffffffffffffffc, 0x0}, 0x0) r10 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r10, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) syz_io_uring_submit(r7, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r10, 0x0, &(0x7f0000000180)="0a2ad0ee3d487d1e41", 0x9, 0x8801}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x10, 0x10001, 0x8, 0x9, 0x1050, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x40) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) syz_io_uring_setup(0x7303, &(0x7f0000000080)={0x0, 0x39f6, 0x8, 0x2, 0x1b3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000740), &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) recvmsg(r6, &(0x7f0000000700)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000680)=""/124, 0x7c}], 0x3, &(0x7f0000000600)=""/30, 0x1e}, 0x40000000) (async) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0xfffffffffffffffc, 0x0}, 0x0) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) sendmsg(r10, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) syz_io_uring_submit(r7, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r10, 0x0, &(0x7f0000000180)="0a2ad0ee3d487d1e41", 0x9, 0x8801}, 0x2c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x10, 0x10001, 0x8, 0x9, 0x1050, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x40) (async) 10:14:01 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:01 executing program 4: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x1, 0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1}, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000300), &(0x7f0000000340)=@v1={0x2, "92d9a385f5cba9"}, 0x8, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x200000, &(0x7f0000000040)="cb77e864bfbaedcf959edbc02756e42db38f767b2c71998d914906294cc8586a541b1380d240eaab11a576ac1f3f3e263a9ef8365ace84142c665a778117e57b9b8c105baab2aba1d127da92f697c9d7c38d666800667d", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="a5576057e8126c0534a5417b4f35f6fe184a4c08bef85977850a3fad3282cca839bac82b5b688d267fc3485674a6948dd0dc8db26efde59fdd4024e6b3dbf42188808dfbc11e4c88131f7dcc9fd378c88ceab030c490c8801336e29030b7ec7ab71f6f48014101c031e3238787aaacf4863ca025181fb0f9b4af95be714db6beeed3a830e493a96a043d9d4c58350f51447be78e1a") wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) [ 500.958930][ T23] audit: type=1400 audit(1639563241.310:311): avc: denied { setattr } for pid=9504 comm="syz-executor.4" name="PACKET" dev="sockfs" ino=915358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 500.958955][ T9433] FAULT_INJECTION: forcing a failure. [ 500.958955][ T9433] name failslab, interval 1, probability 0, space 0, times 0 [ 500.998607][ T9433] CPU: 1 PID: 9433 Comm: syz-executor.3 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 501.008772][ T9433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.018828][ T9433] Call Trace: [ 501.022121][ T9433] dump_stack_lvl+0x1e2/0x24b [ 501.026797][ T9433] ? devkmsg_release+0x127/0x127 [ 501.031729][ T9433] ? show_regs_print_info+0x18/0x18 [ 501.036906][ T9433] ? __kasan_check_write+0x14/0x20 [ 501.041994][ T9433] ? __io_queue_sqe+0x1561/0x2fa0 [ 501.046992][ T9433] dump_stack+0x15/0x1d [ 501.051119][ T9433] should_fail+0x3c0/0x510 [ 501.055544][ T9433] __should_failslab+0x9f/0xe0 [ 501.060280][ T9433] should_failslab+0x9/0x20 [ 501.064759][ T9433] kmem_cache_alloc_bulk+0x30/0x3f0 [ 501.069931][ T9433] io_submit_sqes+0x6bf/0x2da0 [ 501.074766][ T9433] ? io_uring_add_task_file+0x290/0x290 [ 501.080285][ T9433] ? security_file_permission+0xa8/0xc0 [ 501.085826][ T9433] ? __kasan_check_write+0x14/0x20 [ 501.090907][ T9433] ? mutex_lock+0xa6/0x110 [ 501.095296][ T9433] ? io_uring_add_task_file+0x127/0x290 [ 501.100815][ T9433] ? __fdget+0x1b5/0x240 [ 501.105028][ T9433] __se_sys_io_uring_enter+0x322/0x12b0 [ 501.110718][ T9433] ? __fget_files+0x39e/0x3d0 [ 501.115370][ T9433] ? __kasan_check_write+0x14/0x20 [ 501.120452][ T9433] ? fput_many+0x47/0x1a0 [ 501.124751][ T9433] ? __x64_sys_io_uring_enter+0x100/0x100 [ 501.130444][ T9433] ? __ia32_sys_read+0x90/0x90 [ 501.135180][ T9433] ? debug_smp_processor_id+0x1c/0x20 [ 501.140520][ T9433] __x64_sys_io_uring_enter+0xe5/0x100 [ 501.145949][ T9433] do_syscall_64+0x31/0x70 [ 501.150368][ T9433] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 501.156269][ T9433] RIP: 0033:0x7ffa3bf06e99 [ 501.160658][ T9433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 501.180319][ T9433] RSP: 002b:00007ffa3b07d168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 501.188706][ T9433] RAX: ffffffffffffffda RBX: 00007ffa3c019f60 RCX: 00007ffa3bf06e99 [ 501.196650][ T9433] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 10:14:01 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 6) 10:14:01 executing program 4: r0 = socket$nl_generic(0x11, 0x3, 0x10) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x1, 0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1}, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000300), &(0x7f0000000340)=@v1={0x2, "92d9a385f5cba9"}, 0x8, 0x1) (async, rerun: 64) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (rerun: 64) r1 = gettid() (async) clone(0x200000, &(0x7f0000000040)="cb77e864bfbaedcf959edbc02756e42db38f767b2c71998d914906294cc8586a541b1380d240eaab11a576ac1f3f3e263a9ef8365ace84142c665a778117e57b9b8c105baab2aba1d127da92f697c9d7c38d666800667d", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="a5576057e8126c0534a5417b4f35f6fe184a4c08bef85977850a3fad3282cca839bac82b5b688d267fc3485674a6948dd0dc8db26efde59fdd4024e6b3dbf42188808dfbc11e4c88131f7dcc9fd378c88ceab030c490c8801336e29030b7ec7ab71f6f48014101c031e3238787aaacf4863ca025181fb0f9b4af95be714db6beeed3a830e493a96a043d9d4c58350f51447be78e1a") (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) (async) tkill(r1, 0x38) (async, rerun: 32) ptrace$cont(0x18, r1, 0x0, 0x0) (async, rerun: 32) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) (async) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) 10:14:01 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:01 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 1) 10:14:01 executing program 1: clone(0x4000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) clone(0x1800, &(0x7f00000001c0)="b8c4cc2f1ddad4b29549cfea34394ad3aa17c18d1607d73eeee8b322c6d0d048fd0f1cf469f8032baaeb4c733b58972247c44ea56a55bdfbdee970c00dd178fc6002f75b71af6095ebcc817b0a6ff464d9d710ed9a3c0292aae4c7d9771bb2ce2b8dfa060bc3bd277ed348629d3d4637ce5211647dc27fa10666375dcb3b79c7d6ad2e7a1ee729616bbb729ffaaefb2705364bc6b557a0619211", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="638c3656032672fc83f9a00704671338241be19b14c0af97ab877ee61f1e33c211cf218834c60b5f4f1a1d48834dea0c7ad41938b91b55bd076ba3bfbf1446d817315e2aac7c9e412016dada0318aaa405") (async) r0 = gettid() (async, rerun: 64) wait4(0x0, 0x0, 0x80000002, 0x0) (async, rerun: 64) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:14:01 executing program 0: r0 = syz_io_uring_setup(0x1a88, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x80}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r4}}, 0x74f) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r3, &(0x7f0000000240)={0x400a02, 0x1a1, 0x10}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x8d2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xd51, 0x0, 0x3, 0x1a5}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="747274737465642e2600ee9084be5367240e3bea267141d86d3e639fbf3adeeb45cfd4ae5adad07540f385b485acb548844ab9f18afdbbcedb316db2d9486455493ffcbbc25f380924494bb976d0a6c15726a11438d71334a1cfa4ac1a4f73204ae45e87b6a2fb40278eef84be3b10f06f2fc68ab42a8dca0378917922bbfc518394369356d12c74cd89c9f885931c3aa4b06af3e943a8258827"]) [ 501.204607][ T9433] RBP: 00007ffa3b07d1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 501.212553][ T9433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.220495][ T9433] R13: 00007fff1f05cd0f R14: 00007ffa3b07d300 R15: 0000000000022000 10:14:01 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 501.278991][ T9623] FAULT_INJECTION: forcing a failure. [ 501.278991][ T9623] name failslab, interval 1, probability 0, space 0, times 0 [ 501.292741][ T9639] FAULT_INJECTION: forcing a failure. [ 501.292741][ T9639] name failslab, interval 1, probability 0, space 0, times 0 [ 501.309697][ T9623] CPU: 0 PID: 9623 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 501.319864][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.329921][ T9623] Call Trace: [ 501.333216][ T9623] dump_stack_lvl+0x1e2/0x24b [ 501.337895][ T9623] ? devkmsg_release+0x127/0x127 [ 501.342837][ T9623] ? show_regs_print_info+0x18/0x18 [ 501.348033][ T9623] ? __kasan_check_write+0x14/0x20 [ 501.353154][ T9623] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 501.358622][ T9623] dump_stack+0x15/0x1d [ 501.362780][ T9623] should_fail+0x3c0/0x510 [ 501.367195][ T9623] __should_failslab+0x9f/0xe0 [ 501.371962][ T9623] should_failslab+0x9/0x20 [ 501.376457][ T9623] kmem_cache_alloc_bulk+0x30/0x3f0 [ 501.381646][ T9623] io_submit_sqes+0x6bf/0x2da0 [ 501.386406][ T9623] ? _kstrtoull+0x3cb/0x4d0 [ 501.390925][ T9623] ? io_uring_add_task_file+0x290/0x290 [ 501.396469][ T9623] ? security_file_permission+0xa8/0xc0 [ 501.402020][ T9623] ? __kasan_check_write+0x14/0x20 [ 501.407127][ T9623] ? mutex_lock+0xa6/0x110 [ 501.411544][ T9623] ? io_uring_add_task_file+0x127/0x290 [ 501.417087][ T9623] ? __fdget+0x1b5/0x240 [ 501.421331][ T9623] __se_sys_io_uring_enter+0x322/0x12b0 10:14:01 executing program 0: r0 = syz_io_uring_setup(0x1a88, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x80}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r4}}, 0x74f) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r3, &(0x7f0000000240)={0x400a02, 0x1a1, 0x10}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x8d2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xd51, 0x0, 0x3, 0x1a5}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="747274737465642e2600ee9084be5367240e3bea267141d86d3e639fbf3adeeb45cfd4ae5adad07540f385b485acb548844ab9f18afdbbcedb316db2d9486455493ffcbbc25f380924494bb976d0a6c15726a11438d71334a1cfa4ac1a4f73204ae45e87b6a2fb40278eef84be3b10f06f2fc68ab42a8dca0378917922bbfc518394369356d12c74cd89c9f885931c3aa4b06af3e943a8258827"]) syz_io_uring_setup(0x1a88, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x80}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) fallocate(r3, 0x1, 0x0, 0x7fffffff) (async) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r4}}, 0x74f) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r3, &(0x7f0000000240)={0x400a02, 0x1a1, 0x10}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x8d2) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) syz_io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xd51, 0x0, 0x3, 0x1a5}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="747274737465642e2600ee9084be5367240e3bea267141d86d3e639fbf3adeeb45cfd4ae5adad07540f385b485acb548844ab9f18afdbbcedb316db2d9486455493ffcbbc25f380924494bb976d0a6c15726a11438d71334a1cfa4ac1a4f73204ae45e87b6a2fb40278eef84be3b10f06f2fc68ab42a8dca0378917922bbfc518394369356d12c74cd89c9f885931c3aa4b06af3e943a8258827"]) (async) [ 501.426872][ T9623] ? __fget_files+0x39e/0x3d0 [ 501.431550][ T9623] ? __kasan_check_write+0x14/0x20 [ 501.436660][ T9623] ? fput_many+0x47/0x1a0 [ 501.440993][ T9623] ? __x64_sys_io_uring_enter+0x100/0x100 [ 501.446720][ T9623] ? __ia32_sys_read+0x90/0x90 [ 501.451486][ T9623] ? debug_smp_processor_id+0x1c/0x20 [ 501.456866][ T9623] __x64_sys_io_uring_enter+0xe5/0x100 [ 501.462326][ T9623] do_syscall_64+0x31/0x70 [ 501.466829][ T9623] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 501.472715][ T9623] RIP: 0033:0x7fc57b044e99 10:14:01 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0xa0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r6, @ANYBLOB="9ec66e42ab5b2e0a20aec76283e5cb654b0b565f6a82ae682cefde58ac7e0c650abb1c35c42130bc200d569ef876be8018918a6fc34bf764fa7f6825fe6af74b80349cc9a02b0442d00deff312b53450292a00ad02071ee088c5024d7f972dbf6c754e88fa5990c91fd24c339df605af94722c739e42aef07dfff4cf2a420de78ef0c0f21983b03e0f4997441f01c1f5bb88c425f91567bf3aab2583cbf73c390d8c1b5e247ef5263bd0580852b85e4a72f18c52da34617c75e7b89c11be5db879f101c24415a3b9b146c1703c9f9e86e0995c0f4ad6388456953571fc0cc9fc5cf5c74545d8b923155875"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x2044804) exit_group(0x0) [ 501.477132][ T9623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 501.496739][ T9623] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 501.505161][ T9623] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 501.513434][ T9623] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 501.521412][ T9623] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff 10:14:01 executing program 0: r0 = syz_io_uring_setup(0x1a88, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x80}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r4}}, 0x74f) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r3, &(0x7f0000000240)={0x400a02, 0x1a1, 0x10}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x8d2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xd51, 0x0, 0x3, 0x1a5}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="747274737465642e2600ee9084be5367240e3bea267141d86d3e639fbf3adeeb45cfd4ae5adad07540f385b485acb548844ab9f18afdbbcedb316db2d9486455493ffcbbc25f380924494bb976d0a6c15726a11438d71334a1cfa4ac1a4f73204ae45e87b6a2fb40278eef84be3b10f06f2fc68ab42a8dca0378917922bbfc518394369356d12c74cd89c9f885931c3aa4b06af3e943a8258827"]) syz_io_uring_setup(0x1a88, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x80}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) fallocate(r3, 0x1, 0x0, 0x7fffffff) (async) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r4}}, 0x74f) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r3, &(0x7f0000000240)={0x400a02, 0x1a1, 0x10}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x8d2) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) syz_io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xd51, 0x0, 0x3, 0x1a5}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="747274737465642e2600ee9084be5367240e3bea267141d86d3e639fbf3adeeb45cfd4ae5adad07540f385b485acb548844ab9f18afdbbcedb316db2d9486455493ffcbbc25f380924494bb976d0a6c15726a11438d71334a1cfa4ac1a4f73204ae45e87b6a2fb40278eef84be3b10f06f2fc68ab42a8dca0378917922bbfc518394369356d12c74cd89c9f885931c3aa4b06af3e943a8258827"]) (async) 10:14:01 executing program 4: r0 = socket$nl_generic(0x11, 0x3, 0x10) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x1, 0x1f}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1}, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000300), &(0x7f0000000340)=@v1={0x2, "92d9a385f5cba9"}, 0x8, 0x1) (async) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() (async) clone(0x200000, &(0x7f0000000040)="cb77e864bfbaedcf959edbc02756e42db38f767b2c71998d914906294cc8586a541b1380d240eaab11a576ac1f3f3e263a9ef8365ace84142c665a778117e57b9b8c105baab2aba1d127da92f697c9d7c38d666800667d", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="a5576057e8126c0534a5417b4f35f6fe184a4c08bef85977850a3fad3282cca839bac82b5b688d267fc3485674a6948dd0dc8db26efde59fdd4024e6b3dbf42188808dfbc11e4c88131f7dcc9fd378c88ceab030c490c8801336e29030b7ec7ab71f6f48014101c031e3238787aaacf4863ca025181fb0f9b4af95be714db6beeed3a830e493a96a043d9d4c58350f51447be78e1a") wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) (async) tkill(r1, 0x38) (async) ptrace$cont(0x18, r1, 0x0, 0x0) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) 10:14:01 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0xa0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r6, @ANYBLOB="9ec66e42ab5b2e0a20aec76283e5cb654b0b565f6a82ae682cefde58ac7e0c650abb1c35c42130bc200d569ef876be8018918a6fc34bf764fa7f6825fe6af74b80349cc9a02b0442d00deff312b53450292a00ad02071ee088c5024d7f972dbf6c754e88fa5990c91fd24c339df605af94722c739e42aef07dfff4cf2a420de78ef0c0f21983b03e0f4997441f01c1f5bb88c425f91567bf3aab2583cbf73c390d8c1b5e247ef5263bd0580852b85e4a72f18c52da34617c75e7b89c11be5db879f101c24415a3b9b146c1703c9f9e86e0995c0f4ad6388456953571fc0cc9fc5cf5c74545d8b923155875"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x2044804) (async) exit_group(0x0) [ 501.529387][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.537363][ T9623] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 [ 501.549189][ T9639] CPU: 0 PID: 9639 Comm: syz-executor.3 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 501.559349][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.569399][ T9639] Call Trace: [ 501.572705][ T9639] dump_stack_lvl+0x1e2/0x24b [ 501.577386][ T9639] ? devkmsg_release+0x127/0x127 [ 501.582331][ T9639] ? show_regs_print_info+0x18/0x18 [ 501.587533][ T9639] ? __kasan_check_write+0x14/0x20 [ 501.592647][ T9639] ? __io_queue_sqe+0x1561/0x2fa0 [ 501.597683][ T9639] dump_stack+0x15/0x1d [ 501.601843][ T9639] should_fail+0x3c0/0x510 [ 501.606262][ T9639] __should_failslab+0x9f/0xe0 [ 501.611029][ T9639] should_failslab+0x9/0x20 [ 501.615536][ T9639] kmem_cache_alloc_bulk+0x30/0x3f0 [ 501.620736][ T9639] io_submit_sqes+0x6bf/0x2da0 [ 501.625508][ T9639] ? io_uring_add_task_file+0x290/0x290 [ 501.631055][ T9639] ? security_file_permission+0xa8/0xc0 [ 501.636685][ T9639] ? __kasan_check_write+0x14/0x20 [ 501.641784][ T9639] ? mutex_lock+0xa6/0x110 [ 501.646197][ T9639] ? io_uring_add_task_file+0x127/0x290 [ 501.651740][ T9639] ? __fdget+0x1b5/0x240 [ 501.655986][ T9639] __se_sys_io_uring_enter+0x322/0x12b0 [ 501.661524][ T9639] ? __fget_files+0x39e/0x3d0 [ 501.666182][ T9639] ? __kasan_check_write+0x14/0x20 [ 501.671267][ T9639] ? fput_many+0x47/0x1a0 [ 501.675574][ T9639] ? __x64_sys_io_uring_enter+0x100/0x100 [ 501.681268][ T9639] ? __ia32_sys_read+0x90/0x90 [ 501.686012][ T9639] ? debug_smp_processor_id+0x1c/0x20 [ 501.691358][ T9639] __x64_sys_io_uring_enter+0xe5/0x100 [ 501.696967][ T9639] do_syscall_64+0x31/0x70 [ 501.701356][ T9639] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 501.707223][ T9639] RIP: 0033:0x7ffa3bf06e99 [ 501.711616][ T9639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:14:02 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 7) 10:14:02 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0xa0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r6, @ANYBLOB="9ec66e42ab5b2e0a20aec76283e5cb654b0b565f6a82ae682cefde58ac7e0c650abb1c35c42130bc200d569ef876be8018918a6fc34bf764fa7f6825fe6af74b80349cc9a02b0442d00deff312b53450292a00ad02071ee088c5024d7f972dbf6c754e88fa5990c91fd24c339df605af94722c739e42aef07dfff4cf2a420de78ef0c0f21983b03e0f4997441f01c1f5bb88c425f91567bf3aab2583cbf73c390d8c1b5e247ef5263bd0580852b85e4a72f18c52da34617c75e7b89c11be5db879f101c24415a3b9b146c1703c9f9e86e0995c0f4ad6388456953571fc0cc9fc5cf5c74545d8b923155875"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x2044804) (async) exit_group(0x0) 10:14:02 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:02 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) r4 = syz_io_uring_complete(r1) syz_io_uring_setup(0x2380, &(0x7f0000000080)={0x0, 0x40ce, 0x4, 0x3, 0x228, 0x0, r4}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 10:14:02 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:14:02 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 2) [ 501.731207][ T9639] RSP: 002b:00007ffa3b07d168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 501.739602][ T9639] RAX: ffffffffffffffda RBX: 00007ffa3c019f60 RCX: 00007ffa3bf06e99 [ 501.747669][ T9639] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 501.755625][ T9639] RBP: 00007ffa3b07d1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 501.763573][ T9639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.771560][ T9639] R13: 00007fff1f05cd0f R14: 00007ffa3b07d300 R15: 0000000000022000 10:14:02 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async, rerun: 32) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async, rerun: 32) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 64) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async, rerun: 64) exit_group(0x0) 10:14:02 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) r4 = syz_io_uring_complete(r1) syz_io_uring_setup(0x2380, &(0x7f0000000080)={0x0, 0x40ce, 0x4, 0x3, 0x228, 0x0, r4}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) syz_io_uring_complete(r1) (async) syz_io_uring_setup(0x2380, &(0x7f0000000080)={0x0, 0x40ce, 0x4, 0x3, 0x228, 0x0, r4}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async) [ 501.828736][T10306] FAULT_INJECTION: forcing a failure. [ 501.828736][T10306] name failslab, interval 1, probability 0, space 0, times 0 [ 501.835292][T10332] FAULT_INJECTION: forcing a failure. [ 501.835292][T10332] name failslab, interval 1, probability 0, space 0, times 0 [ 501.842046][T10306] CPU: 0 PID: 10306 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 501.864187][T10306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.874236][T10306] Call Trace: [ 501.877526][T10306] dump_stack_lvl+0x1e2/0x24b [ 501.882189][T10306] ? devkmsg_release+0x127/0x127 [ 501.887203][T10306] ? show_regs_print_info+0x18/0x18 [ 501.892388][T10306] ? __kasan_check_write+0x14/0x20 [ 501.897584][T10306] ? __io_queue_sqe+0x1561/0x2fa0 [ 501.902599][T10306] dump_stack+0x15/0x1d [ 501.906744][T10306] should_fail+0x3c0/0x510 [ 501.911147][T10306] __should_failslab+0x9f/0xe0 [ 501.915899][T10306] should_failslab+0x9/0x20 [ 501.920388][T10306] kmem_cache_alloc_bulk+0x30/0x3f0 [ 501.925574][T10306] io_submit_sqes+0x6bf/0x2da0 [ 501.930328][T10306] ? io_uring_add_task_file+0x290/0x290 [ 501.935855][T10306] ? security_file_permission+0xa8/0xc0 [ 501.941384][T10306] ? __kasan_check_write+0x14/0x20 [ 501.946474][T10306] ? mutex_lock+0xa6/0x110 [ 501.950878][T10306] ? io_uring_add_task_file+0x127/0x290 [ 501.956405][T10306] ? __fdget+0x1b5/0x240 [ 501.960629][T10306] __se_sys_io_uring_enter+0x322/0x12b0 [ 501.966160][T10306] ? __fget_files+0x39e/0x3d0 [ 501.970819][T10306] ? __kasan_check_write+0x14/0x20 [ 501.975909][T10306] ? fput_many+0x47/0x1a0 [ 501.980221][T10306] ? __x64_sys_io_uring_enter+0x100/0x100 [ 501.985926][T10306] ? __ia32_sys_read+0x90/0x90 [ 501.990679][T10306] ? debug_smp_processor_id+0x1c/0x20 [ 501.996040][T10306] __x64_sys_io_uring_enter+0xe5/0x100 [ 502.001496][T10306] do_syscall_64+0x31/0x70 [ 502.005913][T10306] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.011797][T10306] RIP: 0033:0x7fc57b044e99 10:14:02 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) r4 = syz_io_uring_complete(r1) syz_io_uring_setup(0x2380, &(0x7f0000000080)={0x0, 0x40ce, 0x4, 0x3, 0x228, 0x0, r4}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) [ 502.016197][T10306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 502.035787][T10306] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 502.044199][T10306] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 502.052175][T10306] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 502.060149][T10306] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 502.068120][T10306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.076093][T10306] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 [ 502.084099][T10332] CPU: 1 PID: 10332 Comm: syz-executor.3 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 502.094337][T10332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.104396][T10332] Call Trace: [ 502.107688][T10332] dump_stack_lvl+0x1e2/0x24b [ 502.112364][T10332] ? devkmsg_release+0x127/0x127 [ 502.117306][T10332] ? show_regs_print_info+0x18/0x18 [ 502.122512][T10332] ? __kasan_check_write+0x14/0x20 10:14:02 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) rt_sigqueueinfo(r2, 0x14, &(0x7f0000000040)={0x15, 0x800, 0x400}) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:14:02 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:02 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async, rerun: 32) r0 = gettid() (async, rerun: 32) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) (async, rerun: 64) r1 = inotify_init1(0x0) (rerun: 64) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) (async) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async, rerun: 32) rt_sigqueueinfo(r2, 0x14, &(0x7f0000000040)={0x15, 0x800, 0x400}) (async, rerun: 32) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 32) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async, rerun: 32) exit_group(0x0) [ 502.127618][T10332] ? __io_queue_sqe+0x1561/0x2fa0 [ 502.132642][T10332] dump_stack+0x15/0x1d [ 502.136798][T10332] should_fail+0x3c0/0x510 [ 502.141213][T10332] __should_failslab+0x9f/0xe0 [ 502.145978][T10332] should_failslab+0x9/0x20 [ 502.150481][T10332] kmem_cache_alloc_bulk+0x30/0x3f0 [ 502.155684][T10332] io_submit_sqes+0x6bf/0x2da0 [ 502.160458][T10332] ? io_uring_add_task_file+0x290/0x290 [ 