2fa8da09b185ed7c260230af931592a10909d33f5c57ad697c0b6af6322e55caf18f5eca66fbf922617931c38a6b66b9c5cb624b39c2afea1bdd06aaf6acfc36a748954bc4ca7da1add7966d7da6135d27cab8f0389ec70cf2a160e8663bfb304d9a1bd25cdb2bcc14faa4f246062089b0eb0216047f185641f485b538222de7f9fd8ef4d7aafb63d7eaa71ef7fc9db1a78fd31f3beb48059117db6f79633e3fb9270a930cab93c7be0a36eac7930d709ac09d85427545cf0d34fb27de0dcf97d0b65d2cf870471b7a5a48d49c169ecdfdb6f12a13f26fa920b4dd23eeb35024250f7d38643d891888029526e72dbf7d7912aae714eacd2881ebb0365f981a55b504e636e3d1c809c69208ce955a5ac7279a8ac859445ee5b03a70716511b9eae0a521b6aed23d7bbee6a467cceb4d51695babcfa60424aabe5b65092e32d39989cd86e3e966fb7cc2b71af23d19ba3debdc45bfbf7c88b910160716872fb26a1257822e1fc8a907983f5c29a71d4a0ea3e64ec1f38c8b6159cd677b37a49f72e590708b98faca3eaa834a8b821bdad600adcf25102ed8dda7e324dbed097d134b8eaa54d3544786e7315fb17e6d251c63b283792dcdef2fd3c0b6774ff5a2f044b8b73cdacc425e54c9bfe54e665c89197dfdadec7da4bd20f35089f7a8c4739f6008c2e3dcd8a91f749f8e5e8b1e83e250426e954aef19a2df76b2262a102785a246485b969346ded52b000cb60aa30ee016ff37282923671934a3888d80b4418b0a7e915b6965331a3366205720f16177c1772f95772b589ec9600a100c7f3641cb0e4fd950fd1197bbc07dbdaebf0c57cee2c70305b94f83a859ea96dbe9d6c5d5f745acf8aecb40c5aa3c19c0bb73e596ee85cd322512f3359e57fce84b9e02b0b5bdfcaeecea9b90f1e6ae5e554e57ebba5e38d4d61bb12e41287e52822e95f983ef9dd076a53e409281f06694ddf47ed2f3aa514a284819b5fd699d62a67f94d044499a041a88c30c7d608f63db56debbabf3228452ea7ef8176c4e56769862d548d7e18c97c8024876856a7bf3628f34ae2bd279c0ead418f18ccad7aafce34f1a39029d23d9ba3e45339aaaf8133788cda155907bd9fd091ddc5ddb696c0d0f7f8e43a38dafedc0ba175b7e6b32a51e6100f49a2a004e2219707b4600dea025a4b8ae0f3dedc5b09db99d8591d138eff90d01d2e8c1ce1b58981363b3e29eb2c48f0ccc4b48424da4355e0374519e3f4b9492b8e93bc22acbe604a160959c45b0b338f11bc75af279954e519739c256c9e2a76d485fa4bf24ca37e822c54bd51149b5a79d36a36b5ae2bc4e5e6455a9007846e09cbc54c7b2345a78fc60229eabaca1e9898471b0d337784158f531985cdfaae3d171f3fab10ce375045bd267b67631dd179d660103f2425ef435cd82f411b5896fcca3ef51e3a8a5fa9dc75288f5a2b9ab20ac527616a92e9a2e76011d0958e65dea40fa33f823ef63bf500245100fba5a2bcf4b7f6a5577596709f97d243b6496de29d5797e9aeade63f588eb49aa140eb99e9cad37f46d96433d457083d250dea49ffbdaade11337e82984768c43e0a813d1dac1634b2243cae1c5dafdb263d57febdacb24f99f8e8ed02f8aa509c5c31ca1e281ece76629221ccbdb37ee819fe527651286147493524802301adfb8f4f410127cd379343ff1b802d826f2f52b35809df226cc8314346bab55f9170231625690e182ffce5e935ea85bddc1c4ecbf12c9bdcb73064409baff84fbbc857f6263eaa90f6221cce00620a08b5c4d8e45de9e8f667470f4fdc9bd10c4986ac7b06f25dfb88886aa7970bafcea3fdaf1c4d699bc03895f9e2efeca5aa70d736f10e6ce5ac35bff36327b0c05779452a4d913d6b7cdb0cc1fbc3c42d16ea0d33ca926a06ad3ea9e4d6da8a3b4bdc37afee2c28029781faf6a8992577e7320f63a98e2e52f6548e9366f60e725dc2cbfcaa51cffa72f3eb48e40ca51442ea13013c340a5f2169364d2339d31308f4f23d6114ebb62fd22e844c957c18489471c7f5595b52ea00ba655dc42311f41fdc88ac30f78aa90372d26cea48c91e4e34e4d7d7324d3503a40e4a263a73fe8b1f04e039d1276e6346063fad91f6b94deed8c37a18c5efc1d1a40066084d23c5904e5142198a4d0e794f718b5277a5632e98431a129713ba4d2d55a96ca2567a535172c88216a3a3184e6dd181c57aed3b95f6385b9c13454d254dfb75b99f59adee5531b97cb3e48605b18aa21723744bbe00ada27c90a1cb501dd4f305486e8009fd08878840389e53c04b031a967776e9bab3548a6c296a9ddd09aaf50c7697ed07b8326ed4344bc988671b5f7359686db89e08c59fc96882b884a47858f83480e4d98ba148cf171d8d7cc888ada935ded64adfbf3676ac93b821ed84556da25c11f4170630fc3438e7f50b8cd532295dc5cadd0dbf5b27af808948f8a4458c8be39484e59ccffc8cfb4d1fe5c39ae851cefe61eff5e5c5d8270c6a4474a266ec2b3acb4127370b07c8818909fb1e55df8f5369e6c1e052786bf1b9d4e6d5b5e1f04cfa3504dceb90740f5ecc33c79e6976dbd69a469f89018458563fa2963b078623d3375443a98dc0fcf4c47568b1a41593db4a73d50154051494abcce84c2f1cea9698e4d7b11a2cb8a5ff4ece1bfc0ff0668311c8a345eaccfbd2bd93279337234f15c202224d8dc9ae5566e3ac89fc749edfa49428aef0392772d9b883b5fff60984a1ac8a64457cb1ba62652cfe134ee039e0f1b4edf817b71464e559230aff4c7640306c542cdd98d4b665d04bea40460d5abf8f9a2ff668694ea12fd4ae94c45001aaa30cbc269e8ae2b846c8c0edf4a64ed31c1fc6cf6028d9b6d84965bab591c12469126ea424b2d9e6695b45868cb642e19d68cbec927e29d7a6021087de12e934b2bf63b3bbd8231aba8db9239a2f39a9ea35b7ae835d5753cb7ea3470245fd8ca6c8ae154e108c906fff819fe9c3f925e7aaf3c949178a05b602e62f1e2859ed2572e0588b3a0efb8090492f81a952310507c4995afc7aa21f8dc4920609272a1710176b9276bff9291ecb92c0625a0f276f4902834dae14d202bbb6f052c32a99da3892514be624778463a17299266dfca7383982f929e36f29079bd720717f447439fb314e8bdbce14d75f89b99fabcd4a5dd7d2a44b4e53d8041dae1a42a58818024a55dbc2b60ee772b75a64196a2c5b90619ef68316392aa24b8f3c7665f1a99b8e570ed20f94af944579eb086eb721335b2879207b427b4f5c8cbdb2761a855ed77867b053346cccee949d6d11e33348abab5f1db0a69d213e0836fe3535e582d69346f73fa49a7d0437f82ac265ced4195ac2b2f27d9a394de110fa052cb02b7dd34436e0e546564f16df09ab6590639a2d720fc3dc71dd446586853ec1791623658ec3180b96689b2c4da9b02c9b686eaa350dfb00b0419eca14a6039ce86b3ec7f8b65fb8e89696016428c47f9feecd3e1e333353936ef93a5671d7882960de38d1c844df7f196d1ee9e915c52f4034cdefe1b26e053727744bbbc2f95b140b2c3988f7d8504ca3fc52ae6b54795129bd2f93466c0edd7c3bfc10a4ce72d8421c005caf154c798284702e2a53e9c153a2bbf32c339faee1bbba1b74c2e4fecb30dfdef1c72dbc966ae77c4110497bc640c708e027e300913e9647101ea059e7358e186479678b16e4570a1b55fbb4e2ff6dfdd0890a543295f91c94d4d372f8cc33a81c4ec220c50423f2986df89cbdfbfc1cdde2f6ce34620013bc6bc9431e72518dc950969577739e2f707378279980bde18f96aede6be029d94f78dbb1b77e36c67cfa82502a61c43a8ead8fb1b55651fe6d629e17b4bf5a514d365ff77a074c19b4c39dc2f0a38d8776df4dc2badbb373e7d1a311207746130126dc9ad2ab8de90ad03998f88ace5ae332425d9759db4d5afa93063df5bf7d48458d0ca274a4530bcacfb0501662690d4b07ab5b3b45e4cbd81ce750a3f6ef739f8ce4f3a12d96c1400afe379a5b65e9bf1fbbd1707b2e32c9cc4a6ab1ad8d055a1394d1a2037e17c79a9a5af65800746cae01f8ddb9a4518f1cb21a525bbdfbc5f08a0cf1d17c917f1d50cd1d9d67d3b5072f9b72edafeb979e1fad82b6990c1dcccf1525ac4f5049afe462d2cf11f7efb374ef7e9001346772d49eae71d46556f64fbbe078fd862913b315630bec3e1e4df40b7a3029431634d0313b5cc9673ed90d84fa8c31e3b4b8ee2d94c906b7dd9afa25ec1710f626a0e1277629cb49eff57028489fcb7f7d3a3e3d6e21f63f9d8f4a4508b888eabb12d8620d30d1f7cb9d812490103a0543902a07a21d83fce7335b4ac1a8d7a79e39c9eaa7873af237ace6e42c038ac34af28a06398d0cb4a2e0c0b2e383e005c778327283561e5f44d32be80af9730682166f46bd5f18e27eac3c5100364aeb26a516d65607fccfe645f11df93968ba9d089f378a818610e586442cc7e4feaf302efe0b87381229b8b4d3607b51de761854348a95fff8aa56999310dd2e8c76344a4123f919e02f98489baa7d97f57a9bf288b9f5b88d29610bd94e28dd4886907d46490f7f9fc0129045c13f234d780637f9d4542df4365fdb970880166914d982ed502da885718020b96d767ae1618cbb1755c6a6993fc2178ff0e62a2e622d5ca51f6747716e1a4e46c87cce34836d0b3c3a2747bf7f867d53d7768e7d9da35a45e962f46ab95cdeae6297da5c9b4561296d772efe193ffa66c297a0eb5c675b13024c4c8f3290"}, @calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0x20, [0x23c1, 0x8, 0x7, 0x101, 0x6, 0x21]}}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x1, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x2, 0x4, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @private1}]}}}], 0x1140}}, {{&(0x7f0000002700)={0xa, 0x4e24, 0xffffffff, @loopback, 0x7}, 0x1c, &(0x7f0000002840)=[{&(0x7f0000002740)="22e884964e0ddb14b3b45219eb17ca20a56fc8a3e04b63e7765355c8422bb8aeee0ee41625e57c8bee3912032ff0bdb4d067b3c4bee5bf203f9f7425f51038fd77ae48d46159c5c79a0bf03611d27068e3b05876e171082a53868fbb0f5ac0f9a5114a", 0x63}, {&(0x7f00000027c0)="7796f0aefe5993024d63a87132559288d9b268ab475456049b7aa7d0833c2789a0964278ed0faf22af61631f6997a6998223428c2cc1db82bb24c8b7", 0x3c}, {&(0x7f0000002800)}], 0x3, &(0x7f0000002880)=ANY=[@ANYBLOB="880000000000000029000000360000003a0d000000000000075800000003148007000600000000000000ff0f0000000000000000000000000000feffffffffffffff0000000000000000040000000000000001f8ff33c5d6a717cb611f00000000000000000001000000e907000000000000c9100000000000000000000000000400000000000000580000000000000029000000040000008907000000000000c2040000000507200000000306020800ffffff7f000000000200000000000000ff07000000000000c910fc02000000000000cf25000000000001000000000000"], 0xe0}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002980)="26384aaf7a7c849890ab963fcdec41469bfd06e1ded9016f37bdc09f8ecff2f24a3b5d1a4f7e54c36cfb0f60fb4eb16941d5bc2a8088ca14992001d199e3461e1782b11291a58b270ed9f09c8363cdbc4bb442e2b68138d92c680dc37a155b095d3e547c4f", 0x65}, {&(0x7f0000002a00)="3a049fa009da90c64dc53cc501c995b1a77b07a3fe89584b24540051eac5ac925b8241fa3d89139c01f144adf3eaeb43936e3f2d6ceab769424177f138cbb28cf2465a800e6e1c4b08ab4864d8de5f6cc0d5b9c9bc2af6eba3ce28a9e2c629d5ee0810f920e990be498e1216aeb6edac740d4eab32c0ae730143ef54debc54bfa007", 0x82}, {&(0x7f0000002ac0)="17b70eb40be578b31252c060645343713e555d10cf5c3b54c0becc", 0x1b}, {&(0x7f0000002b00)="df7f508c35a889f730e79d80d7557b16cb54293295576aa23e5cd7674e4dd1fe3803b1b777899848392f0233a6dd5713da80a0bd790c22202011f7db1fdddb4cb98088f12b343c672e9d7fdf9e2a3ecaad5153ca81810a990203f521acfe217845c1f2c4a4ddbe981a44e95120b84bd70f08ec8ae83d2e3744f05550246db6d6c89da49aa302629178e8da74abebef84", 0x90}, {&(0x7f0000002bc0)="fb45f2937a1e605b963397ea72daa713bb3aa569ca17887b43a09ba1690ae2728e86e2af44ca881b6a8c2d9b5874ed85e13fafbb91a597f49b2fc311cf0b8e1f4627bd0d1f089838ee7c3d3fe25e0600bc8ec186048c09516fa0b35e7e022d0ab9064216977749ec41eac5bee1b0acaca2c414fd71452ada0c25715edc221ccf0092f35a32737536a203d64fb78238b270a08f7e109e7dd4a0dce21d8939ebd08e3d04bf1de096c9c6cd7f3b6ff2899ff65e6fae0ef3bc0b97e729787ef3c20dee18647fece2aa21176f4ac07e989a929a667e87ec78db0464596abfc10714b4e50edf3ad9", 0xe5}], 0x5, &(0x7f0000002d40)=[@hopopts_2292={{0x58, 0x29, 0x36, {0x87, 0x7, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x81}]}}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x3b, 0x15, '\x00', [@ra={0x5, 0x2, 0x80}, @generic={0x57, 0xa5, "3a4172e47238db4c1e7545941dcc1108353f56fd46d00694af0c7b6b4486f7b1040b0c94a1bc471901bb12f3847b81ea7d6c4e49bd69ffcf39773c57bcde61e60ede8c714955c2b18b7a6f56a95901bf7e879ddba29846923ca6530c54affa2e8258fd0bad8d4a200571e02a62e2171025fbea42e62671e37ed3ef5bd19340e3161aa450a2de4248ea38d0f2e9892631d37fe131dffc062dcbe963b37ad88267ba58fd434f"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r5}}}], 0x148}}, {{&(0x7f0000002ec0)={0xa, 0x4e20, 0x3, @remote, 0xa8}, 0x1c, &(0x7f00000034c0)=[{&(0x7f0000002f00)="62cc03469a1a522cb8365121e367b8980ac47b7248e3af9743af7dcbd331de11fcee18e4e39aacf6cd1586b2e8133016a569750f978eb28ee632549d48e963d7784f7ca4afcb4defe3d9728178c344514e6492507fada941b14fa752f5faadb53575adada9675c961d23e138daf61d790e268f4f7834c331e54257e757568197de1a4e2d8883cc2a1f5693e4e98f15a15f7c64773cacc3b9b3fd97905b1ee581bf0d25542ad503213763739ba6b25f13b161dd865dac99340037791d6170e51f2b5014862fca8113f52ba6ef8bf1359044202df043bb56f89afb7836f4331d6e8ab5b7b7af4d61d9e10305aedb047d7973ad001e59611a", 0xf7}, {&(0x7f0000003000)="80cff0f872d7064b555c0df403ba73e938060d477a5256f558ba9e90760c976ceb7a3cae6bfff1cb7ba9fce5b49eaca5fe26437384bb0f8e799af624318a1964a05cb82017d94989d75c7e3e8d6a40d356929cfdf736fcbc1856f2b4f652ee06503d6278bfb27f4b470d6a0873c6d8e87987edbb06d9eba0f1303878f2089aec7db2bb77", 0x84}, {&(0x7f00000030c0)="d419c66ccba09f972f1f1a447643df906d688d5de4664268c274949a9fbab857028523459fd7dc5e5f0df2322d267f02bf038695005ab30c8d70c33390d8ec5c6d6cb3629dac25ccca77e29a9eb710011b83a051e45829c7a22f0f426c1cd634f848ec8af760d6f03c", 0x69}, {&(0x7f0000003140)="bee866a88da61a2fdc4c95c36c6545dace2504076df00ee6e237e8f1718eded4c733abc1f565fb9b0b17167efe48a99b33a29bf1cbda1ffe8d527fb0824466136446ce712d0b7ad14e054f2aaf5394796f0f56bfdc71971b1f99edc5ea9580e216c2476eede109d59f185ffc03ce0e2079f55903ff02b27145e1af88402734a41b11c976fbbd8ff0199fb67556b44db8cbcc02c80385d4cbe46fc01d219f65c5eb8d8f59dee4b0541e5a87d1ebcc6703a84ebb2f0c111759abd34a1bdb44ec57dff1081cea5304d1efe0882c06b202ecdfe35cf4af6cadedf29777d6edc54bba510ae713ecbde4e826cf916724b2cf381c3696", 0xf3}, {&(0x7f0000003240)="0b231e0e77805a87199f570e7c52996f84994eb013d387cd4eb1d840a773cde1d1f032fe84f837070cf839e1d766e4f44eba7f1738206a8eef4eb9e65efbd67c94c61d1f0d4225ee", 0x48}, {&(0x7f00000032c0)="c3e6bb1fbc1edb5485ec7b29b8389930d2d08428e4bac73328e6522f5d2e98f6e98303bffbcaf936f5397246ba867954eec993c349eefed8598c49350adb569bcc4b4e5cbaa143e752781b74bb63e2101b0295f2a4ba74a5b84c5c747cf7c03d87db91429d7bf9fc6f8825bd7d5786ddc5d719313b62efe2899a5a287e6965fade4b77476204cc50fdc2506c19a6651792705364f7bd0c44b5b971a58d9fbdf3b9cefde6e0a525dffa3263539f80c2a34173bc2db32ab089c566c1873ef6467bfcc60393dda5f08a61773af4ef22b85a10", 0xd1}, {&(0x7f00000033c0)="bdb523712a0f72e07aff7cd7574267775377d24ae60a1169fb3b9dd1263e44d29856ec66a5e303974d298e05cae87a7f76cd781e46e7af72353040b7a7f8df040c46163b2a76286ebbabf782967a5d2a42149614c8eb52b87537fdbefbf0f0f3cee2ac311fe7aa01248e4eacffb0bff8bfe5fa15efd88a91dea50ff937bd17287bb82e956602fb5fdacec829df8c2fa06c76097af4e3fcb008f667d09446b802dab99b92ea3472ba3e5f6e492533c5fa3a10010842859e28379fe25a53e14a79fad449adff860278a0bec276e0096c11f4e8d7acfb2b0f", 0xd7}], 0x7, &(0x7f0000003540)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x11, 0x3, '\x00', [@ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x5}, @generic={0xff, 0xa, "1097528eef419f94362b"}, @ra, @ra={0x5, 0x2, 0x3}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x2f, 0x3, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x7, [0x3f]}}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x3}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x29, 0x6, '\x00', [@ra={0x5, 0x2, 0x5}, @pad1, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0xfffc}]}}}], 0x108}}, {{&(0x7f0000003680)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, &(0x7f00000047c0)=[{&(0x7f00000036c0)="31fe79647976d2dff3ddd347560db481e12cb39874ff9af964b4145a33aa3161471359dfa0ed51539706b3ccd3f091cb5c7b2c41b7b45d13b8f70fe838e95b948bbaa9048e3baea6a23d041a3dbb9b261bfabddc82cede7875fb10cc698d90f9579f8c1db384f36686c46ffdb4a8f81dc5d5d05a404231274ccc8e03cdead2a46bbfd0f8543c7ddfae72361877864e8625e96c25475e931ab5914790e8d35abd6bfda3c5a159982e3133d1794a21649b261097587759ce1b7567de2c670a4221ba9346acad02418b9e8914687b244dffd0bc3059432f98b3b3d14f04ac17bfd6c1df78f63844dc7991829bb7ce7d2d9faa2b1e956240981cd9346e3c2eef07a86cd79f627f78121d847afd0905a44901d3a334a9a4301ecabef7e91a5d92382aaa50e75f8ff69615578ff728f147731db3008991dc5ee841448bd49679040f78765d9fbb8f63b40dd2b1b7f4e24ed8341f1c984f1387726cbdcab9bd49d3219e217ad48ba4abae6aa8166787d5e38274f508a783858418391e899e299947922d90801330c8896865ed46079f04d52c574393f76fdbae8f5f2a276c0a622485d4889e892ae8bd3f9c87c7852f6895ce85cd91f0e9312b4f1a00b3ee7d03e0c17cef28c9fdc4c78c696e1645e575721bda734982884b42396c5fb3344ab93ff9ca524e9d775bed92c40385addea8b01117ece6c2dfd59878296a65a7dc213740e99681e0d42209f9d247dcecefb9e9e814b0213e25a744140854470697f58d3a11420a2f0931f264185c0d7f8faf24e03629a10c55e4c620a15d978b2a7086df34400ec5f702baf34a1729cd5df83e6d4ecaaf4f1203c46eaf940d3d3df7fc710a32988111c5e567654a911210cafe5403cad512488b3ea5131fbc719b310744c9874ee74770d6d7b040d25671192a13efa9bdc1cae5269d205cfc2f40886069b711ec9785aa8a55329d2f42aac5fe4aa0ce467a0cf8c636b4989893efbdf98e26245aafa36e2491d6df70b1a325fcfd8652bf830a3ff6efd836fd1912d0471786994341d7c4c922e7df95cbabd108c51fb4be74e5d6ee0847564b1696b1036d7d148fac63396ec6a95c3cdff2fd86d366f92ed9582ef0256f39250854fafc0aa3a7f7cdec28e9d0b29169af81bb438c0acd73637339c9a618eaab122ca66ffaa215a1974599c140b123f84e59a89d2589605fa427389bd7cd7f8565fb4dffe6d9256a12ce8b16e2f32a911643e241fe44ae66412542e4b0265c33ab6fa20229ff53b235a23e2153fda216e562e2a424f8c910e0c3a658181c3b1468d07628a3894d4978512e993470d113f1128f619489d3aa3bab0c1df612fc57ec8c7de79c6c1ba3d21eb8a730dfcbff1f69d23f6d842eccdd3527865eb05f7d994aeab7298d0665f04c93a85bdc1f3e9c1de8fc9e5a1a91b31c8654294c0f4ca02ed057dd4ebd3ee85ca3158b8f0fdc7a7e2b80883b0f0479dd8f8889c75d4bb9e2d2bf02c28fc32b9e20ba5994857e0b7dc615d67eec2a7f182f61562f66c6b469c1b40ede596bebbe61cb8eaa9e978abbdcb887e688d8806dde12eaab17cad57091e886bc0b4134c631326d1fa96c741ee5351397fb648fba139f1f363a30280cd01c52404edd707318a7fc0d33dcc35b93833952a0600719695fc2b0942d4055e9c2d965078f08e37e9aa330450872600ee3776d399c5b7c159c49c87d0f50e90f006cc72154bb0190738240a30f67b78ad2ea67412eec5d5d5eba4f9c3c9b50701708f4d215144d0cff369e82b6efb374fea7d34ac830d57231c9b8d94e7e257e51b3b046b2165ea6db86c67b52f7652c1bf8ac94374ae122daca2427a2cb3877baa7ad95bfa8e701215e68380eefdedecf45558212cd6b950f9390919e91dbc5de9c70c22d0244e2514835c53272857187d3c29ccd50c1ad6913e4f5b42e3bbe4a359b76353cb9dca5bc47e7f6bcd3f6654e80ebe59962b656a1a744b2c06e1af0d8bb8ec851b8a3e452b19feab2e44f5d2720b4b251a93cbfbfe6b9450869cb8e254ff338a6a1daa910e5a9e387e8f20f4c3ac5abb6407e566822