502.166010][T10332] ? security_file_permission+0xa8/0xc0 [ 502.171563][T10332] ? __kasan_check_write+0x14/0x20 [ 502.176667][T10332] ? mutex_lock+0xa6/0x110 [ 502.181070][T10332] ? io_uring_add_task_file+0x127/0x290 [ 502.186589][T10332] ? __fdget+0x1b5/0x240 [ 502.190810][T10332] __se_sys_io_uring_enter+0x322/0x12b0 [ 502.196328][T10332] ? __fget_files+0x39e/0x3d0 [ 502.200990][T10332] ? __kasan_check_write+0x14/0x20 [ 502.206257][T10332] ? fput_many+0x47/0x1a0 [ 502.210573][T10332] ? __x64_sys_io_uring_enter+0x100/0x100 [ 502.216268][T10332] ? __ia32_sys_read+0x90/0x90 [ 502.221012][T10332] ? debug_smp_processor_id+0x1c/0x20 [ 502.226503][T10332] __x64_sys_io_uring_enter+0xe5/0x100 [ 502.231949][T10332] do_syscall_64+0x31/0x70 [ 502.236437][T10332] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.242347][T10332] RIP: 0033:0x7ffa3bf06e99 [ 502.246737][T10332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 502.266464][T10332] RSP: 002b:00007ffa3b07d168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 10:14:02 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 8) 10:14:02 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 3) 10:14:02 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:02 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async, rerun: 64) r0 = gettid() (rerun: 64) wait4(0x0, 0x0, 0x80000002, 0x0) (async, rerun: 32) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (rerun: 32) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) rt_sigqueueinfo(r2, 0x14, &(0x7f0000000040)={0x15, 0x800, 0x400}) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) 10:14:02 executing program 4: r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) [ 502.274853][T10332] RAX: ffffffffffffffda RBX: 00007ffa3c019f60 RCX: 00007ffa3bf06e99 [ 502.282883][T10332] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 502.290919][T10332] RBP: 00007ffa3b07d1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 502.298863][T10332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.306827][T10332] R13: 00007fff1f05cd0f R14: 00007ffa3b07d300 R15: 0000000000022000 10:14:02 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:02 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff], 0x3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x5) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) wait4(r3, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) [ 502.361812][T10847] FAULT_INJECTION: forcing a failure. [ 502.361812][T10847] name failslab, interval 1, probability 0, space 0, times 0 [ 502.379353][T10847] CPU: 1 PID: 10847 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 502.389607][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.399745][T10847] Call Trace: [ 502.403039][T10847] dump_stack_lvl+0x1e2/0x24b 10:14:02 executing program 0: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000100)={{r0}, 0x2, &(0x7f00000000c0)=[0x10000, 0xfffffffffffffffd], 0x80000001, 0x2, [0x8, 0x3f, 0x1, 0x2]}) clock_gettime(0x0, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = fspick(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x1) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001100), 0x10) r9 = accept4$unix(0xffffffffffffffff, &(0x7f0000001140), &(0x7f00000011c0)=0x6e, 0x80800) r10 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r10, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r11 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r11, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240), 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r0, r5, r1]}}], 0x110}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000009c0)="37eb68635edcfb0969d55dbad43de0638cf2a90b321730add9b7e6b1de543ad514e60ced694648d90f9477b09824e7fc50a9e5408bb6469d04343bd3dc2e3303c7387ea60c45b0c7f865f591d87ebf0938e05c190792c8c26d77b3c755c5835748c751ea38c1063e81c74c464d5a494ff3b82ef7cf4bd63e263d8e9b8bcf149494b84f742c13b16a060ad55b2be799772ca86ce266e6d85b01fce242a2e3e2dafa4f8e6e0312b2ce07e8059de756da50c123a0dc3e7139dcb4196c", 0xbb}, {&(0x7f0000000a80)="3e5f1a04ce21ff489ad41849b911fe38390b801d382228e8c411cb15a7ca5ffcbd0c148be35a24f72be69140bb18d308f64415ea819b65f69179ecd30619fb426889a83a15d0f3b263ccd34cd637fb978fb82e68093791c9e3abd93737a8854e6c51865b4ba76399ffcf0bc805dd88703287d5be7e2f23f345aac8e10a94786b5934136fbb1f99b7394ebdd016565a3d9f4fee1395afd7a84c91199cfb5e937c80147e60", 0xa4}, {&(0x7f0000000b40)="1b29b82de7d908f47dd6189f4e0e9f441a6ae5b5ff701f3657c8eda058118d6a9134a8d8cb90dc558c44a21046dfd6564f31d7b60ad89f68bfb03938214b0608643169234bc200afc91c332cb2290800000000000000d539c00b4135ec24f537b1eff49bfa8a59", 0x67}, {&(0x7f0000000bc0)="2bf7b36448f8bcbe39a72258ca360d66b32ce58360f09de3a7a8655c27543e1903ff2f1bdafb7c61909ce39482b30bae1754ad5b01d654a6507dca9321b77a21dce65e689c8a20db7aa36f30cb3aa2471733283b86cbce2189545417c288e322614352a3f7ebcf4895c66379a6bece9e73157790f06bccbf3e4d61492b8f541bb6e2ef9be798f1723e8571f79b9d82f9d63a5677f38bd3b2b6677756d09c74df0d07276ca17a97c803701499b75d2f53eaffab3b78e58df479792cb008441d53199785989d44b12e38dc14", 0xcb}, {&(0x7f0000000cc0)="88900bdb8eedec1b071629", 0xb}, {&(0x7f0000000d00)="b01e27c9e81a943a5299d0279ee1d61317c6322064fa7d9d6192fff2a20e8f55082f820ffef963e3f4400ef015312a961629136060e34727915ca926c4437d7e83b2d084935b99c8ea46c9f8e5a48ba7ff0b361813528e9d1eecae4b6979a1807cd98e5b703bf4899a720f305a69e944bcc5f6da3ce0b48068e425f5f4c35d802f0473aec8356c4b636f8fe0ed9efc1f77be46ef37ec27acc7ef16", 0x9b}, {&(0x7f0000000400)="817b4caeb512b35e9612f6e7fc46ac11547b456df7ddc3f1f7c08e9afcbe468b5ca9f2332c3a273f448d08bc6f7e8ced9e1fdb1e08c5666853cfcf3a7967d4cc75f221288fb628a97eda5e6c2a38bd5b84c028749d51668852a431557e00eb09f26af9aaaad77f1f703ec49568992fc5380a2f2d9f3c474989f7a26dc2885586badf08959c4bbfb2091de27cfde5a7a27eaf8b60f86faf570bf14e8574b6c9e0c206eca36db670a7c31e7ee08e81dccf1b1de642620abdb4a79fd04f78321c31668b56c8276a45c67b5f97d20ef48d793477b93ce4", 0xd5}, {&(0x7f0000000ec0)="5fe9c14b6104cc55f44343899021d1ef45fd7824a35e9d161b28b73c6b27daaeb8cc3b0153368852fa2373b5d749ee660802a84451a753bd6a042f585ccd6760ba98e94a8d4dc477a57532bf8fd3c42259934baf757661b5bc27e495", 0x5c}, {&(0x7f0000000f40)="507bcb58d7def8d3e00561a8bf416909b80b4aba9f830f2d38451cb1f0c603cc9f396e462b2b68861ea4b0507d8f533456243a3d23c7bd855c008e077ca38112d69663ca97481f00a71c08a7a30cac446fb52b713936c6f8691f723d37e8874b6bed81026f70775fd45287f3a9b3", 0x6e}, {&(0x7f0000000fc0)="efa935ffb3ad92dd802e1275337992ff94af3a85f6b8be886acc3b0e0b4b2452eff938a1771714f3447e5289e98b65c263ddf297c5", 0x35}], 0xa, &(0x7f0000001200)=[@rights={{0x38, 0x1, 0x1, [r6, r4, r4, r7, r8, r4, r9, r10, r11, r0]}}], 0x38}}, {{&(0x7f0000001240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x8c0}}, {{&(0x7f0000000500)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000680)="010911ef26e68bc1fd81598df5237e34acda6bfd1c929a01bad983e40f5e474cfe487534c3482cbd213808181b0ada9b1ebc57fb0b4c37ba7ec3de24cc51a072d6e85e65bfff9c225678c5c31eea75ecf96a06d050a4657deaa71382c2892177c489e3d27838fe8b5f9f8bfe6b7adb0bce7e7bde6ce8f5d147a5e001c1fb047ca6e08e9967c4cf414c226a2c4d52f8297c306e806ad089130b914b0cec771481908b652acc981db0465e7b921ebadd3ee061023a92e295e3039f35ec936cdd9c5131", 0xc2}, {&(0x7f0000000780)="fd9122b7fe7b7ae3a4e011be152a0bbf40c7499ead9390a23ce8c0fc2109648346b97b8afe15ff4b9af6d9726f536f71475fe1fb0afb1f7129a49de826617dbe025eabe5ae6dda5e8e60f6de8e60fc04d05f4870bbb9ad00d0a4d3ca349bbe992bf258d081cf916684cc4791ae71ae9c79546b47feb644754374649c5bdd12add54c5cdeee3821a9e7a0b9413017de6357cd2ca5883705e3382e049c789b813f51b1bc9633a98ed0d2f12e65b5f299792351c1f1eb3bc047a3f221d8874d89c5a347b8cafe1270000babc87998452a1e6a491b85a9b8e68ccf10710f0381911d7050f75b7fd7921405b82c46", 0xec}, {&(0x7f0000000dc0)="317d4b455cce021a8b696ea57169bd97698d29f7388a7566350a8076dda282f8b13ecd542ac2d21aaaed2ea73f57e39a1c8d1ab98af16c72c2f135c0962686dbad36f5fcd0dfe999085b7c18395cae5d867db15a6eab11ab976fa1a9dae3c1eae6843c7abace39027dac0981942d0befea1719d08738868fe8c8c147e4d0d775", 0x80}, {&(0x7f0000000240)="0fb20dc5c8779f529357", 0xa}, {&(0x7f0000000e40)="3d41fec1b4c6d458448c9d55649913dad1b99400fad25f1f8ab3aaa2c3521f3dc4ee19cbaeff152d29626cdadf0876b714da526c961a18b9ed171ff077dbe9b6e2a5e073f9fa0357cb213e10de2f8359d6fc5dc67ca823dfc2a07e82b1d8fe052aba8da0944b6cd7", 0x68}, {&(0x7f00000017c0)="09db16d4d23583ed3a9f6e02991b357d7cb5299eacb83008aae4e8cc6d9467753d23ec47297f5e5e719c198b3662398626576b3beabc817f197795ef1f6ca316abd8add74d6ba5a0264bd6fe58ead772c64bfb515274cae73b5b4b710754e69a5c7a3b97413f1b60b4f9a497a418740bf3db6687ade777a7f47935481da75dbdc896be38cb2fb260b77d1bc829cbd088bd69ed355abbfc22940dc70c11636e78c502abf034b09d23faccb0e64681e929867cc616d2dd2f6479ae67ad", 0xbc}], 0x6, &(0x7f0000001a80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, r10, 0xffffffffffffffff]}}], 0xb0, 0x20000000}}], 0x5, 0x4000005) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendto$inet(r4, &(0x7f0000000000)="e65a21136a523bd8e1e2f12716f0a94db25b62f8b82a3529c6d9fd4b4c381098814448695f2a4d3f6331b05940331c7db144a1213d633357c670ffebe6f461", 0x3f, 0x4001, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) io_uring_enter(r1, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 502.407718][T10847] ? devkmsg_release+0x127/0x127 [ 502.412662][T10847] ? show_regs_print_info+0x18/0x18 [ 502.417866][T10847] ? __kasan_check_write+0x14/0x20 [ 502.422980][T10847] ? __io_queue_sqe+0x1561/0x2fa0 [ 502.428011][T10847] dump_stack+0x15/0x1d [ 502.432173][T10847] should_fail+0x3c0/0x510 [ 502.436596][T10847] __should_failslab+0x9f/0xe0 [ 502.441363][T10847] should_failslab+0x9/0x20 [ 502.445859][T10847] kmem_cache_alloc_bulk+0x30/0x3f0 [ 502.451052][T10847] io_submit_sqes+0x6bf/0x2da0 [ 502.455830][T10847] ? io_uring_add_task_file+0x290/0x290 [ 502.461462][T10847] ? security_file_permission+0xa8/0xc0 [ 502.467032][T10847] ? __kasan_check_write+0x14/0x20 [ 502.472161][T10847] ? mutex_lock+0xa6/0x110 [ 502.476562][T10847] ? io_uring_add_task_file+0x127/0x290 [ 502.482084][T10847] ? __fdget+0x1b5/0x240 [ 502.486310][T10847] __se_sys_io_uring_enter+0x322/0x12b0 [ 502.491832][T10847] ? __fget_files+0x39e/0x3d0 [ 502.496496][T10847] ? __kasan_check_write+0x14/0x20 [ 502.501583][T10847] ? fput_many+0x47/0x1a0 [ 502.505894][T10847] ? __x64_sys_io_uring_enter+0x100/0x100 [ 502.511592][T10847] ? __ia32_sys_read+0x90/0x90 [ 502.516342][T10847] ? debug_smp_processor_id+0x1c/0x20 [ 502.521689][T10847] __x64_sys_io_uring_enter+0xe5/0x100 [ 502.527162][T10847] do_syscall_64+0x31/0x70 [ 502.527608][T10963] FAULT_INJECTION: forcing a failure. [ 502.527608][T10963] name failslab, interval 1, probability 0, space 0, times 0 [ 502.531572][T10847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.531582][T10847] RIP: 0033:0x7fc57b044e99 [ 502.531605][T10847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 502.574193][T10847] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 502.582699][T10847] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 502.590654][T10847] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 502.598608][T10847] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 502.606564][T10847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.614518][T10847] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 [ 502.622651][T10963] CPU: 0 PID: 10963 Comm: syz-executor.3 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 502.632885][T10963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.642972][T10963] Call Trace: [ 502.646266][T10963] dump_stack_lvl+0x1e2/0x24b [ 502.650948][T10963] ? devkmsg_release+0x127/0x127 [ 502.655884][T10963] ? show_regs_print_info+0x18/0x18 [ 502.661087][T10963] ? __kasan_check_write+0x14/0x20 [ 502.666191][T10963] ? __io_queue_sqe+0x1561/0x2fa0 [ 502.671191][T10963] dump_stack+0x15/0x1d [ 502.675317][T10963] should_fail+0x3c0/0x510 [ 502.679707][T10963] __should_failslab+0x9f/0xe0 [ 502.684444][T10963] should_failslab+0x9/0x20 [ 502.688921][T10963] kmem_cache_alloc_bulk+0x30/0x3f0 [ 502.694096][T10963] io_submit_sqes+0x6bf/0x2da0 [ 502.698859][T10963] ? io_uring_add_task_file+0x290/0x290 [ 502.704384][T10963] ? security_file_permission+0xa8/0xc0 [ 502.709905][T10963] ? __kasan_check_write+0x14/0x20 [ 502.714988][T10963] ? mutex_lock+0xa6/0x110 [ 502.719377][T10963] ? io_uring_add_task_file+0x127/0x290 [ 502.724904][T10963] ? __fdget+0x1b5/0x240 [ 502.729117][T10963] __se_sys_io_uring_enter+0x322/0x12b0 [ 502.734635][T10963] ? __fget_files+0x39e/0x3d0 [ 502.739285][T10963] ? __kasan_check_write+0x14/0x20 [ 502.744364][T10963] ? fput_many+0x47/0x1a0 [ 502.748668][T10963] ? __x64_sys_io_uring_enter+0x100/0x100 [ 502.754367][T10963] ? __ia32_sys_read+0x90/0x90 [ 502.759194][T10963] ? debug_smp_processor_id+0x1c/0x20 [ 502.764536][T10963] __x64_sys_io_uring_enter+0xe5/0x100 [ 502.770137][T10963] do_syscall_64+0x31/0x70 [ 502.774611][T10963] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.780487][T10963] RIP: 0033:0x7ffa3bf06e99 [ 502.784877][T10963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 502.804455][T10963] RSP: 002b:00007ffa3b07d168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 10:14:03 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) clone(0x80080, &(0x7f0000000280)="13b906e5a602930d68e6ebd32593326794", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000400)="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") wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) clone(0x42004000, &(0x7f0000000040)="be5f2ea8e2fa7b7d50345c76ca13c26964d4e70008cd5dc38cbdb0ce281e9cabafe5366a52f5aa504e292909cec19ce023297597cbc41f912af741bd454dde0404515f05f902b487947b62901fa61824", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="1dec9847d228ff29bd85674d7ff7b39e0d902790c77b49f74431eeb2a40aa025bc50b9e81a02b6ebd46b700b1eb0") 10:14:03 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 4) 10:14:03 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff], 0x3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r3 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x5) tkill(r3, 0x38) (async) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) (async) wait4(r3, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) [ 502.812843][T10963] RAX: ffffffffffffffda RBX: 00007ffa3c019f60 RCX: 00007ffa3bf06e99 [ 502.820808][T10963] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 502.828769][T10963] RBP: 00007ffa3b07d1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 502.836719][T10963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.844846][T10963] R13: 00007fff1f05cd0f R14: 00007ffa3b07d300 R15: 0000000000022000 10:14:03 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 9) 10:14:03 executing program 0: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000100)={{r0}, 0x2, &(0x7f00000000c0)=[0x10000, 0xfffffffffffffffd], 0x80000001, 0x2, [0x8, 0x3f, 0x1, 0x2]}) (async) clock_gettime(0x0, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r6 = fspick(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x1) (async, rerun: 64) r7 = socket$nl_generic(0x11, 0x3, 0x10) (rerun: 64) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async, rerun: 32) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001100), 0x10) (async, rerun: 32) r9 = accept4$unix(0xffffffffffffffff, &(0x7f0000001140), &(0x7f00000011c0)=0x6e, 0x80800) (async) r10 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r10, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r11 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r11, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240), 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r0, r5, r1]}}], 0x110}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000009c0)="37eb68635edcfb0969d55dbad43de0638cf2a90b321730add9b7e6b1de543ad514e60ced694648d90f9477b09824e7fc50a9e5408bb6469d04343bd3dc2e3303c7387ea60c45b0c7f865f591d87ebf0938e05c190792c8c26d77b3c755c5835748c751ea38c1063e81c74c464d5a494ff3b82ef7cf4bd63e263d8e9b8bcf149494b84f742c13b16a060ad55b2be799772ca86ce266e6d85b01fce242a2e3e2dafa4f8e6e0312b2ce07e8059de756da50c123a0dc3e7139dcb4196c", 0xbb}, {&(0x7f0000000a80)="3e5f1a04ce21ff489ad41849b911fe38390b801d382228e8c411cb15a7ca5ffcbd0c148be35a24f72be69140bb18d308f64415ea819b65f69179ecd30619fb426889a83a15d0f3b263ccd34cd637fb978fb82e68093791c9e3abd93737a8854e6c51865b4ba76399ffcf0bc805dd88703287d5be7e2f23f345aac8e10a94786b5934136fbb1f99b7394ebdd016565a3d9f4fee1395afd7a84c91199cfb5e937c80147e60", 0xa4}, {&(0x7f0000000b40)="1b29b82de7d908f47dd6189f4e0e9f441a6ae5b5ff701f3657c8eda058118d6a9134a8d8cb90dc558c44a21046dfd6564f31d7b60ad89f68bfb03938214b0608643169234bc200afc91c332cb2290800000000000000d539c00b4135ec24f537b1eff49bfa8a59", 0x67}, {&(0x7f0000000bc0)="2bf7b36448f8bcbe39a72258ca360d66b32ce58360f09de3a7a8655c27543e1903ff2f1bdafb7c61909ce39482b30bae1754ad5b01d654a6507dca9321b77a21dce65e689c8a20db7aa36f30cb3aa2471733283b86cbce2189545417c288e322614352a3f7ebcf4895c66379a6bece9e73157790f06bccbf3e4d61492b8f541bb6e2ef9be798f1723e8571f79b9d82f9d63a5677f38bd3b2b6677756d09c74df0d07276ca17a97c803701499b75d2f53eaffab3b78e58df479792cb008441d53199785989d44b12e38dc14", 0xcb}, {&(0x7f0000000cc0)="88900bdb8eedec1b071629", 0xb}, {&(0x7f0000000d00)="b01e27c9e81a943a5299d0279ee1d61317c6322064fa7d9d6192fff2a20e8f55082f820ffef963e3f4400ef015312a961629136060e34727915ca926c4437d7e83b2d084935b99c8ea46c9f8e5a48ba7ff0b361813528e9d1eecae4b6979a1807cd98e5b703bf4899a720f305a69e944bcc5f6da3ce0b48068e425f5f4c35d802f0473aec8356c4b636f8fe0ed9efc1f77be46ef37ec27acc7ef16", 0x9b}, {&(0x7f0000000400)="817b4caeb512b35e9612f6e7fc46ac11547b456df7ddc3f1f7c08e9afcbe468b5ca9f2332c3a273f448d08bc6f7e8ced9e1fdb1e08c5666853cfcf3a7967d4cc75f221288fb628a97eda5e6c2a38bd5b84c028749d51668852a431557e00eb09f26af9aaaad77f1f703ec49568992fc5380a2f2d9f3c474989f7a26dc2885586badf08959c4bbfb2091de27cfde5a7a27eaf8b60f86faf570bf14e8574b6c9e0c206eca36db670a7c31e7ee08e81dccf1b1de642620abdb4a79fd04f78321c31668b56c8276a45c67b5f97d20ef48d793477b93ce4", 0xd5}, {&(0x7f0000000ec0)="5fe9c14b6104cc55f44343899021d1ef45fd7824a35e9d161b28b73c6b27daaeb8cc3b0153368852fa2373b5d749ee660802a84451a753bd6a042f585ccd6760ba98e94a8d4dc477a57532bf8fd3c42259934baf757661b5bc27e495", 0x5c}, {&(0x7f0000000f40)="507bcb58d7def8d3e00561a8bf416909b80b4aba9f830f2d38451cb1f0c603cc9f396e462b2b68861ea4b0507d8f533456243a3d23c7bd855c008e077ca38112d69663ca97481f00a71c08a7a30cac446fb52b713936c6f8691f723d37e8874b6bed81026f70775fd45287f3a9b3", 0x6e}, {&(0x7f0000000fc0)="efa935ffb3ad92dd802e1275337992ff94af3a85f6b8be886acc3b0e0b4b2452eff938a1771714f3447e5289e98b65c263ddf297c5", 0x35}], 0xa, &(0x7f0000001200)=[@rights={{0x38, 0x1, 0x1, [r6, r4, r4, r7, r8, r4, r9, r10, r11, r0]}}], 0x38}}, {{&(0x7f0000001240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x8c0}}, {{&(0x7f0000000500)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000680)="010911ef26e68bc1fd81598df5237e34acda6bfd1c929a01bad983e40f5e474cfe487534c3482cbd213808181b0ada9b1ebc57fb0b4c37ba7ec3de24cc51a072d6e85e65bfff9c225678c5c31eea75ecf96a06d050a4657deaa71382c2892177c489e3d27838fe8b5f9f8bfe6b7adb0bce7e7bde6ce8f5d147a5e001c1fb047ca6e08e9967c4cf414c226a2c4d52f8297c306e806ad089130b914b0cec771481908b652acc981db0465e7b921ebadd3ee061023a92e295e3039f35ec936cdd9c5131", 0xc2}, {&(0x7f0000000780)="fd9122b7fe7b7ae3a4e011be152a0bbf40c7499ead9390a23ce8c0fc2109648346b97b8afe15ff4b9af6d9726f536f71475fe1fb0afb1f7129a49de826617dbe025eabe5ae6dda5e8e60f6de8e60fc04d05f4870bbb9ad00d0a4d3ca349bbe992bf258d081cf916684cc4791ae71ae9c79546b47feb644754374649c5bdd12add54c5cdeee3821a9e7a0b9413017de6357cd2ca5883705e3382e049c789b813f51b1bc9633a98ed0d2f12e65b5f299792351c1f1eb3bc047a3f221d8874d89c5a347b8cafe1270000babc87998452a1e6a491b85a9b8e68ccf10710f0381911d7050f75b7fd7921405b82c46", 0xec}, {&(0x7f0000000dc0)="317d4b455cce021a8b696ea57169bd97698d29f7388a7566350a8076dda282f8b13ecd542ac2d21aaaed2ea73f57e39a1c8d1ab98af16c72c2f135c0962686dbad36f5fcd0dfe999085b7c18395cae5d867db15a6eab11ab976fa1a9dae3c1eae6843c7abace39027dac0981942d0befea1719d08738868fe8c8c147e4d0d775", 0x80}, {&(0x7f0000000240)="0fb20dc5c8779f529357", 0xa}, {&(0x7f0000000e40)="3d41fec1b4c6d458448c9d55649913dad1b99400fad25f1f8ab3aaa2c3521f3dc4ee19cbaeff152d29626cdadf0876b714da526c961a18b9ed171ff077dbe9b6e2a5e073f9fa0357cb213e10de2f8359d6fc5dc67ca823dfc2a07e82b1d8fe052aba8da0944b6cd7", 0x68}, {&(0x7f00000017c0)="09db16d4d23583ed3a9f6e02991b357d7cb5299eacb83008aae4e8cc6d9467753d23ec47297f5e5e719c198b3662398626576b3beabc817f197795ef1f6ca316abd8add74d6ba5a0264bd6fe58ead772c64bfb515274cae73b5b4b710754e69a5c7a3b97413f1b60b4f9a497a418740bf3db6687ade777a7f47935481da75dbdc896be38cb2fb260b77d1bc829cbd088bd69ed355abbfc22940dc70c11636e78c502abf034b09d23faccb0e64681e929867cc616d2dd2f6479ae67ad", 0xbc}], 0x6, &(0x7f0000001a80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, r10, 0xffffffffffffffff]}}], 0xb0, 0x20000000}}], 0x5, 0x4000005) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) (async) sendto$inet(r4, &(0x7f0000000000)="e65a21136a523bd8e1e2f12716f0a94db25b62f8b82a3529c6d9fd4b4c381098814448695f2a4d3f6331b05940331c7db144a1213d633357c670ffebe6f461", 0x3f, 0x4001, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) (async) io_uring_enter(r1, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 64) clone(0x80080, &(0x7f0000000280)="13b906e5a602930d68e6ebd32593326794", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000400)="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") (async, rerun: 64) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) clone(0x42004000, &(0x7f0000000040)="be5f2ea8e2fa7b7d50345c76ca13c26964d4e70008cd5dc38cbdb0ce281e9cabafe5366a52f5aa504e292909cec19ce023297597cbc41f912af741bd454dde0404515f05f902b487947b62901fa61824", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="1dec9847d228ff29bd85674d7ff7b39e0d902790c77b49f74431eeb2a40aa025bc50b9e81a02b6ebd46b700b1eb0") 10:14:03 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 502.891302][T11240] FAULT_INJECTION: forcing a failure. [ 502.891302][T11240] name failslab, interval 1, probability 0, space 0, times 0 [ 502.914014][T11240] CPU: 0 PID: 11240 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 502.924278][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.932254][T11262] FAULT_INJECTION: forcing a failure. [ 502.932254][T11262] name failslab, interval 1, probability 0, space 0, times 0 [ 502.934324][T11240] Call Trace: [ 502.934342][T11240] dump_stack_lvl+0x1e2/0x24b [ 502.934354][T11240] ? devkmsg_release+0x127/0x127 [ 502.934364][T11240] ? show_regs_print_info+0x18/0x18 [ 502.934386][T11240] ? __kasan_check_write+0x14/0x20 [ 502.970260][T11240] ? __io_queue_sqe+0x1561/0x2fa0 [ 502.975286][T11240] dump_stack+0x15/0x1d [ 502.979440][T11240] should_fail+0x3c0/0x510 [ 502.983847][T11240] __should_failslab+0x9f/0xe0 [ 502.988597][T11240] should_failslab+0x9/0x20 [ 502.993084][T11240] kmem_cache_alloc_bulk+0x30/0x3f0 [ 502.998270][T11240] io_submit_sqes+0x6bf/0x2da0 [ 503.003021][T11240] ? io_uring_add_task_file+0x290/0x290 [ 503.008550][T11240] ? security_file_permission+0xa8/0xc0 [ 503.014086][T11240] ? __kasan_check_write+0x14/0x20 [ 503.019184][T11240] ? mutex_lock+0xa6/0x110 [ 503.023590][T11240] ? io_uring_add_task_file+0x127/0x290 [ 503.029120][T11240] ? __fdget+0x1b5/0x240 [ 503.033345][T11240] __se_sys_io_uring_enter+0x322/0x12b0 10:14:03 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:03 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 503.038871][T11240] ? __fget_files+0x39e/0x3d0 [ 503.043531][T11240] ? __kasan_check_write+0x14/0x20 [ 503.048646][T11240] ? fput_many+0x47/0x1a0 [ 503.052966][T11240] ? __x64_sys_io_uring_enter+0x100/0x100 [ 503.058671][T11240] ? __ia32_sys_read+0x90/0x90 [ 503.063420][T11240] ? debug_smp_processor_id+0x1c/0x20 [ 503.068773][T11240] __x64_sys_io_uring_enter+0xe5/0x100 [ 503.074224][T11240] do_syscall_64+0x31/0x70 [ 503.078627][T11240] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 503.084507][T11240] RIP: 0033:0x7fc57b044e99 10:14:03 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 503.088957][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.108564][T11240] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 503.116977][T11240] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 503.125037][T11240] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 503.133000][T11240] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 503.140962][T11240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.148928][T11240] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 [ 503.156912][T11262] CPU: 1 PID: 11262 Comm: syz-executor.3 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 503.167152][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.177296][T11262] Call Trace: [ 503.180594][T11262] dump_stack_lvl+0x1e2/0x24b [ 503.185276][T11262] ? devkmsg_release+0x127/0x127 10:14:03 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff], 