b5aa04bf60f5bd9dd74c6be693f78f735a9453332a0d451a2e637afee54199df744f7e0abab3d13e1a76d12b7eb05b5c66819e7ef5940fd204b3d9baa6251b72b2ea8666dc1787f41cc3195e6fa6a19bcbca610e8613da875a825d237b9ded831e68df744cc987134f6655038853b99524460b9d77e43ed67973f4d06e5fd1bee6d258da96085d4cba735e6113f1ecb3ce2dbc79d86438b601754a88990b9d5881656042dc4fd590008429f3d639f822c1703359bc478644a0ef12cb42656d1993a0d88e92f928dd441684ba1d10ea27254f308784f16ec5e60de18019f914b877545374995e3b818ba070b275ca695d7e4300e5225275ae2774a585b4c55428b07f5318d179cb587bf972e772ec75118e2ac9e9f5748cb80167067e86b22ec9a483a124507d4e94f89fd693a5e24ecdbb38ab128ef306729f22903a8a4061f08aa6d78840cefa17620d9657554955617b244b954a5385c190773f2ffbb86f1faa1cb3700ff2dbfcdc1683ed96fede9193851f69473730c8423cc4b26143a355d1bf977cb580d911ec8dc000d0a5fe5375d685cdd83ddba815eb49d092dca9c6024d533aca8c147f6817d4f16420d119aa78cb8c5dd4fb6ac84b654ccda15d20c58ca8aa1463f51b0349d614eca1cea527827fb75ed74eaaf0118219cab0a07cc5b62bf565216130f3e952c3d2622fd9eae9d9c5fb6c20d74edb611d1b88af5f12ac7ebf3057eeebe3632d812a710c3c1e6d52497d1ffab63d155b283e1393b9c44f99e4d9ce301a81531faa63d863ceb35768f181779d02464949125264c90713c4a276a1b342f9aa46c36be49b260bd3118fca978d09bfc2184d14adbd6c0b0b7fe4ac8b07f05d0dfb5ed3268a2ccab4fe50de7d540d095f5714692f30dd53e11190d91d19764a3f13674263bda009d7703d8d11c553dec4c5486726ec17b03efc3d61e55f31f76b2e4ab87634777590635bd94ea5136e01c53a4f8f52a4f08289ed1756e5e84bd01d4eee9f87368167d12a208f52396e8ef8194574bd5fb577805c16bfbb24081e4e72950ab7646faa8230035a9ed862a63d72ebcf6fbab13f4b2cb514d0fd215c78cf385714ab70d045063a06b69c8edbf62f6fe7978a9fddf7fce442a6fd3ecdc2d07839293bb909f4d71ed54893172862d439a47791da2207cb014fbcf929a2b7fbbeddbcc2474a14a9c4c916626a6e4fcb783139c3d78a262a604463e585b834ffbf0022cffb35d569d92117c0f2c4137ae5855554d14d5522a05ccce905a936eaba4c7efd988b8d241ecd238b166cd04df283c5ad2ab0aef87e5c0bdcb5eb5a1d9db17b4d92d58a9287b46a21c26fab5d4571e653229244d36acc29a2f08585b3d14d6ee33775a1f3354f86ae2a8795d0b03142dc0740ff4ddfa0696325fc4ff9e9ea7211d58cfc4d35539a6439f4671f0572b47d66bdfdbdfa8f6e1d407a7a2fd60ba189652a0ad8898a0f3ac56dc2c49dd9b43570fd79f01a9efbd2a0d7b20a1b10b63db2225cae5abc9051ed504fdb9a29daa5007035ea3d3f367886007a26a69bd3507bc4fbccc76d7094480504d517468d1bd5f3c9d3da1bb70246ce9bd1f5e93d75e144dc6fa8803e19239b145d3ed393dc934bcfba43a751324145e4bdddbde9240829b546a318facf304ff2483c1e1585105d2d03c5d2101d355c303c328da9d0803c3f788f0b65ca9ecd386fcb5b1e865912b9371d8ea5c72ebdce7e84cf9db00721e22251bfd93201479aefe3012bc1c548067b114ec6d1ee3eefd7346dd14cb3777e8c5ea4f34728eb45b71fd5012250d1c95e32948592d0683e1f953aea290dc918d70ba0a3dd1f06b5cabf28af910bef17222e6f725a0be3bcb0642410359c422799806cd86a6198f1f77ed9706bb4327f726d16e1996f3cc2e5e6518d4a4f83a03944dc17991fc47266f51556848fc6f0b1e0976b91f1c0d43d2c2cf2feec1bf904da90b746de3cfd0bb98d74dd52d941c0b24e7e7de7e56b8d97670e4de68823ed8f8b3a685aa4191d62544ec4460ff4b69560112371e74bb026f8e15cd02507f1cddc357b8b8527a86d6b50815aa667a0bcf2f1ea83d3cdf870ee2a19bc2e7c9258344e978c4137b304da246ffd5d43827e1da9dfdb3731543b61ffc44d526d254935d9dc3ebe8ce15bf91afcfc616ffce86a81a8328308e3699a2394f8db6350129cb647017bc683917c8d0dbb529d83a334439462a5ba86182d0ce607ade34d72b41d9de2a1b46ce1a70017769b8f073ae9d0fd67b092dbe1f0eb46f8b180b4c6087b1a8ed65bc8589acef3074d409bc8b3f9581399f44872969fbcae9a9f7a3cf0d231ffb3857117e06162fb650b13a2d662571d9046191c6fca26ffaf879c7c439f6bcd37c105b6710c0fbd1b73612cc604c168d5cac0b835a5ca8842dbbb2405f4592876bc62f7b414b65099f8e10d84df7b4927561d92abe032c537161020fb0c148598310bcc04cabe658be8bf39a9678fdd70ff1471edfe2c98b3a3e69a79ecd92fcd806e7350e60f217a5632f85a530f386ffbbe6e04c99a393bdaff084e3520766bf3d43e87217ca7b21280dfb764e404d0fa4a532f2c952e9d74ee437d6645dbfc949e8843eed12f0d28f59b38860bdbd178e8dab3f3b38ef428eeac2d30f9e9ac68b1b1e3133b17c10fb2494b9a4b83ccf6f10242c3dcbd1f244b3b6c90195fc863b3712127aaacc6bccde9af4bde14bb63ea952716fda423ff8c807a41c3f00f87c5f28ddb7f597e22f5b35ddc0fa7901ca75743bb5c935d54b83d43602385db3bc0d60fba359179f4bc539097e51afcb3e98ee9b201d24a9dd371c4cabdb747330faa0688330b06f7c95e9f78f3faf125c872db51b1468878784b7412c133f78d6169c0b1453c8d6a3946ab9c5ec07a7ea76654adb735286c230f2dd5df955f186829bf852441a1dc97f1f938b8f3446363c268a1ddab23446ab52d4ff0263c84ff25789e2af2711ff30cec5d427c0d51cfff87073c249c33722a7514c4ca67b3d3e1f4b0ef15fef010582dd6637cf290d14cd4780c177b12224fff939cc64950886d90507f2e5aa3c87f7f01f3be194f7be07d082e578f132e81074c2d7fc8274591963e8c99342a39755178a87482ea68b5ddd3d330da32e8fd2e786ae6025875422537c2aad3f81d6b379c73bc7a23ad5675cb69cf30f430ac26c19698a06ecac9f04cad67dd5e3fa9d41ce84dfe60507f752c88e293a3740cfe0a452bbbf6db397fea0eccbaeaa53f4f357a97feb746970e8a398818498f3f3b05c4d57ddd755b7b0bfe502d0a79a8eea91f07eb7daa1309f24b5b58b1fd92fe0ebe51244f2f688d27066893e37e141cbd2c602551f5ec23a536de9658ba6df9c68c10fd7bc420e69728b67acf2bcc7e854d34c52521d8ab8fe92bf0fdf95e8d4d4dce70c6ce586d501fbe2afcf1dab4e3986dc194a4b799267f1ca349e746e6c4dcf052b7d7becf4f383c8084af66081227fff8b002f9844acd81c122d667a64a6155dd339c4cc919eb95408d7c349879fc37dcf35bb80602f4e2cf1f348afc50fb3c202d94cf7e20782f8bfddddff705d652fc8a03f2dfedf0d1666adebaeb980cf8d4c352de5af48606048856d2e80db2d548634d1ff5dc7e6c217227e99f72bb55d3be8d5651431cb37cd49d1fd62120c188666c5f0d7cdd48ee017c3e72ab61663afb27b09b3cfd5253210f9c0bf208af", 0x1000}, {&(0x7f00000046c0)="0ab93e6d8fe10c2ef326def123ee87bab69d68e1c448d09f65095787078fa5e219ce9dcc51239ede58a25d1aad4c2d4fe15ecfd18a0787eff29746409132d38937f94bfb420294b11f29a409d4f1c0b91c55c318f03c9755d3a32941ea4122b75ec60b73d56ff3af247bcddc8fb2cc92f6a9745fcc72d27a033d0ac754e5ae8070c4d53166a762dc7bc8354045886461eb0885304f86979fb38bef0e158b9c0d12d8ad780743ba7fe52c25859e7a421b9a306c8725fb9fe03032930c8fe23d7930b1", 0xc2}], 0x2, &(0x7f0000004800)=[@rthdr_2292={{0x38, 0x29, 0x39, {0xff, 0x4, 0x1, 0x6, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3b, 0x0, '\x00', [@pad1, @ra]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x62, 0x12, 0x2, 0x2, 0x0, [@empty, @mcast1, @mcast2, @empty, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x6c, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0x5}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x7ff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x1a8}}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f00000049c0)}, {&(0x7f0000004a00)="81a9cedc56052f26e7acddc28ca1af49f6044f9a303a3e6605439df5eec2eea49ac02daac901a2b5d4a53d86939f4fca6b3008518bd8371bb307eec1e3935b63983c915e60a201da2c1cfa1187a2d4986dde857768e061cc635bdc6110eaf98cf22187f754247e4f7c3ba0e4feed4847d207877a94e9e9c37e89424a9dc265edb5221ffd478bd0a98975ac754c9a557099c9d9af804f50620e5094239aea9f4a858d79c9b7bfb64b344510499c8d4a2685e896e96753cd231969d591642a24194c9b161c59266527f3711c1e73342c99a170ebf0e4f748ae688a700d5d8b6dceaaf7e6fb8b90b56b50630edb0214dcfbd7dbb97863279f0252a7dd96d1fd7f4a4ba025df09050d53a36cf554cc90959b5474d0accd7af3b6e19d4a45a350ea7fe85c0ea72137c9e4491f113bc13fe58d83f3628bc4774dcf04b5030d571da7d6b95dc84e921c0a0ba4eb0139bc2696f014b86635683594c2934971be2a78df6cee4181afb852228384c121e7d5e55aec3c179d55d4e4d64ae272e41543ca601ac2d6459142e8ce9843ef4e177b046ac7ca30ea543d8d13350a757d31a69b20ed0f4c54c9be95dbed702029429ba12d59c96aba9e4f5639f866ce767cd1c188ea06b61b29f5f6360b9c491b02b6c46411a0d0e66a100e5422cd67c9d3a5c5996a77fff5fe201a70c9c46bac2b20a9321b506ed954b64bc0099cac0fcabebebb0ba628351471c2ee2a7def8501b562f348785a4775fccdab5f7ae562be5ff3091ce7d29d7121bd5527d5abde22379d5ec28fc3c8dcd3251bcee5a744dd29bb9b82d350f523efcaa144115d88ae398159acf0a65e1de5f8fd6c47ba4901ed4c4c1899e294bd3b975b7b6f700bfe60dac1d6703ddbb1e9f7b928c721b610a9c48af4ac6ac166567699aaf01ff977b49394cb4bcb27d0697903829f31b031abd66703045b8f4af73f684051058705d47b348ecb95c4bca91f623e494d82392c942e207a51620ec3cda5b63407b2756a19095bf18d30af12dfb9b595de93b8c51bb21a34bfce2ef5e1b8de9779dc156efb36323350af764d707d7f1a588f4615bff3b7a9c93790136c96f44facf6ab5709e541f33c119c683fe507935280e92cd97c3fe38e76a19c62f49fd19604d6f28b8daa8dd2c282686a6bbeb246b83bada46b08ba75bf536d89916c32f48246f206b6725d8dc8584b8fccf3ebeef35aabb8cba54c16866723f34ba1d93d0e159183e8a08d698e62372e4e3d19b9b6af4e4b5aaa327fe4fce9b2db0247d85c78508f510de80ef586dda3469e60f32d50955c6a4e291319b9ed7485a86da06a6d5841c67cbb6b91f77f8b01fb8ac3c4b27db3e723cf4d457d0fcba3e6ff6a35571f86816b3718a636f29a188728181cf53fca34cc31361e7398e178fca4e3f60fbd2fe27c4b1e130cbc0916c25315ab83b18ee9467f881a6d0c295eed9f439a2ae84318bd22636886e64d65fdc2c629c76ce0f3ebf70f6607939e4a8250af5536ae90eb1c0fcaf887b0f084c2069a69a99c8cf505aa82d0e29cd9332f2a5f71d8e5e0c0bc7693c9759f2d932d1841be4105ae115d9a93a13a1b39b94ae270f0a9bd9e004400948c8334ce52c5873cfb6d099ba0cf722adbb0208d5624e8f7dced4cad0ee96dfb5cb8220581c1aa8bb68634eb11255dde32e5507fe857fce9a166d1ef085bf58731ffb2ebe0cd62b6a258b9a4595f5e5028cc8fdb07706c96c1258c3f895861abff2e74c8f36a08b67bdf1ca97b2dd5f97ffcac8c4508a72190d189d4968097590788ed9c63172e5415a1e52433e7d8da690a4b254968c8db1a80fee51db4db4345c38d6f67a73b217dc7bf1763930f84712c548c049905743b93e1753be47928bf79e64c54df60e4671b5160ab1fdcdef9ee6868cf1c3ce3b0d8a4d2be29565af91e531a584e88baa68697d9986985ae23dde23621e3d90fec164beaef0599ab2f0a7901404d9c635a1c8339dde3d2773528e5296e245b8b13edf897462da235ad431b8c4c096aa0338a92b8b5c85e2c4ec942b471b3b52dd2a88ceb5e6eb226367d741d73d346f0434d1e9d9555717bee54f2fd8cba0a71cc33dba145e6c9edb260fadd18202a23451070e6e9bcd746a8e8e150cb3b43652fcb6e6eb7643cca7f5da0f32aa5fcd472262ef322bf93b113f4fc7244d0b899c26de3aba0ee526ad2e8964d21d42b8c8d9733e609ed0220c0548f3055671170799c4e40829bacb6ba64c66c142db2226a7b5e16426d1b989b575a5f49f8c357f4244a34ddf63eefeab6f77e2b2331e86661678d183eb270c70648b108f89123e58fcab097bacdee350a2b4734e3a903d758f73ed6e71400b2c3a8c38391fcf19908ad6e56edaecbfee5196aeb74bec534af7aee9cf0b073184a1d4fbc7768db78186a53742c5c28a2eef6d6e18af4736ed7579e48f801546052b62d675644369900eb1fe295eafdff232345c213f605dfd5cf7c71b811a49ed2ee51010018071192bd7ed057b733ffcaed621175c6f9eb63b7809314426eafd0dc884a268e9e3a4415364e1746c5b0c5dfdd3fa7875af17b113d0bff3e7b3661c49dbe8d6aedb21ad7bd3e6a98014f351d839b5e1e8d509546c96e57952bb367f00b75bb4f42f4f34ff596d9c7222188f4bd77774dd8f8d9497d1bb6d1a7fa36db41e7f3fe4b6865478442f482f7345475b058431a0eeaa4a62d44a63e3e1a89962fe13958e497b9ce32235010d379990ffda3e376640ceb68588e32cba7b9664ee88627586e9dd9823818f24ba9926b64769d44310e6210f202bcfada8006842417b9bb99e08ab9c247a3e2a4315ed953f67b04b99e521c3ac903b40c1f25e54c91691e9f09f3d86d15a914edbfe8b95f3a5a6ca14c91a34a73472f8406fc427e5f15c7a298a2784e15ef463a79eb23ee505c9017d2eb59e2ab8bbf933519a2c36c984918548ecd1c5723d4ecf1db313fdcbde9b1b0fe2201c17916b140ea3186e9bedec34d59bf04fd2daa221588545b1ab17190c16822e772b42a8bda171efb398e2f100f46dc85ea6c6e20a38f9083fc1513808be39c4b50714415434cc385cb176ab493ab38e529c9f05cf9a3e1f6ab5c935cc25ff5cf11a03fe8ab2bd3f858f6673a6a89571f464ecc22b65db1e5790bb710bfd004679a77ca6212afda1d6c6e2f67169d2cc189bc8ae80f8a31cc58fb62be713981f8992eb8e257f5079dd68878f652a7ff8b90b7b1800a053f4f380527e3d3b86dc609065987060905081bb1c2471965fcf6be9fa35726f4f31860e90a3a1170f917960ef09a9bcba25156a6a1c7b0d2d779c44075bd92583de785808e4ff72a5e498e0f35798bc4c98241ddd6f0c242bca1d1183149b00bd793985e84d8afb1103f97127019d2e665dca5413f0fcb057e583689fbf03ba0f7fb3be0168a028b581990e9aae95605542e418a7f0032a6ba598abb094665786947212936f80429f20253815e1b106193ed6b67abd650b6afea66eb6761093420916fd0433f3343d2d53bfc20731cec38f2cc6d090378241789a98ff9c29667258a76b0893e52ba445a052ffbc903992161ad925347552a08b41ce93f8c5bf0040440bafedc033e0f581ac383593a715327d65f5e9681ad3aa6dffb51031a726e7ca660e3d1aa2a57feb3b979235daa180ad11b83eac5cb3341ba78b222f9741f99cd5a5f4019cd0da07d794d95e278a5ce50a41f9842d09773f3a2fdf561442304dcad7e2282668d2fe8009d3746f28937a95f011d7b28ff262ede4dea05f5d4b539365812fa25e729e4f61d300ade63639484f96b19cfa8af3d65d69bc5884530eb2b3b30ff55a77bd3a06c4a3096ff530500ed8451c32df030fea373a364bcae9edcf76d3f729e219f91764279273059209fe053850fc8bc42a91cc403ad6f3407e0ee95e6147068faeea53c0e5aecf0a2e0641de98ba06d23f58cf56ce590ccbe41ee16a74bfa19545bd2eab72ee95dfaa7f568655b5d55a7e6e539b6eb56cd338e701d678614d51daa5e64b3f48fdaebd5c8f96ed7ebe0bb3ea189ad8f77710634daf52446c3cc70735b09170011f5214551b2e719599d582ef9579b21c8ddd47888f351b096a17a4c2a04fe674d3eb69ff598877f5d4cce8b57c32b3a0aea20b39a138d743f96341f79e8b5a7472b5bdbfd09e5d19fac6a5ab3b08947c5e9e423d4f195771936bf72df61608e0a860ec21cfd72bbf6789404ea1c55082a98b28ad89c356103c503a0177559094162efdeecc373becad4ab9a82b1e270236b3a362ae3dfdd2859a6ec9273c957dbb1be87e0213ba16efa2404340ab578a10e19d8d86946dc8df3ee82109d56ffd2fb336a183fcd56366104bcbddc1fd8c0592e3ee728ab38319851c75a0226eedd233a3c92e8427f0fbe65166cf5cbd87f058a74131ab4b331f010b707a523cff125045a7b301f2cfbdfb6afffb6fa1c0552af1f2154f0f7727361db8734c9ef499e3d320f09a08c56769ccb5044766ce3f39e99719fc3de7e110548aeb56e4445dc06a49e60dec0b6fa0fe742725dd4411486bb1c17d7f2721c25b7f096282e15168d04bb17c12dea0cd9bc6740a68393e7338ce59e6400ebde78313b310fdf3fd3f7b3a753c5358731a4508a1c6b2ebe7a9948f0e6e85be8afcbc8cb8c8f45d4b8f034a143b3878d66bf7c8858fb0e88c7ddfab7e076e21d419a904e65a0b4cba70e065d292d74ccbdf192f6b40113ae71d82bd758b16c78d5f37afe36044f32e0f90e926d3874f573426e8b5eb09523e50329d278fdb2e709ac0a537b4fb8c821e6ef91fca5542055e69dac738ab39bb067f371227b1a46503b899ab7e5e37afff9a48887af4e4d195a46153e1f20bd7c2dad4f7690b5627421fb2f03390547cec86693df76aebf394fa7d25c45e5b64b10e099c2a6a28d266d6af059736eca6259d76e03313090cb4a1e0f8bb8f00bea8f15f70dc758ce655904c066a8f3c1498729256c1dc14cba6ad0f5666b1ac9608792c735c805cbbc511d3940c4b3591a569752d5b8870752097e7954d3552eb8dbc42637baccbe4cd99edde8e70694968af9f7299c6d5bb24585ada36dca4c7d32e7a3928b303acf5e080850be42759e4fc4ee4b167c412370752ce0a628bb6c1623f2714a61ce9b60d5e155b68b47e26ce44a0e1a6bac0c0ee11508f3f1c6e2fabf59d8d933480fd7f73a03735dafcf1a7f323f79b17b4a0cf865b98fa53da83ee1cd34bfe1e79ee1b5493b2cfd44f7b9bf9691f59f73c78b8ef0fbdcb80bd243dc814793a89fcff1564cf52b370abaa68c10b9efa28244d56d20eb7678c079827b2c5efba3a4f1a6d252d87b028f481c9e1f98991ecf6b30aa4837d38ce760e3f8c8e84b9bd25103198663abb0f6cf0525f2a6f67effdaa39390961505c8dfd672af29c72ba42c09f915a182e96cbbbd96dbe764a5d9970941df836c7aedc8236f975c2a874bd4e380b6bd83ad9e4431d93b69c81362df20e825747e7cbd0fe63fabd7a6fe2b0cec3b01bc267be0aba1b866a5f9d8c78d17e92ddc643e5324dc23c5c0f137ad479d5c46b5bcbe99d4e957e9864da5f139a2ceac3c1621ce88faf2d8e4abf1876fc50b2e6a09c18536b7d04e05a8b454290c6d13f9d150e247218c389344dda920d2de0940b3a5d9f2c2d4d9279cb3fd856d9dcad7a9c7e771ae17ae8cd335f2bdce6f2405cff077ba1e0a02dcad48bdff38bb1072f9387ebcf66c15af4dfc93f06660ae813c1a5bb0c776d83f970bd522f8d575cc4961fb07b09fe8994884a56d4594ed", 0x1000}, {&(0x7f0000005a00)="6721b74476e05a58f6ee4b1884cd918ed3fcd1b4a3a340320a339ccaa788772ec475f148dbb51d7641b6a4d8e721d74c0d25d6f80f036e93d0b3fc5929e927d89714a63815645fae50348a658fd4115434bb70c7f02172b724a02cf4d214e2f9d5dd1dd44d612d4ce9f2cc4b00b480093ccbbb8cea75b787754f42aa1e6a7e8bbf1d4ce93dee60ec14f7e4f2ecd592c52e9c59a9429967774fb4ffedc2c98418324e2c6b9a52fff1e9b701e7e7fc327987d3b21bacb25ae4c3d57da7a03d34589601f1e056273d4f80ffb53329b4ab0c99b69ceb3ec1bd94e79fb481f73d6f", 0xdf}, {&(0x7f0000005b00)="7c8cfe0b4ec0c31e7e575c8a3948ed9e8c48be6be736dbc77845cba103541ca193c158d73bcbc87adb657f637bc659e99de3a37184ff499d", 0x38}], 0x4}}, {{&(0x7f0000005b80)={0xa, 0x4e20, 0x5c0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)="92d1ce1c134bc99e05826d6e73468cf03eeeefb86d865562dd9003da5a2ea00712be7e10f1524caf55c64b4f2de20b783e8ed0c1f84cb53077e97920", 0x3c}, {&(0x7f0000005c00)="0883611e4d6da5f6f5b28819679538671e9de73c9ba65df8c0e4ed8bf80133e5ae12517270d055bf4e3b712e04669e2cca2608d83d0e72f12b8b89ac388614489da4bbcb4e702b9ba1f9574c1d65a329e4b75f02e090f4c9c40219c5be460ae49e337630425086eaf1e67611bdf30cc87ac88e528551c4b42042e8f8e196fd87980f", 0x82}], 0x2, &(0x7f0000005d00)=[@flowinfo={{0x14}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x1, 0x7, 0x0, [@private0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hopopts_2292={{0x150, 0x29, 0x36, {0x3c, 0x26, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x50, {0x0, 0x12, 0x62, 0x401, [0xffffffffffffa3ba, 0x1, 0x12b, 0x7, 0x7, 0x9, 0x9c9, 0x2, 0x10001]}}, @ra={0x5, 0x2, 0x81}, @generic={0x1, 0xc5, "a65ba4e0d06f442465b4fa634658cc63ef615046757e5041df725d20923ec08367c3bac066852ee09745e1c0f396cf305b7041ac20deb55ae3bf5359d7739f05d214fd1dadf7970afd16105981cd9b5f10c29362431f202d7a31b825ef2dbda338f6ba30f8a4cc9bf9c984585ec6c6bce1cf92ffe0c0a1b1bc5f061f33d2afe27ee584ca89b7e7edca2017ca3ee3ba39f0058050cdfeedb7ab106a8b7c8d2c3fcb13b4165aeda91d6431617ce5a0e1b20350108027688759595bbbee5bfd747e5cf8179f86"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xe3e}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts={{0x98, 