0x3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x5) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) wait4(r3, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) fallocate(r0, 0x1, 0x0, 0x7fffffff) (async) ioctl$FS_IOC_RESVSP(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r1, r2, 0xffffffffffffffff], 0x3) (async) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r3, 0x0, 0x5) (async) tkill(r3, 0x38) (async) ptrace$cont(0x18, r3, 0x0, 0x0) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) (async) wait4(r3, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) 10:14:03 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 5) [ 503.190222][T11262] ? show_regs_print_info+0x18/0x18 [ 503.196030][T11262] ? __io_queue_sqe+0x1561/0x2fa0 [ 503.201073][T11262] dump_stack+0x15/0x1d [ 503.205232][T11262] should_fail+0x3c0/0x510 [ 503.209649][T11262] __should_failslab+0x9f/0xe0 [ 503.214415][T11262] should_failslab+0x9/0x20 [ 503.218912][T11262] kmem_cache_alloc_bulk+0x30/0x3f0 [ 503.224109][T11262] io_submit_sqes+0x6bf/0x2da0 [ 503.228881][T11262] ? io_uring_add_task_file+0x290/0x290 [ 503.229129][T11572] FAULT_INJECTION: forcing a failure. [ 503.229129][T11572] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 503.234424][T11262] ? security_file_permission+0xa8/0xc0 [ 503.234439][T11262] ? __kasan_check_write+0x14/0x20 [ 503.234450][T11262] ? mutex_lock+0xa6/0x110 [ 503.234462][T11262] ? io_uring_add_task_file+0x127/0x290 [ 503.234481][T11262] ? __fdget+0x1b5/0x240 [ 503.272428][T11262] __se_sys_io_uring_enter+0x322/0x12b0 [ 503.277958][T11262] ? __fget_files+0x39e/0x3d0 [ 503.282623][T11262] ? __kasan_check_write+0x14/0x20 [ 503.287722][T11262] ? fput_many+0x47/0x1a0 [ 503.292047][T11262] ? __x64_sys_io_uring_enter+0x100/0x100 [ 503.297759][T11262] ? __ia32_sys_read+0x90/0x90 [ 503.302505][T11262] ? debug_smp_processor_id+0x1c/0x20 [ 503.307858][T11262] __x64_sys_io_uring_enter+0xe5/0x100 [ 503.313297][T11262] do_syscall_64+0x31/0x70 [ 503.317697][T11262] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 503.323570][T11262] RIP: 0033:0x7ffa3bf06e99 [ 503.327975][T11262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.347563][T11262] RSP: 002b:00007ffa3b07d168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 503.356048][T11262] RAX: ffffffffffffffda RBX: 00007ffa3c019f60 RCX: 00007ffa3bf06e99 [ 503.364025][T11262] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 503.371985][T11262] RBP: 00007ffa3b07d1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 503.379936][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.387890][T11262] R13: 00007fff1f05cd0f R14: 00007ffa3b07d300 R15: 0000000000022000 [ 503.395855][T11572] CPU: 0 PID: 11572 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 503.406090][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.416128][T11572] Call Trace: [ 503.419401][T11572] dump_stack_lvl+0x1e2/0x24b [ 503.424057][T11572] ? show_regs_print_info+0x18/0x18 [ 503.429236][T11572] dump_stack+0x15/0x1d [ 503.433371][T11572] should_fail+0x3c0/0x510 [ 503.437784][T11572] should_fail_alloc_page+0x4f/0x60 [ 503.442960][T11572] __alloc_pages_nodemask+0x1b9/0x820 [ 503.448310][T11572] ? io_queue_sqe+0x1180/0x1180 [ 503.453143][T11572] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 503.458714][T11572] ? __kasan_check_write+0x14/0x20 [ 503.463814][T11572] ? __io_queue_sqe+0x1561/0x2fa0 [ 503.468815][T11572] allocate_slab+0x6b/0x350 [ 503.473297][T11572] ___slab_alloc+0x143/0x2f0 [ 503.477976][T11572] ? io_submit_sqes+0x6bf/0x2da0 [ 503.482889][T11572] kmem_cache_alloc_bulk+0x167/0x3f0 [ 503.488167][T11572] io_submit_sqes+0x6bf/0x2da0 [ 503.492912][T11572] ? io_uring_add_task_file+0x290/0x290 [ 503.498434][T11572] ? security_file_permission+0xa8/0xc0 [ 503.503958][T11572] ? __kasan_check_write+0x14/0x20 [ 503.509044][T11572] ? mutex_lock+0xa6/0x110 [ 503.513438][T11572] ? io_uring_add_task_file+0x127/0x290 [ 503.518958][T11572] ? __fdget+0x1b5/0x240 [ 503.523176][T11572] __se_sys_io_uring_enter+0x322/0x12b0 [ 503.528695][T11572] ? __fget_files+0x39e/0x3d0 [ 503.533349][T11572] ? __kasan_check_write+0x14/0x20 [ 503.538435][T11572] ? fput_many+0x47/0x1a0 [ 503.542831][T11572] ? __x64_sys_io_uring_enter+0x100/0x100 [ 503.548531][T11572] ? __ia32_sys_read+0x90/0x90 [ 503.553282][T11572] ? debug_smp_processor_id+0x1c/0x20 [ 503.558633][T11572] __x64_sys_io_uring_enter+0xe5/0x100 [ 503.564073][T11572] do_syscall_64+0x31/0x70 [ 503.568467][T11572] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 503.574596][T11572] RIP: 0033:0x7fc57b044e99 [ 503.578989][T11572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.598747][T11572] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 503.607137][T11572] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 503.615086][T11572] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 503.623034][T11572] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 503.630986][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 10:14:04 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) clone(0x80080, &(0x7f0000000280)="13b906e5a602930d68e6ebd32593326794", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000400)="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") wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) clone(0x42004000, &(0x7f0000000040)="be5f2ea8e2fa7b7d50345c76ca13c26964d4e70008cd5dc38cbdb0ce281e9cabafe5366a52f5aa504e292909cec19ce023297597cbc41f912af741bd454dde0404515f05f902b487947b62901fa61824", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="1dec9847d228ff29bd85674d7ff7b39e0d902790c77b49f74431eeb2a40aa025bc50b9e81a02b6ebd46b700b1eb0") 10:14:04 executing program 0: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000100)={{r0}, 0x2, &(0x7f00000000c0)=[0x10000, 0xfffffffffffffffd], 0x80000001, 0x2, [0x8, 0x3f, 0x1, 0x2]}) (async) clock_gettime(0x0, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r6 = fspick(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x1) (async, rerun: 32) r7 = socket$nl_generic(0x11, 0x3, 0x10) (rerun: 32) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001100), 0x10) (async) r9 = accept4$unix(0xffffffffffffffff, &(0x7f0000001140), &(0x7f00000011c0)=0x6e, 0x80800) (async) r10 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r10, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r11 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r11, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240), 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r0, r5, r1]}}], 0x110}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000009c0)="37eb68635edcfb0969d55dbad43de0638cf2a90b321730add9b7e6b1de543ad514e60ced694648d90f9477b09824e7fc50a9e5408bb6469d04343bd3dc2e3303c7387ea60c45b0c7f865f591d87ebf0938e05c190792c8c26d77b3c755c5835748c751ea38c1063e81c74c464d5a494ff3b82ef7cf4bd63e263d8e9b8bcf149494b84f742c13b16a060ad55b2be799772ca86ce266e6d85b01fce242a2e3e2dafa4f8e6e0312b2ce07e8059de756da50c123a0dc3e7139dcb4196c", 0xbb}, {&(0x7f0000000a80)="3e5f1a04ce21ff489ad41849b911fe38390b801d382228e8c411cb15a7ca5ffcbd0c148be35a24f72be69140bb18d308f64415ea819b65f69179ecd30619fb426889a83a15d0f3b263ccd34cd637fb978fb82e68093791c9e3abd93737a8854e6c51865b4ba76399ffcf0bc805dd88703287d5be7e2f23f345aac8e10a94786b5934136fbb1f99b7394ebdd016565a3d9f4fee1395afd7a84c91199cfb5e937c80147e60", 0xa4}, {&(0x7f0000000b40)="1b29b82de7d908f47dd6189f4e0e9f441a6ae5b5ff701f3657c8eda058118d6a9134a8d8cb90dc558c44a21046dfd6564f31d7b60ad89f68bfb03938214b0608643169234bc200afc91c332cb2290800000000000000d539c00b4135ec24f537b1eff49bfa8a59", 0x67}, {&(0x7f0000000bc0)="2bf7b36448f8bcbe39a72258ca360d66b32ce58360f09de3a7a8655c27543e1903ff2f1bdafb7c61909ce39482b30bae1754ad5b01d654a6507dca9321b77a21dce65e689c8a20db7aa36f30cb3aa2471733283b86cbce2189545417c288e322614352a3f7ebcf4895c66379a6bece9e73157790f06bccbf3e4d61492b8f541bb6e2ef9be798f1723e8571f79b9d82f9d63a5677f38bd3b2b6677756d09c74df0d07276ca17a97c803701499b75d2f53eaffab3b78e58df479792cb008441d53199785989d44b12e38dc14", 0xcb}, {&(0x7f0000000cc0)="88900bdb8eedec1b071629", 0xb}, {&(0x7f0000000d00)="b01e27c9e81a943a5299d0279ee1d61317c6322064fa7d9d6192fff2a20e8f55082f820ffef963e3f4400ef015312a961629136060e34727915ca926c4437d7e83b2d084935b99c8ea46c9f8e5a48ba7ff0b361813528e9d1eecae4b6979a1807cd98e5b703bf4899a720f305a69e944bcc5f6da3ce0b48068e425f5f4c35d802f0473aec8356c4b636f8fe0ed9efc1f77be46ef37ec27acc7ef16", 0x9b}, {&(0x7f0000000400)="817b4caeb512b35e9612f6e7fc46ac11547b456df7ddc3f1f7c08e9afcbe468b5ca9f2332c3a273f448d08bc6f7e8ced9e1fdb1e08c5666853cfcf3a7967d4cc75f221288fb628a97eda5e6c2a38bd5b84c028749d51668852a431557e00eb09f26af9aaaad77f1f703ec49568992fc5380a2f2d9f3c474989f7a26dc2885586badf08959c4bbfb2091de27cfde5a7a27eaf8b60f86faf570bf14e8574b6c9e0c206eca36db670a7c31e7ee08e81dccf1b1de642620abdb4a79fd04f78321c31668b56c8276a45c67b5f97d20ef48d793477b93ce4", 0xd5}, {&(0x7f0000000ec0)="5fe9c14b6104cc55f44343899021d1ef45fd7824a35e9d161b28b73c6b27daaeb8cc3b0153368852fa2373b5d749ee660802a84451a753bd6a042f585ccd6760ba98e94a8d4dc477a57532bf8fd3c42259934baf757661b5bc27e495", 0x5c}, {&(0x7f0000000f40)="507bcb58d7def8d3e00561a8bf416909b80b4aba9f830f2d38451cb1f0c603cc9f396e462b2b68861ea4b0507d8f533456243a3d23c7bd855c008e077ca38112d69663ca97481f00a71c08a7a30cac446fb52b713936c6f8691f723d37e8874b6bed81026f70775fd45287f3a9b3", 0x6e}, {&(0x7f0000000fc0)="efa935ffb3ad92dd802e1275337992ff94af3a85f6b8be886acc3b0e0b4b2452eff938a1771714f3447e5289e98b65c263ddf297c5", 0x35}], 0xa, &(0x7f0000001200)=[@rights={{0x38, 0x1, 0x1, [r6, r4, r4, r7, r8, r4, r9, r10, r11, r0]}}], 0x38}}, {{&(0x7f0000001240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x8c0}}, {{&(0x7f0000000500)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000680)="010911ef26e68bc1fd81598df5237e34acda6bfd1c929a01bad983e40f5e474cfe487534c3482cbd213808181b0ada9b1ebc57fb0b4c37ba7ec3de24cc51a072d6e85e65bfff9c225678c5c31eea75ecf96a06d050a4657deaa71382c2892177c489e3d27838fe8b5f9f8bfe6b7adb0bce7e7bde6ce8f5d147a5e001c1fb047ca6e08e9967c4cf414c226a2c4d52f8297c306e806ad089130b914b0cec771481908b652acc981db0465e7b921ebadd3ee061023a92e295e3039f35ec936cdd9c5131", 0xc2}, {&(0x7f0000000780)="fd9122b7fe7b7ae3a4e011be152a0bbf40c7499ead9390a23ce8c0fc2109648346b97b8afe15ff4b9af6d9726f536f71475fe1fb0afb1f7129a49de826617dbe025eabe5ae6dda5e8e60f6de8e60fc04d05f4870bbb9ad00d0a4d3ca349bbe992bf258d081cf916684cc4791ae71ae9c79546b47feb644754374649c5bdd12add54c5cdeee3821a9e7a0b9413017de6357cd2ca5883705e3382e049c789b813f51b1bc9633a98ed0d2f12e65b5f299792351c1f1eb3bc047a3f221d8874d89c5a347b8cafe1270000babc87998452a1e6a491b85a9b8e68ccf10710f0381911d7050f75b7fd7921405b82c46", 0xec}, {&(0x7f0000000dc0)="317d4b455cce021a8b696ea57169bd97698d29f7388a7566350a8076dda282f8b13ecd542ac2d21aaaed2ea73f57e39a1c8d1ab98af16c72c2f135c0962686dbad36f5fcd0dfe999085b7c18395cae5d867db15a6eab11ab976fa1a9dae3c1eae6843c7abace39027dac0981942d0befea1719d08738868fe8c8c147e4d0d775", 0x80}, {&(0x7f0000000240)="0fb20dc5c8779f529357", 0xa}, {&(0x7f0000000e40)="3d41fec1b4c6d458448c9d55649913dad1b99400fad25f1f8ab3aaa2c3521f3dc4ee19cbaeff152d29626cdadf0876b714da526c961a18b9ed171ff077dbe9b6e2a5e073f9fa0357cb213e10de2f8359d6fc5dc67ca823dfc2a07e82b1d8fe052aba8da0944b6cd7", 0x68}, {&(0x7f00000017c0)="09db16d4d23583ed3a9f6e02991b357d7cb5299eacb83008aae4e8cc6d9467753d23ec47297f5e5e719c198b3662398626576b3beabc817f197795ef1f6ca316abd8add74d6ba5a0264bd6fe58ead772c64bfb515274cae73b5b4b710754e69a5c7a3b97413f1b60b4f9a497a418740bf3db6687ade777a7f47935481da75dbdc896be38cb2fb260b77d1bc829cbd088bd69ed355abbfc22940dc70c11636e78c502abf034b09d23faccb0e64681e929867cc616d2dd2f6479ae67ad", 0xbc}], 0x6, &(0x7f0000001a80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, r10, 0xffffffffffffffff]}}], 0xb0, 0x20000000}}], 0x5, 0x4000005) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendto$inet(r4, &(0x7f0000000000)="e65a21136a523bd8e1e2f12716f0a94db25b62f8b82a3529c6d9fd4b4c381098814448695f2a4d3f6331b05940331c7db144a1213d633357c670ffebe6f461", 0x3f, 0x4001, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) (async) io_uring_enter(r1, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:04 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 10) 10:14:04 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 6) [ 503.638960][T11572] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 10:14:04 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 503.689013][T11682] FAULT_INJECTION: forcing a failure. [ 503.689013][T11682] name failslab, interval 1, probability 0, space 0, times 0 [ 503.702625][T11682] CPU: 0 PID: 11682 Comm: syz-executor.3 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 503.712873][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.715831][T11778] FAULT_INJECTION: forcing a failure. [ 503.715831][T11778] name failslab, interval 1, probability 0, space 0, times 0 [ 503.723030][T11682] Call Trace: 10:14:04 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) clone(0x240080, &(0x7f00000001c0)="b2cd2503e7e085b108e15b3c53561ddfa70a7804fe293686f9bb99fe45f5a60d20219d0672161e890c968d44814f6e1c458ac7f78db89291efbe5435ee524f15a9f9b45c84f8177976712fb7c27ac824f8b3fd50eac9eb8abd1eb3cf99704b2eec91c16d6f3fdf00c01e97c555dd2b9c5fe932b69fd864065304d30be35e4e14423e416a298466b7105a3f54", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000002440)="63702186426f90660e0b54acb8f224dc27516bcdb4270de9d3dc7cf4977417a3cb1864483371dd7295299612f2f0acd66299aca7a49c83ed7bbcda048d32bdbcf39abe464a8462bb1b5f6a03add483123966401df6187ab3ad815b6ac6e4bafa9b464c19ee933071355bda30813076ae3c7687c98f1ef575c770cbeefe08186687c911a6ab940f184c2c297ad92e78fc87e81c564144793758e93af1882fe6d598a9d0b360cfdc99c86c327636620ebbecba46ae9829e67d9ba8bf4d6b8c2fb76ba7d53e2ceabae7839f4025b19480c2ba4088ec6ff4ea0cc8b8a4cfe8f35c270ea3896561860254a8b3b0109db2") vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000002540)) ptrace$cont(0x18, r0, 0x1, 0x122590ce) exit_group(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) ptrace$setregs(0xd, r1, 0x5, &(0x7f0000000380)="d021bfdcf5e5839cf03f03a8c59dbaf3ea9c8c068c6ed330db8a0d8bf244c9d6009d2c9a3fa841ba67d9a7fbfd19cdde3a1c7b64b7acbaa62f69a60edd69") read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) rt_sigqueueinfo(r2, 0x24, &(0x7f0000000040)={0x37, 0x6, 0x5}) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000300)={0x2, 0x0, 0x2e6}) [ 503.738891][T11682] dump_stack_lvl+0x1e2/0x24b [ 503.743571][T11682] ? devkmsg_release+0x127/0x127 [ 503.748535][T11682] ? show_regs_print_info+0x18/0x18 [ 503.753733][T11682] ? __kasan_check_write+0x14/0x20 [ 503.758830][T11682] ? __io_queue_sqe+0x1561/0x2fa0 [ 503.763847][T11682] dump_stack+0x15/0x1d [ 503.767986][T11682] should_fail+0x3c0/0x510 [ 503.772387][T11682] __should_failslab+0x9f/0xe0 [ 503.777138][T11682] should_failslab+0x9/0x20 [ 503.781625][T11682] kmem_cache_alloc_bulk+0x30/0x3f0 [ 503.786808][T11682] io_submit_sqes+0x6bf/0x2da0 [ 503.791561][T11682] ? io_uring_add_task_file+0x290/0x290 [ 503.797104][T11682] ? security_file_permission+0xa8/0xc0 [ 503.802648][T11682] ? __kasan_check_write+0x14/0x20 [ 503.807742][T11682] ? mutex_lock+0xa6/0x110 [ 503.812148][T11682] ? io_uring_add_task_file+0x127/0x290 [ 503.817678][T11682] ? __fdget+0x1b5/0x240 [ 503.821904][T11682] __se_sys_io_uring_enter+0x322/0x12b0 [ 503.827434][T11682] ? __fget_files+0x39e/0x3d0 [ 503.832098][T11682] ? __kasan_check_write+0x14/0x20 [ 503.837194][T11682] ? fput_many+0x47/0x1a0 [ 503.841517][T11682] ? __x64_sys_io_uring_enter+0x100/0x100 [ 503.847221][T11682] ? __ia32_sys_read+0x90/0x90 [ 503.852162][T11682] ? debug_smp_processor_id+0x1c/0x20 [ 503.857528][T11682] __x64_sys_io_uring_enter+0xe5/0x100 [ 503.862979][T11682] do_syscall_64+0x31/0x70 [ 503.867382][T11682] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 503.873253][T11682] RIP: 0033:0x7ffa3bf06e99 [ 503.877652][T11682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.897245][T11682] RSP: 002b:00007ffa3b07d168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 503.905651][T11682] RAX: ffffffffffffffda RBX: 00007ffa3c019f60 RCX: 00007ffa3bf06e99 [ 503.913609][T11682] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 503.921563][T11682] RBP: 00007ffa3b07d1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 503.929515][T11682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:14:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x10c00, &(0x7f00000001c0)="bde35148d4e6224d736570843db2c5b325218709a528c0b29d034660bc2306c1ec2b727cc619c1ccb9e40955e13b2e422c56aed9b76f03743ac31540f3a0eb7fe09590c102d28ce0faa25234a5548fd1ed08d1ccacb9db3bac448c8ed5d054ebce81e20958b577af759ff7ba27e8bad6270926fd8dd18cc468a59554c67daf455131cfd99ec9c19ce39716e56644a2d4f09f720f6ba517e2d7ac48285db7f757b0846f659b44ee8ace7f6b3b1644c767f08580b80ff625d1722c949f86db5dd0b62644653221ae44f00a4759af1f92ed7c72b8", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)="87e22caecc70e818b877bce83408c0ffab9c04ce86a81c43872cc6f674a2f850f9a1997cc58be0fff8c7e187cbc1e8e0e40003a44b1a76fc96fd8cd642e6ac744e2ab17f665cfa2f9afc7152d4dd155b22efca8abdedb8fd62ecb2cc281ac8d3a5faac8f43b71d4d36a89c10e9fee7784113902a67e7dc37d2165a697fb8262fd0a5d312d6810b3c0e233a49") wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:14:04 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 11) [ 503.937476][T11682] R13: 00007fff1f05cd0f R14: 00007ffa3b07d300 R15: 0000000000022000 [ 503.950181][T11778] CPU: 1 PID: 11778 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 503.960446][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.970508][T11778] Call Trace: [ 503.973810][T11778] dump_stack_lvl+0x1e2/0x24b [ 503.978496][T11778] ? devkmsg_release+0x127/0x127 [ 503.983428][T11778] ? show_regs_print_info+0x18/0x18 10:14:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async, rerun: 64) r0 = gettid() (rerun: 64) clone(0x10c00, &(0x7f00000001c0)="bde35148d4e6224d736570843db2c5b325218709a528c0b29d034660bc2306c1ec2b727cc619c1ccb9e40955e13b2e422c56aed9b76f03743ac31540f3a0eb7fe09590c102d28ce0faa25234a5548fd1ed08d1ccacb9db3bac448c8ed5d054ebce81e20958b577af759ff7ba27e8bad6270926fd8dd18cc468a59554c67daf455131cfd99ec9c19ce39716e56644a2d4f09f720f6ba517e2d7ac48285db7f757b0846f659b44ee8ace7f6b3b1644c767f08580b80ff625d1722c949f86db5dd0b62644653221ae44f00a4759af1f92ed7c72b8", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)="87e22caecc70e818b877bce83408c0ffab9c04ce86a81c43872cc6f674a2f850f9a1997cc58be0fff8c7e187cbc1e8e0e40003a44b1a76fc96fd8cd642e6ac744e2ab17f665cfa2f9afc7152d4dd155b22efca8abdedb8fd62ecb2cc281ac8d3a5faac8f43b71d4d36a89c10e9fee7784113902a67e7dc37d2165a697fb8262fd0a5d312d6810b3c0e233a49") (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) [ 503.988619][T11778] ? __kasan_check_write+0x14/0x20 [ 503.993530][T12004] FAULT_INJECTION: forcing a failure. [ 503.993530][T12004] name failslab, interval 1, probability 0, space 0, times 0 [ 503.993728][T11778] ? __io_queue_sqe+0x1561/0x2fa0 [ 503.993749][T11778] dump_stack+0x15/0x1d [ 504.015463][T11778] should_fail+0x3c0/0x510 [ 504.019877][T11778] __should_failslab+0x9f/0xe0 [ 504.024651][T11778] should_failslab+0x9/0x20 [ 504.029148][T11778] kmem_cache_alloc_bulk+0x30/0x3f0 [ 504.034342][T11778] io_submit_sqes+0x6bf/0x2da0 [ 504.039099][T11778] ? io_uring_add_task_file+0x290/0x290 [ 504.044633][T11778] ? security_file_permission+0xa8/0xc0 [ 504.050165][T11778] ? __kasan_check_write+0x14/0x20 [ 504.055259][T11778] ? mutex_lock+0xa6/0x110 [ 504.059756][T11778] ? io_uring_add_task_file+0x127/0x290 [ 504.065288][T11778] ? __fdget+0x1b5/0x240 [ 504.069515][T11778] __se_sys_io_uring_enter+0x322/0x12b0 [ 504.075133][T11778] ? __fget_files+0x39e/0x3d0 [ 504.079798][T11778] ? __kasan_check_write+0x14/0x20 [ 504.084888][T11778] ? fput_many+0x47/0x1a0 [ 504.089212][T11778] ? __x64_sys_io_uring_enter+0x100/0x100 [ 504.094924][T11778] ? __ia32_sys_read+0x90/0x90 [ 504.099674][T11778] ? debug_smp_processor_id+0x1c/0x20 [ 504.105032][T11778] __x64_sys_io_uring_enter+0xe5/0x100 [ 504.110473][T11778] do_syscall_64+0x31/0x70 [ 504.114885][T11778] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 504.120762][T11778] RIP: 0033:0x7fc57b044e99 [ 504.125160][T11778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 504.144746][T11778] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 504.153142][T11778] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 504.161094][T11778] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 504.169048][T11778] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 504.177011][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.184992][T11778] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 [ 504.193051][T12004] CPU: 0 PID: 12004 Comm: syz-executor.3 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 504.203289][T12004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.213514][T12004] Call Trace: [ 504.216795][T12004] dump_stack_lvl+0x1e2/0x24b [ 504.221462][T12004] ? devkmsg_release+0x127/0x127 [ 504.226381][T12004] ? show_regs_print_info+0x18/0x18 [ 504.231563][T12004] ? __kasan_check_write+0x14/0x20 [ 504.236739][T12004] ? __io_queue_sqe+0x1561/0x2fa0 [ 504.241757][T12004] dump_stack+0x15/0x1d [ 504.245891][T12004] should_fail+0x3c0/0x510 [ 504.250286][T12004] __should_failslab+0x9f/0xe0 [ 504.255039][T12004] should_failslab+0x9/0x20 [ 504.259523][T12004] kmem_cache_alloc_bulk+0x30/0x3f0 [ 504.264706][T12004] io_submit_sqes+0x6bf/0x2da0 [ 504.269450][T12004] ? io_uring_add_task_file+0x290/0x290 [ 504.274979][T12004] ? security_file_permission+0xa8/0xc0 [ 504.280523][T12004] ? __kasan_check_write+0x14/0x20 [ 504.285620][T12004] ? mutex_lock+0xa6/0x110 [ 504.290016][T12004] ? io_uring_add_task_file+0x127/0x290 [ 504.295536][T12004] ? __fdget+0x1b5/0x240 [ 504.299759][T12004] __se_sys_io_uring_enter+0x322/0x12b0 [ 504.305294][T12004] ? __fget_files+0x39e/0x3d0 [ 504.309969][T12004] ? __kasan_check_write+0x14/0x20 [ 504.315156][T12004] ? fput_many+0x47/0x1a0 [ 504.319473][T12004] ? __x64_sys_io_uring_enter+0x100/0x100 [ 504.325172][T12004] ? __ia32_sys_read+0x90/0x90 [ 504.329928][T12004] ? debug_smp_processor_id+0x1c/0x20 [ 504.335280][T12004] __x64_sys_io_uring_enter+0xe5/0x100 [ 504.340717][T12004] do_syscall_64+0x31/0x70 [ 504.345113][T12004] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 504.350982][T12004] RIP: 0033:0x7ffa3bf06e99 [ 504.355375][T12004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 504.374977][T12004] RSP: 002b:00007ffa3b07d168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 504.383392][T12004] RAX: ffffffffffffffda RBX: 00007ffa3c019f60 RCX: 00007ffa3bf06e99 10:14:04 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:04 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f0000000380)={0x0, 0xe5e0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0xfffffffffffffffc, 0x0}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r6, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x400, 0x1000}, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:04 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async, rerun: 32) clone(0x240080, &(0x7f00000001c0)="b2cd2503e7e085b108e15b3c53561ddfa70a7804fe293686f9bb99fe45f5a60d20219d0672161e890c968d44814f6e1c458ac7f78db89291efbe5435ee524f15a9f9b45c84f8177976712fb7c27ac824f8b3fd50eac9eb8abd1eb3cf99704b2eec91c16d6f3fdf00c01e97c555dd2b9c5fe932b69fd864065304d30be35e4e14423e416a298466b7105a3f54", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000002440)="63702186426f90660e0b54acb8f224dc27516bcdb4270de9d3dc7cf4977417a3cb1864483371dd7295299612f2f0acd66299aca7a49c83ed7bbcda048d32bdbcf39abe464a8462bb1b5f6a03add483123966401df6187ab3ad815b6ac6e4bafa9b464c19ee933071355bda30813076ae3c7687c98f1ef575c770cbeefe08186687c911a6ab940f184c2c297ad92e78fc87e81c564144793758e93af1882fe6d598a9d0b360cfdc99c86c327636620ebbecba46ae9829e67d9ba8bf4d6b8c2fb76ba7d53e2ceabae7839f4025b19480c2ba4088ec6ff4ea0cc8b8a4cfe8f35c270ea3896561860254a8b3b0109db2") (async, rerun: 32) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000002540)) ptrace$cont(0x18, r0, 0x1, 0x122590ce) (async, rerun: 64) exit_group(0x0) (rerun: 64) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async) ptrace$setregs(0xd, r1, 0x5, &(0x7f0000000380)="d021bfdcf5e5839cf03f03a8c59dbaf3ea9c8c068c6ed330db8a0d8bf244c9d6009d2c9a3fa841ba67d9a7fbfd19cdde3a1c7b64b7acbaa62f69a60edd69") read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) rt_sigqueueinfo(r2, 0x24, &(0x7f0000000040)={0x37, 0x6, 0x5}) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000300)={0x2, 0x0, 0x2e6}) 10:14:04 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:04 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 7) 10:14:04 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f0000000380)={0x0, 0xe5e0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0xfffffffffffffffc, 0x0}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r6, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x400, 