0x29, 0x36, {0x16, 0xf, '\x00', [@hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x28, {0x2, 0x8, 0x56, 0x8, [0xfffffffffffffffd, 0x5, 0x40, 0x8000]}}, @jumbo={0xc2, 0x4, 0x8000}, @ra, @enc_lim, @calipso={0x7, 0x30, {0x0, 0xa, 0x6, 0x7, [0x6, 0x4, 0x101, 0x80000000, 0x7fff]}}]}}}, @dstopts={{0x1028, 0x29, 0x37, {0x2b, 0x201, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x401}, @generic={0x5, 0x1000, "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"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hopopts_2292={{0x140, 0x29, 0x36, {0x2c, 0x24, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x9, 0x8, [0x5, 0x6, 0x9, 0x6, 0x7, 0x1c0000000000000]}}, @enc_lim={0x4, 0x1, 0xfa}, @calipso={0x7, 0x48, {0x2, 0x10, 0x3d, 0x9, [0x20, 0x14, 0x1f, 0x9, 0x1, 0x9, 0x9, 0x7]}}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x8c, "19fbd746c275fc79a39f94d3638ae235fe475f6d938677a9e81b109f592925f71d50c6e46e8ffb77abc72b61961de6c4ecf5a46e2dd0a56e666b2ed52d1232b72e28ac031065dd882c9d3087f412fd00eefe4dad09268a8f8980bfc54eddb5366af407024d7591c6ac3440f8f0bf03c3242f1f88358266c04e4e00e4ec447db73555123da8d81fbf285d0b92"}, @pad1]}}}], 0x13c8}}, {{&(0x7f0000007100)={0xa, 0x4e24, 0xfffffff9, @mcast2, 0x400}, 0x1c, &(0x7f00000074c0)=[{&(0x7f0000007140)="0b3c01412afc6cdf0d92d9179d7d6f8a4b993cd3dd6231b0ed02310afa8efaef5c08ce8b762275c28fb2df6b577ff0679b105443aec7cda3d2f0519fb38d5541932eb00b8109ae1e3b7f0261468c68f513a6ecca403736f0ceb25bb1", 0x5c}, {&(0x7f00000071c0)="acf656112b0968b3dd1904345b4bec54f628e32cec94da007e80bd985a621448", 0x20}, {&(0x7f0000007200)="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", 0xfc}, {&(0x7f0000007300)="b5fbcf5a28f783b6c69e77d767cd28a09ab504bc952c48fabbf833f52400bfbb83a00b7472996dc52ce22898ad7e2ef302b5cc7157a64ee8849927fef69593ec55e0424bf625a01c426ef2ac543deeee189050d18b297bfa27f54f2dc2fb8e94285a3df870e3f435cbf93bc45221ea881e4312ce03392bf9093e37a9fd8af501e8ef0e1ded028a6f30ba94a3d3b5b2e63a78a557b9a19259c75d329269d5d91d4ba2e4b83ea9f93bca9dffe9e896", 0xae}, {&(0x7f00000073c0)="cf16f530dda25f1faca9767eccad8f28e1353c9a361a39736d90c3964bb41b489ad30a59a2c0cb6fda6ccd597744126ac87ff74950bafd799048d1fba67ac72c24ede3719093b6d434dbb85ac1a6d088e212e2b85e934e9c44418ba2c0e81402f8a99727cbc973086652042ca9615750a5370d6bb368c7fc1d3ec05e191365a84de042aa63672021dd7e1db9597584042dbf352434c0521ce0", 0x99}, {&(0x7f0000007480)}], 0x6, &(0x7f0000007540)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r8}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @rthdrdstopts={{0x18}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x2, 0x20, '\x00', [@generic={0x30, 0x9b, "c70c13bc128ee083147ae95ca495c89aab1f4d3683150355750b4721b87b0b07d09cfbd93c83cfa588590f68ded574b28a3531d128eb7deb747a904ca8f186301042f6e1fd00980d139aeb8d161ff5bc028f55c8c31e3977c3bfd39e08ee114565203f1a8f8eaec0cd75eb4791e6974cfb1dd575b9ecb16e273c799dcb2b52e92e2c029dc48facd42ee1840b1a1054c4f6a548b2bf48c8e60e7eeb"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0xae6}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xf9}, @jumbo={0xc2, 0x4, 0x3d1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x2, 0x25, "bf8f4c3cd76cf07e1ffaad046e71196b4c8024e62d9e42ab7d7e4d3823dc8f638712862048"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x4, 0x2, '\x00', [@pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x1f, [0x1]}}]}}}, @hopopts={{0x10b0, 0x29, 0x36, {0x5c, 0x212, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @generic={0x1f, 0x1000, "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"}, @generic={0xf9, 0x89, "45ef96665cafda44c81a1179ce0273af91ffd6c488926af23e33b62e3acc563be5c5aecc900cd5ed7cfdeed1d861332bee59b8786532bf880470e381a0f946d089c097e2eadf269fc78867f3251cfddb4b51217bc1a57477605d7793134e1df7cf8f5caa8316e8288317eae5b616c8ca1f942944c2440f5dce6f7a90b358a8da4fd5f6b8b7a723c8df"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1000}}], 0x1280}}], 0x9, 0x881) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 12:42:46 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c5}, 0x20000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0x0, 0x0, 0x1ff}}) uname(&(0x7f00000004c0)=""/4096) sendfile(r3, r2, &(0x7f0000000100)=0x8001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 12:42:46 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000240)={0x7, 0x5, 0x2, 0x10000, 0x3, [{0x2, 0x7fff, 0xc7, '\x00', 0x140}, {0x10001, 0x5, 0x125d, '\x00', 0x1000}, {0x9, 0x7f, 0x280000000000, '\x00', 0x801}]}) close_range(r0, 0xffffffffffffffff, 0x0) 12:42:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000600)={r0, r1+10000000}, &(0x7f0000000640)={[0x2]}, 0x8) r2 = syz_io_uring_setup(0x6133, &(0x7f0000002a40)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r3 = dup(r2) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) sync() 12:42:46 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, 0x0) signalfd4(r0, &(0x7f0000000340)={[0x9]}, 0x8, 0x800) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x5, 0xc00) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, 0x0) fgetxattr(r1, &(0x7f0000000480)=@known='security.selinux\x00', &(0x7f00000004c0)=""/240, 0xf0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x701842, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7, 0x202001) write(r7, &(0x7f00000003c0)="d1c0f512998c81e3ad013ad07053a778af89ddd6c89c0ad195a267528b428a429ef9b0d7f6b555c718780a21b8001b281b312b050079bb55e33e7a7af026fce7d052020dae3a3fd4519d5c7673280cdc4f38f848f7da0eccff7714c30b4c1095d1676c47f42582689b77bd0df4d82cbd8b9de502a77476ff1d8c37e2d2ce2e2a", 0x80) pwritev2(r6, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000080)="295d499ba8007a5cd92099", 0xb}], 0x2, 0x80000, 0x0, 0x0) [ 252.032385] audit: type=1326 audit(1762519366.380:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4621 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f1545b19 code=0x0 12:42:46 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x3, 0xffff}}, 0x14) sendmsg(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000004ec0)=[{&(0x7f0000004e80)="fdfc84", 0x3}], 0x1}, 0x40) [ 252.119757] ieee802154 phy0 wpan0: encryption failed: -22 12:42:46 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:42:46 executing program 4: pwrite64(0xffffffffffffffff, &(0x7f0000000200)='N', 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) 12:42:46 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) dup2(r2, r0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x4b) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xe2, 0x1, &(0x7f0000000300)=[{&(0x7f0000000540)="c3ecabc80d30996ad5b905b0cfdf1392ae5bd55cd85ee9fd34f042341a0662b9c2280149975de7cd8e0a6e980e320f28dac8531ee659765ae89ae3b4dfd4aae9a8d89eb5850b67c3bc20fb644cca9165aa96fae112bae13c5159590bdea4252be34a2d81985e29f56a15aed162848cf2c9553942f8d3301b86ea23b5d5bae580a73167ae922edf7bf7bd4d800a23eb18785ee54bed77d4e42b892ff38ad340340ecf1b1148dae70fc5bcf9a4a88210c57b6948bd8f", 0xb5, 0x401}], 0x0, &(0x7f00000003c0)={[{@dots}, {@nodots}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) fchown(0xffffffffffffffff, 0x0, 0x0) fork() 12:42:46 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c5}, 0x20000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0x0, 0x0, 0x1ff}}) uname(&(0x7f00000004c0)=""/4096) sendfile(r3, r2, &(0x7f0000000100)=0x8001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 12:42:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x223a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b25}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) r0 = clone3(&(0x7f0000000000)={0x80100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x220000, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = pidfd_open(r3, 0x0) r5 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x1f, 0x3, 0xf8, 0x80, 0x0, 0x7, 0x1810, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0xa}, 0x40088, 0xa5a, 0x5, 0x3, 0x9, 0x3, 0x7c, 0x0, 0x5, 0x0, 0x7f}, r3, 0x1, r2, 0xb) clone3(&(0x7f00000003c0)={0x20a801480, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, {0x4}, &(0x7f0000000140)=""/226, 0xe2, &(0x7f0000000240)=""/252, &(0x7f0000000340)=[r3, r0, r0], 0x3, {r1}}, 0x58) r9 = getegid() r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000007380), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000073c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) r13 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r13, 0x5000943a, 0x0) r14 = syz_io_uring_setup(0x1981, &(0x7f0000007400)={0x0, 0x404e, 0x4, 0x3, 0x21, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000007480), &(0x7f00000074c0)) r15 = accept4$bt_l2cap(r1, &(0x7f0000007500), &(0x7f0000007540)=0xe, 0xc0000) newfstatat(0xffffffffffffff9c, &(0x7f0000007580)='./file0\x00', &(0x7f00000075c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r17 = accept4$unix(r1, 0x0, &(0x7f0000007640), 0x80000) sendmsg$netlink(r1, &(0x7f00000077c0)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc, &(0x7f0000002200)=[{&(0x7f0000000480)={0x84, 0x1d, 0x100, 0x70bd25, 0x25dfdbfe, "", [@generic="6c0907778c18b8970b5731f7934570a194dcfd571dcfe4c4f7ef9729b7aa8226a2249f5143e56b860b67b161066d8a9cb5d2633821126befb9338a1fae83d6ce1cd8db42d422c05648dd1ab41b761f56753e56e3551868d9335190729025821e9bff0b5037db54d0d8ec8abee4af8036e4"]}, 0x84}, {&(0x7f0000000680)={0x31c, 0x20, 0x200, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x84, 0x0, 0x0, @pid=r3}, @nested={0xc, 0x92, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @u32=0x7}]}, @generic="4a7c86103d0b42b0ee1177008d19ba02852d90c41db9", @nested={0x1f6, 0x7, 0x0, 0x1, [@generic="e7d355727f46418d8445996a585eaf90275ece742fadba796428ae6497cb6fd3bedb69c8908f624994a27a1fd1affd6683347320f89cdb5cb8879443e9685e72dc34ccfc96540972ba0d70dc686ba7e48b3dab", @typed={0x8, 0x7b, 0x0, 0x0, @u32=0x1}, @generic="67f583cfa48d832089a4374843aa41a4e87fc533c8e52dfcd3a961f8bdeef672d4a9d92c1aca0917ceaf1799f9bbf83811a8ea54249a6da44bd3c84ea6135ae62796fea0f3b6ce4d2d40f2812e8a9fb835860cf34aa2c4bbd0e9867c7a3e9e02757f21c9685dd81d50a262c7c2b949a7795cd707d6e33593a02d80049286cf5c3a8f6bb7fade05776551037ca9f6c82f", @typed={0x8, 0x43, 0x0, 0x0, @uid}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="4cfe3b49b15f90a7f175e786cbfa3c64e4bb40e757ef3d7ca2ae117acf16281ba4dcb00862dd53fefb7ee7db4b7eec31deec0bdd811f703ab3dd77520388f57226c8c07e6186d1824862ca033deab6042f30e364a59ff24dfd8eacfa3727893e81ee96c28693a1722662830afd9eb9e6c606b9576d4d0360e63195c01050a868425a154f44c1dc096c1660dfe8bec9c0040d84945680657ad96e0fbbb421919834626977ce6adc1f395bad7206f75914751cebbefdd9c94ce459f057e07f88f784bfe784bdef8eec955fb84f6ebfc0e90ab43e6249d3a2d4a3e368e7c3be885d56372b29f4e5afabffea3725ef3f0ffce5d298c01e8bf4"]}, @typed={0xe, 0x96, 0x0, 0x0, @str='/dev/null\x00'}, @nested={0xd2, 0x95, 0x0, 0x1, [@typed={0x5, 0x6a, 0x0, 0x0, @str='\x00'}, @generic="7e6cc6d3fbc99cc2b544851e378762fda4fafbb1934216494fb26e351f49ee5d70c66ccb4fbe9f0287ac75d22e365e214ea623085e09717b1452d9fc81155e2ec494729157692ea205cf27e6cfa02abfebc1bd5590c1ff7dafc18701aa938e6be362d09a00f1a8eb056c08aa7ab058af0d75deb23b3a6be4a1a448ce97f07888048a41870a54ac443d45a34644edbf05334d5d5eeec8e8b304668dfbd3376ebeb359ffd7c6859f59bc9b", @typed={0x8, 0x6c, 0x0, 0x0, @uid}, @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @typed={0x4, 0x76}]}, 0x31c}, {&(0x7f0000000a00)={0x120, 0x10, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@typed={0xe, 0x5c, 0x0, 0x0, @str='/dev/null\x00'}, @generic="36bb250821cf6625f426c910ca8e0beb421c61492daa2089f0d467efb062f1fbd9a5f6be7943ea057bca8195e5d0511649f7fdf7bccf9b9bc92033e4c0fafc979cd38096c56d57ee3f52ba712b5cc97cbf0b336f237e77cef340380dbdb3476ca785b94ef5a8b8e7efe626fda1a9d2ea3fda6ece2b40f3c90fe3f28f3b0e1687708b998c1d35c56cb16c25cae6858b515c7b6ee7fd29cf65296745adf5f81b3bfe1750570b7d61393404492e9c56b192c5b0410054b9ad3df27547788a88792c81304e867683027b270d2a1dab058ec7dc5d42c3b393", @nested={0x14, 0x77, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x8c, 0x0, 0x0, @fd}]}, @typed={0x14, 0x64, 0x0, 0x0, @ipv6=@loopback}]}, 0x120}, {&(0x7f0000000b40)={0x16b4, 0x1f, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@generic="d635807e5ff560c9974d5d63492e0fad6acdbc1d6e", @nested={0x11ea, 0x4a, 0x0, 0x1, [@generic="ed42919171259ad65249aa88d1062168299b177db93c2a78464f549fa678fad10f7b998d1701b11fa0a4f10debcf9e891b1f28f800989507b25dceb6ebf293fcd62cc6960a9fae1765a2b192969d630a9608c9df0f08a3c03f58f573d99b54d90a9d000587060b9ce13e302c8eee07275567bc442adc0152ee93ca7768a0f9e61bf12939046ca5caac403af2408a3106e11700dca86a598cb84f122fcc3e0b15a91ca02394070983eb70e8db40cdd62d7b5d7208e9808f5223abfc735ddf3ec169860af94417089d8c0774706ec4f6159fac431b3cd7cc33bb5b3718dcd4a41874d04634e31ec164e68d52e0f7c420fb49ddb10c5f6ef8e797c52f8ecce6e425f2c53e3e5a5b28ea839fdbe97f9e4a5bb037703cb2fb156f3e41fa0d7acddfc65ee7145a67beb8f4fadb3525f0bcc1f1ce07376829b3cad2528464ec09836c7109b1e4954fefd8e7c223892a8068b29f30464f450dd993ee50725f64d90345e9c3e4fe7198f7f789e73cf99e46c3db2f47d8c940f95115ee8e717a3e42165e92c1e285f209978d6d78b9795003b9fc755502ee530969950c105a35330d7c88495739237e3ee19f5ed5e7eb68e15f04bb56a97059d1d1f97fcb64fa70556c4e067c01d4f50a65a89d7d4156010125bb9b042d3a9d7b8af35c4b796ddf72e317c39c269f0dc600c6fac9a8a46b28d20e04344d90d2968a6ec6fea350108cce141b5f6c36c98c613d44c3d54b8950cb14ae2128aa00b03987b58950519b80cc76eddfd5edbb23246cfc162a917a1635f24dd6694f0c0a189730871833d03bc7f241702dfd9732c00028359cb274997350298e78a51ac913a967f91d983c32beb89fe1c2d7c06ba8afe537fbfa306bfa6b6e84db61b7aec2703ed93bdca0174095ebaae065e042ab70b592807e660ee0a07ab1eada868a9f9e40cb466f654296b6d3a11c98f9f3b781faaec1ecccd071861f5120183387e1a2deb6cb5ac50435380f5956aff760dc6ddabefb90895e5c94a36e3945fed20cb7963047b8bea2fb0bd78d2e663e0a20559f9c866cae69a4eaf8db9d0347781f8d7f49dbd871aa33e7b720d47024daa00d5936e77f90dd62fc8f78d174204a1bb460efc049a8698f8d7e352c21ee18b8d713bdfdc1bf5f77e1159922f12a93ef5828584d426e4eba4e661d1c9d322acb7c7dbedaf82a955bc23b1f213a5c062ba897ed652b7e5b7d9942eecdb60075f1fd2d07d40617db7d1968d751fe89bc8018ed27320875fe4bc0ca559835c97666b76a1a0f61cc5dd83163f2e2498f940d7dc33af76c87ea7a52aa2b967f2975628661645570efcef535e619f161a6d286a5d16d0e26c6cf155a4a034f91b12a7e6a891bb06aa089df6580e72297a94975cafc4b383ad3a0bdef5585f32b4f956079304faa97bb789f7060d97b8170a7a02d65fad2b97a2bf2ee4132ff1b4129177e63673544b9d0afef3d61912d42f6d31fd9be3157d5fd2b6978904cc77f85f2b832a146c14ace252a91ab6fca9d790b15238d2add34a3773b7d3c392fb82b59ea21d0fcb96a405dbf82b3adef34bc98917b210eea84f9a97622a755eac6be446f6b6d38ef7b4a702cbb6b98cd663afda7877d587086e3516af93ec40d22ae287d2e18b8ad1eabf0989633a5a540e10d973f824de09c944f1aa191ef7a7c4f9535b25fec6c06fb3aa3e022d1b0493d1fca807efc91a3ae869517a9f1b2cd4e826cddcc683f91c03b84df2565073f739bbd44c5f75081e11eca0f614d03da54b92b5d7dc99f48b44038a1405f7ab6ee34a04576bf0fda522f72127c72757527299bdc26e69f89ebb1113f614b32a322cbf6342ec2fb48ef08be489411898d1e64aeded54ebab63291cfd7b1d64a998b3d89e9795a046446d9fcb8bf12add4becfabb2a9fad946d88d70171b3f81a8d8b8d933fda96d649e2815e05724d2c9d5caf2c862a19ec8e7f539eef41c7535e173a55f2cb6e1580bd8ee61e78d87e51f111164843f18d0fec466041b2fefa0120650d57c5a27fcd9fa56b5b3d1d7d00b5d8a55197b7876f7568a39c3cb4c80a7f82d22178a6bc784957d91aed9d2263a3b4cd15484136c20c8ee6c69a77b6e4e66709310d5dd3ddd8106d9785b2f7ea62a05d75326c3ad5a1282bdf2aadc97e7d17d6655ea5189c306ea6437c089ef197595049ae6afddcf88158c03de1847fccdfb08ea4cac6e9f46fb158ff3fc5d218d5411e5986384285489a66a2cbad203e961f91710225b7421e755cbdd25e0f9056dd99311167d03b63ad63441825575eb34a58462740439c6cfa2163780aac0561c406941623d138e6577718466c89cf5a4b0faba769cf4506dc93bbb9bfb279aa546a6ed01af7d36699ad0b12a01f135359f8f6273bc473942a33d4be81afafc2821d236c56759987c0a63a20694689dd9ac6303ff711f6e79318fae910bc517649a5b0606b638b050e82a7b400d23e1c2ca29c50bf7be8bc12d3076ca2996cb95884cbdf3892d7518397e1d9b108b3e69882433c357fd74b413ac6c272c2d1d84dc52c2f04dc467e70d35e709c60ee3f513002c895d63649fbf7db5ab67ca68abc87029de6da92325207b97336ff8dfd11a08361a44a3f364eaf46e060f8c2f47dec3b658d69bacc327b446931414994ae398a2ec68ac75c8b749a9b6aa7e10c85b8c23ec60b64a0630ed49daa375b68a4b02648a5146d1d6fa89fa12852d4ad37affb570a82dc3281fa086542738b1831fa1aa5248897aee29ac7d86e9d09ce7de9969a94b49b8505de2bff3c0d2d33025ca409a648f6f78d42e356bdc5f5b663b4d02cbe766585d6d4d05e3737e6a7790513c5f118e26123876b2615f1f35454709429609bc2590dc5d1f16dd30e7a111e373b9cd83842bcb0b56eda76e169383039ca9baae87ae78dff9edce255a409c67be8a75e241f995e6080d43025bb44a981498aa2552d00866f924f9cd3afcbb9d4e67bbeeb0fc9e7caa15da9afeb62540cce4745726b05694d106eee109959dc815401cdc8610fae73e35ad89aa9ee5ca4780bcf1c202cc9662f1b3777919b3a738928ba6b2609624e9a6fb30cac870e465e9b2a6cf78412744cc166e8e44ea8a2110e5ca1418f4fcc6664e2ca58a1731b72855fec351226b2fd2fbd404426c410e6de212195a67946369b316ef1399672d7eadf2f5e6ea5994fe07d1040b60f5c49ebf37d4229829e9000b0e24b11d7e53ecdd47f8c0e2eaa0b3529454d4d5a97cffde43fec8ce28453a10d958087348a9db1365ff8e8f6d12eb564447c3f786030ec92928b93e277104b2e689f59ba36e75c226332a231126153125c425de0fa30c5736e67f017f3122bac563c2487891d7953107ea7bbb17baa1180486db590324e1e90c395dc2bbfd330c66e6e85fb9620483c39346e2f00544907fbd9e1154a5e3219181808242c9bb1b234189dd86a63caeccd3db2d57599fda02e4d1a6feaa8da50ab96caf2e535946b66d07a1e3f7ab918e3ccd3a90da7be7778923b91e20d4cbc77b9acb22d9510c9d5fce8f2d6e242d194a48b16e06df6aa13a16fef27fc57fc9f06fe46b192c52a47e0b15666dcc8360f4c31f7e1038bd924452c8d09b755736216d60718983ef7c336e3e52c84996945caa8d1c050de30a7ed3b4e20d6a82ded4bcc5d8ee4bb1ab8210fa52ea7422869606430ae4821c5d1947d8028003e9386ca0d6728634666a0c2e21a6adc87cc6c3dc21950e52a26675a6bc325e5a195dd2f5d2a9bf28b8ab878a7802bed36898841856af8a238d4c024ea7e92f45457d58794fef34079f44c956b3aafeca35f29ae879a63c97f617dedfd8444294ecab6a4f854331f49d9128259e8a7201b356604e3db51c3462db53351de1ffd431a288230c703d6425855c536b39da1296cd9311fdbcd551ca2550070622b815d68daf6e32576a37aa33111e7ce8a42594f70a17b3b18288ba968f082c254b37e19c55f08986cc3cde48a9760af0259a39a8588d9d336c5e8831e8747cab35da62f0fcf00ef6d01bfcf7a4e6003290006069c82d51c4e0bf4fbd0b78d499122249451fc0f04416f3a7ce7a979ac4dfc8fcaa1b564189c51b893a40b5aa2084f1c74494eb215ba5e8abaadabd4f9746c45aa8ec3f08bd0003707ba30e8e86cce8fc21d6ab895a6270ac82e8a6bc1cac557970a16aa0642059cbc423d9fabf0134b1b5f419199c6101fab9605770afd9739cd627266740e549f8246c8129c36b5c0decb3230a3ae8299b49c4b3ef7fe58397c5e96a1411b5cde4e3246ea7101dfca3174d1654c678f0740caf2d8ead5e67e2a968ddc58bf7453a8e05b71d26754a2f4e63ba46070ac83f279e30ec24d1ddc61d6990816402b4b3676b63942bc4f061b44323af778479fbe8ff78a1ead062f4ac39ad5f14d63abd360ea2d880f710c951d9ad996bf03264cdc820df416595833d083f3e007dd385eb214268363937fe1e177cc7ca0db597bca87e0873691a8523ef2207276889f3297e8ea05c02c8a22e65b218f608b1aef28b9d6078fbef6e92281ab66edd7ecdc6c9c0a83d20958ee51077dd269987c4d7f3447fa7877dfb749116ae28ef03686f5f1c8acf09f3d16eccf9d026689df57fafe484e797d4f4920509d3945e76759d976b9d1fc52b00f03f385a48185512ae39d719a6db53ee3d00c6bd905d6e0853eb8772d0414b124cf9ee21f77f94d662b4a3428f2728a0909da170633b6da4925dbb12ebf803804e417600bfc9273910bad79d6f3d5bbef5c640e084c84f9f4cf0069a5a00a6efa41a6b05ca4c806ece558a8a7da58c08d3688c5f1bf4aac9f4d6f4462b794632d82e92c50a3d5b1b2e622b328dd173e056abb5b0342995e77f30252a3e4ecb0b8114fd18d7436581970f7ec1305d62326b5bb676f8b6586eba6b6036739b44348e52185ecd62844c475e648488051c3faa3c5100a34122c1048d9e6404984fc28f60b37254119aae432daeb3d093649bbeaed4b7d02ad918988e3d6b50cf93f6ca3d8f6335050af85d44548749743f9ba15adf9c7ba2e41a358834971bda8c08e35619631e92582869aa5c374c44dd213973602e064178b943e4dd67aeec351553b4a8dc598cd6b668454d3bf86f90c869b95587b68cad0b5e7f62e8ba6ce1730b0c1a0759753d5b4f7a7eb4f9c1e2505881e0f6fc0f860e738672b100c7d5db6c8eaf936ae433d26825c21917083f649b69aff6c7bef1c38792f657f67e3327237a5a2c34ae257ee7f7d210faa04277442e7412ef12009c8f39e7ffb84126b40b19f421662b1b2537db4aa19c091e823dcd9119dca0e7706d8ac69bbec0033a5726041c0d58d8de6a829611ce1e1e72b1b168dadade04c32cd2cd0bb69936920070c7cbbf82d9cba435efb566403e261ee5f4fe40b3d3d0c21ded91a7df0325ac183705360266bc0d7a08db1f99d6019af905425222fbc78785342b413f154cee32448697a436f8682768c4fe82e0c71b5c873c3acf01744dd4e36c01236f8107a1149ea00b9f5b45369808c40d5a1e73d2c9ab64c87d9046d7ec4ff544d42f4a46a3d87691e6e9c217c902d9286866780dfe12cfd789c5302337ae121a898ea512696fbfeff8017e5f2f6695523c29ee645bdef4834d716eee922c10a190e692af333e5e6f81cff11ac464a44549f91c9879101511f510fc2b21751be33bf7b0cf939b5637bc16d299bc546c31a05ae50cd63945a33f580f8facd45f99299f87aeca401d405f9bd3ab93fd6919cba2edb6e6bf8217f19337046c6251ab74cd783744", @typed={0xb, 0x55, 0x0, 0x0, @str='!-]%&%\x00'}, @typed={0xde, 0x5c, 0x0, 0x0, @binary="d4fbc3e915b070bcce86a593b9949178ab05abc0bc4244c85eb8a15b2ce140bf11dbe63e8f408525d5e379cdb3e350163d758c35e73dbdf0e63aa20e3894d3660da3aa75a919ef4a29cda07f77ee0e3ebb1a20e9579ea68df10b7d5f2f1da2e3f248fa9920fc6cfb5681e047ead276c54835086bb45331df9ceceda28beef2f2e96872a62f4de47ef55564cbc42c7a20b588cc2ce3f448e45d35bf45397e5a47d76060c55b5a47fb43a8c9f1b3d29f59c4d440380be76b21264fe19fa775a1116dcefbc0ba531edcefd5bbaa4c3e8fcdd7bce2d84deb9e3d286e"}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0xe, 0x35, 0x0, 0x0, @str='/dev/null\x00'}, @typed={0x8, 0x7f, 0x0, 0x0, @pid=r7}, @generic="f537da44c28fa997893c6104755bf9f9d3b79790faaa017015158a7ca532030be4656b2a13ec7492a741334feb55ed4cb952b0377bcf870a3884786c6fce4f78aa205440e7310c4e4fe7b25135647dfaced65a18a25d23269f1bdbc6eeea60538d23ea945c98392c9bc8408c19e90cf82d95381bfeb3d07cd1c12673d93d97d0c2213c300b4a1cc034ce410c1e67a4ed94e199c286defcba7d0e14806d6e", @typed={0x8, 0x89, 0x0, 0x0, @uid=0xee01}, @generic="2f1e2d8f35dd9014e20eb0480688a31d02391f29d4edce099a204f918789ea6f35f2ee5fe0ae3a54"]}, @nested={0x133, 0x8f, 0x0, 0x1, [@generic="61492e93d6f5e482", @typed={0x14, 0x76, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="e20a458698f483a9a4bfab096a9825912b8212c1881d746571d7aca46da030ced4bb0ac6713044b11f1bc9c72a91c76844ee32cd56128cdf2ef8c95ba81fb3fda2d52374db7779aea6748df4527e1b182afce27d0a1e6d58e4eff90f727adc05d95ea067eefed47c221bcba0129fffd1d2ebd9be5171acba5acdcc5c0e6b0bc551e6f18d6db8fcc98212d16b36d0c4e6a5b5640c0b5d9be18b9655b32c50fcbaabdd7ca2486f1a92e09c8bf937fa31e682ebcbf246a9ca59eac201", @generic="fd5093e4725f6ed1c97eb66dfda23aeff016c3318704a8c94333d55e4ccab13d11b69b18e737433de4f999c9771c337ec83e468a00ee536207d0f9141cceec9aca24bbb687cbed99c7285e412abd57c100637c9c5d646387"]}, @nested={0x4, 0x7d}, @nested={0x101, 0xf, 0x0, 0x1, [@generic="1e53fbdfd53973815164c6a0662d826b22520485006d9bdb225c3cb5377d25e80d7b24d8883bf19612822b2dc2dda7d4936cb96c23e2b3dee8ccc60a0ad6afdacfb57d797b7aaf2527af067dca13bd467e800085c0970f471a86aebfa28694d9f02912e5256c97d18a7b8c8b11ac18b203b4f3bdafd1460990248986699e18ce041cbe2335087c40f0191d218e8d7fbc1767ba8736e442f6bb2e920273fc03646143219445a2bb4e3dc0c4771ffb61e0f2bbd2e9d6619a7a4ce1ab4aff979497d3644658be5167f01d7f062067930eccd55338cc05df007f1a2b9634c3f942e846bca87daea9370e8a3145fbde039d9bc631513191", @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x80000001}]}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r6}, @nested={0x23f, 0x4b, 0x0, 0x1, [@generic="22768ea47119876b6fa56fa8812cfb9ca07c1a50beed60b9951c892dd195ba6082566cf7d9df92baa040e6c12a9b9679ed5141cde60e01f013d4938d64ef8fd8a3c3a562bd445bb74dcba08c94cce024c5dcf9a7a33ba8fa2f0ed2601593c03f18039e658b42fdb835f21b939f572347e102b91cf36079597b68d8664191b20f53ca999dc8c4e2f5f1cefc1d5dc7b58cba7490885dc4b1c5ecfe196dcb62f7f02d7831a804aa75113a1bd460ea9feef3ea54793707ea7e", @generic="fd0226f0a2017ce483948456deb547b48e72fc651634b1c5203611", @generic="a06efb946467c2ab6e32c3d5764ba2e1901b8c43339ee665ea9b694ceee7f4e1b4a19fb9", @generic="9f6f01c223ceddc755ae242e9074a3dc4d7579388f08edb6e5cfd22d39e7d51cfad776bd6f582866cd6a95cd1524de10fe7c5476a732f8d5b00d9b20bbfb9d1ce7deb3f1a7fb687a234218", @generic="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"]}, @typed={0x8, 0x1d, 0x0, 0x0, @uid}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x16b4}], 0x4, &(0x7f0000007680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r9}}}, @rights={{0x1c, 0x1, 0x1, [r10, r11, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8, r12, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r13, r1, r4, r14, r15]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r16}}}, @rights={{0x28, 0x1, 0x1, [r4, r17, r5, r2, r1, r5]}}], 0x110, 0x801}, 0x0) [ 253.240060] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.242058] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 253.249208] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.250969] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 253.256064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.258480] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 253.263342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.264599] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 253.268933] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.270479] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 253.276014] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 253.277525] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 253.283340] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 253.284337] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 254.446307] Bluetooth: hci0: command 0x0406 tx timeout [ 255.279073] Bluetooth: hci5: command 0x0406 tx timeout [ 255.280191] Bluetooth: hci4: command 0x0406 tx timeout [ 255.281254] Bluetooth: hci3: command 0x0406 tx timeout [ 255.282283] Bluetooth: hci2: command 0x0406 tx timeout [ 255.282315] Bluetooth: hci1: command 0x0406 tx timeout [ 255.342329] Bluetooth: hci6: command 0x0406 tx timeout [ 256.494330] Bluetooth: hci0: command 0x0406 tx timeout [ 257.329667] Bluetooth: hci3: command 0x0406 tx timeout [ 257.329710] Bluetooth: hci2: command 0x0406 tx timeout [ 257.330879] Bluetooth: hci4: command 0x0406 tx timeout [ 257.331398] Bluetooth: hci5: command 0x0406 tx timeout [ 257.332515] Bluetooth: hci1: command 0x0406 tx timeout [ 257.390360] Bluetooth: hci6: command 0x0406 tx timeout 12:42:57 executing program 4: pwrite64(0xffffffffffffffff, &(0x7f0000000200)='N', 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) 12:42:57 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000240)={0x7, 0x5, 0x2, 0x10000, 0x3, [{0x2, 0x7fff, 0xc7, '\x00', 0x140}, {0x10001, 0x5, 0x125d, '\x00', 0x1000}, {0x9, 0x7f, 0x280000000000, '\x00', 0x801}]}) close_range(r0, 0xffffffffffffffff, 0x0) 12:42:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000002000000080003000000000000", @ANYRES32=r5, @ANYBLOB="08002600a809000008009f00050000000800a00076090000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, r2, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 12:42:57 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c5}, 0x20000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0x0, 0x0, 0x1ff}}) uname(&(0x7f00000004c0)=""/4096) sendfile(r3, r2, &(0x7f0000000100)=0x8001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 12:42:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001900)='attr\x00') getdents64(r0, &(0x7f0000000000)=""/226, 0xe2) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa00c749e3f300ff00000000080000180010219058ac13e2010000f50001c43b778639a28bf94452"], 0x0) syz_emit_ethernet(0xdd, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x1, 0x2, [0x3e1, 0x8d5, 0x7b6, 0x534]}) 12:42:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000600)={r0, r1+10000000}, &(0x7f0000000640)={[0x2]}, 0x8) r2 = syz_io_uring_setup(0x6133, &(0x7f0000002a40)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup(r2) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sync() 12:42:57 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:42:57 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) dup2(r2, r0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x4b) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xe2, 0x1, &(0x7f0000000300)=[{&(0x7f0000000540)="c3ecabc80d30996ad5b905b0cfdf1392ae5bd55cd85ee9fd34f042341a0662b9c2280149975de7cd8e0a6e980e320f28dac8531ee659765ae89ae3b4dfd4aae9a8d89eb5850b67c3bc20fb644cca9165aa96fae112bae13c5159590bdea4252be34a2d81985e29f56a15aed162848cf2c9553942f8d3301b86ea23b5d5bae580a73167ae922edf7bf7bd4d800a23eb18785ee54bed77d4e42b892ff38ad340340ecf1b1148dae70fc5bcf9a4a88210c57b6948bd8f", 0xb5, 0x401}], 0x0, &(0x7f00000003c0)={[{@dots}, {@nodots}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) fchown(0xffffffffffffffff, 0x0, 0x0) fork() 12:42:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:42:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) close(r1) [ 263.104820] audit: type=1326 audit(1762519377.444:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4679 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f1545b19 code=0x0 12:42:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:42:57 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/kernel/kexec_loaded', 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x8000000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/kernel/kexec_loaded', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x8000000) 12:42:57 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:42:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x7fffffff) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x56) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) 12:42:57 executing program 6: r0 = io_uring_setup(0x55d9, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x8, 0x1}) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r1, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x40010, r0, 0x8000000) close_range(r0, 0xffffffffffffffff, 0x0) 12:42:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:42:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) r9 = syz_io_uring_setup(0x3661, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r10 = dup(r9) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) io_submit(0x0, 0x3, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f0000000240)="cdb9ce5644890d94632666aa5d2b0c27b4cda51f2fe0a6cddbf83794f520c097f40033c4fe180fc4b600115dd0cff826a566dc1208a312d3c96f34109e1145a1c266da2a282ac45343ee38f4da4f914e3b90c7dbb66e2780a82c3ee385c2769f3db88f8cea2b97b3dee896cc78f34e476399315a2170abcea6ba11ef86c23ad18b76cddc4ba77b15f17ad898d0b6149c721cca456586554f3ae1fe9dfa2412ee99f9af64d9d2c2f18e38e10c11b48dfee2a5ad0b4bcb6ca75757bdb121e3082d37df967980a572417b21cf9257d00e6bd2c9b7b5533934ccfb0b9ed06a9b1ebfbfd16f2e06a83f9b048335f5f4cd805696b42bf373aca331fb61e38c", 0xfc, 0x8001, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x2, r6, &(0x7f00000003c0)="dffa285bc54ead8997f4893b766cf6473b8ade55d284039a59192732309e0a223cbc1e3d51844bec4a4c0d22e6b5f7f385dacc53c335ef82a5306a94286f527dba7d63e4262515ac439bed30a481f8787bdd0f262cd28b4e8cb519c6255ec2a61aef0131bee67a949fd9b016e9ebbf65c1f0b9f70dc9", 0x76, 0x3f0000000, 0x0, 0x1, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x29, r3, &(0x7f0000000480)="64092c987a6f29c4306ac129f19ff7a48cf798a8364e01790f93d12c531f34bd58ce389e44a957f88cd2f5265db63e5ea46df8f6efec0e28f951fa2764e43f402d67c25368ab3d5b69adb017c37d42fe0711c0ab3b513a228851415e190262501b8986903d2d56cdbe519a8a017d46d0f8df2f830c072d5cfc341926f7b5b11444ab69edd51f022da0886979b48db91adfe9901c01f1c337ac29ada79b221a3d45294187d2961e2c36f7fb560cee2edabbb4a5b0ab8364f3215b2ee7b5bb33f4995ce3d0cb059077df37a9aa2a6996a3068e3daea6720325b73c85403b209790a3e71f7c9c998cdc8dc967271f3dce", 0xef, 0x0, 0x0, 0x1, r10}]) sendfile(r3, r6, 0x0, 0xa0103) 12:43:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:08 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000240)={0x7, 0x5, 0x2, 0x10000, 0x3, [{0x2, 0x7fff, 0xc7, '\x00', 0x140}, {0x10001, 0x5, 0x125d, '\x00', 0x1000}, {0x9, 0x7f, 0x280000000000, '\x00', 0x801}]}) close_range(r0, 0xffffffffffffffff, 0x0) 12:43:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) r9 = syz_io_uring_setup(0x3661, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r10 = dup(r9) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) io_submit(0x0, 0x3, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f0000000240)="cdb9ce5644890d94632666aa5d2b0c27b4cda51f2fe0a6cddbf83794f520c097f40033c4fe180fc4b600115dd0cff826a566dc1208a312d3c96f34109e1145a1c266da2a282ac45343ee38f4da4f914e3b90c7dbb66e2780a82c3ee385c2769f3db88f8cea2b97b3dee896cc78f34e476399315a2170abcea6ba11ef86c23ad18b76cddc4ba77b15f17ad898d0b6149c721cca456586554f3ae1fe9dfa2412ee99f9af64d9d2c2f18e38e10c11b48dfee2a5ad0b4bcb6ca75757bdb121e3082d37df967980a572417b21cf9257d00e6bd2c9b7b5533934ccfb0b9ed06a9b1ebfbfd16f2e06a83f9b048335f5f4cd805696b42bf373aca331fb61e38c", 0xfc, 0x8001, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x2, r6, &(0x7f00000003c0)="dffa285bc54ead8997f4893b766cf6473b8ade55d284039a59192732309e0a223cbc1e3d51844bec4a4c0d22e6b5f7f385dacc53c335ef82a5306a94286f527dba7d63e4262515ac439bed30a481f8787bdd0f262cd28b4e8cb519c6255ec2a61aef0131bee67a949fd9b016e9ebbf65c1f0b9f70dc9", 0x76, 0x3f0000000, 0x0, 0x1, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x29, r3, &(0x7f0000000480)="64092c987a6f29c4306ac129f19ff7a48cf798a8364e01790f93d12c531f34bd58ce389e44a957f88cd2f5265db63e5ea46df8f6efec0e28f951fa2764e43f402d67c25368ab3d5b69adb017c37d42fe0711c0ab3b513a228851415e190262501b8986903d2d56cdbe519a8a017d46d0f8df2f830c072d5cfc341926f7b5b11444ab69edd51f022da0886979b48db91adfe9901c01f1c337ac29ada79b221a3d45294187d2961e2c36f7fb560cee2edabbb4a5b0ab8364f3215b2ee7b5bb33f4995ce3d0cb059077df37a9aa2a6996a3068e3daea6720325b73c85403b209790a3e71f7c9c998cdc8dc967271f3dce", 0xef, 0x0, 0x0, 0x1, r10}]) sendfile(r3, r6, 0x0, 0xa0103) 12:43:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x7fffffff) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x56) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) 12:43:08 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x80) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="b40400001300010029bd7000fbdbdf25ff0100000000000000000000000000010a0101"], 0x4b4}}, 0x0) 12:43:08 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000600)={r0, r1+10000000}, &(0x7f0000000640)={[0x2]}, 0x8) r2 = syz_io_uring_setup(0x6133, &(0x7f0000002a40)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup(r2) syz_open_dev$ptys(0xc, 0x3, 0x1) sync() 12:43:08 executing program 6: ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20000000, &(0x7f0000000480)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) [ 273.839685] audit: type=1326 audit(1762519388.182:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4745 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f1545b19 code=0x0 12:43:08 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:08 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="3b25000004000000c2041000010007d1"], 0x130) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 12:43:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:08 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000000980)=ANY=[], 0xfdef) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x121080, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002040)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000002140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r5}]}, 0x2c, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = getpid() pidfd_open(r7, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x1f, 0x3, 0xf8, 0x80, 0x0, 0x7, 0x1810, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000240), 0xa}, 0x40088, 0xa5a, 0x5, 0x3, 0x9, 0x3, 0x7c, 0x0, 0x5, 0x0, 0x7f}, r7, 0x1, r6, 0xb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002180)={0x0, 0x0}, &(0x7f00000021c0)=0xc) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r9, 0x5000943a, 0x0) sendmmsg$unix(r2, &(0x7f0000002280)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000100)="595860aec8819eaec17e5a3e6c3629efa2cba14e0a23124fe76c2ccf21312babaf82c34fc914617ffa51b96e59fe25a30fd05d1eda07687cbe4b237c3d6df88af7a53963173a75044024cded533eb03f2c2097c3dd5c7efb209b9f698a53af4814a9521f4e0322bef298807bd129a97cfe69522d", 0x74}, {&(0x7f0000000180)="83a875ad973afeb386df14035ad5c1b49d440ff7af8188b8bfd271d47bd7eddb07cc0e17c50bbbdff8d4eb78db2628e5a16f42d9a14452c5aacc524736904bf04ccc40b11a8da73ac0b56bec67bd69d993348af29cfe1845a1f2e295ed8431f2490496672d8d42a3f8ea8085ac67ddbc5e362c684f", 0x75}, {&(0x7f0000000200)="543e5bbc084e60fa00fc6e69ae13231a84084ca070f538709d461fbfc8c5d89f4d5595aab908d46042d3ed62a56ceece88199736b6fddb8596dcd9358209632affdbca09ae727fea1b657af9ebd5079053838ac71a6b5a118c67d7c48262895a705edcd1c3920bc5484575329d0864878a273be554bd8105000be51708b248e30d081b266512893f41057085856adc34db98d0e0a4b7594d84875747d235302c033ec63e6983ae94847cd205c8e768c5a3f76836dfcb32734074230153bdb0f1dbc2d6a244fef1c6c132f76999284da554b9fd7602cdda3926a0ead41cb04505e0646d8a5551fd9445cb2837f6754b530c1a7dad9fc9", 0xf6}], 0x3, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4}}, {{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000380)="c1b385ee294f47dba43f1a9bb604587aa95968e187487b3507e184af52d7a6914a763ce8d9795bb007f1827eba907a6428028a2463", 0x35}, {&(0x7f0000000480)="032b2bd44936b5c99dd06fdc3af0677f4fa91937d3849b3e3f10cca09aa1bb0ff5feb3c8be8a994431b986c79fb39fd332542a56c88aef77cfd0ed6c38b5383addf39290cc6af07a74093993bfdedf83907f44acf6eebaac1fd60cd0abd3843f2dba23a9772955a3f9b3d4a949bf580797a7f1c38f2b133c492d93dc148d8ca76df8068415f6f14821afb85ab3733bc2d2", 0x91}, {&(0x7f0000000540)="0c2a1163425ee29b4e820f1b64cbe4f468c85f16069ad954c3d8b97e2e0a267eeff8858da430eca961c165016f14ce92a77af46955c4dd5abdf3dd0e7b0163da57cb89a4260e80c69f44ddee1664f585881ec1c1533c8df2d32446947ba9d46644405cd884937bd35007069d53ffdc020366f758208739b78cb3dfaf8757698790528415c39eccdd45e8048a99d4b265d74479d3afdc57eb5f626793ae4254497278936da4748d732a44208ea2ba6dc28c7f87cbfc66acc7a2bbbe9c65dd", 0xbe}, {&(0x7f0000000600)="7add6f648f6eb48caab4e614e302cf73115a15beab3ee3942d350e999e19ff7a3abc606841f849dbe7c8bd8f22ce2da9e3e895424a3978f31d3fd48a7a0121aa7b087a8762b529df38de17f7ae62749eb1e16ab0c6e639e221b740476709aa32d24b0eab8b16ac598cbf2144d1028eb5cfc3b700e5a50fabb57e15f34ad7a434eb79e63017f6d5c4561c2ab3cfba60515a9964de4cae6a9abcf4", 0x9a}, {&(0x7f00000006c0)="c9630fdd6fbe569808b62aca9991e788c35114e40985f81ede772c96962396fa2e7bd044d71ac6386b8b50486936461067fe80e98746c9498cf62d8cc4a8cab37069692fbf222d17bddf34da986e7533f1a621190adde4e15c66ed85f427802439285307e3b0cd868b1079064cc2c790b119934f437b3fd36ca8a4f32904902d1bd6530e4f99258a4cd8854f3d2b0c4d66d88a147fed1aef0997fd7bbafa11b97997b7995bb86530b7722e2b571cc81c0bcd8c9bf57c84c0f57508bfbb6e963b5a5963585d0140bc97920c6760e5fb6b1081d4887544c18034606bb29357c9369591bac90c0de493c1b99c375ceb0ef9ceec9a25349a96", 0xf7}], 0x5, 0x0, 0x0, 0x4c080}}, {{&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000008c0)="48c79c0d06b2499971aeb5e4c83f3891980638658cd5f5c5ae2ddea493287f2d56e537aaebbec9098ead54490f2c3a0a7bdb0dc038f8872bf1125fbb0991037b6f1417499936e77df18e715fb4ac6df42248275c273d8f4b5f0337063d18c359b6d4193018426b186507190cb1b291a87ec3d94293f21bcde2ff767c75ab3bece2eb6e6096d8501d822461a76333dc1e095db57f7b05163f65581f12f7592decc7bdfa987aa5476a0a5a0cf274811fbca6cf52990ace6abd6e1bad7ea02bc04275fa83146b8abb90e9de86b9ca1047346f237a97633f75a25e4e581e0bb5d6db0ce666", 0xe3}, {&(0x7f00000009c0)="68a3a0bbfd4b1151e12717109d57cc2c776bce6ea2a9f9cb1ea4ea1fc0f7831f04777d9f016fdc46584d048d999e9cbc820d5071935bf473f5b6a68c501009c0c16fabde44d57a587e9b580ab5f10a3d18626d6cfa03b4aae82f2d6fd2d62348d6f7e948ab6871345b9d0d569cdb9bad1bf103e9ad4fd6e143", 0x79}], 0x2, &(0x7f0000000a80)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x41}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000ac0)="c9cefa9ce30ab7e3d61c9994f5622d20bd389b315a79c610997a0307378badd6af837c6cd4c7e647c353f3d4b60dc575432b451170f382c79baba8fccd122db08bea3953663be6286a1fe0eaa9a70f258a029e3b79927e62a937c15739c54ad1458f7ab01adffc9a1ac5fa939e7109", 0x6f}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="a7", 0x1}, {&(0x7f0000001b80)="f5b4e8cd0d2c8295226d2232d5c2d77261f580de23825c9cac84335872029c155fec6379632f9f9241cedc86cc88", 0x2e}, {&(0x7f0000001bc0)="1eb6ddba288837b8acee96b41752ddd2ec96c0c79239f1a8d4a49c59666c69f5ebb4ab156eb16e25bd6a2ec126cc05807dd5de8a1df5df79dc2090e626e694d252c55b338184488ffaabd60eb07085bad3cfcb39d2653634e74fa5ad587cf32e3020a4f68912433a719053b053e9c08fb305111f38e0ca6cee69d0f050030f7a7558b6a60570efd735bd357ece3f21574a1bdd39227b87281a880764deaaf8ee7f87aa1170a7d8b3e68f723a1ee27696c4fbe8f0105190a14f5b8a26a358aeabe8017f", 0xc3}, {&(0x7f0000001cc0)="a335d96aca90226a7a060590e88d06d85a1b9586dd5c0ef13689a9a4f92c8f", 0x1f}], 0x6, 0x0, 0x0, 0x40}}, {{&(0x7f0000001d80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001e00)="4494134031b720b636c70fd1d977047a730392d081def320685f622b598043874f35bfb5d9b3c176f19c41a557884458887466b350d35e1f79", 0x39}], 0x1, 0x0, 0x0, 0x40004804}}, {{&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001f00)="41ffd6d938eaf47d73c2fe58aadf1257bd88e75ebeb4535c09cf717d9485698a2713b11b4c63c1387208d0cc1a64f38573bcaf50de133d4baf847d2796e5e36b6a2aa0ed39742f9b864fb00353bfdfb46af1971dc773b3991c9c4f8bd09df93eead9dcdeae69149e4851377b99958274e51580dbc911837892c5e3489c1240ecf86884455fe20edebd4ebb2ac51cdfe9e7cc126594d90dbf63051e2cf361ee2a1063cb2dc54ce5c7e16ff9d82d02a70944d90a7057f4d1561da54c61d927e1997fbfd1b18b96efcbe2e285acf5361363d22f7e727c031e8cc3063657985ebf747b1a60b7ba7ef444d7d32ffbcbfdb02d3961", 0xf2}], 0x1, &(0x7f0000002200)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r9]}}], 0x70, 0x4000}}], 0x6, 0x4) 12:43:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:08 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="3b25000004000000c2041000010007d1"], 0x130) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 12:43:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) r9 = syz_io_uring_setup(0x3661, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r10 = dup(r9) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) io_submit(0x0, 0x3, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f0000000240)="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", 0xfc, 0x8001, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x2, r6, &(0x7f00000003c0)="dffa285bc54ead8997f4893b766cf6473b8ade55d284039a59192732309e0a223cbc1e3d51844bec4a4c0d22e6b5f7f385dacc53c335ef82a5306a94286f527dba7d63e4262515ac439bed30a481f8787bdd0f262cd28b4e8cb519c6255ec2a61aef0131bee67a949fd9b016e9ebbf65c1f0b9f70dc9", 0x76, 0x3f0000000, 0x0, 0x1, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x29, r3, &(0x7f0000000480)="64092c987a6f29c4306ac129f19ff7a48cf798a8364e01790f93d12c531f34bd58ce389e44a957f88cd2f5265db63e5ea46df8f6efec0e28f951fa2764e43f402d67c25368ab3d5b69adb017c37d42fe0711c0ab3b513a228851415e190262501b8986903d2d56cdbe519a8a017d46d0f8df2f830c072d5cfc341926f7b5b11444ab69edd51f022da0886979b48db91adfe9901c01f1c337ac29ada79b221a3d45294187d2961e2c36f7fb560cee2edabbb4a5b0ab8364f3215b2ee7b5bb33f4995ce3d0cb059077df37a9aa2a6996a3068e3daea6720325b73c85403b209790a3e71f7c9c998cdc8dc967271f3dce", 0xef, 0x0, 0x0, 0x1, r10}]) sendfile(r3, r6, 0x0, 0xa0103) 12:43:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000240)={0x7, 0x5, 0x2, 0x10000, 0x3, [{0x2, 0x7fff, 0xc7, '\x00', 0x140}, {0x10001, 0x5, 0x125d, '\x00', 0x1000}, {0x9, 0x7f, 0x280000000000, '\x00', 0x801}]}) 12:43:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000600)={r0, r1+10000000}, &(0x7f0000000640)={[0x2]}, 0x8) r2 = syz_io_uring_setup(0x6133, &(0x7f0000002a40)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup(r2) sync() 12:43:17 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) finit_module(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0xc}, 0x2, 0x0) dup3(r1, r0, 0x80000) 12:43:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) 12:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) r9 = syz_io_uring_setup(0x3661, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r10 = dup(r9) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) io_submit(0x0, 0x3, &(0x7f00000005c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f0000000240)="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", 0xfc, 0x8001, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x2, r6, &(0x7f00000003c0)="dffa285bc54ead8997f4893b766cf6473b8ade55d284039a59192732309e0a223cbc1e3d51844bec4a4c0d22e6b5f7f385dacc53c335ef82a5306a94286f527dba7d63e4262515ac439bed30a481f8787bdd0f262cd28b4e8cb519c6255ec2a61aef0131bee67a949fd9b016e9ebbf65c1f0b9f70dc9", 0x76, 0x3f0000000, 0x0, 0x1, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x29, r3, &(0x7f0000000480)="64092c987a6f29c4306ac129f19ff7a48cf798a8364e01790f93d12c531f34bd58ce389e44a957f88cd2f5265db63e5ea46df8f6efec0e28f951fa2764e43f402d67c25368ab3d5b69adb017c37d42fe0711c0ab3b513a228851415e190262501b8986903d2d56cdbe519a8a017d46d0f8df2f830c072d5cfc341926f7b5b11444ab69edd51f022da0886979b48db91adfe9901c01f1c337ac29ada79b221a3d45294187d2961e2c36f7fb560cee2edabbb4a5b0ab8364f3215b2ee7b5bb33f4995ce3d0cb059077df37a9aa2a6996a3068e3daea6720325b73c85403b209790a3e71f7c9c998cdc8dc967271f3dce", 0xef, 0x0, 0x0, 0x1, r10}]) sendfile(r3, r6, 0x0, 0xa0103) 12:43:17 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x64, 0x9, 0x4, 0xffffffe0}]}) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x180) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0/file0\x00'}) pread64(r2, &(0x7f0000000100)=""/113, 0x71, 0x5f6b) fallocate(r1, 0x0, 0x0, 0x9) [ 283.080084] audit: type=1326 audit(1762519397.428:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4785 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f1545b19 code=0x0 12:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:17 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vlan0\x00'}) 12:43:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x80}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4004010) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="97", 0x1, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0), 0x0, 0x0) 12:43:17 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x7, 0xfff}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0xee01, 0xee00) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="37ef8aa7c16ab1ed896dad17efa6d20b122199ab74b0933b3f2f83a7bdaa0b048b3f88df358471479266d3cdab97d269fe7fabd5ca6f71765160650e7452b0a2a7b1c1dc54df6be191f0d11335dc132fd69b6d954206479f4c12b8335d47b98bfb74ad45a6f4f7616950be66d426e77c7b04ade2de738d3b16590d0c5dcdd5c7a2a7b718b3743fcbd8f27862a86fc01ae34f62075db1f09ccfb0ada4809212d4491acdc10036b53ad2c141ce3584d717e753", 0xb2}], 0x1, 0x2800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000001c0)={0x1000, 0x7fff, 0x0, 'queue1\x00', 0x66b}) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 12:43:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:17 executing program 6: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) accept4(r1, 0x0, &(0x7f0000000080), 0x80000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x11, 0x0, 0xffffff8b) 12:43:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:26 executing program 2: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002640)={&(0x7f00000026c0)=ANY=[@ANYBLOB="00000000b37f407d0264e3b3bff446a58eab27aeefc4aece6d5bba9b49bf9d3b01e5316a039a2a1a9103cb5318ab76167ad2b0f8868533ea0f50e3d337581bb83902f362ebdf42e92c764d9d299ec6e177ad2b04dd204901551184a6c17a6538c9c9e375d215b6698478e89f80c996383daeccbfa83aa82ba599d675c0ad7c630abe5638d558f01314be718c596b62cbfbe12b450867750b53365908bc31fcf36a49d144e37849b137ec545bbcf5b80f76be31558e2c02cec7a895d65da626214dbb6ce479baabbe6df122705644ba164fb1cf993a3e85e5adb9708387350dcaa8", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf250700000018000380140002007663616e30000000000000000000000008000400060000000800060007000000"], 0x3c}}, 0x40815) fstatfs(0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_netdev_private(r2, 0x89f6, &(0x7f0000002800)="e3691e28bba9bd015fcf177b818726e64814c9d6cad3af098e528c20a789af83784c5c1a09a5463695a81ef2ed24c25c9edae272f6aa12af72c4c8369ea92923bec5329e0e12ce8bea3097ceea7b53e7a7c02a7c56d9e13956a4d3c22889f191b102f47de97f57556f27f53e705b389f9f758d07987d63a0bf47d7ae473e130154717499427fe69fbbbe994c41d0518667e8cd8db0c16d9ce27d3749d71c63bc513443f0") preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000100)=""/166, 0xa6}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/245, 0xf5}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000002300)=""/67, 0x43}, {&(0x7f0000002480)=""/219, 0xdb}], 0x6, 0x9, 0x1) renameat(r0, &(0x7f0000000040)='./mnt\x00', r1, &(0x7f0000000080)='./mnt\x00') wait4(0x0, &(0x7f00000022c0), 0x8, &(0x7f0000002580)) 12:43:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:26 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) r3 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r4 = dup(r3) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_submit(r2, 0x5, &(0x7f0000001380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f0000000080)="d1991408fbb48b1e3aa5e41fbd33fe89f313a11a67762e768e4153728879ea36af40cd58e38a9c69343a587c037963f9a6c2e9be272939a85eaa9be977f9b2ae55f2adba12837e4d114320bb0da88d37709e3a8e9d48d235b2640ea20c940d365d6d39d34b", 0x65, 0x0, 0x0, 0x0, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f00000001c0)="a149b379b4d9d3940d03bb2c005875ba668973c3ec93dec905148871e8aef93cdf52f5d1c163bfd98faef513b2294f6a2944a00f9b424c399190f478ffc0f24914fc28371c19da53d443cee0ba9d5d1a4c66c03c", 0x54, 0x100000001, 0x0, 