0x1000}, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x4195, &(0x7f0000000380)={0x0, 0xe5e0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000200)) (async) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0xfffffffffffffffc, 0x0}, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r6, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x400, 0x1000}, 0x4) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) [ 504.391343][T12004] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 504.399294][T12004] RBP: 00007ffa3b07d1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 504.407327][T12004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.415275][T12004] R13: 00007fff1f05cd0f R14: 00007ffa3b07d300 R15: 0000000000022000 10:14:04 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x10c00, &(0x7f00000001c0)="bde35148d4e6224d736570843db2c5b325218709a528c0b29d034660bc2306c1ec2b727cc619c1ccb9e40955e13b2e422c56aed9b76f03743ac31540f3a0eb7fe09590c102d28ce0faa25234a5548fd1ed08d1ccacb9db3bac448c8ed5d054ebce81e20958b577af759ff7ba27e8bad6270926fd8dd18cc468a59554c67daf455131cfd99ec9c19ce39716e56644a2d4f09f720f6ba517e2d7ac48285db7f757b0846f659b44ee8ace7f6b3b1644c767f08580b80ff625d1722c949f86db5dd0b62644653221ae44f00a4759af1f92ed7c72b8", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)="87e22caecc70e818b877bce83408c0ffab9c04ce86a81c43872cc6f674a2f850f9a1997cc58be0fff8c7e187cbc1e8e0e40003a44b1a76fc96fd8cd642e6ac744e2ab17f665cfa2f9afc7152d4dd155b22efca8abdedb8fd62ecb2cc281ac8d3a5faac8f43b71d4d36a89c10e9fee7784113902a67e7dc37d2165a697fb8262fd0a5d312d6810b3c0e233a49") wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) clone(0x10c00, &(0x7f00000001c0)="bde35148d4e6224d736570843db2c5b325218709a528c0b29d034660bc2306c1ec2b727cc619c1ccb9e40955e13b2e422c56aed9b76f03743ac31540f3a0eb7fe09590c102d28ce0faa25234a5548fd1ed08d1ccacb9db3bac448c8ed5d054ebce81e20958b577af759ff7ba27e8bad6270926fd8dd18cc468a59554c67daf455131cfd99ec9c19ce39716e56644a2d4f09f720f6ba517e2d7ac48285db7f757b0846f659b44ee8ace7f6b3b1644c767f08580b80ff625d1722c949f86db5dd0b62644653221ae44f00a4759af1f92ed7c72b8", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)="87e22caecc70e818b877bce83408c0ffab9c04ce86a81c43872cc6f674a2f850f9a1997cc58be0fff8c7e187cbc1e8e0e40003a44b1a76fc96fd8cd642e6ac744e2ab17f665cfa2f9afc7152d4dd155b22efca8abdedb8fd62ecb2cc281ac8d3a5faac8f43b71d4d36a89c10e9fee7784113902a67e7dc37d2165a697fb8262fd0a5d312d6810b3c0e233a49") (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) 10:14:04 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async, rerun: 64) r0 = gettid() (async, rerun: 64) wait4(0x0, 0x0, 0x80000002, 0x0) (async, rerun: 64) clone(0x240080, &(0x7f00000001c0)="b2cd2503e7e085b108e15b3c53561ddfa70a7804fe293686f9bb99fe45f5a60d20219d0672161e890c968d44814f6e1c458ac7f78db89291efbe5435ee524f15a9f9b45c84f8177976712fb7c27ac824f8b3fd50eac9eb8abd1eb3cf99704b2eec91c16d6f3fdf00c01e97c555dd2b9c5fe932b69fd864065304d30be35e4e14423e416a298466b7105a3f54", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000002440)="63702186426f90660e0b54acb8f224dc27516bcdb4270de9d3dc7cf4977417a3cb1864483371dd7295299612f2f0acd66299aca7a49c83ed7bbcda048d32bdbcf39abe464a8462bb1b5f6a03add483123966401df6187ab3ad815b6ac6e4bafa9b464c19ee933071355bda30813076ae3c7687c98f1ef575c770cbeefe08186687c911a6ab940f184c2c297ad92e78fc87e81c564144793758e93af1882fe6d598a9d0b360cfdc99c86c327636620ebbecba46ae9829e67d9ba8bf4d6b8c2fb76ba7d53e2ceabae7839f4025b19480c2ba4088ec6ff4ea0cc8b8a4cfe8f35c270ea3896561860254a8b3b0109db2") (rerun: 64) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000002540)) (async, rerun: 32) ptrace$cont(0x18, r0, 0x1, 0x122590ce) (async, rerun: 32) exit_group(0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) (async) rt_sigqueueinfo(r1, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async) ptrace$setregs(0xd, r1, 0x5, &(0x7f0000000380)="d021bfdcf5e5839cf03f03a8c59dbaf3ea9c8c068c6ed330db8a0d8bf244c9d6009d2c9a3fa841ba67d9a7fbfd19cdde3a1c7b64b7acbaa62f69a60edd69") read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) rt_sigqueueinfo(r2, 0x24, &(0x7f0000000040)={0x37, 0x6, 0x5}) (async) rt_sigqueueinfo(r2, 0x40, &(0x7f0000000300)={0x2, 0x0, 0x2e6}) 10:14:04 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 12) 10:14:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) clone(0x8000, &(0x7f00000001c0)="ecf07dddbed945088a1a7a7d8bc12aa615f2ee87cd9bc6679cdd12f0d8b2aac02ae31d0c209767c0a0fd3544a70632ea715cbc76aadf91eb7f8e6f321b6a0a44300cfdce4d9ede25fa3f0914c5f7daafa8d94e111f70355839d88815a21e873dc325bc69b4d7a76f873ebf0d79b3", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="c17ee09ff6b64feae0ab5baabb88e735bef33f105fc4b789a5eca33e9459af2edbfe29a3d400fd1d628a79670a57dd3574050f1e5d3fa34f0ec256b5baba99") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) rt_sigqueueinfo(r0, 0x26, &(0x7f0000000040)={0xe, 0x719f}) exit_group(0x0) 10:14:04 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f0000000380)={0x0, 0xe5e0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) (async, rerun: 32) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 32) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0xfffffffffffffffc, 0x0}, 0x0) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r6, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x400, 0x1000}, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (rerun: 32) [ 504.497762][T12278] FAULT_INJECTION: forcing a failure. [ 504.497762][T12278] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 504.517796][T12278] CPU: 1 PID: 12278 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 504.528112][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.538435][T12278] Call Trace: [ 504.541739][T12278] dump_stack_lvl+0x1e2/0x24b 10:14:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) clone(0x8000, &(0x7f00000001c0)="ecf07dddbed945088a1a7a7d8bc12aa615f2ee87cd9bc6679cdd12f0d8b2aac02ae31d0c209767c0a0fd3544a70632ea715cbc76aadf91eb7f8e6f321b6a0a44300cfdce4d9ede25fa3f0914c5f7daafa8d94e111f70355839d88815a21e873dc325bc69b4d7a76f873ebf0d79b3", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="c17ee09ff6b64feae0ab5baabb88e735bef33f105fc4b789a5eca33e9459af2edbfe29a3d400fd1d628a79670a57dd3574050f1e5d3fa34f0ec256b5baba99") (async, rerun: 64) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async, rerun: 64) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 64) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async, rerun: 64) rt_sigqueueinfo(r0, 0x26, &(0x7f0000000040)={0xe, 0x719f}) (async) exit_group(0x0) 10:14:04 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) clone(0xb100000, &(0x7f00000001c0)="672af8c0c16365f16f452a2d90c929a825ab58ca9a92585883fc8461f6c5caf733f694dd21688fc84eae5bedf265b190834f90c0e310ce87142a55f8db9f7a481bd648a393d0891178f5dce5a58ef709f71adbeb789b5ececa051a6b2f97e6fadeed87b0187e94e67c6a5ecd6720afa28c7fd79d0f25b610697a380f3507698fe41240157b454e772b600a0b95a739d9235e0ce9aeedbeec7cf18db3e8604e36330942230c3c01c41c324ccc3fb65efa1545ccead46e2a4089e62335fed46f330e25c12bd821ba33fc1804ef75475cccd2f1d84fa7dbfc4d847adc819149fb301fe595b53efd2e88", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)="d3d7f6594c647408e9f2b042b51afff0e38698bc4e1e1222ee811adf8e8579c4331a") vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) [ 504.546424][T12278] ? show_regs_print_info+0x18/0x18 [ 504.551632][T12278] dump_stack+0x15/0x1d [ 504.555798][T12278] should_fail+0x3c0/0x510 [ 504.560223][T12278] should_fail_alloc_page+0x4f/0x60 [ 504.565428][T12278] __alloc_pages_nodemask+0x1b9/0x820 [ 504.570805][T12278] ? io_queue_sqe+0x1180/0x1180 [ 504.575666][T12278] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 504.581221][T12278] ? __kasan_check_write+0x14/0x20 [ 504.586336][T12278] ? __io_queue_sqe+0x1561/0x2fa0 [ 504.591377][T12278] allocate_slab+0x6b/0x350 10:14:04 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) clone(0xb100000, &(0x7f00000001c0)="672af8c0c16365f16f452a2d90c929a825ab58ca9a92585883fc8461f6c5caf733f694dd21688fc84eae5bedf265b190834f90c0e310ce87142a55f8db9f7a481bd648a393d0891178f5dce5a58ef709f71adbeb789b5ececa051a6b2f97e6fadeed87b0187e94e67c6a5ecd6720afa28c7fd79d0f25b610697a380f3507698fe41240157b454e772b600a0b95a739d9235e0ce9aeedbeec7cf18db3e8604e36330942230c3c01c41c324ccc3fb65efa1545ccead46e2a4089e62335fed46f330e25c12bd821ba33fc1804ef75475cccd2f1d84fa7dbfc4d847adc819149fb301fe595b53efd2e88", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)="d3d7f6594c647408e9f2b042b51afff0e38698bc4e1e1222ee811adf8e8579c4331a") vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) clone(0xb100000, &(0x7f00000001c0)="672af8c0c16365f16f452a2d90c929a825ab58ca9a92585883fc8461f6c5caf733f694dd21688fc84eae5bedf265b190834f90c0e310ce87142a55f8db9f7a481bd648a393d0891178f5dce5a58ef709f71adbeb789b5ececa051a6b2f97e6fadeed87b0187e94e67c6a5ecd6720afa28c7fd79d0f25b610697a380f3507698fe41240157b454e772b600a0b95a739d9235e0ce9aeedbeec7cf18db3e8604e36330942230c3c01c41c324ccc3fb65efa1545ccead46e2a4089e62335fed46f330e25c12bd821ba33fc1804ef75475cccd2f1d84fa7dbfc4d847adc819149fb301fe595b53efd2e88", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)="d3d7f6594c647408e9f2b042b51afff0e38698bc4e1e1222ee811adf8e8579c4331a") (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) 10:14:05 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async, rerun: 64) clone(0x8000, &(0x7f00000001c0)="ecf07dddbed945088a1a7a7d8bc12aa615f2ee87cd9bc6679cdd12f0d8b2aac02ae31d0c209767c0a0fd3544a70632ea715cbc76aadf91eb7f8e6f321b6a0a44300cfdce4d9ede25fa3f0914c5f7daafa8d94e111f70355839d88815a21e873dc325bc69b4d7a76f873ebf0d79b3", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="c17ee09ff6b64feae0ab5baabb88e735bef33f105fc4b789a5eca33e9459af2edbfe29a3d400fd1d628a79670a57dd3574050f1e5d3fa34f0ec256b5baba99") (async, rerun: 64) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) tkill(r0, 0x38) (async, rerun: 32) ptrace$cont(0x18, r0, 0x0, 0x0) (rerun: 32) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) rt_sigqueueinfo(r0, 0x26, &(0x7f0000000040)={0xe, 0x719f}) exit_group(0x0) [ 504.595888][T12278] ___slab_alloc+0x143/0x2f0 [ 504.600482][T12278] ? io_submit_sqes+0x6bf/0x2da0 [ 504.605424][T12278] kmem_cache_alloc_bulk+0x167/0x3f0 [ 504.610716][T12278] io_submit_sqes+0x6bf/0x2da0 [ 504.615491][T12278] ? io_uring_add_task_file+0x290/0x290 [ 504.621043][T12278] ? security_file_permission+0xa8/0xc0 [ 504.626602][T12278] ? __kasan_check_write+0x14/0x20 [ 504.631727][T12278] ? mutex_lock+0xa6/0x110 [ 504.636152][T12278] ? io_uring_add_task_file+0x127/0x290 [ 504.641703][T12278] ? __fdget+0x1b5/0x240 [ 504.645950][T12278] __se_sys_io_uring_enter+0x322/0x12b0 [ 504.651502][T12278] ? __fget_files+0x39e/0x3d0 [ 504.656184][T12278] ? __kasan_check_write+0x14/0x20 [ 504.661291][T12278] ? fput_many+0x47/0x1a0 [ 504.665624][T12278] ? __x64_sys_io_uring_enter+0x100/0x100 [ 504.671352][T12278] ? __ia32_sys_read+0x90/0x90 [ 504.676123][T12278] ? debug_smp_processor_id+0x1c/0x20 [ 504.681502][T12278] __x64_sys_io_uring_enter+0xe5/0x100 [ 504.686966][T12278] do_syscall_64+0x31/0x70 [ 504.691383][T12278] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 504.697276][T12278] RIP: 0033:0x7fc57b044e99 [ 504.701691][T12278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 504.721351][T12278] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 504.729746][T12278] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 504.738390][T12278] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 10:14:05 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 8) 10:14:05 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async, rerun: 64) r0 = gettid() (rerun: 64) wait4(0x0, 0x0, 0x80000002, 0x0) (async) clone(0xb100000, &(0x7f00000001c0)="672af8c0c16365f16f452a2d90c929a825ab58ca9a92585883fc8461f6c5caf733f694dd21688fc84eae5bedf265b190834f90c0e310ce87142a55f8db9f7a481bd648a393d0891178f5dce5a58ef709f71adbeb789b5ececa051a6b2f97e6fadeed87b0187e94e67c6a5ecd6720afa28c7fd79d0f25b610697a380f3507698fe41240157b454e772b600a0b95a739d9235e0ce9aeedbeec7cf18db3e8604e36330942230c3c01c41c324ccc3fb65efa1545ccead46e2a4089e62335fed46f330e25c12bd821ba33fc1804ef75475cccd2f1d84fa7dbfc4d847adc819149fb301fe595b53efd2e88", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)="d3d7f6594c647408e9f2b042b51afff0e38698bc4e1e1222ee811adf8e8579c4331a") (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:14:05 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:05 executing program 4: clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:14:05 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:05 executing program 0: r0 = syz_io_uring_setup(0x4194, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x280080, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0xfffffffffffffffc, 0x0}, 0x0) r7 = syz_io_uring_setup(0x1c72, &(0x7f0000000140)={0x0, 0x51ae, 0x0, 0x0, 0x342, 0x0, r0}, &(0x7f0000146000/0x4000)=nil, &(0x7f0000149000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd=r0, 0x20, &(0x7f0000000240)=[{&(0x7f0000000380)=""/150, 0x96}], 0x1, 0xc}, 0x7f) ioctl$sock_ifreq(r6, 0x8934, &(0x7f0000000480)={'macvtap0\x00', @ifru_names}) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r9, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) r10 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r10, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500), 0x4) r12 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r12, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) ppoll(&(0x7f0000000540)=[{r7, 0x80}, {r3, 0x261}, {0xffffffffffffffff, 0x4009}, {0xffffffffffffffff, 0x214}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x2}, {r10, 0x50}, {r11, 0x50}, {r12, 0x4}], 0x9, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x10001]}, 0x8) r13 = creat(&(0x7f0000000080)='./bus\x00', 0x37) fallocate(r13, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r13, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) syz_io_uring_setup(0x7f3, &(0x7f0000000080)={0x0, 0xda15, 0x4, 0x2, 0x131, 0x0, r13}, &(0x7f0000146000/0x4000)=nil, &(0x7f0000147000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) [ 504.747047][T12278] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 504.754996][T12278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.762949][T12278] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 10:14:05 executing program 4: clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) 10:14:05 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:05 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:05 executing program 4: clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async, rerun: 64) r0 = gettid() (async, rerun: 64) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async, rerun: 32) tkill(r0, 0x38) (rerun: 32) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) 10:14:05 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x2, 0x0, 0x0, 0xf5ffffff) [ 504.848816][T13187] FAULT_INJECTION: forcing a failure. [ 504.848816][T13187] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 504.870915][T13187] CPU: 1 PID: 13187 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 504.881188][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.891245][T13187] Call Trace: [ 504.894581][T13187] dump_stack_lvl+0x1e2/0x24b [ 504.899256][T13187] ? show_regs_print_info+0x18/0x18 [ 504.904451][T13187] ? kmem_cache_free+0xb5/0x1f0 [ 504.909296][T13187] dump_stack+0x15/0x1d [ 504.913444][T13187] should_fail+0x3c0/0x510 [ 504.917865][T13187] should_fail_alloc_page+0x4f/0x60 [ 504.923064][T13187] __alloc_pages_nodemask+0x1b9/0x820 [ 504.928426][T13187] ? __io_free_req+0x20e/0x380 [ 504.933177][T13187] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 504.938708][T13187] ? __io_free_req+0x253/0x380 [ 504.943457][T13187] ? __io_queue_sqe+0x1561/0x2fa0 [ 504.948577][T13187] allocate_slab+0x6b/0x350 [ 504.953091][T13187] ___slab_alloc+0x143/0x2f0 [ 504.957706][T13187] ? io_submit_sqes+0x6bf/0x2da0 [ 504.962657][T13187] kmem_cache_alloc_bulk+0x167/0x3f0 [ 504.967945][T13187] io_submit_sqes+0x6bf/0x2da0 [ 504.972708][T13187] ? io_uring_add_task_file+0x290/0x290 [ 504.978241][T13187] ? security_file_permission+0xa8/0xc0 [ 504.983780][T13187] ? __kasan_check_write+0x14/0x20 [ 504.988889][T13187] ? mutex_lock+0xa6/0x110 [ 504.993300][T13187] ? io_uring_add_task_file+0x127/0x290 [ 504.998922][T13187] ? __fdget+0x1b5/0x240 [ 505.003153][T13187] __se_sys_io_uring_enter+0x322/0x12b0 [ 505.008702][T13187] ? __fget_files+0x39e/0x3d0 [ 505.013381][T13187] ? __kasan_check_write+0x14/0x20 [ 505.018497][T13187] ? fput_many+0x47/0x1a0 [ 505.022827][T13187] ? __x64_sys_io_uring_enter+0x100/0x100 [ 505.028537][T13187] ? __ia32_sys_read+0x90/0x90 [ 505.033292][T13187] ? debug_smp_processor_id+0x1c/0x20 [ 505.038647][T13187] __x64_sys_io_uring_enter+0xe5/0x100 [ 505.044092][T13187] do_syscall_64+0x31/0x70 [ 505.048496][T13187] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.054376][T13187] RIP: 0033:0x7fc57b044e99 [ 505.058784][T13187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.078375][T13187] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 505.086780][T13187] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 10:14:05 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40120040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x8, 0x70bd2d, 0x25dfdbfe, {0x20, 0x0, 0x2, r0, 0x1000, 0x6, 0x100, 0xfd7, 0x0, 0x5}, ["", "", ""]}, 0x38}}, 0x4000000) exit_group(0x0) 10:14:05 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) rt_sigqueueinfo(r1, 0x1e, &(0x7f0000000340)={0x36, 0x4, 0x4}) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) clone(0x2200a000, &(0x7f0000000040)="6b74b9bc91eccc8b56bcfd7d001dbc911d312eba5764f82525399ca7852444f87ce4e0f3bb51bed5dfb8cfe6e630082573722002fee7975d9c6dc94ca73029c75db96762f710ac57", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="ef3cf23f953ef128c22539fbea544874af71281e2b26722ac26ca7a00f99334d1d1deb90349a459e2f1e881734ac98d44cc0a8db87a1f640393d03a260898ca492a8e4a98117566d2b9b47f923e351dd07a71af8e8e958288ae47d7eb835aa070e451a728f874bb33d22e5be9c2637775dffa3983b6051c1a4dc6ac8b4a6692fd1f5c3a47590179206010baf1eaa2297b9d1b6b8ebbcc62d0ebf4d83ddcdf517127fbcdfd733a4e013bab6a59c1b0d7679262af30401") wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x3ff) waitid(0x0, r0, &(0x7f0000000400), 0x2, &(0x7f0000000480)) 10:14:05 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 9) 10:14:05 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async, rerun: 64) tkill(r0, 0x38) (async, rerun: 64) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) rt_sigqueueinfo(r1, 0x1e, &(0x7f0000000340)={0x36, 0x4, 0x4}) (async, rerun: 32) ptrace$cont(0x18, r0, 0x0, 0x0) (rerun: 32) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) clone(0x2200a000, &(0x7f0000000040)="6b74b9bc91eccc8b56bcfd7d001dbc911d312eba5764f82525399ca7852444f87ce4e0f3bb51bed5dfb8cfe6e630082573722002fee7975d9c6dc94ca73029c75db96762f710ac57", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="ef3cf23f953ef128c22539fbea544874af71281e2b26722ac26ca7a00f99334d1d1deb90349a459e2f1e881734ac98d44cc0a8db87a1f640393d03a260898ca492a8e4a98117566d2b9b47f923e351dd07a71af8e8e958288ae47d7eb835aa070e451a728f874bb33d22e5be9c2637775dffa3983b6051c1a4dc6ac8b4a6692fd1f5c3a47590179206010baf1eaa2297b9d1b6b8ebbcc62d0ebf4d83ddcdf517127fbcdfd733a4e013bab6a59c1b0d7679262af30401") (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async, rerun: 32) exit_group(0x0) (rerun: 32) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x3ff) waitid(0x0, r0, &(0x7f0000000400), 0x2, &(0x7f0000000480)) 10:14:05 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40120040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x8, 0x70bd2d, 0x25dfdbfe, {0x20, 0x0, 0x2, r0, 0x1000, 0x6, 0x100, 0xfd7, 0x0, 0x5}, ["", "", ""]}, 0x38}}, 0x4000000) (async) exit_group(0x0) [ 505.094741][T13187] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 505.102701][T13187] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 505.110657][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.118624][T13187] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 [ 505.205216][T13635] FAULT_INJECTION: forcing a failure. [ 505.205216][T13635] name failslab, interval 1, probability 0, space 0, times 0 [ 505.219169][T13635] CPU: 0 PID: 13635 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 505.229412][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.239631][T13635] Call Trace: [ 505.242915][T13635] dump_stack_lvl+0x1e2/0x24b [ 505.247587][T13635] ? devkmsg_release+0x127/0x127 [ 505.252516][T13635] ? __io_free_req+0x253/0x380 [ 505.257359][T13635] ? show_regs_print_info+0x18/0x18 [ 505.262892][T13635] ? __io_queue_sqe+0x1561/0x2fa0 [ 505.268054][T13635] dump_stack+0x15/0x1d [ 505.272208][T13635] should_fail+0x3c0/0x510 [ 505.276620][T13635] __should_failslab+0x9f/0xe0 [ 505.281373][T13635] should_failslab+0x9/0x20 [ 505.285863][T13635] kmem_cache_alloc_bulk+0x30/0x3f0 [ 505.291051][T13635] io_submit_sqes+0x6bf/0x2da0 [ 505.295810][T13635] ? io_uring_add_task_file+0x290/0x290 [ 505.301343][T13635] ? security_file_permission+0xa8/0xc0 [ 505.306892][T13635] ? __kasan_check_write+0x14/0x20 [ 505.312005][T13635] ? mutex_lock+0xa6/0x110 [ 505.316418][T13635] ? io_uring_add_task_file+0x127/0x290 [ 505.321953][T13635] ? __fdget+0x1b5/0x240 [ 505.326180][T13635] __se_sys_io_uring_enter+0x322/0x12b0 [ 505.331715][T13635] ? __fget_files+0x39e/0x3d0 [ 505.336385][T13635] ? __kasan_check_write+0x14/0x20 [ 505.341481][T13635] ? fput_many+0x47/0x1a0 [ 505.345795][T13635] ? __x64_sys_io_uring_enter+0x100/0x100 [ 505.351502][T13635] ? __ia32_sys_read+0x90/0x90 [ 505.356252][T13635] ? debug_smp_processor_id+0x1c/0x20 [ 505.361614][T13635] __x64_sys_io_uring_enter+0xe5/0x100 [ 505.367064][T13635] do_syscall_64+0x31/0x70 [ 505.371465][T13635] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.377344][T13635] RIP: 0033:0x7fc57b044e99 [ 505.381746][T13635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:14:05 executing program 0: r0 = syz_io_uring_setup(0x4194, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) r3 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) r6 = open(&(0x7f0000000080)='./bus\x00', 0x280080, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0xfffffffffffffffc, 0x0}, 0x0) (async) r7 = syz_io_uring_setup(0x1c72, &(0x7f0000000140)={0x0, 0x51ae, 0x0, 0x0, 0x342, 0x0, r0}, &(0x7f0000146000/0x4000)=nil, &(0x7f0000149000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd=r0, 0x20, &(0x7f0000000240)=[{&(0x7f0000000380)=""/150, 0x96}], 0x1, 0xc}, 0x7f) ioctl$sock_ifreq(r6, 0x8934, &(0x7f0000000480)={'macvtap0\x00', @ifru_names}) (async, rerun: 32) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r9, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) r10 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r10, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500), 0x4) r12 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r12, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) ppoll(&(0x7f0000000540)=[{r7, 0x80}, {r3, 0x261}, {0xffffffffffffffff, 0x4009}, {0xffffffffffffffff, 0x214}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x2}, {r10, 0x50}, {r11, 0x50}, {r12, 0x4}], 0x9, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x10001]}, 0x8) (async, rerun: 32) r13 = creat(&(0x7f0000000080)='./bus\x00', 0x37) (rerun: 32) fallocate(r13, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r13, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async) syz_io_uring_setup(0x7f3, &(0x7f0000000080)={0x0, 0xda15, 0x4, 0x2, 0x131, 0x0, r13}, &(0x7f0000146000/0x4000)=nil, &(0x7f0000147000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 10:14:05 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:05 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x3, 0x0, 0x0, 0xf5ffffff) 10:14:05 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40120040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x8, 0x70bd2d, 0x25dfdbfe, {0x20, 0x0, 0x2, r0, 0x1000, 0x6, 0x100, 0xfd7, 0x0, 0x5}, ["", "", ""]}, 0x38}}, 0x4000000) (async) exit_group(0x0) 10:14:05 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() (async, rerun: 32) wait4(0x0, 0x0, 0x80000002, 0x0) (rerun: 32) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) rt_sigqueueinfo(r1, 0x1e, &(0x7f0000000340)={0x36, 0x4, 0x4}) ptrace$cont(0x18, r0, 0x0, 0x0) (async, rerun: 64) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 64) clone(0x2200a000, &(0x7f0000000040)="6b74b9bc91eccc8b56bcfd7d001dbc911d312eba5764f82525399ca7852444f87ce4e0f3bb51bed5dfb8cfe6e630082573722002fee7975d9c6dc94ca73029c75db96762f710ac57", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="ef3cf23f953ef128c22539fbea544874af71281e2b26722ac26ca7a00f99334d1d1deb90349a459e2f1e881734ac98d44cc0a8db87a1f640393d03a260898ca492a8e4a98117566d2b9b47f923e351dd07a71af8e8e958288ae47d7eb835aa070e451a728f874bb33d22e5be9c2637775dffa3983b6051c1a4dc6ac8b4a6692fd1f5c3a47590179206010baf1eaa2297b9d1b6b8ebbcc62d0ebf4d83ddcdf517127fbcdfd733a4e013bab6a59c1b0d7679262af30401") (async, rerun: 64) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async, rerun: 64) exit_group(0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x3ff) waitid(0x0, r0, &(0x7f0000000400), 0x2, &(0x7f0000000480)) 10:14:05 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 10) [ 505.401336][T13635] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 505.409829][T13635] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 505.417789][T13635] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 505.425748][T13635] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 505.433883][T13635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.441844][T13635] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 10:14:05 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:05 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x4, 0x0, 0x0, 0xf5ffffff) 10:14:05 executing program 1: r0 = syz_open_dev$mouse(&(0x7f00000002c0), 0x7ff, 0x240000) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0xc2, 0x8, 0x3, 0x0, 0x1f, 0x20000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x200, 0x6, 0x8000, 0x5, 0x8001, 0x3, 0x8, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x4, r0, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000040)={0x0}) fork() wait4(r1, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x1b, &(0x7f0000000240)={0x3c, 0x6, 0x10001}) 10:14:05 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index, 0x6, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:05 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4200, r0, 0x0, 0x0) tkill(r0, 0x38) clone(0x48900400, &(0x7f00000004c0)="e916a6d4ececf26b7daae963a250496864ff97e3f328135019bee6e0961c75b7c7994e326eecccd78b893dc31e712aa4acbe61b05b33c92f851cad0f756d477b0ba59bdbdb6423bc30c6dca1f056e041b8c21fef58e26dd7abadcf4f4b7b51de34e04d76143717d34135eb28d72b535399b1", &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="37d7b87a25e8ed7458f8ed021cd2479fe344fe34173d750bde9c69e03f9b0686a0e3e9ef4d704304be2771a60772d1a11dcedb87d2c7a043cb1341af03a274f8387c7407ff99aa1a1e88e5d4f52f9449c30b1a251599956dc71d7226a8ee7fda0951bd007c0af4239082f59e35da3579080a1b01f159a1052245b620be79282e97fe848233dde35d35c526739470b0260074d70c0cb80020a1830d96fe2515eb7ff86a7c6959d37c61a5b20eb1240129035340f1fffe152e1c00e6a8cea355870e96875a3802bee205a0f1bce9671c3fd061c75fb057dfa4161ea6f5c361f75f999d9d3e6ac5963a5a70") ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) get_robust_list(r2, &(0x7f0000000200)=&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000240)=0x18) timer_create(0x0, &(0x7f0000000280)={0x0, 0x20, 0x4, @thr={&(0x7f0000000300)="05ed581ca4f09f2184a0e26602486dbc95757a102480575129fe8d8cecd27ff6302c183d4d0f1a400d00f0022632191d7f12a6491f0f7f71e69b42bffcd0fa3e9f71dafb44fe87b6c00c0632424303486937cfa29a4f27851cfa75e16d788d23a5e47a2ffa57c2e7b8fa518ddf686fdfdf4b77c635228220f794b805", &(0x7f0000000400)="a13edee9f1a2580d2926cfd3316b8bc2bc38ca31451677a3d6659717e7bf7f7c24b28e605803cc02e7728ef47be4a3e5bb73729acbb5ab2ab33614df5d5ff45d620a489772c18c20b311032e4b1138ce84992ff240ab39a98cac2405a0e0ffd2a3fe71a81472d819cf5c875132bef0836eb7fc671876fcb42660c93263b3acb0bd7964c40e88262ae7b8710dab8044ea54bceb60685ed274b6e33f49ffd0bd6188c729218e3d35d7270cbff12780635a8ed0dd879a330cff"}}, &(0x7f0000000380)) exit_group(0x0) 10:14:05 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4200, r0, 0x0, 0x0) tkill(r0, 0x38) clone(0x48900400, &(0x7f00000004c0)="e916a6d4ececf26b7daae963a250496864ff97e3f328135019bee6e0961c75b7c7994e326eecccd78b893dc31e712aa4acbe61b05b33c92f851cad0f756d477b0ba59bdbdb6423bc30c6dca1f056e041b8c21fef58e26dd7abadcf4f4b7b51de34e04d76143717d34135eb28d72b535399b1", &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="37d7b87a25e8ed7458f8ed021cd2479fe344fe34173d750bde9c69e03f9b0686a0e3e9ef4d704304be2771a60772d1a11dcedb87d2c7a043cb1341af03a274f8387c7407ff99aa1a1e88e5d4f52f9449c30b1a251599956dc71d7226a8ee7fda0951bd007c0af4239082f59e35da3579080a1b01f159a1052245b620be79282e97fe848233dde35d35c526739470b0260074d70c0cb80020a1830d96fe2515eb7ff86a7c6959d37c61a5b20eb1240129035340f1fffe152e1c00e6a8cea355870e96875a3802bee205a0f1bce9671c3fd061c75fb057dfa4161ea6f5c361f75f999d9d3e6ac5963a5a70") (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async) get_robust_list(r2, &(0x7f0000000200)=&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000240)=0x18) timer_create(0x0, &(0x7f0000000280)={0x0, 0x20, 0x4, @thr={&(0x7f0000000300)="05ed581ca4f09f2184a0e26602486dbc95757a102480575129fe8d8cecd27ff6302c183d4d0f1a400d00f0022632191d7f12a6491f0f7f71e69b42bffcd0fa3e9f71dafb44fe87b6c00c0632424303486937cfa29a4f27851cfa75e16d788d23a5e47a2ffa57c2e7b8fa518ddf686fdfdf4b77c635228220f794b805", &(0x7f0000000400)="a13edee9f1a2580d2926cfd3316b8bc2bc38ca31451677a3d6659717e7bf7f7c24b28e605803cc02e7728ef47be4a3e5bb73729acbb5ab2ab33614df5d5ff45d620a489772c18c20b311032e4b1138ce84992ff240ab39a98cac2405a0e0ffd2a3fe71a81472d819cf5c875132bef0836eb7fc671876fcb42660c93263b3acb0bd7964c40e88262ae7b8710dab8044ea54bceb60685ed274b6e33f49ffd0bd6188c729218e3d35d7270cbff12780635a8ed0dd879a330cff"}}, &(0x7f0000000380)) (async) exit_group(0x0) [ 505.514711][T14067] FAULT_INJECTION: forcing a failure. [ 505.514711][T14067] name failslab, interval 1, probability 0, space 0, times 0 [ 505.529284][T14067] CPU: 0 PID: 14067 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 505.539626][T14067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.549682][T14067] Call Trace: [ 505.552986][T14067] dump_stack_lvl+0x1e2/0x24b [ 505.557674][T14067] ? devkmsg_release+0x127/0x127 [ 505.562621][T14067] ? show_regs_print_info+0x18/0x18 [ 505.567843][T14067] ? __kasan_check_write+0x14/0x20 [ 505.572959][T14067] ? __io_queue_sqe+0x1561/0x2fa0 [ 505.577991][T14067] dump_stack+0x15/0x1d [ 505.582156][T14067] should_fail+0x3c0/0x510 [ 505.586571][T14067] __should_failslab+0x9f/0xe0 [ 505.591316][T14067] should_failslab+0x9/0x20 [ 505.595794][T14067] kmem_cache_alloc_bulk+0x30/0x3f0 [ 505.600973][T14067] io_submit_sqes+0x6bf/0x2da0 [ 505.605714][T14067] ? io_uring_add_task_file+0x290/0x290 [ 505.611232][T14067] ? security_file_permission+0xa8/0xc0 [ 505.616754][T14067] ? __kasan_check_write+0x14/0x20 [ 505.621839][T14067] ? mutex_lock+0xa6/0x110 [ 505.626230][T14067] ? io_uring_add_task_file+0x127/0x290 [ 505.631839][T14067] ? __fdget+0x1b5/0x240 [ 505.636142][T14067] __se_sys_io_uring_enter+0x322/0x12b0 [ 505.641661][T14067] ? __fget_files+0x39e/0x3d0 [ 505.646349][T14067] ? __kasan_check_write+0x14/0x20 [ 505.651433][T14067] ? fput_many+0x47/0x1a0 [ 505.655737][T14067] ? __x64_sys_io_uring_enter+0x100/0x100 [ 505.661433][T14067] ? __ia32_sys_read+0x90/0x90 [ 505.666178][T14067] ? debug_smp_processor_id+0x1c/0x20 [ 505.671521][T14067] __x64_sys_io_uring_enter+0xe5/0x100 [ 505.676968][T14067] do_syscall_64+0x31/0x70 [ 505.681357][T14067] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.687219][T14067] RIP: 0033:0x7fc57b044e99 [ 505.691610][T14067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:14:06 executing program 0: r0 = syz_io_uring_setup(0x4194, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) r6 = open(&(0x7f0000000080)='./bus\x00', 0x280080, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0xfffffffffffffffc, 0x0}, 0x0) (async, rerun: 64) r7 = syz_io_uring_setup(0x1c72, &(0x7f0000000140)={0x0, 0x51ae, 0x0, 0x0, 0x342, 0x0, r0}, &(0x7f0000146000/0x4000)=nil, &(0x7f0000149000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) (rerun: 64) syz_io_uring_submit(r4, r8, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd=r0, 0x20, &(0x7f0000000240)=[{&(0x7f0000000380)=""/150, 0x96}], 0x1, 0xc}, 0x7f) (async) ioctl$sock_ifreq(r6, 0x8934, &(0x7f0000000480)={'macvtap0\x00', @ifru_names}) (async) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r9, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async, rerun: 64) r10 = socket$nl_generic(0x11, 0x3, 0x10) (rerun: 64) sendmsg(r10, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500), 0x4) (async, rerun: 64) r12 = socket$nl_generic(0x11, 0x3, 0x10) (rerun: 64) sendmsg(r12, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async, rerun: 32) ppoll(&(0x7f0000000540)=[{r7, 0x80}, {r3, 0x261}, {0xffffffffffffffff, 0x4009}, {0xffffffffffffffff, 0x214}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x2}, {r10, 0x50}, {r11, 0x50}, {r12, 0x4}], 0x9, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x10001]}, 0x8) (async, rerun: 32) r13 = creat(&(0x7f0000000080)='./bus\x00', 0x37) fallocate(r13, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r13, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async) syz_io_uring_setup(0x7f3, &(0x7f0000000080)={0x0, 0xda15, 0x4, 0x2, 0x131, 0x0, r13}, &(0x7f0000146000/0x4000)=nil, &(0x7f0000147000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 10:14:06 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4200, r0, 0x0, 0x0) (async) tkill(r0, 0x38) (async) clone(0x48900400, &(0x7f00000004c0)="e916a6d4ececf26b7daae963a250496864ff97e3f328135019bee6e0961c75b7c7994e326eecccd78b893dc31e712aa4acbe61b05b33c92f851cad0f756d477b0ba59bdbdb6423bc30c6dca1f056e041b8c21fef58e26dd7abadcf4f4b7b51de34e04d76143717d34135eb28d72b535399b1", &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="37d7b87a25e8ed7458f8ed021cd2479fe344fe34173d750bde9c69e03f9b0686a0e3e9ef4d704304be2771a60772d1a11dcedb87d2c7a043cb1341af03a274f8387c7407ff99aa1a1e88e5d4f52f9449c30b1a251599956dc71d7226a8ee7fda0951bd007c0af4239082f59e35da3579080a1b01f159a1052245b620be79282e97fe848233dde35d35c526739470b0260074d70c0cb80020a1830d96fe2515eb7ff86a7c6959d37c61a5b20eb1240129035340f1fffe152e1c00e6a8cea355870e96875a3802bee205a0f1bce9671c3fd061c75fb057dfa4161ea6f5c361f75f999d9d3e6ac5963a5a70") (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) rt_sigqueueinfo(r2, 0x200000000012, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffff9}) (async) get_robust_list(r2, &(0x7f0000000200)=&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000240)=0x18) timer_create(0x0, &(0x7f0000000280)={0x0, 0x20, 0x4, @thr={&(0x7f0000000300)="05ed581ca4f09f2184a0e26602486dbc95757a102480575129fe8d8cecd27ff6302c183d4d0f1a400d00f0022632191d7f12a6491f0f7f71e69b42bffcd0fa3e9f71dafb44fe87b6c00c0632424303486937cfa29a4f27851cfa75e16d788d23a5e47a2ffa57c2e7b8fa518ddf686fdfdf4b77c635228220f794b805", &(0x7f0000000400)="a13edee9f1a2580d2926cfd3316b8bc2bc38ca31451677a3d6659717e7bf7f7c24b28e605803cc02e7728ef47be4a3e5bb73729acbb5ab2ab33614df5d5ff45d620a489772c18c20b311032e4b1138ce84992ff240ab39a98cac2405a0e0ffd2a3fe71a81472d819cf5c875132bef0836eb7fc671876fcb42660c93263b3acb0bd7964c40e88262ae7b8710dab8044ea54bceb60685ed274b6e33f49ffd0bd6188c729218e3d35d7270cbff12780635a8ed0dd879a330cff"}}, &(0x7f0000000380)) (async) exit_group(0x0) 10:14:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x5, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 1: r0 = syz_open_dev$mouse(&(0x7f00000002c0), 0x7ff, 0x240000) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0xc2, 0x8, 0x3, 0x0, 0x1f, 0x20000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x200, 0x6, 0x8000, 0x5, 0x8001, 0x3, 0x8, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x4, r0, 0x1) (async) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r1 = gettid() r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000040)={0x0}) fork() (async) wait4(r1, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r1, 0x0, 0x5) (async) tkill(r1, 0x38) (async) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) (async) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x1b, &(0x7f0000000240)={0x3c, 0x6, 0x10001}) [ 505.711393][T14067] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 505.719786][T14067] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 505.727748][T14067] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 505.735695][T14067] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 505.743730][T14067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.751677][T14067] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 10:14:06 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 11) 10:14:06 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x8010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x114, &(0x7f0000000000)=0x3, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, 0x0}, 0xfffffffe) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x6, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) tkill(r1, 0x20) 10:14:06 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x8010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x114, &(0x7f0000000000)=0x3, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, 0x0}, 0xfffffffe) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 505.814617][T14560] FAULT_INJECTION: forcing a failure. [ 505.814617][T14560] name failslab, interval 1, probability 0, space 0, times 0 [ 505.827760][T14560] CPU: 0 PID: 14560 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 505.838001][T14560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.848057][T14560] Call Trace: [ 505.851356][T14560] dump_stack_lvl+0x1e2/0x24b [ 505.856047][T14560] ? devkmsg_release+0x127/0x127 10:14:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x7, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) tkill(r1, 0x20) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) (async) tkill(r1, 0x20) (async) 10:14:06 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x8010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x114, &(0x7f0000000000)=0x3, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, 0x0}, 0xfffffffe) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x8010, r0, 0x8000000) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x114, &(0x7f0000000000)=0x3, 0x0, 0x4) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, 0x0}, 0xfffffffe) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) 10:14:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x8, 0x0, 0x0, 0xf5ffffff) [ 505.860990][T14560] ? show_regs_print_info+0x18/0x18 [ 505.866192][T14560] ? __kasan_check_write+0x14/0x20 [ 505.871307][T14560] ? __io_queue_sqe+0x1561/0x2fa0 [ 505.876337][T14560] dump_stack+0x15/0x1d [ 505.880585][T14560] should_fail+0x3c0/0x510 [ 505.885010][T14560] __should_failslab+0x9f/0xe0 [ 505.889781][T14560] should_failslab+0x9/0x20 [ 505.894290][T14560] kmem_cache_alloc_bulk+0x30/0x3f0 [ 505.899491][T14560] io_submit_sqes+0x6bf/0x2da0 [ 505.904264][T14560] ? io_uring_add_task_file+0x290/0x290 10:14:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async, rerun: 64) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async, rerun: 64) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) (async, rerun: 64) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 64) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) tkill(r1, 0x20) [ 505.909903][T14560] ? security_file_permission+0xa8/0xc0 [ 505.915454][T14560] ? __kasan_check_write+0x14/0x20 [ 505.920576][T14560] ? mutex_lock+0xa6/0x110 [ 505.925003][T14560] ? io_uring_add_task_file+0x127/0x290 [ 505.930652][T14560] ? __fdget+0x1b5/0x240 [ 505.934904][T14560] __se_sys_io_uring_enter+0x322/0x12b0 [ 505.940455][T14560] ? __fget_files+0x39e/0x3d0 [ 505.945137][T14560] ? __kasan_check_write+0x14/0x20 [ 505.950261][T14560] ? fput_many+0x47/0x1a0 [ 505.954597][T14560] ? __x64_sys_io_uring_enter+0x100/0x100 [ 505.960319][T14560] ? __ia32_sys_read+0x90/0x90 [ 505.965088][T14560] ? debug_smp_processor_id+0x1c/0x20 [ 505.970466][T14560] __x64_sys_io_uring_enter+0xe5/0x100 [ 505.975929][T14560] do_syscall_64+0x31/0x70 [ 505.980355][T14560] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.986254][T14560] RIP: 0033:0x7fc57b044e99 [ 505.990672][T14560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:14:06 executing program 1: r0 = syz_open_dev$mouse(&(0x7f00000002c0), 0x7ff, 0x240000) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0xc2, 0x8, 0x3, 0x0, 0x1f, 0x20000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x200, 0x6, 0x8000, 0x5, 0x8001, 0x3, 0x8, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x4, r0, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000040)={0x0}) fork() wait4(r1, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x1b, &(0x7f0000000240)={0x3c, 0x6, 0x10001}) syz_open_dev$mouse(&(0x7f00000002c0), 0x7ff, 0x240000) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0xc2, 0x8, 0x3, 0x0, 0x1f, 0x20000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x200, 0x6, 0x8000, 0x5, 0x8001, 0x3, 0x8, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x4, r0, 0x1) (async) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) inotify_init1(0x0) (async) fcntl$setown(r2, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) (async) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000040)={0x0}) (async) fork() (async) wait4(r1, 0x0, 0x1, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r1, 0x0, 0x5) (async) tkill(r1, 0x38) (async) ptrace$cont(0x18, r1, 0x0, 0x0) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) (async) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) (async) gettid() (async) rt_sigqueueinfo(r4, 0x1b, &(0x7f0000000240)={0x3c, 0x6, 0x10001}) (async) [ 506.010278][T14560] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 506.019033][T14560] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 506.026984][T14560] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 506.034945][T14560] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 506.042895][T14560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.050842][T14560] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 10:14:06 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 12) 10:14:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x110217400, &(0x7f0000000500)="9b0e984396aaea93b825fdbbeedd64a14ebc82a42786c6f1f9d1c51b05152c8bfc29b19995859eeca00d7ccc7b1fd69bc3c3a0f79bd25b47c0f05bb43770a45168babb0e33edb5376e4a6ac289c0e2760bc240c643717adeb34e6219f9fa5ba7b88e55812e4dbebd3ac7a9994f40bb6940fc4b376ab092adbb116a044377a16f4838669fa2534acb3d2a45031924685482a7e93ed3a254c3f10c20be19c569be96a71001e05e5492223b95b57a9e28e060084229a4d88b00ca4a40467030ae43b59ef6f3db7907b2a10067027c8e09f61921bb0d0a7dd4fb57d7c5613accdbefd9b0883237c5eea35c1f0193f0af178ac2f19c0335e37ce7a5", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="e8a1fddaab43e1c080052227ebdd6d81e322ac9e9b47f419ae9dcc7902e2d1aa05564250019ad09537ea85eae6a8875cf1f3634c21") wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000040)={0x0}) wait4(r1, &(0x7f00000006c0), 0x1, &(0x7f0000000700)) wait4(r0, &(0x7f0000000680), 0x20000000, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) prlimit64(r0, 0xf, &(0x7f0000000040)={0x3, 0x4}, &(0x7f0000000080)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000640)=0x0) wait4(r2, &(0x7f0000000000), 0x2, &(0x7f0000000100)) clone(0x6062035f3238b23b, &(0x7f00000001c0)="dcb84f63eb1af7b9980615db8f4a3f774b072b3b10ad84ebc1f18ba9f8f1535b3afeab6bbdc7b1aed306ca31cedd4ba5329a3b437ec86c8799cebd9d24f8e84a54ef6f0045956d94802a412fc1436e2532d5dca678cdd7f729b004fcd8be0d1ca1e078b633a31ae8ba1eea2dfe097cf9eec76d779de838a7df6764889440e86e852a", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000400)="5b7d528d2dc57ae1af5363dc448701e1ba0efe9f5908960d0aea61f77d4a6bac5aa4e28f62f49c71bc63e3565916605a16f4bbb6fba5ed65ee7c5cf5da1652b9aa299cc34b39ea400b16f40f7da7a56e081c30bc2e56908ec594e54027eb17d8515bc2e97fd7533108d27c27b56756a70f8825828bec5dd470a0eb4fdffeb394c2f88bd1fa6150f1c621c0fc4d9803576dc477a37fbbcfe546feebea152b5e1ec7ef7f18fc50006424fd58cd87f2908f52f19e1a0be0d17fbf9e6a16af4a7e6117a2b857a2721a277c9418") exit_group(0x0) r3 = socket$inet6(0xa, 0x800, 0x5) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000600)=0x6, 0x4) 10:14:06 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "679412ae9bfd232b140d6f8e58bceddf531a75993c08081302d92c710859d2888ce734b79d1a954adffff5bf374e6fd124cf0e4ee92579986c0687b87724f7a7"}, 0x48, 0xfffffffffffffffb) r0 = syz_io_uring_setup(0x4195, &(0x7f0000000080), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000540)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x9, 0x5, 0x0, 0x7ff, 0x0, 0x0, {0x0, r5}}, 0xffff) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000380)=0x1e) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000480)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffffffffff4d, 0x5, 0x9, 0x8, 0x9]}, &(0x7f0000000500)=0x78) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r6}}, 0x74f) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x6) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x2ba8, &(0x7f00000003c0)={0x0, 0x8eef, 0x8, 0x0, 0x2d8, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r10}}, 0x74f) syz_io_uring_submit(r8, r9, &(0x7f0000000440)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r3, 0x0, &(0x7f0000000100)="5f59431154e7ad6b952c87b8f13e5b93dcf580224fde2ee49b2a38827d65cfab66129708bd954801893f150a4fa9b2c15ebb22197e63a500e4c4d87e07e132223e1dd22373d382344561003da7", 0x4d, 0x41, 0x0, {0x0, r10}}, 0x80000000) syz_io_uring_submit(r7, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x1, &(0x7f00000001c0), 0x1, 0x1}, 0x8001) 10:14:06 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000040)={0x0}) wait4(0x0, &(0x7f0000002700), 0x4, &(0x7f0000002740)) process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/66, 0x42}], 0x1, &(0x7f0000002680)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/50, 0x32}, {&(0x7f0000002500)=""/201, 0xc9}, {&(0x7f0000002600)=""/110, 0x6e}], 0x8, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000002800)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r2, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) wait4(r3, &(0x7f0000000080), 0x8, &(0x7f00000001c0)) exit_group(0x0) 10:14:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x9, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x110217400, &(0x7f0000000500)="9b0e984396aaea93b825fdbbeedd64a14ebc82a42786c6f1f9d1c51b05152c8bfc29b19995859eeca00d7ccc7b1fd69bc3c3a0f79bd25b47c0f05bb43770a45168babb0e33edb5376e4a6ac289c0e2760bc240c643717adeb34e6219f9fa5ba7b88e55812e4dbebd3ac7a9994f40bb6940fc4b376ab092adbb116a044377a16f4838669fa2534acb3d2a45031924685482a7e93ed3a254c3f10c20be19c569be96a71001e05e5492223b95b57a9e28e060084229a4d88b00ca4a40467030ae43b59ef6f3db7907b2a10067027c8e09f61921bb0d0a7dd4fb57d7c5613accdbefd9b0883237c5eea35c1f0193f0af178ac2f19c0335e37ce7a5", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="e8a1fddaab43e1c080052227ebdd6d81e322ac9e9b47f419ae9dcc7902e2d1aa05564250019ad09537ea85eae6a8875cf1f3634c21") wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000040)={0x0}) wait4(r1, &(0x7f00000006c0), 0x1, &(0x7f0000000700)) wait4(r0, &(0x7f0000000680), 0x20000000, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) prlimit64(r0, 0xf, &(0x7f0000000040)={0x3, 0x4}, &(0x7f0000000080)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000640)=0x0) wait4(r2, &(0x7f0000000000), 0x2, &(0x7f0000000100)) clone(0x6062035f3238b23b, &(0x7f00000001c0)="dcb84f63eb1af7b9980615db8f4a3f774b072b3b10ad84ebc1f18ba9f8f1535b3afeab6bbdc7b1aed306ca31cedd4ba5329a3b437ec86c8799cebd9d24f8e84a54ef6f0045956d94802a412fc1436e2532d5dca678cdd7f729b004fcd8be0d1ca1e078b633a31ae8ba1eea2dfe097cf9eec76d779de838a7df6764889440e86e852a", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000400)="5b7d528d2dc57ae1af5363dc448701e1ba0efe9f5908960d0aea61f77d4a6bac5aa4e28f62f49c71bc63e3565916605a16f4bbb6fba5ed65ee7c5cf5da1652b9aa299cc34b39ea400b16f40f7da7a56e081c30bc2e56908ec594e54027eb17d8515bc2e97fd7533108d27c27b56756a70f8825828bec5dd470a0eb4fdffeb394c2f88bd1fa6150f1c621c0fc4d9803576dc477a37fbbcfe546feebea152b5e1ec7ef7f18fc50006424fd58cd87f2908f52f19e1a0be0d17fbf9e6a16af4a7e6117a2b857a2721a277c9418") exit_group(0x0) r3 = socket$inet6(0xa, 0x800, 0x5) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000600)=0x6, 0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) clone(0x110217400, &(0x7f0000000500)="9b0e984396aaea93b825fdbbeedd64a14ebc82a42786c6f1f9d1c51b05152c8bfc29b19995859eeca00d7ccc7b1fd69bc3c3a0f79bd25b47c0f05bb43770a45168babb0e33edb5376e4a6ac289c0e2760bc240c643717adeb34e6219f9fa5ba7b88e55812e4dbebd3ac7a9994f40bb6940fc4b376ab092adbb116a044377a16f4838669fa2534acb3d2a45031924685482a7e93ed3a254c3f10c20be19c569be96a71001e05e5492223b95b57a9e28e060084229a4d88b00ca4a40467030ae43b59ef6f3db7907b2a10067027c8e09f61921bb0d0a7dd4fb57d7c5613accdbefd9b0883237c5eea35c1f0193f0af178ac2f19c0335e37ce7a5", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="e8a1fddaab43e1c080052227ebdd6d81e322ac9e9b47f419ae9dcc7902e2d1aa05564250019ad09537ea85eae6a8875cf1f3634c21") (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) (async) ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000040)={0x0}) (async) wait4(r1, &(0x7f00000006c0), 0x1, &(0x7f0000000700)) (async) wait4(r0, &(0x7f0000000680), 0x20000000, 0x0) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) prlimit64(r0, 0xf, &(0x7f0000000040)={0x3, 0x4}, &(0x7f0000000080)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000640)) (async) wait4(r2, &(0x7f0000000000), 0x2, &(0x7f0000000100)) (async) clone(0x6062035f3238b23b, &(0x7f00000001c0)="dcb84f63eb1af7b9980615db8f4a3f774b072b3b10ad84ebc1f18ba9f8f1535b3afeab6bbdc7b1aed306ca31cedd4ba5329a3b437ec86c8799cebd9d24f8e84a54ef6f0045956d94802a412fc1436e2532d5dca678cdd7f729b004fcd8be0d1ca1e078b633a31ae8ba1eea2dfe097cf9eec76d779de838a7df6764889440e86e852a", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000400)="5b7d528d2dc57ae1af5363dc448701e1ba0efe9f5908960d0aea61f77d4a6bac5aa4e28f62f49c71bc63e3565916605a16f4bbb6fba5ed65ee7c5cf5da1652b9aa299cc34b39ea400b16f40f7da7a56e081c30bc2e56908ec594e54027eb17d8515bc2e97fd7533108d27c27b56756a70f8825828bec5dd470a0eb4fdffeb394c2f88bd1fa6150f1c621c0fc4d9803576dc477a37fbbcfe546feebea152b5e1ec7ef7f18fc50006424fd58cd87f2908f52f19e1a0be0d17fbf9e6a16af4a7e6117a2b857a2721a277c9418") (async) exit_group(0x0) (async) socket$inet6(0xa, 0x800, 0x5) (async) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000600)=0x6, 0x4) (async) 10:14:06 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "679412ae9bfd232b140d6f8e58bceddf531a75993c08081302d92c710859d2888ce734b79d1a954adffff5bf374e6fd124cf0e4ee92579986c0687b87724f7a7"}, 0x48, 0xfffffffffffffffb) r0 = syz_io_uring_setup(0x4195, &(0x7f0000000080), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000540)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x9, 0x5, 0x0, 0x7ff, 0x0, 0x0, {0x0, r5}}, 0xffff) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000380)=0x1e) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000480)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffffffffff4d, 0x5, 0x9, 0x8, 0x9]}, &(0x7f0000000500)=0x78) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r6}}, 0x74f) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x6) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) syz_io_uring_setup(0x2ba8, &(0x7f00000003c0)={0x0, 0x8eef, 0x8, 0x0, 0x2d8, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r10}}, 0x74f) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000440)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r3, 0x0, &(0x7f0000000100)="5f59431154e7ad6b952c87b8f13e5b93dcf580224fde2ee49b2a38827d65cfab66129708bd954801893f150a4fa9b2c15ebb22197e63a500e4c4d87e07e132223e1dd22373d382344561003da7", 0x4d, 0x41, 0x0, {0x0, r10}}, 0x80000000) (async) syz_io_uring_submit(r7, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x1, &(0x7f00000001c0), 0x1, 0x1}, 0x8001) 10:14:06 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000040)={0x0}) (async) wait4(0x0, &(0x7f0000002700), 0x4, &(0x7f0000002740)) (async) process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/66, 0x42}], 0x1, &(0x7f0000002680)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/50, 0x32}, {&(0x7f0000002500)=""/201, 0xc9}, {&(0x7f0000002600)=""/110, 0x6e}], 0x8, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000002800)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r2, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) wait4(r3, &(0x7f0000000080), 0x8, &(0x7f00000001c0)) exit_group(0x0) 10:14:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async, rerun: 64) r0 = gettid() (rerun: 64) clone(0x110217400, &(0x7f0000000500)="9b0e984396aaea93b825fdbbeedd64a14ebc82a42786c6f1f9d1c51b05152c8bfc29b19995859eeca00d7ccc7b1fd69bc3c3a0f79bd25b47c0f05bb43770a45168babb0e33edb5376e4a6ac289c0e2760bc240c643717adeb34e6219f9fa5ba7b88e55812e4dbebd3ac7a9994f40bb6940fc4b376ab092adbb116a044377a16f4838669fa2534acb3d2a45031924685482a7e93ed3a254c3f10c20be19c569be96a71001e05e5492223b95b57a9e28e060084229a4d88b00ca4a40467030ae43b59ef6f3db7907b2a10067027c8e09f61921bb0d0a7dd4fb57d7c5613accdbefd9b0883237c5eea35c1f0193f0af178ac2f19c0335e37ce7a5", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="e8a1fddaab43e1c080052227ebdd6d81e322ac9e9b47f419ae9dcc7902e2d1aa05564250019ad09537ea85eae6a8875cf1f3634c21") (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000040)={0x0}) (async) wait4(r1, &(0x7f00000006c0), 0x1, &(0x7f0000000700)) (async) wait4(r0, &(0x7f0000000680), 0x20000000, 0x0) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 64) prlimit64(r0, 0xf, &(0x7f0000000040)={0x3, 0x4}, &(0x7f0000000080)) (async, rerun: 64) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000640)=0x0) wait4(r2, &(0x7f0000000000), 0x2, &(0x7f0000000100)) (async) clone(0x6062035f3238b23b, &(0x7f00000001c0)="dcb84f63eb1af7b9980615db8f4a3f774b072b3b10ad84ebc1f18ba9f8f1535b3afeab6bbdc7b1aed306ca31cedd4ba5329a3b437ec86c8799cebd9d24f8e84a54ef6f0045956d94802a412fc1436e2532d5dca678cdd7f729b004fcd8be0d1ca1e078b633a31ae8ba1eea2dfe097cf9eec76d779de838a7df6764889440e86e852a", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000400)="5b7d528d2dc57ae1af5363dc448701e1ba0efe9f5908960d0aea61f77d4a6bac5aa4e28f62f49c71bc63e3565916605a16f4bbb6fba5ed65ee7c5cf5da1652b9aa299cc34b39ea400b16f40f7da7a56e081c30bc2e56908ec594e54027eb17d8515bc2e97fd7533108d27c27b56756a70f8825828bec5dd470a0eb4fdffeb394c2f88bd1fa6150f1c621c0fc4d9803576dc477a37fbbcfe546feebea152b5e1ec7ef7f18fc50006424fd58cd87f2908f52f19e1a0be0d17fbf9e6a16af4a7e6117a2b857a2721a277c9418") (async) exit_group(0x0) r3 = socket$inet6(0xa, 0x800, 0x5) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000600)=0x6, 0x4) 10:14:06 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0xa, 0x0, 0x0, 0xf5ffffff) [ 506.142568][T14868] FAULT_INJECTION: forcing a failure. [ 506.142568][T14868] name failslab, interval 1, probability 0, space 0, times 0 [ 506.163000][T14868] CPU: 0 PID: 14868 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 506.173269][T14868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.183324][T14868] Call Trace: [ 506.186626][T14868] dump_stack_lvl+0x1e2/0x24b [ 506.191311][T14868] ? devkmsg_release+0x127/0x127 [ 506.196259][T14868] ? show_regs_print_info+0x18/0x18 [ 506.201481][T14868] ? __kasan_check_write+0x14/0x20 [ 506.206601][T14868] ? __io_queue_sqe+0x1561/0x2fa0 [ 506.211605][T14868] dump_stack+0x15/0x1d [ 506.215750][T14868] should_fail+0x3c0/0x510 [ 506.220179][T14868] __should_failslab+0x9f/0xe0 [ 506.224977][T14868] should_failslab+0x9/0x20 [ 506.229462][T14868] kmem_cache_alloc_bulk+0x30/0x3f0 [ 506.234737][T14868] io_submit_sqes+0x6bf/0x2da0 [ 506.241054][T14868] ? io_uring_add_task_file+0x290/0x290 [ 506.246583][T14868] ? security_file_permission+0xa8/0xc0 [ 506.252106][T14868] ? __kasan_check_write+0x14/0x20 [ 506.257193][T14868] ? mutex_lock+0xa6/0x110 [ 506.261693][T14868] ? io_uring_add_task_file+0x127/0x290 [ 506.267216][T14868] ? __fdget+0x1b5/0x240 [ 506.271439][T14868] __se_sys_io_uring_enter+0x322/0x12b0 [ 506.276991][T14868] ? __fget_files+0x39e/0x3d0 [ 506.281647][T14868] ? __kasan_check_write+0x14/0x20 [ 506.286753][T14868] ? fput_many+0x47/0x1a0 [ 506.291079][T14868] ? __x64_sys_io_uring_enter+0x100/0x100 [ 506.296801][T14868] ? __ia32_sys_read+0x90/0x90 [ 506.301554][T14868] ? debug_smp_processor_id+0x1c/0x20 [ 506.306917][T14868] __x64_sys_io_uring_enter+0xe5/0x100 [ 506.312389][T14868] do_syscall_64+0x31/0x70 [ 506.316786][T14868] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 506.322655][T14868] RIP: 0033:0x7fc57b044e99 [ 506.327064][T14868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 506.346649][T14868] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 506.355049][T14868] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 506.363001][T14868] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 506.370954][T14868] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 506.378910][T14868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:14:06 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 13) 10:14:06 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async, rerun: 64) wait4(0x0, 0x0, 0x80000002, 0x0) (async, rerun: 64) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000040)={0x0}) wait4(0x0, &(0x7f0000002700), 0x4, &(0x7f0000002740)) (async) process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/66, 0x42}], 0x1, &(0x7f0000002680)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/50, 0x32}, {&(0x7f0000002500)=""/201, 0xc9}, {&(0x7f0000002600)=""/110, 0x6e}], 0x8, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) (async, rerun: 64) ptrace$cont(0x18, r0, 0x0, 0x0) (async, rerun: 64) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000002800)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) (async) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r2, 0x1, 0x0, 0x7fffffff) (async) ioctl$FS_IOC_RESVSP(r2, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) (async, rerun: 64) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) (rerun: 64) wait4(r3, &(0x7f0000000080), 0x8, &(0x7f00000001c0)) (async) exit_group(0x0) 10:14:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0xb, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) clone(0x20c000, &(0x7f00000001c0)="c9b97661f9774eeb90dc94d8326912262a63c54c84b7861d0fc8628c4c68c6e867562e86f553821608f92ae8ad296fe302005ce6f4da04e30349ae0c8c81d8459d8a33aa8e1f33cd52644700793dd492b54571a9346d55b7092aa4", &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)="81dca2ad9d574ac20b3c6a122b1bde56110e9172b064587ac27207b514750c60d76fa8a8cc6426de7595fdc51ad04cbb91f86a94b18e954f00d0e31c3b2cb94900e2d02a98a352fd41575225") exit_group(0x0) 10:14:06 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "679412ae9bfd232b140d6f8e58bceddf531a75993c08081302d92c710859d2888ce734b79d1a954adffff5bf374e6fd124cf0e4ee92579986c0687b87724f7a7"}, 0x48, 0xfffffffffffffffb) r0 = syz_io_uring_setup(0x4195, &(0x7f0000000080), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000540)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x9, 0x5, 0x0, 0x7ff, 0x0, 0x0, {0x0, r5}}, 0xffff) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000380)=0x1e) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000480)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffffffffff4d, 0x5, 0x9, 0x8, 0x9]}, &(0x7f0000000500)=0x78) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r6}}, 0x74f) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x6) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) syz_io_uring_setup(0x2ba8, &(0x7f00000003c0)={0x0, 0x8eef, 0x8, 0x0, 0x2d8, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd, 0x8000, 0x0, 0x3, 0x0, 0x1, {0x0, r10}}, 0x74f) syz_io_uring_submit(r8, r9, &(0x7f0000000440)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r3, 0x0, &(0x7f0000000100)="5f59431154e7ad6b952c87b8f13e5b93dcf580224fde2ee49b2a38827d65cfab66129708bd954801893f150a4fa9b2c15ebb22197e63a500e4c4d87e07e132223e1dd22373d382344561003da7", 0x4d, 0x41, 0x0, {0x0, r10}}, 0x80000000) syz_io_uring_submit(r7, r9, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x1, &(0x7f00000001c0), 0x1, 0x1}, 0x8001) [ 506.386860][T14868] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 10:14:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) clone(0x20c000, &(0x7f00000001c0)="c9b97661f9774eeb90dc94d8326912262a63c54c84b7861d0fc8628c4c68c6e867562e86f553821608f92ae8ad296fe302005ce6f4da04e30349ae0c8c81d8459d8a33aa8e1f33cd52644700793dd492b54571a9346d55b7092aa4", &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)="81dca2ad9d574ac20b3c6a122b1bde56110e9172b064587ac27207b514750c60d76fa8a8cc6426de7595fdc51ad04cbb91f86a94b18e954f00d0e31c3b2cb94900e2d02a98a352fd41575225") (async) exit_group(0x0) 10:14:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0xc, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 506.446537][T15292] FAULT_INJECTION: forcing a failure. [ 506.446537][T15292] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 506.460212][T15292] CPU: 0 PID: 15292 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 506.470461][T15292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.480632][T15292] Call Trace: [ 506.483926][T15292] dump_stack_lvl+0x1e2/0x24b [ 506.488612][T15292] ? show_regs_print_info+0x18/0x18 10:14:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0xd, 0x0, 0x0, 0xf5ffffff) 10:14:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async, rerun: 32) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) (async, rerun: 32) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async, rerun: 32) tkill(r0, 0x38) (async, rerun: 32) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 32) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async, rerun: 32) clone(0x20c000, &(0x7f00000001c0)="c9b97661f9774eeb90dc94d8326912262a63c54c84b7861d0fc8628c4c68c6e867562e86f553821608f92ae8ad296fe302005ce6f4da04e30349ae0c8c81d8459d8a33aa8e1f33cd52644700793dd492b54571a9346d55b7092aa4", &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)="81dca2ad9d574ac20b3c6a122b1bde56110e9172b064587ac27207b514750c60d76fa8a8cc6426de7595fdc51ad04cbb91f86a94b18e954f00d0e31c3b2cb94900e2d02a98a352fd41575225") (async) exit_group(0x0) 10:14:06 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0xe, 0x0, 0x0, 0xf5ffffff) [ 506.493822][T15292] dump_stack+0x15/0x1d [ 506.497995][T15292] should_fail+0x3c0/0x510 [ 506.502420][T15292] should_fail_alloc_page+0x4f/0x60 [ 506.507624][T15292] __alloc_pages_nodemask+0x1b9/0x820 [ 506.513003][T15292] ? io_queue_sqe+0x1180/0x1180 [ 506.517861][T15292] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 506.523676][T15292] ? __kasan_check_write+0x14/0x20 [ 506.528804][T15292] ? __io_queue_sqe+0x1561/0x2fa0 [ 506.533846][T15292] allocate_slab+0x6b/0x350 [ 506.538360][T15292] ___slab_alloc+0x143/0x2f0 [ 506.542957][T15292] ? io_submit_sqes+0x6bf/0x2da0 [ 506.547904][T15292] kmem_cache_alloc_bulk+0x167/0x3f0 [ 506.553208][T15292] io_submit_sqes+0x6bf/0x2da0 [ 506.557986][T15292] ? io_uring_add_task_file+0x290/0x290 [ 506.563625][T15292] ? security_file_permission+0xa8/0xc0 [ 506.569183][T15292] ? __kasan_check_write+0x14/0x20 [ 506.574300][T15292] ? mutex_lock+0xa6/0x110 [ 506.578723][T15292] ? io_uring_add_task_file+0x127/0x290 [ 506.584421][T15292] ? __fdget+0x1b5/0x240 [ 506.588787][T15292] __se_sys_io_uring_enter+0x322/0x12b0 [ 506.594314][T15292] ? __fget_files+0x39e/0x3d0 [ 506.598972][T15292] ? __kasan_check_write+0x14/0x20 [ 506.604152][T15292] ? fput_many+0x47/0x1a0 [ 506.608458][T15292] ? __x64_sys_io_uring_enter+0x100/0x100 [ 506.614153][T15292] ? __ia32_sys_read+0x90/0x90 [ 506.618891][T15292] ? debug_smp_processor_id+0x1c/0x20 [ 506.624333][T15292] __x64_sys_io_uring_enter+0xe5/0x100 [ 506.629777][T15292] do_syscall_64+0x31/0x70 [ 506.634272][T15292] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 506.640137][T15292] RIP: 0033:0x7fc57b044e99 [ 506.644550][T15292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 506.664274][T15292] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 506.672669][T15292] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 506.680628][T15292] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 506.688583][T15292] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff 10:14:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 14) 10:14:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}, {&(0x7f00000001c0)="dfbfa123e1f7315c1fa881858cdfd7a53c8a86ca601bea8c5011399d7e10282355f7df74769d9a03ed9f10ee2b3a969ce3f3e6c269ee78d75ecc00c8658eac92ea621cccc428feb88bd8101e42a6c505cb0b8c3222b6754be2f02eb9a4ec3e593a8354c7", 0x64}], 0x5, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) tkill(r2, 0x7) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000100)) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) read$FUSE(r3, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r4, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) 10:14:07 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:07 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0xf, 0x0, 0x0, 0xf5ffffff) 10:14:07 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@rand_addr=0x64010102, @local}, 0xc) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x83500, 0x0) r6 = signalfd4(r5, &(0x7f0000000380)={[0x87]}, 0x8, 0x0) r7 = socket(0x10, 0x3, 0x0) dup3(r7, r7, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_buf(r7, 0x0, 0x26, &(0x7f00000002c0)="2a1318bb3c0bd60e8023c2a3aad3a810e31a63794d805c210a3d48c23c6f93265c7529cbcd2276ddf96672e72711915b7448c34958593711ac48ec52827b4d5642a70a303ef7e4af2a4df6", 0x4b) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000100)={@remote, @empty, r9}, 0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r10 = signalfd(r6, &(0x7f0000000140)={[0x8000]}, 0x8) bind$nfc_llcp(r10, &(0x7f00000003c0)={0x27, 0x0, 0x1, 0x7, 0x1f, 0x1, "60153e30257c5ccc77a0b6993ecdeb671bb32b65ce874679110aceb1a1592620ee812d63f8933c44c058b62fc3b0ca6802dc3a6c3b08c50eb03ba59d9f2558", 0x1c}, 0x60) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:07 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:14:07 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) ptrace$cont(0x18, r0, 0x0, 0x0) (rerun: 64) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) [ 506.696540][T15292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.704487][T15292] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 10:14:07 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@rand_addr=0x64010102, @local}, 0xc) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x83500, 0x0) r6 = signalfd4(r5, &(0x7f0000000380)={[0x87]}, 0x8, 0x0) r7 = socket(0x10, 0x3, 0x0) dup3(r7, r7, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_buf(r7, 0x0, 0x26, &(0x7f00000002c0)="2a1318bb3c0bd60e8023c2a3aad3a810e31a63794d805c210a3d48c23c6f93265c7529cbcd2276ddf96672e72711915b7448c34958593711ac48ec52827b4d5642a70a303ef7e4af2a4df6", 0x4b) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000100)={@remote, @empty, r9}, 0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r10 = signalfd(r6, &(0x7f0000000140)={[0x8000]}, 0x8) bind$nfc_llcp(r10, &(0x7f00000003c0)={0x27, 0x0, 0x1, 0x7, 0x1f, 0x1, "60153e30257c5ccc77a0b6993ecdeb671bb32b65ce874679110aceb1a1592620ee812d63f8933c44c058b62fc3b0ca6802dc3a6c3b08c50eb03ba59d9f2558", 0x1c}, 0x60) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@rand_addr=0x64010102, @local}, 0xc) (async) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x83500, 0x0) (async) signalfd4(r5, &(0x7f0000000380)={[0x87]}, 0x8, 0x0) (async) socket(0x10, 0x3, 0x0) (async) dup3(r7, r7, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_buf(r7, 0x0, 0x26, &(0x7f00000002c0)="2a1318bb3c0bd60e8023c2a3aad3a810e31a63794d805c210a3d48c23c6f93265c7529cbcd2276ddf96672e72711915b7448c34958593711ac48ec52827b4d5642a70a303ef7e4af2a4df6", 0x4b) (async) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000100)={@remote, @empty, r9}, 0xc) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) signalfd(r6, &(0x7f0000000140)={[0x8000]}, 0x8) (async) bind$nfc_llcp(r10, &(0x7f00000003c0)={0x27, 0x0, 0x1, 0x7, 0x1f, 0x1, "60153e30257c5ccc77a0b6993ecdeb671bb32b65ce874679110aceb1a1592620ee812d63f8933c44c058b62fc3b0ca6802dc3a6c3b08c50eb03ba59d9f2558", 0x1c}, 0x60) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) 10:14:07 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x10, 0x0, 0x0, 0xf5ffffff) 10:14:07 executing program 2: syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:07 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@rand_addr=0x64010102, @local}, 0xc) (async, rerun: 32) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x83500, 0x0) (rerun: 32) r6 = signalfd4(r5, &(0x7f0000000380)={[0x87]}, 0x8, 0x0) r7 = socket(0x10, 0x3, 0x0) dup3(r7, r7, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async, rerun: 32) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) setsockopt$inet_buf(r7, 0x0, 0x26, &(0x7f00000002c0)="2a1318bb3c0bd60e8023c2a3aad3a810e31a63794d805c210a3d48c23c6f93265c7529cbcd2276ddf96672e72711915b7448c34958593711ac48ec52827b4d5642a70a303ef7e4af2a4df6", 0x4b) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000100)={@remote, @empty, r9}, 0xc) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) r10 = signalfd(r6, &(0x7f0000000140)={[0x8000]}, 0x8) bind$nfc_llcp(r10, &(0x7f00000003c0)={0x27, 0x0, 0x1, 0x7, 0x1f, 0x1, "60153e30257c5ccc77a0b6993ecdeb671bb32b65ce874679110aceb1a1592620ee812d63f8933c44c058b62fc3b0ca6802dc3a6c3b08c50eb03ba59d9f2558", 0x1c}, 0x60) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) [ 506.774175][T15706] FAULT_INJECTION: forcing a failure. [ 506.774175][T15706] name failslab, interval 1, probability 0, space 0, times 0 [ 506.821802][T15706] CPU: 1 PID: 15706 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 506.832080][T15706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.842152][T15706] Call Trace: [ 506.845465][T15706] dump_stack_lvl+0x1e2/0x24b [ 506.850156][T15706] ? devkmsg_release+0x127/0x127 [ 506.855101][T15706] ? __io_free_req+0x253/0x380 [ 506.859880][T15706] ? show_regs_print_info+0x18/0x18 [ 506.865092][T15706] ? __io_queue_sqe+0x1561/0x2fa0 10:14:07 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) (async) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) [ 506.870116][T15706] dump_stack+0x15/0x1d [ 506.874262][T15706] should_fail+0x3c0/0x510 [ 506.878680][T15706] __should_failslab+0x9f/0xe0 [ 506.883449][T15706] should_failslab+0x9/0x20 [ 506.887954][T15706] kmem_cache_alloc_bulk+0x30/0x3f0 [ 506.893154][T15706] io_submit_sqes+0x6bf/0x2da0 [ 506.897926][T15706] ? io_uring_add_task_file+0x290/0x290 [ 506.903476][T15706] ? security_file_permission+0xa8/0xc0 [ 506.909027][T15706] ? __kasan_check_write+0x14/0x20 [ 506.914140][T15706] ? mutex_lock+0xa6/0x110 [ 506.918736][T15706] ? io_uring_add_task_file+0x127/0x290 [ 506.924288][T15706] ? __fdget+0x1b5/0x240 [ 506.928655][T15706] __se_sys_io_uring_enter+0x322/0x12b0 [ 506.934209][T15706] ? __fget_files+0x39e/0x3d0 [ 506.938901][T15706] ? __kasan_check_write+0x14/0x20 [ 506.944019][T15706] ? fput_many+0x47/0x1a0 [ 506.948359][T15706] ? __x64_sys_io_uring_enter+0x100/0x100 [ 506.954086][T15706] ? __ia32_sys_read+0x90/0x90 [ 506.958845][T15706] ? debug_smp_processor_id+0x1c/0x20 [ 506.964192][T15706] __x64_sys_io_uring_enter+0xe5/0x100 [ 506.969634][T15706] do_syscall_64+0x31/0x70 [ 506.974024][T15706] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 506.979890][T15706] RIP: 0033:0x7fc57b044e99 [ 506.984305][T15706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 507.003888][T15706] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 507.012277][T15706] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 507.020231][T15706] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 507.028184][T15706] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 507.036218][T15706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.044251][T15706] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 10:14:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 15) 10:14:07 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) flock(r4, 0x8) 10:14:07 executing program 1: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x8, 0x74, 0x1, 0x8, 0x0, 0x51aa8f7e, 0x40c20, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x1, @perf_config_ext={0x0, 0x7fffffff}, 0x4410, 0x1000, 0x20, 0x2, 0xff, 0x9, 0x1, 0x0, 0x8, 0x0, 0x80}, r0, 0xc, 0xffffffffffffffff, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f00c9af43964d3838b8"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xfffff025, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x2000800}, 0x2000c000) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/48, 0x30}], 0x7, &(0x7f0000000740)=[{&(0x7f0000000700)}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x5) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x5c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044008}, 0x40000) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) wait4(r3, &(0x7f0000000000), 0x40000000, &(0x7f0000000280)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000b80)=[{&(0x7f00000010c0)=""/249, 0xf9}, {&(0x7f0000000a80)=""/201, 0xc9}], 0x2, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0xa0}}], 0x2, 0x100, &(0x7f0000000d00)={0x77359400}) rt_sigqueueinfo(r4, 0x23, &(0x7f0000000d40)={0x13, 0x7, 0xfffff800}) ptrace$setregs(0xd, r4, 0x1ff, &(0x7f0000000ec0)="3a5ded003341bb2bd715aaf0aaa3dcdd7e7a8b6d6b13110df449") 10:14:07 executing program 2: syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:07 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x11, 0x0, 0x0, 0xf5ffffff) 10:14:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}, {&(0x7f00000001c0)="dfbfa123e1f7315c1fa881858cdfd7a53c8a86ca601bea8c5011399d7e10282355f7df74769d9a03ed9f10ee2b3a969ce3f3e6c269ee78d75ecc00c8658eac92ea621cccc428feb88bd8101e42a6c505cb0b8c3222b6754be2f02eb9a4ec3e593a8354c7", 