0x3, r4}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000240)="7c3073436ca743519c35de125bdb18d788ed2da11c4e117606bdca23ea421cbfc2bf73116cc6eb24d043580b5e6637d6fe34d0377ad1e46e021789b6c87aabbceddf52b6932dfcef7a47b4e4bca04439e2040df3a5cd71f53ec84b87e757e817b9b206cfa99aa619dde2baae0cef74a0e03230f10985be7daeb89c9950d8e3e7d26cd0a273ebb7a3afc10782a36cddb080646fcc588b9694b805de769a8cc4efc847f022e845e82f53bd554933050d63a1aa7f7b33ec43028201c1ec142e28dbad0e1b2c7706398e22bba02960bbc63ca4be0d58b3471562ef3842b89409104f9b159bc135643e5fb492e61e05bb3d39f9931ef49e24cbf713057a614f4c187b4c89b4ae57332a6761705c8f33cb2108fce168c37b6a9257bbfda0823ea257bafbb715ff6b90be84bc572e25494c61f38e0dae4e3f67572ca6e7ede71f3cf137d3271c57c13df2b962ab55993cfbc0069eb7ae0cc0a47ed206d0c34ef3efe9ed4ae81b987780ccc47156f80fbb20d093d4f285ab9bdff93de227dad3d0a5bc7cde5986fc0a03c7ee90ce3fa4420ae5094a02d479b7d6b1b094ce0f5d7363ee1fdee0d363e2dee354b20ceb22f15add336b7a425184378f6a3a80e4111bb5f1a2f8b04ff3612a32b3d303260edf68844c376777da36ebf9351e1b3752d0a5944ccc2e9ff8881b0c6e10d14c26f52cce3159501a8c5fa0bbfe42cfab239a00602f91b7fa90e57cc891c20ee24dadea7cd87368c1db3c1c6b942dfb8ae049f4aba81bae5ee16c191059b97126900b1615fef311dc5d6371eb18b03895975926f699dc452703548b8e97c57e80ae220238ef1d20278204569af1d211c43405f84d3c3612fb1bb404f61a07e5e21e290cc672db778938e789f7d3813b79e351d7df92524704f2728604c9813b333839087cbbb0ae9101cdef71ca051a85081fedc7d2e99cb867a7b3c62cf749b3cbfeb79cd124ebd4793054d3211cfd94d279da7197e5714aecec2b506d4cf42ff0019056d1d428a1597920a8e16c709d76e6c24f56b90709ebc5ed8ea8f7259edbbead5615b13bfbf7831eafc473ee47e6b3b91b97794a7202d147d00ebb9819de28a76402d911322e7d287e4a9284faf77cd6c629e78e9539e176ab8d50ce24ea9c0f314f6628071129827cff92fc2abb9a1b66b1148fd211c1a1d19faa96579a539760f02cfb3ac6282082a29d3fdfcffa3a7d8578d2ce7fb62fbdfc622fa1f8002700491e9ed57686465cb117a76820c180c6c12af077f5c9a50db32baf61c32fb3ca6da001964359c9b3abb06e2252752a404fe2cd05523fc0a9d4755bb3c104e0f4658a97a9790b2585ccfcbb97a6bbe7a5e7b93f844bf9fd184478150c4ff3496d458a6b1de5cbe668339526c7ff96be0d342a5b24ac5d410f39afac15df80cbcb99598d81c0c1779e23770683113fadcd34f5859fddd5677362d15f10394191ec8711bc9bf63961b20a8fa0aa359319495cb229049459afdc524eb892d95f0122fd915e68cb25daacc9a98821f490315cfd7e06208f2c36f18cd1de2320e8684dbf012e1b32b27da0136f56b9f19bb4c6f1a7278c1f43f0b145b0808d8cba7713f0ed3aad0b9c21c3ebf7ec10eaecabd01bf77c80429096a015233e377337d77fb9d3064eda66b4bebdecc047bae9264ca7b3c805eacee8617929301d4555ae195d700a4f0aa9dab17ce53a8fb9ba511c2b7885b35d7e01408db1dfdac1b2825a805f43786cd4f1d09980f1f95e26d3dcc08d8e5d8f6cd0afea6ec85f00071379bee3bb5cf29bce0b155334b434cd479eb53612f4287488a3966c2bd281c8db7ef120cafecf32a8888f5f65328a14b328d2f85ca888218acffeffbe91acc6e9eb1e8454837eb5019048c2eb2e789cae57dc059a4a2eb9b483a3ef4763e0a2e6460e397afda3aedcfa657b18c5d6d904ffc6097431ed7a828b5bac8934e298ffb6a002da550948c23a44c9aa770a6280a0fa7f82738f8147af13ba1cd7acfa1efb3643fe8daac40c9632124efad18f9d889349a617107c38546854435b9a524a1679a2ed8e2d0b518bffb809001880d23391303f8a063967d613ab863290e1ba9a3aca4efc39a4dab357341a009b4279448471d6384111e2a4fb49e1b52911f1417cc123d1b759207b5f59911bd42b47635c8be90e9cb244a3817006f6b814c2ad284ddf8b004dfa54a05104d18e696ec33731a416f8cd4aed00a56cb525d482f9b33e1641746e8abd6425c7bd276ad31e157aa900e0bfc43a40f4d7cbaf446848b16a865b0ca657d7faa97259a28e701b3c93d858d30a213fccc48b520767c68b1182a56a6b4f2c8d1afb56bec8fce25b68ca076faeb9251489fc5b84d70b857e3159e84e986a2d10599bdc1067dd561b793d648ebae0b6986710356ee33adc5c8ac164d8ca8d1d4cc4bf0e35f64e183bbda02e0cd11dbc973b7f4696ba8f93c320ccdd4a2628fd52cd00bc711f3bb1d691b74a908cd044f0d7966c8d3773c133178ac0b19ff6d0a091bc909c9f4f5e98f445c60ea0a0bb99a59077d7708344a5d367dbf4b87663c089bb00c0b00931ed25ae003d0a028d8706802bc58410c3ef227baa10ebe99ee36ef29ecbdcf9b04286419ba6ae441e752c2c84c8c53ae39102d1d79b9baecad98d74a90c98f6e21d7ec35fafd0944aed43267cf3217e0c613b0692a88a7c93b19e32f61666ba9099846d2b2e8cf51e2b8dd98c0284b2e701e0bc4d8524af4a6dd7742bd42086636283cca317074dedd0ffa1ffbcb34e236555f33a083c97db1b137fd60c48e73aa266fef252534c1978f84df3f1cdf604b93e98f5375593580060e6f750f93b308d43a33f6ccc6dd8100de9d7686b3e36e81a9044f5559866760226913e1cd4fb547cbea2d02ed74b38f4d5172aeee965d73ae1d3f419f22bba52ae908f5743b6d6d513f1e12d1f4c776c10ee90a16ba36cb773aa3ae1e4b6e5bc2080c707fe544760f8b3ec22ce8e992c4fa7c7dccd3a2d04aa1353ffcebf7ecfbe4859f30d9d401dece0734de0524b49946b61215ba30a6a5e4e5ffdcae8eb3e48f80b5c90414493e01d8a75d46a94560be71ceae8b443d79aaf9f9d17b382505496b46d57d1fd7b89bd2d45e8e98a62ae3fdb1888ce14cc0a27b0bd5f24e87a71faa14a23695ff82d4c0d125ed6a7df9fd2dd740f724c250c695ea17fda34744f0bbcedb0526d844607a3f07aa8e1fdbc6acf5b7eb962e72bf1d8d6fa7e32ace9fa3f46c259b0257e1fffd50b31cd8737957479f8318616e0976c5e4b2310f7030a0e780724237769eea511d689663998444b1feb06d7a2b35e170a2a721a7828810ecb524135230204360a25d48e7c29adb83ac8316cd221aa52e2f26e1f56bdec46173a652e72cbb8b4f3ba68650e4695b8dc38b271a7f9e098e9b1a0db074a541b6b5248c9b96b9b58628b51ef6b6a0d7c1b1f7f63bf3df1087313b8d887f5d6c4159a2b3a8572405ee4bb8de0afd41c5bef51e9d4ce522458dc0fc277ff0bbbd8d1faa64dd72bb9f844074d680ef7651c205785a5668bd5d68aa60f74d9d6b5389804a8f7ba503af653bfaa670d0152906fd5b1322ad1cc2b533ae87f5629918b55bee13d2e8b42f925c4cb7ed3aca6ae8d6a27aea460865c96b026444d5d43dd5bb39b98840933eab977c41c5debf4d8057dc163bb6ca043396ad7ea4c30e93d865079497ae21f2a85e23b80045091ed4c023b5bc668f759cf719bd7b40e67ca8d351dad2a75f1d92a2e2b63f56de7db307c11a01046bfd2a61e74ba139fd6edfb930e888498db0eb835290debf5daf5860ebe003d63a57d3d19710e10ec31157a7067e05c732914d701ade5282fbdb39250c82fe598c6402ca4395c9ef72e10688d9106c0afc571392e5b0c0b6a6ddc33750510ab268bb7c22df38cb00602c1ac619c198584154baaf43b6680c1f39f204c487f916af0d80d0642fbbba3b6bfe740d22cbbe7fe11143dc54a2e9604a91324d2ad47563b00584aac46f0ce4df1d1f6c920dcf06e99ba6c5806e4203bb7ecceffc0a4ed67d46a93ab396c69a8e18857ea45a9c31091bde14cd5a6b7ff45bc3fb260756bbbf6250414e869fe8fd8afa6b260d9e567cd65003f230e4982e0c2bebc348ec1e14f244e3f2366ff7c60e355a08909ffebd1a92f85ae5357eaf6d8026ab13be3b0e5382b50a2356c03a648c844e203419ab0a212a7ed37bda46bdeacdc390107c50c06452103a21476d4eef87f3afb9e4cb9fb940948a334b00b481bfe3900a048af23d90963565f86d82e7c3ebf7b477fee42141d5ef6bd831ee12cc55c56778c885f63ccc25c5786093a4b86cdf2d2c8d4939be7f1d0d8ffa510d114a17fdf40db21d7b4c456e96ed6a4ba72aad9014e7f08a6b2bb3d55eb6e48579c30abb2c6f83fcae131dc9a58d3bc94c6ba11dee4bb9414fab93abef917b63a89151675ee64cca561a2fe384255039d7ce0ebb865e0baf082e89410ac1c42d75556c06042fd7d8c458d815227de945d56403dc1ac9bc7e96a9c0f5ad781dda4b85cf5aa43253c8019d1df3c957046514ce5935b0d36c774ab54f2c7594fa883230b4afa9b6a213ee95bfc9f8831a1fb5907aef3e0f03b32a8167189f0a65100988f81bb70f2d7704f1ce77a22ac9e56a483d2dbae00e54ce6f45830550ce7ed7c7b2221c5bc07b3222d4b28d2fe8e490c21cf808b638a0c48f4f1190a1859027b6c66b813f478cdf785e9fee86832a2d8d550455179097de3bf2ec4c6a24baaca1dd064b810adfb3262c2401798cfe57022b4c0fd71ec7b3061f3d03a791f0514572401b6f1c2d610b65cf07ee158896644fc158703a191f0903803e15679d64bc43626b8be2a673673b6e2017e130cf731472ef9fc69d59229adbc0a13ad941efa2ea596162f7222d706b73b60d8c8e9621f063b00078855c089df8151b0f8b1c2504e52323bdc5c1452829f09f55be3fdf0b2c7016b6062f8a57e804af05d30e7c99042043e7a560e15edead3fbf189a28f6d8c1a225c1ea273d270faae0908e06682c0e72b35ee1c615cd79dd52cd07fbdbdd268cfaea15aebf093b1aa6a820e28958c92a9ab10eb0967eef910d83d760ab3710f8981169aba9909308431dbd87599f4745313e03a1eb49cf41e8a6946654f53fb25ca5a2920465ef8c49441c79941495cd4b93d8cb979d974c4a6d3062aecd64a8ca9c8e08f5c968fb26d2ae6243cf1a8da55554779a7d98610eb8124c685a6c064dd2373c8a2504ad6af3ca2e30d2639c64b076fc40590c6a8734e30d912602a2b2a2b5d9500cff29a61dd00d80d6a08a6682b54f8cc3485ef2cd99d7ab62f0c22bec4f124ff9fe1e04bb2a45d32af458db0ede34acc5d14a8469e6ea9752c09eea9176568ed6fc877b44d7f4cd292c99a3c2efddf0943b64cfbee9b3b74b9885bd689e1e3bbac7f20f8371b7a5828f3a7b90a9df9732135ad047231010985c8c551c28175f90e3ff9a968be317ba5497fd89efe14dc45a88728b5adb32499d9c13908386b73c184e29b068c682b0c5aae48f7a551f244ec41d1b6104725a5d4691dad2fa6c4913277401239be3ee14f18842fb1de78c5c8318b427b2b75b6fb26be14840b3f492531db0951897f9653bc963fe6b4df3a202f47d2f163e17f13b4f7acfb3ffe7eafccbccb7231900422013be0884e14e1277b01a6da165f110b9997f86358da22ae5c3af00fc332745a7459317bd3257eb2edd77cf9d2572f191a20da9ba054e00ba8c641cd133f8b5b7c11801d1ca44e479061166c85", 0x1000, 0x6, 0x0, 0x3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x400, r0, &(0x7f0000001280)="b1af1c79bd1292ddeb", 0x9, 0x2, 0x0, 0x3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x6, 0x991c, r5, &(0x7f0000001300)="8edff9e130f5ef42b0921bb0cc955fdc6fde5162b22b", 0x16, 0x3, 0x0, 0x3}]) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000013c0)) r6 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 12:43:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) r9 = syz_io_uring_setup(0x3661, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r10 = dup(r9) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) sendfile(r3, r6, 0x0, 0xa0103) 12:43:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000600)={r0, r1+10000000}, &(0x7f0000000640)={[0x2]}, 0x8) syz_io_uring_setup(0x6133, &(0x7f0000002a40)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) sync() 12:43:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) 12:43:26 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xa4, 0x4, 0x2, 0x7, 0x0, 0xfffffffffffffff8, 0x100, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x8000}, 0x400, 0x6, 0x6, 0x6, 0x3000000000000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x2, 0x20, 0x3, 0x0, 0x5, 0x80010, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1, @perf_config_ext={0x13, 0x5}, 0x4f8bbd28ce8076e9, 0xffffffff, 0x1, 0x3, 0x8, 0x8001, 0x4, 0x0, 0xfffffffb, 0x0, 0x4}, r1, 0x7, 0xffffffffffffffff, 0xa) 12:43:26 executing program 6: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x0, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1f}}], 0xea}, 0x8800) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xea, 0x0, 0x30, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xf}, 0x2420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x160) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f00000004c0)=ANY=[]) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x1ff) write$P9_RSTATu(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c65078f", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRES16], 0x61) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) copy_file_range(r0, &(0x7f00000000c0)=0x2703, r1, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000280)='totmaps\x00') [ 292.557331] audit: type=1326 audit(1762519406.904:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4852 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f1545b19 code=0x0 12:43:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:27 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) r3 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r4 = dup(r3) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_submit(r2, 0x5, &(0x7f0000001380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f0000000080)="d1991408fbb48b1e3aa5e41fbd33fe89f313a11a67762e768e4153728879ea36af40cd58e38a9c69343a587c037963f9a6c2e9be272939a85eaa9be977f9b2ae55f2adba12837e4d114320bb0da88d37709e3a8e9d48d235b2640ea20c940d365d6d39d34b", 0x65, 0x0, 0x0, 0x0, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f00000001c0)="a149b379b4d9d3940d03bb2c005875ba668973c3ec93dec905148871e8aef93cdf52f5d1c163bfd98faef513b2294f6a2944a00f9b424c399190f478ffc0f24914fc28371c19da53d443cee0ba9d5d1a4c66c03c", 0x54, 0x100000001, 0x0, 0x3, r4}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000240)="7c3073436ca743519c35de125bdb18d788ed2da11c4e117606bdca23ea421cbfc2bf73116cc6eb24d043580b5e6637d6fe34d0377ad1e46e021789b6c87aabbceddf52b6932dfcef7a47b4e4bca04439e2040df3a5cd71f53ec84b87e757e817b9b206cfa99aa619dde2baae0cef74a0e03230f10985be7daeb89c9950d8e3e7d26cd0a273ebb7a3afc10782a36cddb080646fcc588b9694b805de769a8cc4efc847f022e845e82f53bd554933050d63a1aa7f7b33ec43028201c1ec142e28dbad0e1b2c7706398e22bba02960bbc63ca4be0d58b3471562ef3842b89409104f9b159bc135643e5fb492e61e05bb3d39f9931ef49e24cbf713057a614f4c187b4c89b4ae57332a6761705c8f33cb2108fce168c37b6a9257bbfda0823ea257bafbb715ff6b90be84bc572e25494c61f38e0dae4e3f67572ca6e7ede71f3cf137d3271c57c13df2b962ab55993cfbc0069eb7ae0cc0a47ed206d0c34ef3efe9ed4ae81b987780ccc47156f80fbb20d093d4f285ab9bdff93de227dad3d0a5bc7cde5986fc0a03c7ee90ce3fa4420ae5094a02d479b7d6b1b094ce0f5d7363ee1fdee0d363e2dee354b20ceb22f15add336b7a425184378f6a3a80e4111bb5f1a2f8b04ff3612a32b3d303260edf68844c376777da36ebf9351e1b3752d0a5944ccc2e9ff8881b0c6e10d14c26f52cce3159501a8c5fa0bbfe42cfab239a00602f91b7fa90e57cc891c20ee24dadea7cd87368c1db3c1c6b942dfb8ae049f4aba81bae5ee16c191059b97126900b1615fef311dc5d6371eb18b03895975926f699dc452703548b8e97c57e80ae220238ef1d20278204569af1d211c43405f84d3c3612fb1bb404f61a07e5e21e290cc672db778938e789f7d3813b79e351d7df92524704f2728604c9813b333839087cbbb0ae9101cdef71ca051a85081fedc7d2e99cb867a7b3c62cf749b3cbfeb79cd124ebd4793054d3211cfd94d279da7197e5714aecec2b506d4cf42ff0019056d1d428a1597920a8e16c709d76e6c24f56b90709ebc5ed8ea8f7259edbbead5615b13bfbf7831eafc473ee47e6b3b91b97794a7202d147d00ebb9819de28a76402d911322e7d287e4a9284faf77cd6c629e78e9539e176ab8d50ce24ea9c0f314f6628071129827cff92fc2abb9a1b66b1148fd211c1a1d19faa96579a539760f02cfb3ac6282082a29d3fdfcffa3a7d8578d2ce7fb62fbdfc622fa1f8002700491e9ed57686465cb117a76820c180c6c12af077f5c9a50db32baf61c32fb3ca6da001964359c9b3abb06e2252752a404fe2cd05523fc0a9d4755bb3c104e0f4658a97a9790b2585ccfcbb97a6bbe7a5e7b93f844bf9fd184478150c4ff3496d458a6b1de5cbe668339526c7ff96be0d342a5b24ac5d410f39afac15df80cbcb99598d81c0c1779e23770683113fadcd34f5859fddd5677362d15f10394191ec8711bc9bf63961b20a8fa0aa359319495cb229049459afdc524eb892d95f0122fd915e68cb25daacc9a98821f490315cfd7e06208f2c36f18cd1de2320e8684dbf012e1b32b27da0136f56b9f19bb4c6f1a7278c1f43f0b145b0808d8cba7713f0ed3aad0b9c21c3ebf7ec10eaecabd01bf77c80429096a015233e377337d77fb9d3064eda66b4bebdecc047bae9264ca7b3c805eacee8617929301d4555ae195d700a4f0aa9dab17ce53a8fb9ba511c2b7885b35d7e01408db1dfdac1b2825a805f43786cd4f1d09980f1f95e26d3dcc08d8e5d8f6cd0afea6ec85f00071379bee3bb5cf29bce0b155334b434cd479eb53612f4287488a3966c2bd281c8db7ef120cafecf32a8888f5f65328a14b328d2f85ca888218acffeffbe91acc6e9eb1e8454837eb5019048c2eb2e789cae57dc059a4a2eb9b483a3ef4763e0a2e6460e397afda3aedcfa657b18c5d6d904ffc6097431ed7a828b5bac8934e298ffb6a002da550948c23a44c9aa770a6280a0fa7f82738f8147af13ba1cd7acfa1efb3643fe8daac40c9632124efad18f9d889349a617107c38546854435b9a524a1679a2ed8e2d0b518bffb809001880d23391303f8a063967d613ab863290e1ba9a3aca4efc39a4dab357341a009b4279448471d6384111e2a4fb49e1b52911f1417cc123d1b759207b5f59911bd42b47635c8be90e9cb244a3817006f6b814c2ad284ddf8b004dfa54a05104d18e696ec33731a416f8cd4aed00a56cb525d482f9b33e1641746e8abd6425c7bd276ad31e157aa900e0bfc43a40f4d7cbaf446848b16a865b0ca657d7faa97259a28e701b3c93d858d30a213fccc48b520767c68b1182a56a6b4f2c8d1afb56bec8fce25b68ca076faeb9251489fc5b84d70b857e3159e84e986a2d10599bdc1067dd561b793d648ebae0b6986710356ee33adc5c8ac164d8ca8d1d4cc4bf0e35f64e183bbda02e0cd11dbc973b7f4696ba8f93c320ccdd4a2628fd52cd00bc711f3bb1d691b74a908cd044f0d7966c8d3773c133178ac0b19ff6d0a091bc909c9f4f5e98f445c60ea0a0bb99a59077d7708344a5d367dbf4b87663c089bb00c0b00931ed25ae003d0a028d8706802bc58410c3ef227baa10ebe99ee36ef29ecbdcf9b04286419ba6ae441e752c2c84c8c53ae39102d1d79b9baecad98d74a90c98f6e21d7ec35fafd0944aed43267cf3217e0c613b0692a88a7c93b19e32f61666ba9099846d2b2e8cf51e2b8dd98c0284b2e701e0bc4d8524af4a6dd7742bd42086636283cca317074dedd0ffa1ffbcb34e236555f33a083c97db1b137fd60c48e73aa266fef252534c1978f84df3f1cdf604b93e98f5375593580060e6f750f93b308d43a33f6ccc6dd8100de9d7686b3e36e81a9044f5559866760226913e1cd4fb547cbea2d02ed74b38f4d5172aeee965d73ae1d3f419f22bba52ae908f5743b6d6d513f1e12d1f4c776c10ee90a16ba36cb773aa3ae1e4b6e5bc2080c707fe544760f8b3ec22ce8e992c4fa7c7dccd3a2d04aa1353ffcebf7ecfbe4859f30d9d401dece0734de0524b49946b61215ba30a6a5e4e5ffdcae8eb3e48f80b5c90414493e01d8a75d46a94560be71ceae8b443d79aaf9f9d17b382505496b46d57d1fd7b89bd2d45e8e98a62ae3fdb1888ce14cc0a27b0bd5f24e87a71faa14a23695ff82d4c0d125ed6a7df9fd2dd740f724c250c695ea17fda34744f0bbcedb0526d844607a3f07aa8e1fdbc6acf5b7eb962e72bf1d8d6fa7e32ace9fa3f46c259b0257e1fffd50b31cd8737957479f8318616e0976c5e4b2310f7030a0e780724237769eea511d689663998444b1feb06d7a2b35e170a2a721a7828810ecb524135230204360a25d48e7c29adb83ac8316cd221aa52e2f26e1f56bdec46173a652e72cbb8b4f3ba68650e4695b8dc38b271a7f9e098e9b1a0db074a541b6b5248c9b96b9b58628b51ef6b6a0d7c1b1f7f63bf3df1087313b8d887f5d6c4159a2b3a8572405ee4bb8de0afd41c5bef51e9d4ce522458dc0fc277ff0bbbd8d1faa64dd72bb9f844074d680ef7651c205785a5668bd5d68aa60f74d9d6b5389804a8f7ba503af653bfaa670d0152906fd5b1322ad1cc2b533ae87f5629918b55bee13d2e8b42f925c4cb7ed3aca6ae8d6a27aea460865c96b026444d5d43dd5bb39b98840933eab977c41c5debf4d8057dc163bb6ca043396ad7ea4c30e93d865079497ae21f2a85e23b80045091ed4c023b5bc668f759cf719bd7b40e67ca8d351dad2a75f1d92a2e2b63f56de7db307c11a01046bfd2a61e74ba139fd6edfb930e888498db0eb835290debf5daf5860ebe003d63a57d3d19710e10ec31157a7067e05c732914d701ade5282fbdb39250c82fe598c6402ca4395c9ef72e10688d9106c0afc571392e5b0c0b6a6ddc33750510ab268bb7c22df38cb00602c1ac619c198584154baaf43b6680c1f39f204c487f916af0d80d0642fbbba3b6bfe740d22cbbe7fe11143dc54a2e9604a91324d2ad47563b00584aac46f0ce4df1d1f6c920dcf06e99ba6c5806e4203bb7ecceffc0a4ed67d46a93ab396c69a8e18857ea45a9c31091bde14cd5a6b7ff45bc3fb260756bbbf6250414e869fe8fd8afa6b260d9e567cd65003f230e4982e0c2bebc348ec1e14f244e3f2366ff7c60e355a08909ffebd1a92f85ae5357eaf6d8026ab13be3b0e5382b50a2356c03a648c844e203419ab0a212a7ed37bda46bdeacdc390107c50c06452103a21476d4eef87f3afb9e4cb9fb940948a334b00b481bfe3900a048af23d90963565f86d82e7c3ebf7b477fee42141d5ef6bd831ee12cc55c56778c885f63ccc25c5786093a4b86cdf2d2c8d4939be7f1d0d8ffa510d114a17fdf40db21d7b4c456e96ed6a4ba72aad9014e7f08a6b2bb3d55eb6e48579c30abb2c6f83fcae131dc9a58d3bc94c6ba11dee4bb9414fab93abef917b63a89151675ee64cca561a2fe384255039d7ce0ebb865e0baf082e89410ac1c42d75556c06042fd7d8c458d815227de945d56403dc1ac9bc7e96a9c0f5ad781dda4b85cf5aa43253c8019d1df3c957046514ce5935b0d36c774ab54f2c7594fa883230b4afa9b6a213ee95bfc9f8831a1fb5907aef3e0f03b32a8167189f0a65100988f81bb70f2d7704f1ce77a22ac9e56a483d2dbae00e54ce6f45830550ce7ed7c7b2221c5bc07b3222d4b28d2fe8e490c21cf808b638a0c48f4f1190a1859027b6c66b813f478cdf785e9fee86832a2d8d550455179097de3bf2ec4c6a24baaca1dd064b810adfb3262c2401798cfe57022b4c0fd71ec7b3061f3d03a791f0514572401b6f1c2d610b65cf07ee158896644fc158703a191f0903803e15679d64bc43626b8be2a673673b6e2017e130cf731472ef9fc69d59229adbc0a13ad941efa2ea596162f7222d706b73b60d8c8e9621f063b00078855c089df8151b0f8b1c2504e52323bdc5c1452829f09f55be3fdf0b2c7016b6062f8a57e804af05d30e7c99042043e7a560e15edead3fbf189a28f6d8c1a225c1ea273d270faae0908e06682c0e72b35ee1c615cd79dd52cd07fbdbdd268cfaea15aebf093b1aa6a820e28958c92a9ab10eb0967eef910d83d760ab3710f8981169aba9909308431dbd87599f4745313e03a1eb49cf41e8a6946654f53fb25ca5a2920465ef8c49441c79941495cd4b93d8cb979d974c4a6d3062aecd64a8ca9c8e08f5c968fb26d2ae6243cf1a8da55554779a7d98610eb8124c685a6c064dd2373c8a2504ad6af3ca2e30d2639c64b076fc40590c6a8734e30d912602a2b2a2b5d9500cff29a61dd00d80d6a08a6682b54f8cc3485ef2cd99d7ab62f0c22bec4f124ff9fe1e04bb2a45d32af458db0ede34acc5d14a8469e6ea9752c09eea9176568ed6fc877b44d7f4cd292c99a3c2efddf0943b64cfbee9b3b74b9885bd689e1e3bbac7f20f8371b7a5828f3a7b90a9df9732135ad047231010985c8c551c28175f90e3ff9a968be317ba5497fd89efe14dc45a88728b5adb32499d9c13908386b73c184e29b068c682b0c5aae48f7a551f244ec41d1b6104725a5d4691dad2fa6c4913277401239be3ee14f18842fb1de78c5c8318b427b2b75b6fb26be14840b3f492531db0951897f9653bc963fe6b4df3a202f47d2f163e17f13b4f7acfb3ffe7eafccbccb7231900422013be0884e14e1277b01a6da165f110b9997f86358da22ae5c3af00fc332745a7459317bd3257eb2edd77cf9d2572f191a20da9ba054e00ba8c641cd133f8b5b7c11801d1ca44e479061166c85", 0x1000, 0x6, 0x0, 0x3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x400, r0, &(0x7f0000001280)="b1af1c79bd1292ddeb", 0x9, 0x2, 0x0, 0x3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x6, 0x991c, r5, &(0x7f0000001300)="8edff9e130f5ef42b0921bb0cc955fdc6fde5162b22b", 0x16, 0x3, 0x0, 0x3}]) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000013c0)) r6 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 12:43:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) r9 = syz_io_uring_setup(0x3661, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup(r9) sendfile(r3, r6, 0x0, 0xa0103) [ 292.716330] tmpfs: Unknown parameter '' 12:43:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) [ 292.842430] tmpfs: Unknown parameter '' 12:43:37 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) r3 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r4 = dup(r3) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_submit(r2, 0x5, &(0x7f0000001380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f0000000080)="d1991408fbb48b1e3aa5e41fbd33fe89f313a11a67762e768e4153728879ea36af40cd58e38a9c69343a587c037963f9a6c2e9be272939a85eaa9be977f9b2ae55f2adba12837e4d114320bb0da88d37709e3a8e9d48d235b2640ea20c940d365d6d39d34b", 0x65, 0x0, 0x0, 0x0, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f00000001c0)="a149b379b4d9d3940d03bb2c005875ba668973c3ec93dec905148871e8aef93cdf52f5d1c163bfd98faef513b2294f6a2944a00f9b424c399190f478ffc0f24914fc28371c19da53d443cee0ba9d5d1a4c66c03c", 0x54, 0x100000001, 0x0, 0x3, r4}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000240)="7c3073436ca743519c35de125bdb18d788ed2da11c4e117606bdca23ea421cbfc2bf73116cc6eb24d043580b5e6637d6fe34d0377ad1e46e021789b6c87aabbceddf52b6932dfcef7a47b4e4bca04439e2040df3a5cd71f53ec84b87e757e817b9b206cfa99aa619dde2baae0cef74a0e03230f10985be7daeb89c9950d8e3e7d26cd0a273ebb7a3afc10782a36cddb080646fcc588b9694b805de769a8cc4efc847f022e845e82f53bd554933050d63a1aa7f7b33ec43028201c1ec142e28dbad0e1b2c7706398e22bba02960bbc63ca4be0d58b3471562ef3842b89409104f9b159bc135643e5fb492e61e05bb3d39f9931ef49e24cbf713057a614f4c187b4c89b4ae57332a6761705c8f33cb2108fce168c37b6a9257bbfda0823ea257bafbb715ff6b90be84bc572e25494c61f38e0dae4e3f67572ca6e7ede71f3cf137d3271c57c13df2b962ab55993cfbc0069eb7ae0cc0a47ed206d0c34ef3efe9ed4ae81b987780ccc47156f80fbb20d093d4f285ab9bdff93de227dad3d0a5bc7cde5986fc0a03c7ee90ce3fa4420ae5094a02d479b7d6b1b094ce0f5d7363ee1fdee0d363e2dee354b20ceb22f15add336b7a425184378f6a3a80e4111bb5f1a2f8b04ff3612a32b3d303260edf68844c376777da36ebf9351e1b3752d0a5944ccc2e9ff8881b0c6e10d14c26f52cce3159501a8c5fa0bbfe42cfab239a00602f91b7fa90e57cc891c20ee24dadea7cd87368c1db3c1c6b942dfb8ae049f4aba81bae5ee16c191059b97126900b1615fef311dc5d6371eb18b03895975926f699dc452703548b8e97c57e80ae220238ef1d20278204569af1d211c43405f84d3c3612fb1bb404f61a07e5e21e290cc672db778938e789f7d3813b79e351d7df92524704f2728604c9813b333839087cbbb0ae9101cdef71ca051a85081fedc7d2e99cb867a7b3c62cf749b3cbfeb79cd124ebd4793054d3211cfd94d279da7197e5714aecec2b506d4cf42ff0019056d1d428a1597920a8e16c709d76e6c24f56b90709ebc5ed8ea8f7259edbbead5615b13bfbf7831eafc473ee47e6b3b91b97794a7202d147d00ebb9819de28a76402d911322e7d287e4a9284faf77cd6c629e78e9539e176ab8d50ce24ea9c0f314f6628071129827cff92fc2abb9a1b66b1148fd211c1a1d19faa96579a539760f02cfb3ac6282082a29d3fdfcffa3a7d8578d2ce7fb62fbdfc622fa1f8002700491e9ed57686465cb117a76820c180c6c12af077f5c9a50db32baf61c32fb3ca6da001964359c9b3abb06e2252752a404fe2cd05523fc0a9d4755bb3c104e0f4658a97a9790b2585ccfcbb97a6bbe7a5e7b93f844bf9fd184478150c4ff3496d458a6b1de5cbe668339526c7ff96be0d342a5b24ac5d410f39afac15df80cbcb99598d81c0c1779e23770683113fadcd34f5859fddd5677362d15f10394191ec8711bc9bf63961b20a8fa0aa359319495cb229049459afdc524eb892d95f0122fd915e68cb25daacc9a98821f490315cfd7e06208f2c36f18cd1de2320e8684dbf012e1b32b27da0136f56b9f19bb4c6f1a7278c1f43f0b145b0808d8cba7713f0ed3aad0b9c21c3ebf7ec10eaecabd01bf77c80429096a015233e377337d77fb9d3064eda66b4bebdecc047bae9264ca7b3c805eacee8617929301d4555ae195d700a4f0aa9dab17ce53a8fb9ba511c2b7885b35d7e01408db1dfdac1b2825a805f43786cd4f1d09980f1f95e26d3dcc08d8e5d8f6cd0afea6ec85f00071379bee3bb5cf29bce0b155334b434cd479eb53612f4287488a3966c2bd281c8db7ef120cafecf32a8888f5f65328a14b328d2f85ca888218acffeffbe91acc6e9eb1e8454837eb5019048c2eb2e789cae57dc059a4a2eb9b483a3ef4763e0a2e6460e397afda3aedcfa657b18c5d6d904ffc6097431ed7a828b5bac8934e298ffb6a002da550948c23a44c9aa770a6280a0fa7f82738f8147af13ba1cd7acfa1efb3643fe8daac40c9632124efad18f9d889349a617107c38546854435b9a524a1679a2ed8e2d0b518bffb809001880d23391303f8a063967d613ab863290e1ba9a3aca4efc39a4dab357341a009b4279448471d6384111e2a4fb49e1b52911f1417cc123d1b759207b5f59911bd42b47635c8be90e9cb244a3817006f6b814c2ad284ddf8b004dfa54a05104d18e696ec33731a416f8cd4aed00a56cb525d482f9b33e1641746e8abd6425c7bd276ad31e157aa900e0bfc43a40f4d7cbaf446848b16a865b0ca657d7faa97259a28e701b3c93d858d30a213fccc48b520767c68b1182a56a6b4f2c8d1afb56bec8fce25b68ca076faeb9251489fc5b84d70b857e3159e84e986a2d10599bdc1067dd561b793d648ebae0b6986710356ee33adc5c8ac164d8ca8d1d4cc4bf0e35f64e183bbda02e0cd11dbc973b7f4696ba8f93c320ccdd4a2628fd52cd00bc711f3bb1d691b74a908cd044f0d7966c8d3773c133178ac0b19ff6d0a091bc909c9f4f5e98f445c60ea0a0bb99a59077d7708344a5d367dbf4b87663c089bb00c0b00931ed25ae003d0a028d8706802bc58410c3ef227baa10ebe99ee36ef29ecbdcf9b04286419ba6ae441e752c2c84c8c53ae39102d1d79b9baecad98d74a90c98f6e21d7ec35fafd0944aed43267cf3217e0c613b0692a88a7c93b19e32f61666ba9099846d2b2e8cf51e2b8dd98c0284b2e701e0bc4d8524af4a6dd7742bd42086636283cca317074dedd0ffa1ffbcb34e236555f33a083c97db1b137fd60c48e73aa266fef252534c1978f84df3f1cdf604b93e98f5375593580060e6f750f93b308d43a33f6ccc6dd8100de9d7686b3e36e81a9044f5559866760226913e1cd4fb547cbea2d02ed74b38f4d5172aeee965d73ae1d3f419f22bba52ae908f5743b6d6d513f1e12d1f4c776c10ee90a16ba36cb773aa3ae1e4b6e5bc2080c707fe544760f8b3ec22ce8e992c4fa7c7dccd3a2d04aa1353ffcebf7ecfbe4859f30d9d401dece0734de0524b49946b61215ba30a6a5e4e5ffdcae8eb3e48f80b5c90414493e01d8a75d46a94560be71ceae8b443d79aaf9f9d17b382505496b46d57d1fd7b89bd2d45e8e98a62ae3fdb1888ce14cc0a27b0bd5f24e87a71faa14a23695ff82d4c0d125ed6a7df9fd2dd740f724c250c695ea17fda34744f0bbcedb0526d844607a3f07aa8e1fdbc6acf5b7eb962e72bf1d8d6fa7e32ace9fa3f46c259b0257e1fffd50b31cd8737957479f8318616e0976c5e4b2310f7030a0e780724237769eea511d689663998444b1feb06d7a2b35e170a2a721a7828810ecb524135230204360a25d48e7c29adb83ac8316cd221aa52e2f26e1f56bdec46173a652e72cbb8b4f3ba68650e4695b8dc38b271a7f9e098e9b1a0db074a541b6b5248c9b96b9b58628b51ef6b6a0d7c1b1f7f63bf3df1087313b8d887f5d6c4159a2b3a8572405ee4bb8de0afd41c5bef51e9d4ce522458dc0fc277ff0bbbd8d1faa64dd72bb9f844074d680ef7651c205785a5668bd5d68aa60f74d9d6b5389804a8f7ba503af653bfaa670d0152906fd5b1322ad1cc2b533ae87f5629918b55bee13d2e8b42f925c4cb7ed3aca6ae8d6a27aea460865c96b026444d5d43dd5bb39b98840933eab977c41c5debf4d8057dc163bb6ca043396ad7ea4c30e93d865079497ae21f2a85e23b80045091ed4c023b5bc668f759cf719bd7b40e67ca8d351dad2a75f1d92a2e2b63f56de7db307c11a01046bfd2a61e74ba139fd6edfb930e888498db0eb835290debf5daf5860ebe003d63a57d3d19710e10ec31157a7067e05c732914d701ade5282fbdb39250c82fe598c6402ca4395c9ef72e10688d9106c0afc571392e5b0c0b6a6ddc33750510ab268bb7c22df38cb00602c1ac619c198584154baaf43b6680c1f39f204c487f916af0d80d0642fbbba3b6bfe740d22cbbe7fe11143dc54a2e9604a91324d2ad47563b00584aac46f0ce4df1d1f6c920dcf06e99ba6c5806e4203bb7ecceffc0a4ed67d46a93ab396c69a8e18857ea45a9c31091bde14cd5a6b7ff45bc3fb260756bbbf6250414e869fe8fd8afa6b260d9e567cd65003f230e4982e0c2bebc348ec1e14f244e3f2366ff7c60e355a08909ffebd1a92f85ae5357eaf6d8026ab13be3b0e5382b50a2356c03a648c844e203419ab0a212a7ed37bda46bdeacdc390107c50c06452103a21476d4eef87f3afb9e4cb9fb940948a334b00b481bfe3900a048af23d90963565f86d82e7c3ebf7b477fee42141d5ef6bd831ee12cc55c56778c885f63ccc25c5786093a4b86cdf2d2c8d4939be7f1d0d8ffa510d114a17fdf40db21d7b4c456e96ed6a4ba72aad9014e7f08a6b2bb3d55eb6e48579c30abb2c6f83fcae131dc9a58d3bc94c6ba11dee4bb9414fab93abef917b63a89151675ee64cca561a2fe384255039d7ce0ebb865e0baf082e89410ac1c42d75556c06042fd7d8c458d815227de945d56403dc1ac9bc7e96a9c0f5ad781dda4b85cf5aa43253c8019d1df3c957046514ce5935b0d36c774ab54f2c7594fa883230b4afa9b6a213ee95bfc9f8831a1fb5907aef3e0f03b32a8167189f0a65100988f81bb70f2d7704f1ce77a22ac9e56a483d2dbae00e54ce6f45830550ce7ed7c7b2221c5bc07b3222d4b28d2fe8e490c21cf808b638a0c48f4f1190a1859027b6c66b813f478cdf785e9fee86832a2d8d550455179097de3bf2ec4c6a24baaca1dd064b810adfb3262c2401798cfe57022b4c0fd71ec7b3061f3d03a791f0514572401b6f1c2d610b65cf07ee158896644fc158703a191f0903803e15679d64bc43626b8be2a673673b6e2017e130cf731472ef9fc69d59229adbc0a13ad941efa2ea596162f7222d706b73b60d8c8e9621f063b00078855c089df8151b0f8b1c2504e52323bdc5c1452829f09f55be3fdf0b2c7016b6062f8a57e804af05d30e7c99042043e7a560e15edead3fbf189a28f6d8c1a225c1ea273d270faae0908e06682c0e72b35ee1c615cd79dd52cd07fbdbdd268cfaea15aebf093b1aa6a820e28958c92a9ab10eb0967eef910d83d760ab3710f8981169aba9909308431dbd87599f4745313e03a1eb49cf41e8a6946654f53fb25ca5a2920465ef8c49441c79941495cd4b93d8cb979d974c4a6d3062aecd64a8ca9c8e08f5c968fb26d2ae6243cf1a8da55554779a7d98610eb8124c685a6c064dd2373c8a2504ad6af3ca2e30d2639c64b076fc40590c6a8734e30d912602a2b2a2b5d9500cff29a61dd00d80d6a08a6682b54f8cc3485ef2cd99d7ab62f0c22bec4f124ff9fe1e04bb2a45d32af458db0ede34acc5d14a8469e6ea9752c09eea9176568ed6fc877b44d7f4cd292c99a3c2efddf0943b64cfbee9b3b74b9885bd689e1e3bbac7f20f8371b7a5828f3a7b90a9df9732135ad047231010985c8c551c28175f90e3ff9a968be317ba5497fd89efe14dc45a88728b5adb32499d9c13908386b73c184e29b068c682b0c5aae48f7a551f244ec41d1b6104725a5d4691dad2fa6c4913277401239be3ee14f18842fb1de78c5c8318b427b2b75b6fb26be14840b3f492531db0951897f9653bc963fe6b4df3a202f47d2f163e17f13b4f7acfb3ffe7eafccbccb7231900422013be0884e14e1277b01a6da165f110b9997f86358da22ae5c3af00fc332745a7459317bd3257eb2edd77cf9d2572f191a20da9ba054e00ba8c641cd133f8b5b7c11801d1ca44e479061166c85", 0x1000, 0x6, 0x0, 0x3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x400, r0, &(0x7f0000001280)="b1af1c79bd1292ddeb", 0x9, 0x2, 0x0, 0x3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x6, 0x991c, r5, &(0x7f0000001300)="8edff9e130f5ef42b0921bb0cc955fdc6fde5162b22b", 0x16, 0x3, 0x0, 0x3}]) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000013c0)) r6 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 12:43:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:43:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000600)={r0, r1+10000000}, &(0x7f0000000640)={[0x2]}, 0x8) sync() 12:43:37 executing program 2: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x0, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1f}}], 0xea}, 0x8800) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xea, 0x0, 0x30, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xf}, 0x2420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x160) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f00000004c0)=ANY=[]) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x1ff) write$P9_RSTATu(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c65078f", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRES16], 0x61) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) copy_file_range(r0, &(0x7f00000000c0)=0x2703, r1, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000280)='totmaps\x00') 12:43:37 executing program 6: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x0, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1f}}], 0xea}, 0x8800) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xea, 0x0, 0x30, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xf}, 0x2420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x160) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f00000004c0)=ANY=[]) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x1ff) write$P9_RSTATu(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c65078f", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRES16], 0x61) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) copy_file_range(r0, &(0x7f00000000c0)=0x2703, r1, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000280)='totmaps\x00') 12:43:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) syz_io_uring_setup(0x3661, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) sendfile(r3, r6, 0x0, 0xa0103) 12:43:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) [ 302.837875] audit: type=1326 audit(1762519417.184:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4895 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f1545b19 code=0x0 [ 302.859605] tmpfs: Unknown parameter '' [ 302.900127] tmpfs: Unknown parameter '' 12:43:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:37 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) r3 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r4 = dup(r3) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_submit(r2, 0x5, &(0x7f0000001380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f0000000080)="d1991408fbb48b1e3aa5e41fbd33fe89f313a11a67762e768e4153728879ea36af40cd58e38a9c69343a587c037963f9a6c2e9be272939a85eaa9be977f9b2ae55f2adba12837e4d114320bb0da88d37709e3a8e9d48d235b2640ea20c940d365d6d39d34b", 0x65, 0x0, 0x0, 0x0, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f00000001c0)="a149b379b4d9d3940d03bb2c005875ba668973c3ec93dec905148871e8aef93cdf52f5d1c163bfd98faef513b2294f6a2944a00f9b424c399190f478ffc0f24914fc28371c19da53d443cee0ba9d5d1a4c66c03c", 0x54, 0x100000001, 0x0, 0x3, r4}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000240)="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", 0x1000, 0x6, 0x0, 0x3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x400, r0, &(0x7f0000001280)="b1af1c79bd1292ddeb", 0x9, 