0x64}], 0x5, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) (async) tkill(r2, 0x7) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000100)) (async) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x7fffffff) (async) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async) read$FUSE(r3, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r4, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) 10:14:07 executing program 1: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x8, 0x74, 0x1, 0x8, 0x0, 0x51aa8f7e, 0x40c20, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x1, @perf_config_ext={0x0, 0x7fffffff}, 0x4410, 0x1000, 0x20, 0x2, 0xff, 0x9, 0x1, 0x0, 0x8, 0x0, 0x80}, r0, 0xc, 0xffffffffffffffff, 0x9) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f00c9af43964d3838b8"], 0x2c}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xfffff025, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x2000800}, 0x2000c000) (async) r3 = gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/48, 0x30}], 0x7, &(0x7f0000000740)=[{&(0x7f0000000700)}], 0x1, 0x0) (async) ptrace$setopts(0x4206, r3, 0x0, 0x5) (async) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x5c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044008}, 0x40000) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) (async) wait4(r3, &(0x7f0000000000), 0x40000000, &(0x7f0000000280)) (async) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000b80)=[{&(0x7f00000010c0)=""/249, 0xf9}, {&(0x7f0000000a80)=""/201, 0xc9}], 0x2, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0xa0}}], 0x2, 0x100, &(0x7f0000000d00)={0x77359400}) rt_sigqueueinfo(r4, 0x23, &(0x7f0000000d40)={0x13, 0x7, 0xfffff800}) (async) ptrace$setregs(0xd, r4, 0x1ff, &(0x7f0000000ec0)="3a5ded003341bb2bd715aaf0aaa3dcdd7e7a8b6d6b13110df449") 10:14:07 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x12, 0x0, 0x0, 0xf5ffffff) [ 507.135707][T16161] FAULT_INJECTION: forcing a failure. [ 507.135707][T16161] name failslab, interval 1, probability 0, space 0, times 0 [ 507.154010][T16161] CPU: 1 PID: 16161 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 507.164278][T16161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.174419][T16161] Call Trace: [ 507.177721][T16161] dump_stack_lvl+0x1e2/0x24b 10:14:07 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async, rerun: 32) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) flock(r4, 0x8) [ 507.182406][T16161] ? devkmsg_release+0x127/0x127 [ 507.187348][T16161] ? show_regs_print_info+0x18/0x18 [ 507.192555][T16161] ? __kasan_check_write+0x14/0x20 [ 507.197672][T16161] ? __io_queue_sqe+0x1561/0x2fa0 [ 507.202875][T16161] dump_stack+0x15/0x1d [ 507.207031][T16161] should_fail+0x3c0/0x510 [ 507.211450][T16161] __should_failslab+0x9f/0xe0 [ 507.216220][T16161] should_failslab+0x9/0x20 [ 507.220733][T16161] kmem_cache_alloc_bulk+0x30/0x3f0 [ 507.225939][T16161] io_submit_sqes+0x6bf/0x2da0 [ 507.230816][T16161] ? io_uring_add_task_file+0x290/0x290 [ 507.236370][T16161] ? security_file_permission+0xa8/0xc0 [ 507.241930][T16161] ? __kasan_check_write+0x14/0x20 [ 507.247049][T16161] ? mutex_lock+0xa6/0x110 [ 507.251560][T16161] ? io_uring_add_task_file+0x127/0x290 [ 507.257106][T16161] ? __fdget+0x1b5/0x240 [ 507.261359][T16161] __se_sys_io_uring_enter+0x322/0x12b0 [ 507.266945][T16161] ? __fget_files+0x39e/0x3d0 [ 507.271631][T16161] ? __kasan_check_write+0x14/0x20 [ 507.276764][T16161] ? fput_many+0x47/0x1a0 [ 507.281111][T16161] ? __x64_sys_io_uring_enter+0x100/0x100 [ 507.286839][T16161] ? __ia32_sys_read+0x90/0x90 [ 507.291612][T16161] ? debug_smp_processor_id+0x1c/0x20 [ 507.296996][T16161] __x64_sys_io_uring_enter+0xe5/0x100 [ 507.302464][T16161] do_syscall_64+0x31/0x70 [ 507.306902][T16161] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.312800][T16161] RIP: 0033:0x7fc57b044e99 [ 507.317222][T16161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 507.336832][T16161] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 507.345255][T16161] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 507.353232][T16161] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 507.361209][T16161] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 507.369186][T16161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.377166][T16161] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 10:14:07 executing program 2: syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index}, 0x1) io_uring_enter(0xffffffffffffffff, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:07 executing program 1: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x8, 0x74, 0x1, 0x8, 0x0, 0x51aa8f7e, 0x40c20, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x1, @perf_config_ext={0x0, 0x7fffffff}, 0x4410, 0x1000, 0x20, 0x2, 0xff, 0x9, 0x1, 0x0, 0x8, 0x0, 0x80}, r0, 0xc, 0xffffffffffffffff, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f00c9af43964d3838b8"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xfffff025, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x2000800}, 0x2000c000) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/48, 0x30}], 0x7, &(0x7f0000000740)=[{&(0x7f0000000700)}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x5) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x5c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044008}, 0x40000) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) wait4(r3, &(0x7f0000000000), 0x40000000, &(0x7f0000000280)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000b80)=[{&(0x7f00000010c0)=""/249, 0xf9}, {&(0x7f0000000a80)=""/201, 0xc9}], 0x2, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0xa0}}], 0x2, 0x100, &(0x7f0000000d00)={0x77359400}) rt_sigqueueinfo(r4, 0x23, &(0x7f0000000d40)={0x13, 0x7, 0xfffff800}) ptrace$setregs(0xd, r4, 0x1ff, &(0x7f0000000ec0)="3a5ded003341bb2bd715aaf0aaa3dcdd7e7a8b6d6b13110df449") getpgrp(0xffffffffffffffff) (async) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x8, 0x74, 0x1, 0x8, 0x0, 0x51aa8f7e, 0x40c20, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x1, @perf_config_ext={0x0, 0x7fffffff}, 0x4410, 0x1000, 0x20, 0x2, 0xff, 0x9, 0x1, 0x0, 0x8, 0x0, 0x80}, r0, 0xc, 0xffffffffffffffff, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f00c9af43964d3838b8"], 0x2c}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xfffff025, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x2000800}, 0x2000c000) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) process_vm_writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/48, 0x30}], 0x7, &(0x7f0000000740)=[{&(0x7f0000000700)}], 0x1, 0x0) (async) ptrace$setopts(0x4206, r3, 0x0, 0x5) (async) tkill(r3, 0x38) (async) ptrace$cont(0x18, r3, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x5c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044008}, 0x40000) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) (async) wait4(r3, &(0x7f0000000000), 0x40000000, &(0x7f0000000280)) (async) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000b80)=[{&(0x7f00000010c0)=""/249, 0xf9}, {&(0x7f0000000a80)=""/201, 0xc9}], 0x2, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}}], 0x2, 0x100, &(0x7f0000000d00)={0x77359400}) (async) rt_sigqueueinfo(r4, 0x23, &(0x7f0000000d40)={0x13, 0x7, 0xfffff800}) (async) ptrace$setregs(0xd, r4, 0x1ff, &(0x7f0000000ec0)="3a5ded003341bb2bd715aaf0aaa3dcdd7e7a8b6d6b13110df449") (async) 10:14:07 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 16) 10:14:07 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) flock(r4, 0x8) 10:14:07 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x13, 0x0, 0x0, 0xf5ffffff) 10:14:07 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:07 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) clone3(&(0x7f0000000540)={0x20a0000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x14}, &(0x7f0000000400)=""/199, 0xc7, &(0x7f0000000380)=""/49, &(0x7f0000000500)=[r1, r1, r1, r1], 0x4}, 0x58) wait4(r2, &(0x7f0000000280), 0x2, &(0x7f0000000100)) exit_group(0x0) clone(0x0, &(0x7f0000000040)="ce2fdd773c98c965f7173c3f02b3fe503605c55886", &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)="a9e671c466fa43b5d8e2ab28d419ff54eabe399cd9bdadc8cabd4736da1d67135d832b3fc0829908df2f13549e1d5498b5c8030eeaed3401b206fc416fc827e49a21ed067684e453bab3d0261868ac6ad0e583dbe44ad1bf1372d5f5664255c5625c5229a7af47b20ed193188ef0be4d04a1c07a5bd65a57fef6") 10:14:07 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x10000, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x3, 0x2, &(0x7f0000000140)="09ae8068ca88304be07906ddd6050a9dd7846074e6504590e1648c04f83e612eebdf192498618a7ccaeac9e386c284ecad67933121d593964505095ed5a42d3651cb308468a5a472564f3c309317652e9cc8603d8dafbbe32d1f4f3c5d1882af6877f5c4c94c5be374619dd2183c2a5bfe6d4ac7c579420ed528d356caed2640649e9bee2382701d3cc9c1dd2a11d083b4ccae4b5c7abf1b43cdf55833c472b7b5af84a6ba9491913168c0aafe475ce054a21fd95263666668c69832dc11e87b34d922463cc2048aa52efb", 0x80000000, 0x0, 0x0, {0x3, r4}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x3, 0x2, 0x0, 0x5, 0x0, 0x1}, 0x5) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) syz_io_uring_setup(0x3352, &(0x7f0000000380)={0x0, 0x2812, 0x8, 0x1, 0x23, 0x0, r0}, &(0x7f0000147000/0x3000)=nil, &(0x7f0000143000/0x12000)=nil, &(0x7f0000000240), &(0x7f0000000400)) [ 507.464023][T16383] FAULT_INJECTION: forcing a failure. [ 507.464023][T16383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 507.524201][T16383] CPU: 1 PID: 16383 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 507.534474][T16383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.544528][T16383] Call Trace: [ 507.547828][T16383] dump_stack_lvl+0x1e2/0x24b [ 507.552516][T16383] ? show_regs_print_info+0x18/0x18 [ 507.557719][T16383] dump_stack+0x15/0x1d [ 507.561880][T16383] should_fail+0x3c0/0x510 [ 507.566301][T16383] should_fail_alloc_page+0x4f/0x60 [ 507.571498][T16383] __alloc_pages_nodemask+0x1b9/0x820 [ 507.576880][T16383] ? io_queue_sqe+0x1180/0x1180 [ 507.581735][T16383] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 507.587285][T16383] ? __kasan_check_write+0x14/0x20 [ 507.592400][T16383] ? __io_queue_sqe+0x1561/0x2fa0 [ 507.597429][T16383] allocate_slab+0x6b/0x350 [ 507.601937][T16383] ___slab_alloc+0x143/0x2f0 [ 507.606531][T16383] ? io_submit_sqes+0x6bf/0x2da0 [ 507.611473][T16383] kmem_cache_alloc_bulk+0x167/0x3f0 [ 507.616767][T16383] io_submit_sqes+0x6bf/0x2da0 [ 507.621547][T16383] ? io_uring_add_task_file+0x290/0x290 [ 507.627095][T16383] ? security_file_permission+0xa8/0xc0 [ 507.632648][T16383] ? __kasan_check_write+0x14/0x20 [ 507.637764][T16383] ? mutex_lock+0xa6/0x110 [ 507.642187][T16383] ? io_uring_add_task_file+0x127/0x290 [ 507.648265][T16383] ? __fdget+0x1b5/0x240 [ 507.652511][T16383] __se_sys_io_uring_enter+0x322/0x12b0 [ 507.658062][T16383] ? __fget_files+0x39e/0x3d0 [ 507.662752][T16383] ? __kasan_check_write+0x14/0x20 [ 507.667874][T16383] ? fput_many+0x47/0x1a0 [ 507.672207][T16383] ? __x64_sys_io_uring_enter+0x100/0x100 [ 507.677930][T16383] ? __ia32_sys_read+0x90/0x90 [ 507.682707][T16383] ? debug_smp_processor_id+0x1c/0x20 [ 507.688179][T16383] __x64_sys_io_uring_enter+0xe5/0x100 [ 507.693641][T16383] do_syscall_64+0x31/0x70 [ 507.698100][T16383] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.703995][T16383] RIP: 0033:0x7fc57b044e99 [ 507.708496][T16383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 507.728106][T16383] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 507.736526][T16383] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 507.745044][T16383] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 507.753108][T16383] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 507.761080][T16383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.769053][T16383] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 [ 508.054357][T20005] device bridge_slave_1 left promiscuous mode [ 508.060500][T20005] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.067967][T20005] device bridge_slave_0 left promiscuous mode [ 508.074173][T20005] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.965573][T16509] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.972610][T16509] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.980093][T16509] device bridge_slave_0 entered promiscuous mode [ 508.987016][T16509] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.994027][T16509] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.001501][T16509] device bridge_slave_1 entered promiscuous mode [ 509.027083][T16509] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.034224][T16509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.041452][T16509] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.048483][T16509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.065052][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 509.072633][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.080129][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.095829][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.103923][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.110959][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.118411][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.126661][ T982] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.133670][ T982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.141012][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 509.148917][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 509.159833][ T815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 509.175714][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.183610][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 509.196060][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 509.204599][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 509.212885][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 10:14:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}, {&(0x7f00000001c0)="dfbfa123e1f7315c1fa881858cdfd7a53c8a86ca601bea8c5011399d7e10282355f7df74769d9a03ed9f10ee2b3a969ce3f3e6c269ee78d75ecc00c8658eac92ea621cccc428feb88bd8101e42a6c505cb0b8c3222b6754be2f02eb9a4ec3e593a8354c7", 0x64}], 0x5, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) tkill(r2, 0x7) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000100)) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x1, 0x0, 0x7fffffff) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) read$FUSE(r3, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r4, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) gettid() (async) wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}, {&(0x7f00000001c0)="dfbfa123e1f7315c1fa881858cdfd7a53c8a86ca601bea8c5011399d7e10282355f7df74769d9a03ed9f10ee2b3a969ce3f3e6c269ee78d75ecc00c8658eac92ea621cccc428feb88bd8101e42a6c505cb0b8c3222b6754be2f02eb9a4ec3e593a8354c7", 0x64}], 0x5, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x0) (async) inotify_init1(0x0) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) (async) ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={0x0}) (async) tkill(r2, 0x7) (async) tkill(r0, 0x38) (async) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000100)) (async) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) fallocate(r3, 0x1, 0x0, 0x7fffffff) (async) ioctl$FS_IOC_RESVSP(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0xc0, 0x6}) (async) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) (async) wait4(r4, &(0x7f0000000080), 0x4, &(0x7f00000002c0)) (async) 10:14:09 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x14, 0x0, 0x0, 0xf5ffffff) 10:14:09 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) clone3(&(0x7f0000000540)={0x20a0000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x14}, &(0x7f0000000400)=""/199, 0xc7, &(0x7f0000000380)=""/49, &(0x7f0000000500)=[r1, r1, r1, r1], 0x4}, 0x58) wait4(r2, &(0x7f0000000280), 0x2, &(0x7f0000000100)) (async) exit_group(0x0) (async) clone(0x0, &(0x7f0000000040)="ce2fdd773c98c965f7173c3f02b3fe503605c55886", &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)="a9e671c466fa43b5d8e2ab28d419ff54eabe399cd9bdadc8cabd4736da1d67135d832b3fc0829908df2f13549e1d5498b5c8030eeaed3401b206fc416fc827e49a21ed067684e453bab3d0261868ac6ad0e583dbe44ad1bf1372d5f5664255c5625c5229a7af47b20ed193188ef0be4d04a1c07a5bd65a57fef6") 10:14:09 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:09 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x10000, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x3, 0x2, &(0x7f0000000140)="09ae8068ca88304be07906ddd6050a9dd7846074e6504590e1648c04f83e612eebdf192498618a7ccaeac9e386c284ecad67933121d593964505095ed5a42d3651cb308468a5a472564f3c309317652e9cc8603d8dafbbe32d1f4f3c5d1882af6877f5c4c94c5be374619dd2183c2a5bfe6d4ac7c579420ed528d356caed2640649e9bee2382701d3cc9c1dd2a11d083b4ccae4b5c7abf1b43cdf55833c472b7b5af84a6ba9491913168c0aafe475ce054a21fd95263666668c69832dc11e87b34d922463cc2048aa52efb", 0x80000000, 0x0, 0x0, {0x3, r4}}, 0x6) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x3, 0x2, 0x0, 0x5, 0x0, 0x1}, 0x5) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) syz_io_uring_setup(0x3352, &(0x7f0000000380)={0x0, 0x2812, 0x8, 0x1, 0x23, 0x0, r0}, &(0x7f0000147000/0x3000)=nil, &(0x7f0000143000/0x12000)=nil, &(0x7f0000000240), &(0x7f0000000400)) 10:14:09 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 17) 10:14:09 executing program 2: r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index}, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff) [ 509.221352][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:14:09 executing program 2: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x8010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x114, &(0x7f0000000000)=0x3, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, 0x0}, 0xfffffffe) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) 10:14:09 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x15, 0x0, 0x0, 0xf5ffffff) 10:14:09 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x10000, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x3, 0x2, &(0x7f0000000140)="09ae8068ca88304be07906ddd6050a9dd7846074e6504590e1648c04f83e612eebdf192498618a7ccaeac9e386c284ecad67933121d593964505095ed5a42d3651cb308468a5a472564f3c309317652e9cc8603d8dafbbe32d1f4f3c5d1882af6877f5c4c94c5be374619dd2183c2a5bfe6d4ac7c579420ed528d356caed2640649e9bee2382701d3cc9c1dd2a11d083b4ccae4b5c7abf1b43cdf55833c472b7b5af84a6ba9491913168c0aafe475ce054a21fd95263666668c69832dc11e87b34d922463cc2048aa52efb", 0x80000000, 0x0, 0x0, {0x3, r4}}, 0x6) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x3, 0x2, 0x0, 0x5, 0x0, 0x1}, 0x5) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) syz_io_uring_setup(0x3352, &(0x7f0000000380)={0x0, 0x2812, 0x8, 0x1, 0x23, 0x0, r0}, &(0x7f0000147000/0x3000)=nil, &(0x7f0000143000/0x12000)=nil, &(0x7f0000000240), &(0x7f0000000400)) 10:14:09 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) (async) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) clone3(&(0x7f0000000540)={0x20a0000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x14}, &(0x7f0000000400)=""/199, 0xc7, &(0x7f0000000380)=""/49, &(0x7f0000000500)=[r1, r1, r1, r1], 0x4}, 0x58) wait4(r2, &(0x7f0000000280), 0x2, &(0x7f0000000100)) (async) exit_group(0x0) (async) clone(0x0, &(0x7f0000000040)="ce2fdd773c98c965f7173c3f02b3fe503605c55886", &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)="a9e671c466fa43b5d8e2ab28d419ff54eabe399cd9bdadc8cabd4736da1d67135d832b3fc0829908df2f13549e1d5498b5c8030eeaed3401b206fc416fc827e49a21ed067684e453bab3d0261868ac6ad0e583dbe44ad1bf1372d5f5664255c5625c5229a7af47b20ed193188ef0be4d04a1c07a5bd65a57fef6") [ 509.265755][T16527] FAULT_INJECTION: forcing a failure. [ 509.265755][T16527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 509.289667][T16527] CPU: 1 PID: 16527 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 509.299957][T16527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.310015][T16527] Call Trace: [ 509.313462][T16527] dump_stack_lvl+0x1e2/0x24b [ 509.318121][T16527] ? show_regs_print_info+0x18/0x18 [ 509.323361][T16527] dump_stack+0x15/0x1d [ 509.327581][T16527] should_fail+0x3c0/0x510 [ 509.331973][T16527] should_fail_alloc_page+0x4f/0x60 [ 509.337146][T16527] __alloc_pages_nodemask+0x1b9/0x820 [ 509.342569][T16527] ? io_queue_sqe+0x1180/0x1180 [ 509.347397][T16527] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 509.352925][T16527] ? __kasan_check_write+0x14/0x20 [ 509.358030][T16527] ? __io_queue_sqe+0x1561/0x2fa0 [ 509.363035][T16527] allocate_slab+0x6b/0x350 [ 509.367516][T16527] ___slab_alloc+0x143/0x2f0 [ 509.372171][T16527] ? io_submit_sqes+0x6bf/0x2da0 [ 509.377083][T16527] kmem_cache_alloc_bulk+0x167/0x3f0 [ 509.382347][T16527] io_submit_sqes+0x6bf/0x2da0 [ 509.387091][T16527] ? io_uring_add_task_file+0x290/0x290 [ 509.392612][T16527] ? preempt_schedule_irq+0xef/0x140 [ 509.397882][T16527] ? __kasan_check_write+0x14/0x20 [ 509.402993][T16527] ? mutex_lock+0xa6/0x110 [ 509.407387][T16527] ? io_uring_add_task_file+0x127/0x290 [ 509.412915][T16527] __se_sys_io_uring_enter+0x322/0x12b0 [ 509.418433][T16527] ? __fget_files+0x39e/0x3d0 [ 509.423087][T16527] ? __kasan_check_write+0x14/0x20 [ 509.428172][T16527] ? fput_many+0x47/0x1a0 [ 509.432485][T16527] ? __x64_sys_io_uring_enter+0x100/0x100 [ 509.438179][T16527] ? __ia32_sys_read+0x90/0x90 [ 509.442998][T16527] ? debug_smp_processor_id+0x1c/0x20 [ 509.448362][T16527] __x64_sys_io_uring_enter+0xe5/0x100 [ 509.453805][T16527] do_syscall_64+0x31/0x70 [ 509.458360][T16527] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.464234][T16527] RIP: 0033:0x7fc57b044e99 [ 509.468633][T16527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.488227][T16527] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 509.496621][T16527] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 509.504571][T16527] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 10:14:09 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (fail_nth: 18) [ 509.512523][T16527] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 509.520474][T16527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.528432][T16527] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 10:14:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0xf9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4c24, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe00, 0xfffffffffffffffc, 0xfffffffa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xc, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7be6a16d0539df0000000000000087cfec79b04c3e1fea4b", 0x2c}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$cont(0x1f, r3, 0x1, 0xfefd) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) wait4(r3, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) wait4(r0, &(0x7f0000000080), 0x1, &(0x7f00000001c0)) 10:14:09 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) dup2(r3, r0) 10:14:09 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) wait4(r1, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) exit_group(0x0) 10:14:09 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) wait4(r1, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async, rerun: 64) tkill(r0, 0x38) (async, rerun: 64) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async, rerun: 32) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (rerun: 32) exit_group(0x0) 10:14:09 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) io_uring_enter(r0, 0x4efb, 0x16, 0x0, 0x0, 0xf5ffffff) 10:14:10 executing program 0: r0 = syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) dup2(r3, r0) syz_io_uring_setup(0x4195, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000040)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) (async) io_uring_enter(r0, 0x4efb, 0x0, 0x0, 0x0, 0xf5ffffff) (async) dup2(r3, r0) (async) [ 509.626404][T16926] FAULT_INJECTION: forcing a failure. [ 509.626404][T16926] name failslab, interval 1, probability 0, space 0, times 0 [ 509.643991][T16926] CPU: 1 PID: 16926 Comm: syz-executor.5 Not tainted 5.10.85-syzkaller-00573-gafc997898ece #0 [ 509.654263][T16926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.664395][T16926] Call Trace: [ 509.667676][T16926] dump_stack_lvl+0x1e2/0x24b [ 509.672333][T16926] ? devkmsg_release+0x127/0x127 [ 509.677249][T16926] ? show_regs_print_info+0x18/0x18 [ 509.682443][T16926] ? __kasan_check_write+0x14/0x20 [ 509.687533][T16926] ? __io_queue_sqe+0x1561/0x2fa0 [ 509.692534][T16926] dump_stack+0x15/0x1d [ 509.696670][T16926] should_fail+0x3c0/0x510 [ 509.701065][T16926] __should_failslab+0x9f/0xe0 [ 509.705812][T16926] should_failslab+0x9/0x20 [ 509.710296][T16926] kmem_cache_alloc_bulk+0x30/0x3f0 [ 509.715574][T16926] io_submit_sqes+0x6bf/0x2da0 [ 509.720322][T16926] ? io_uring_add_task_file+0x290/0x290 [ 509.725844][T16926] ? security_file_permission+0xa8/0xc0 [ 509.731369][T16926] ? __kasan_check_write+0x14/0x20 [ 509.736561][T16926] ? mutex_lock+0xa6/0x110 [ 509.740970][T16926] ? io_uring_add_task_file+0x127/0x290 [ 509.746492][T16926] ? __fdget+0x1b5/0x240 [ 509.750718][T16926] __se_sys_io_uring_enter+0x322/0x12b0 [ 509.756240][T16926] ? __fget_files+0x39e/0x3d0 [ 509.760896][T16926] ? __kasan_check_write+0x14/0x20 [ 509.765982][T16926] ? fput_many+0x47/0x1a0 [ 509.770290][T16926] ? __x64_sys_io_uring_enter+0x100/0x100 [ 509.775989][T16926] ? __ia32_sys_read+0x90/0x90 [ 509.780736][T16926] ? debug_smp_processor_id+0x1c/0x20 [ 509.786094][T16926] __x64_sys_io_uring_enter+0xe5/0x100 [ 509.791537][T16926] do_syscall_64+0x31/0x70 [ 509.795934][T16926] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 509.801802][T16926] RIP: 0033:0x7fc57b044e99 [ 509.806201][T16926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.825789][T16926] RSP: 002b:00007fc57a1bb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 509.834181][T16926] RAX: ffffffffffffffda RBX: 00007fc57b157f60 RCX: 00007fc57b044e99 [ 509.842131][T16926] RDX: 0000000000000000 RSI: 0000000000004efb RDI: 0000000000000004 [ 509.850082][T16926] RBP: 00007fc57a1bb1d0 R08: 0000000000000000 R09: 00000000f5ffffff [ 509.858035][T16926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 509.866003][T16926] R13: 00007ffe97b5ccef R14: 00007fc57a1bb300 R15: 0000000000022000 10:14:10 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) (async) r0 = gettid() (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) wait4(r1, 0x0, 0x2, 0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094e7b126b097eaa769be36b2fb7b", 0x15}], 0x4, 0x0) (async) ptrace$setopts(0x4206, r0, 0x0, 0x5) (async) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) (async) wait4(r0, &(0x7f0000000000), 0x8, &(0x7f0000000100)) (async) exit_group(0x0) [ 510.324320][ T7036] device bridge_slave_1 left promiscuous mode [ 510.330499][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.348208][ T7036] device bridge_slave_0 left promiscuous mode [ 510.354511][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.439514][T17381] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.446784][T17381] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.454031][T17381] device bridge_slave_0 entered promiscuous mode [ 511.462593][T17381] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.469716][T17381] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.477149][T17381] device bridge_slave_1 entered promiscuous mode [ 511.502185][T17381] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.509234][T17381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.516507][T17381] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.523865][T17381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.541352][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 511.549384][ T979] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.556838][ T979] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.565375][ T7036] device bridge_slave_1 left promiscuous mode [ 511.571490][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.578895][ T7036] device bridge_slave_0 left promiscuous mode [ 511.585026][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.667881][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 511.676042][ T808] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.683040][ T808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.691653][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 511.699797][ T979] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.706825][ T979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.724680][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 511.732915][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 511.740882][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.749078][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.760129][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 511.773111][ T811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 511.781542][ T811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 512.594898][ T7036] device bridge_slave_1 left promiscuous mode [ 512.601026][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.608454][ T7036] device bridge_slave_0 left promiscuous mode [ 512.614645][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.393631][T17386] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.400689][T17386] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.408172][T17386] device bridge_slave_0 entered promiscuous mode [ 513.415135][T17386] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.422138][T17386] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.429600][T17386] device bridge_slave_1 entered promiscuous mode [ 513.455482][T17386] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.462526][T17386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.469822][T17386] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.476850][T17386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.492739][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 513.500668][ T977] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.507948][ T977] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.516711][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 513.524889][ T808] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.531912][ T808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.545128][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 513.553213][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.560275][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.567846][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 513.575807][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 513.594266][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 513.602849][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 513.611286][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 513.619235][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 513.628678][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 514.164347][T16349] device bridge_slave_1 left promiscuous mode [ 514.170505][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.178153][T16349] device bridge_slave_0 left promiscuous mode [ 514.184449][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.192415][T17391] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.199514][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.207195][T17391] device bridge_slave_0 entered promiscuous mode [ 515.214024][T17391] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.221178][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.228486][T17391] device bridge_slave_1 entered promiscuous mode [ 515.254479][T17391] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.261604][T17391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.268945][T17391] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.276029][T17391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.293078][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 515.300587][ T808] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.308073][ T808] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.317334][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 515.325470][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.332515][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.355268][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.363901][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.372092][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.380620][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 515.388953][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.396103][ T978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.403450][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.411446][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.420058][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 515.428274][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 515.439504][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 515.448112][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 516.034317][ T7036] device bridge_slave_1 left promiscuous mode [ 516.040440][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.047927][ T7036] device bridge_slave_0 left promiscuous mode [ 516.054243][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.979030][T17396] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.986211][T17396] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.993460][T17396] device bridge_slave_0 entered promiscuous mode [ 517.000723][T17396] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.007782][T17396] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.015156][T17396] device bridge_slave_1 entered promiscuous mode [ 517.041169][T17396] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.048225][T17396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.055513][T17396] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.062607][T17396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.079219][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 517.087295][ T808] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.094784][ T808] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.115254][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 517.123544][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 517.131547][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 517.139713][ T808] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.146737][ T808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.154647][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 517.162897][ T808] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.170017][ T808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.177341][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 517.185461][ T808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 517.200082][ T811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 517.209198][ T811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 517.217793][ T811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 517.784439][T16349] device bridge_slave_1 left promiscuous mode [ 517.790574][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.798256][T16349] device bridge_slave_0 left promiscuous mode [ 517.804545][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.799280][T17401] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.806514][T17401] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.813754][T17401] device bridge_slave_0 entered promiscuous mode [ 518.821575][T17401] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.828734][T17401] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.836232][T17401] device bridge_slave_1 entered promiscuous mode [ 518.862650][T17401] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.869734][T17401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.877020][T17401] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.884033][T17401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.900251][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 518.907902][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.915644][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.934777][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 518.943426][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 518.952182][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 518.960331][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.967372][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.974856][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 518.983052][ T982] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.990224][ T982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.997539][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 519.005839][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.017525][ T810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 519.030471][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 519.039951][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 519.674416][T16349] device bridge_slave_1 left promiscuous mode [ 519.680550][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.688084][T16349] device bridge_slave_0 left promiscuous mode [ 519.694283][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.600304][T17406] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.608166][T17406] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.615703][T17406] device bridge_slave_0 entered promiscuous mode [ 520.622722][T17406] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.629937][T17406] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.637322][T17406] device bridge_slave_1 entered promiscuous mode [ 520.672000][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.679433][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.688088][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 520.696758][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.704935][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.711957][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.719560][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.734674][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 520.742903][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.751190][ T813] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.758217][ T813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.765593][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.773461][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 520.783908][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 520.794276][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.805749][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.819029][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 520.827519][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 521.354366][T16349] device bridge_slave_1 left promiscuous mode [ 521.360499][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.368032][T16349] device bridge_slave_0 left promiscuous mode [ 521.374195][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.347328][T17411] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.354752][T17411] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.361989][T17411] device bridge_slave_0 entered promiscuous mode [ 522.368990][T17411] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.376070][T17411] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.383329][T17411] device bridge_slave_1 entered promiscuous mode [ 522.409157][T17411] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.416228][T17411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.423450][T17411] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.430481][T17411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.447205][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.454845][ T977] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.462000][ T977] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.485072][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 522.493322][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 522.501552][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 522.509808][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.519597][ T977] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.526652][ T977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.534169][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.542259][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.549295][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.556586][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.564563][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.576621][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 522.584943][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 523.164313][ T7036] device bridge_slave_1 left promiscuous mode [ 523.170438][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.178001][ T7036] device bridge_slave_0 left promiscuous mode [ 523.184237][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.158625][T17416] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.165861][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.173130][T17416] device bridge_slave_0 entered promiscuous mode [ 524.180269][T17416] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.187341][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.194827][T17416] device bridge_slave_1 entered promiscuous mode [ 524.221466][T17416] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.228526][T17416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.235822][T17416] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.242832][T17416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.259030][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.266831][ T976] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.273982][ T976] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.283691][ T815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.291810][ T815] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.298827][ T815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.314712][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 524.322914][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.331098][ T976] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.338138][ T976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.345519][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.353573][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.370899][ T810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.379283][ T810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 524.387878][ T810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 524.395977][ T810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.034400][ T7036] device bridge_slave_1 left promiscuous mode [ 525.040644][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.048206][ T7036] device bridge_slave_0 left promiscuous mode [ 525.054629][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.974748][T17421] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.981801][T17421] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.989308][T17421] device bridge_slave_0 entered promiscuous mode [ 525.996105][T17421] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.003545][T17421] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.010957][T17421] device bridge_slave_1 entered promiscuous mode [ 526.037697][T17421] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.044758][T17421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.052003][T17421] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.059036][T17421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.075527][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 526.083126][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.090408][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.104835][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.112921][ T982] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.119961][ T982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.127830][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 526.137087][ T982] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.144139][ T982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.151538][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.159567][ T982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 526.170887][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 526.181083][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.195636][ T810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.204428][ T810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 526.212714][ T810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.794391][ T7036] device bridge_slave_1 left promiscuous mode [ 526.800566][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.808122][ T7036] device bridge_slave_0 left promiscuous mode [ 526.814307][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.784281][T17426] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.791461][T17426] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.799012][T17426] device bridge_slave_0 entered promiscuous mode [ 527.805958][T17426] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.813019][T17426] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.820748][T17426] device bridge_slave_1 entered promiscuous mode [ 527.846679][T17426] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.853721][T17426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.861343][T17426] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.868414][T17426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.885548][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 527.893189][ T979] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.900650][ T979] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.924548][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 527.933439][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 527.942094][ T979] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.949141][ T979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.956502][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 527.965012][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 527.973082][ T979] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.980127][ T979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.987444][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 527.995460][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 528.003297][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 528.011312][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 528.019335][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 528.027614][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 528.035820][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 528.043554][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 528.051824][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 528.059981][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 528.068097][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.076292][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.085324][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.093417][ T979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 528.674509][ T7036] device bridge_slave_1 left promiscuous mode [ 528.681003][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.688414][ T7036] device bridge_slave_0 left promiscuous mode [ 528.694635][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.648262][T17431] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.655350][T17431] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.662582][T17431] device bridge_slave_0 entered promiscuous mode [ 529.669574][T17431] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.676604][T17431] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.683982][T17431] device bridge_slave_1 entered promiscuous mode [ 529.710488][T17431] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.717716][T17431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.725074][T17431] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.732078][T17431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.748932][ T815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 529.756700][ T815] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.763945][ T815] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.773066][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 529.781364][ T976] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.788397][ T976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.805187][ T815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 529.813588][ T815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 529.821915][ T815] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.828951][ T815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.836259][ T815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 529.844739][ T815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 529.855230][ T976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 529.870798][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.879353][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.887961][ T977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2021/12/15 10:14:30 executor 2 failed 11 times: executor 2: exit status 67 SYZFAIL: failed to mkdir (errno 28: No space left on device) loop exited with status 67