0x2, 0x0, 0x3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x6, 0x991c, r5, &(0x7f0000001300)="8edff9e130f5ef42b0921bb0cc955fdc6fde5162b22b", 0x16, 0x3, 0x0, 0x3}]) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000013c0)) r6 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) 12:43:37 executing program 2: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x0, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1f}}], 0xea}, 0x8800) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xea, 0x0, 0x30, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xf}, 0x2420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x160) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f00000004c0)=ANY=[]) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x1ff) write$P9_RSTATu(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c65078f", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRES16], 0x61) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) copy_file_range(r0, &(0x7f00000000c0)=0x2703, r1, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000280)='totmaps\x00') 12:43:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) sendfile(r3, r6, 0x0, 0xa0103) [ 303.189348] tmpfs: Unknown parameter '' 12:43:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) syz_io_uring_setup(0x3661, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) sendfile(r3, r6, 0x0, 0xa0103) 12:43:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:43:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) clock_gettime(0x0, &(0x7f0000000000)) sync() 12:43:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:47 executing program 5: pipe(&(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x40, 0x0) sendmsg$nl_generic(r0, &(0x7f0000002440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002400)={&(0x7f0000000040)={0x23b0, 0x2b, 0x4, 0x70bd2c, 0x25dfdbfe, {0x1}, [@nested={0x10c8, 0x72, 0x0, 0x1, [@typed={0x49, 0xb, 0x0, 0x0, @binary="2664eec42189d389e96671e45a32e965d8075c15829825f63fcb2d14863bb7bb3d0dd4b3b08a3b9c21d373229fac1911c7438cb489546726f8299efd773bc175d451db4694"}, @generic="a6", @typed={0x8, 0x1f, 0x0, 0x0, @ipv4=@local}, @generic="03a4d07236c8c4ba4cdfcca8ba30adb59255a8d8f883122b2f21adbad8a42603609d6b8914cfa5e7ae8354af13edaab81b8efda8f56fad4bfb5a3143fa932d52dd7617467960ef803b0e3d8e115ccf082a6a5e3d91268b3af308d41c6d8426fd69e27a23622b7ccf2ca27dc8a66b977abce383d9f375bcff626f5e1e8e7f43a57b36a0d4ce0c9ae6dc837000997bd143cd669ddf27886399053ec2a55c69852fc8cf2d26b63c8f32bb6151910872c5f191111bbddbee3f1754c027c35112de502adebcb22ba84f62761b28a1ab709c4824889eb21c3d1fd8f9fb6637b6e4c45059a10a85ad0018905ea3b17e3c112b8013e8467b7c4c2984c486c5c98ad23f225c89a101f017544711c22aa05282ad43bbb46a20044e27c32d32be3479bde3941a18c95f85a24b3eb4e2c8921aa072cf51d510dca0d8cb2ee987599801df2e5cf33bec4ac51a9d4f66cd8b1b9c24b8348fa91bf3f2a9dc060f1a081fbe064b12b8bd850e0a278668a9d15936cf9954f97934ee0d2c2540565394f44d98d27f68771da443fffb052e06c253885f8b88d08659fcebdf791e292977e09855a111e90c68441b3463b6a7ebc5e933a08f562f9c98fd9ac58a3f3fabc4b357f5075f7d67aa012a424a248714381b88a3556a68aa3faff3e561f5898b78818b02e2bb03832c3a69e577948e54a578e313b1142b7aa1c32dc00a29c58e0ab9500e2deb70a777d70a9c061fb26e2bf8aa23bdbca4fb64e6b784893d4b87ddf03f278d396880c8881dd18f89c4e501a5e1d325d7f55b5ea57ee9da097137dd80c6095561e8a4a3b057710c7ab255c489ff9d94f63d8c51f1e1a387e62ea38a7c1d1287fabbd8601b52bbb76428e6dbc3c24f6bbbde6860957e921c52b589568c32dbf69db496e5be03ddd20defd9a743083b428a9af674c599b3ac46008837054d1b8cde66479da0764ccffa5a386706f1f524a93c536aa5d542bf9ea9b0bfe257b7c78cbf1216bb5fc5415a6ce1298d59c28c821b61eb84f5a0fe4987f77356aa08e7fbe69f4b137eff7f47d20dfc791b06d3268869210b62f248119acc164bd54c99e0ddfaa8c77a6a503ce527df9cc1c2d41f7d81c335b3f9db1d747295ee4abc010de683b716115fd3ebb366af7e9bafc3d65df11f7ba55bf16783bf4c385cc59876319665e3527e016a6814e95bbcd734d674d0eb1f2ca39a903f391a8e13d2dcb652c72e52e1f9f8cef8f0ce2ace9fbfcab66f428020a1e37a925aa5103d7f3300d6f731bf1b21dd5a079852e9a6d24dc5ef89a6c15edba900f776323f45e7699e7dd6e2be8bb350fcadce1453a272d3c06e106391932028d609754086c4f8413762f9d879affdc928477a09f6b1f10bc006f40124e7850697ad00d577252c42f4f939052e83f0a52c4f494afbb53591b882409c36f3f81ea9704aee95cebc18bc33f0ad3d3fc6a8f0fd5fb649ec64a2c87d75f8428c05a990e8a9da3791c92252872783ee77fd1e6331ac8e1e92a0276ab82532aafb73555d772ce73a817e6ac75a892c89611cef7fbb28382f4b0dd9c4f0d25a93a45da8c6f972ce396aeac3a47deca8f6bb32c34cfe6a32c4b2d08e80b2b6ade5d76b374355d5e10d515cd9284b7ff86051af2ba760930086e46357285c349cafa9f52b4e92e41818f2fc34356a933afd326a565c55bb0032dcd9dda62bcec8c462129a7e9f374a3265296c8f99ce2bb54d4a8551bce53803d530b31f9fc28f570bcb507fb19e073cd1a78ec056ebb20401ba92f5705543ddb267b6ddea6dfe9fe22f37a6b5874f97164214f8001fe01282c3f278e2d750e08af365540f9e95837fff6451a0bd420d01b3f162db93305808ce5f1571113734fa1e4b3db372ab788e7647a55aa40338267a9b0d0a0339b1aa7bba286b74a5024054a4f3307b958e7baa2e8a4cd2730e7be4eeb6bf9999d5fdf5998dedd90e8ffb3e09402641225bef975037bf94597c80b4de750369cdbf44ab56eaa904547cbd1533361a6bfa9dbc4217ae67accb5c4b7cd988bfc118ef2eaa6093637b40d5f027d2a80655b267a1cdfb96956f491304b890306e5921aabe5ae0926f6e6219d225f323fedb4e4c5731c517ab62f5768308308916d182aa78e92657170487ad0e1f6d7e4afdad11e0abba896ca39488c51b0634b4cd2c8952322be474cadaf109ea03820863b17433ab9afbee225d15d8cc2ac84de81845814827abccaab3f3fe0d73f756dcb718dd0e650d1547885c603c124477b8a12f6834a397efa59fb96eb7331d4da63a2da9c9242b72590974be5911d8e3deb8d554239a2be9021c60721ead6b2bb7db26daa7858137c710a0581d909168aa2f9a590dfb81e44eb2ec1ca71f969b3614c9329a08ce16903fd5fa27dc8dc047f45cbaacc2d2d7a0dc17692441ca5b1955bc4cd770590631b4abbfb3cc5095ae4b6d9a6419f900c734fce4933942e71b3ef815f59d3668517cb375ab4d3fa2f63ca0fb82d925ababe8d9d9da318cbeb3802ba0a337b83c2f1d7aa94254d81184fbe07b36070f456cd57162a3c232037c928e9cedb1cb1cbffc3f1b76799c503419ffbeb8fc57e1262633458bebca8bdd3f2311d1c7d94ad3e6859b8dcdcae308e1b9d27003d66259253ac4171afdb27557835ea0da581e3e3cb6fc82b0333d2eb9bdf19b410702c339936724ad2177796238d5b8753ae82b0f1d13638188fe5c0fe3f53abcf6936efc0bbea35b43031322bd10a0b35526e787d966b7b5299ad5e7be44edc27442bc93802a9f1b0d0956d57006e8360ea54baf58fb57db0063f4ef53b2e5645d3215c1b0e9c9f3f291b7093b05ea9cd98e5a43b4b0c2083dabb4db83a36be0473abccd39c9a8e168aa9c94f9e3123141d276083356b262f04ed6a2afd600379a347d040da17ceb5a2ec4eb9cad77cc9c7f8f80da29f2d3308b242651e97c7f21397ed8ce640f9978789f80703083d0a7b9d69ca93c7615029b0d88b80c3729deded181f5a5090b18c89019c1658dfa707af6e1ea56cb4bcecbdeffaab58a844f22f82f46a1ff05b896eea2ec688b97302960d9115f92ecfb098fbfe380fd6441e59c1f0e2b875bd764b675edf15b47d23e1ccb5d48d1e8d2fca4438bf2b337a2fac6a1f69199d502cfd5029088691835cd4b3051d93c78ffecc22b2a94a0132010c2ab2176a9c307b73e1bcafa37679c2543b519ce795a5b9cc0526349006b802841465f5ccf59a473c07d0d1dac39f6d77992c861a636a2af9ff94ea5a5e508e2ae8d7158977dbd0aa493ee86465a3dcce828c3c16dcc81097a318501c771cd64b38b646d6335ba4cca1d3b4686b2e872b5324e79b24e3b6fb5407cf30aa97b53a1b076836d03d4b61c39285c44f0650dfc4b2a37f9e21d9cc37095f76c9c3fdc4f67448d18fd4e4b5e6d9b976755a10f1e384abd1b9c55ecafee60a464e278564f941e9d4b5d77d849b3d0b548d7ae15cb22bb9bf8513ee04570475df531a92b6357907462cf9a485327a12bcd0c56e1377c9d7841cd12318992f32cca701bf906df9875865def794efb01e309dbfc4c20e0be85f731c163c7221004b72efb0b214e74bd29bd5d6fbf7e6303fd569168af1bac1711f8f3795b7fc2fae0207cb36bf9bd677cb340f88510ff36dcb38b54910689c93497e0b2f9f746d4eaa38c528d98118cb4605e3913b537709da1ff27a7683b2776a0e16f274dc1a726ceeda43feffbf65b1af9d803ae238e244c7bf25bd50628e65e51aa58cb0f2993df24e3120aeda6235410e188601d0dc4091cce5d2991366149887371af561817888f1fe8ed9d59579315f56d201ee4740c9c4ff3f9d095b24ef8856002c008de26b58096c0c7c4a71119cefa07d5d45765aba00d4dad5bc0319a7948fedd2cb01c2e4f107e1e9d7efa6301d375fb7fc3fa9a7bd2183f2a6282677e38327bfe474bc0986b2f0b46e0cf9678d8b4146b4b896c17d67f9645a6fcb901b24b70163b9f515709a6ac46ec14c8c97beb072c1215eec7e4bcd3f9e07ba00224afa49f4afcc44dffb27d338d3b4f1fcec3f17e3c87c9cf07a7668be710fc1e8b76ff37dc1ec9416d07c50a811a14a1ed356b6de11da667370850a12dfdca98d15154c9742d2e2a7fcd2d9ea5a368f53e46525683d0ab0d0bd6cb5a73a45e8a130e61e57e916dd059c197f56b1b955390adf6dccbfffa455236674fa89302cb35e913298def5f3dff697c3e98870415bf895e04f94334b2ccc1f8c1a7c4addd3e90fe42719642fb0851dbc6580f7cf8e6e4964481522c4d875b3c393ad4e713ef34195f623c50ea10f1b58a87d95ab03108e7c3d5f6618cba26ca04971eb0dce92012099df5b5d06e67f3f81440450d2954773d23918088d4a71fee13ff45515b6f18d19c2d0ef5a67c325957cff4effd2592ae7b4648e52dbe3775644e9f1742dfc7a8ac3792eb1e7c649049447fbc9dee7afc8d6e86795c1a1fd60375936f20af2f4b8e5dd11161f46fcc556df64fa8d188307dff81bf3009976236865661ed841a3dfa102338a51d6380bbd1de71404a7fff867db9153895e90d954c8abca051541cabb8a43a344d2dc26aa16c05795978387509e1bb130592629cea315de1cfb2f1e31d2647bcb9681c16b7a5363d5c9dc34b8d659f2599883c0fe182eea83cfdadcd1172153b24b593cd4fc954340e188e6cfe8b44e3e08668d9805fbbb2f111c5ea8b76f74c82eb7215b1ecabe3bef56a6f4995c31d1cc2b42aafb98e0c0780285a52e19107f3449de9770019c756efdbcb37a9e00de6a794dcbe4e2c227923d9f93bdfb31438041744fbc778cc564b1332194f696ab4c10a8d034632070e05b69cdec6901f09600cebcc3e0f5b27dc42607c25b5cd34ee5048f6701afe4d71d32c414d8172ae3c249d86a62525df0257c4c3e02ae00ca94a90b8f069e73f815b1d4fbf261dfda06a28a9ee78f10bbf363a5120db4284ef5bc0343a3e57cd22ed65a333618841a4380605e070a3332536c28f2b321d8814dbc07442b8459e411b54b95ebe61bc8ef458a434139b9e19c8adc856c44ba2745e26cf1aff3e4837a67ecc3c8bae5f1f1fefde951e4411f60a091f3e43b945439237c38e2b3be2016601b1459d15f9e21bc3a6a89f72a24c027a87a068ed432d7e71d08af04de1b651181c21b9d1c3702f6e366f8035093df9d05ac79adadf3c9c36f5d8b098de5fe909e8e9bed05eadd64bd21170877f4c28481d679a373ef8740c311e997e73f879706f72cc31008e451f3ce56e3f91fbec1a74277a3faa23a1733c9de804ed88af8e56affea7449cf38e10748d58623b0ec9a4c91b413dd4a3dfbb190e2821574e930b6281cfb25145c8b684e30fe0fd9fede763646b20a3dabf5c66cdf5be701f47e5c8d0508008cfac9fe58202c49ec7990ece96544aca2441e361d565f0bbc48151028a127965deff93d59458b780adaf60874f9141c2bc09213b76eef703da283066fafc2161594adcf9cc88d9a54cf466506a379d36f1fc469450dc6f501913ec9cdb8da3d7face3a25bffe666f2250a360059a582b4ab0cef2227246cf27854752141cc651524e22a0bc6f8e49cf329eab07da9212d78505601d7707a7a77b29ae6f8e7bdbe1eb0d4be5f06e4fc3b01a4f7fb2d9946a046d6907e7636af528fa283bb344c2689d3bb4693e4f01bac9debf19b3684f29f6d5437c9c5e18d8ed8f34e824a249c0701dcb74350464b7cab9c02fb5bd02993b38d0833080b32ae13a68d612a844406065828cacf81534e32810a8dcf9ca99879d08cd", @generic="bc175835ec94f4b5f2ce2f5b53e12426f515a12c450f01d425133ad12d627b", @generic="e3c21090357ac8c1e992dfaa132ec5695363838311fc22ce8c953f6bc9f5fa055225b226c6928e96315a30eef538fde169b1e87e0101fecae93a6407360ceeee8c2e0f65ba771b2946ed36336851d946"]}, @nested={0x1202, 0x28, 0x0, 0x1, [@generic="3cc001bcaed67d2ea5d3c0c30a222e1b919cb3bbfa4cb276fd98c6a6bf67dfd2d42143230903a073ed9f11255c3b4ff094031af0e0f85d75eb4d489e380aa2b29c9077603f9bfc0845cafbe88760f5542a6b261c1656f18eb74ae82e7dd5263d85f22f430322d620a610142b6cce9f08b5a7803649b87d", @typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0x30, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@remote}, @generic="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", @typed={0x8, 0x41, 0x0, 0x0, @ipv4=@broadcast}, @generic="3a85e346a85f7569ab1fdab9f20b0e0f80d16acae808cc247ee96f29f687ed22fb02752d6616e71338a8dfba4f8f0a082c02d14ad9f6f02d077548f6207d85ae043a009e748b6d9dfbe117e732106b18897f774cabbe3243c19efd907044684a51f495d1ba0e6fa1f3659cc1bae0e782390a8cde2f23999e1d4005a90d92f8981cc6a68bba502e3e8dcff73beea9e5dc30af4b162b12645d8a7e8703e9e5eb7e64365c40f9b93ff280e29d4f933a743b5e91ff5b8344237031a506f63df830a648a647858086d4ffe6d345fb00768ceb21079c27bffca60eaccfa1f31ff064886bed92bdde67fc2fb66e", @generic="a350e9136618bf27723b675f627fb0fffc018189aa11781e0de656c155a796093b78afceaee808b4f849187bfca19c0bc2e120cb3458f01fc60266291ca77234cc28de6bdcb0287930b05f1691b1ba5a683d4aefca60ea47ae6e9d27bafdfbf81e888c3f778f401d0d29433cd4", @typed={0xa, 0x73, 0x0, 0x0, @str=']^)}.\x00'}]}, @typed={0x8, 0x62, 0x0, 0x0, @u32=0xffffffff}, @typed={0x4, 0x7e}, @nested={0x57, 0x57, 0x0, 0x1, [@generic="7e9195d27acca25bfe573b58dc6be74dfd9316bd40e2f445", @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@loopback}, @typed={0x6, 0x6b, 0x0, 0x0, @str='/\x00'}, @generic="ed53145b92160d1e3a2860f69ef6b46f6d3faf9575d750d1ff3a5cb64d8cfc61148da58b7bd89f6504231a"]}, @generic="aa8256b771d2674976c4105aa0d8276d0be10401f0cc3f33073d84cea11584cd34529f1cb0582e5e79f1e0c5169ab9d940ddfd7fd8abccfcda4fde4a449b921c5c3aef354ef4d2a1a00b08c31223be37a09277d4", @nested={0x18, 0x74, 0x0, 0x1, [@typed={0xc, 0x6a, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x23b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r4 = dup(r3) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000002480), 0x140, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000002700)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000026c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000002680)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002600)={&(0x7f0000002500)={0xc8, 0x2, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x802}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8040}, 0x4048000) 12:43:47 executing program 2: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x0, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1f}}], 0xea}, 0x8800) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xea, 0x0, 0x30, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xf}, 0x2420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x160) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f00000004c0)=ANY=[]) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x1ff) write$P9_RSTATu(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c65078f", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRES16], 0x61) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) copy_file_range(r0, &(0x7f00000000c0)=0x2703, r1, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000280)='totmaps\x00') 12:43:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup(r7) sendfile(r3, r6, 0x0, 0xa0103) 12:43:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) syz_io_uring_setup(0x3661, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) sendfile(r3, r6, 0x0, 0xa0103) 12:43:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) sync() 12:43:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) syz_io_uring_setup(0x3661, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) sendfile(r3, r6, 0x0, 0xa0103) [ 313.196911] audit: type=1326 audit(1762519427.540:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4957 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f1545b19 code=0x0 [ 313.246037] tmpfs: Unknown parameter '' 12:43:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sync() 12:43:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) sendfile(r3, r6, 0x0, 0xa0103) 12:43:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) sendfile(r3, r6, 0x0, 0xa0103) 12:43:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200), 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup(r7) sendfile(r3, r6, 0x0, 0xa0103) 12:43:57 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:43:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) clock_gettime(0x0, &(0x7f0000000000)) sync() 12:43:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sync() 12:43:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r6, 0x0, 0xa0103) 12:43:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) [ 322.910546] audit: type=1326 audit(1762519437.258:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4999 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f1545b19 code=0x0 12:43:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) sync() [ 322.950629] audit: type=1326 audit(1762519437.298:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5002 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facd8845b19 code=0x0 12:43:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:43:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) clock_gettime(0x0, &(0x7f0000000000)) sync() 12:43:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:43:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) sendfile(r3, r6, 0x0, 0xa0103) 12:43:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) sync() 12:44:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) sync() 12:44:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:44:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) clock_gettime(0x0, &(0x7f0000000000)) sync() 12:44:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r6, 0x0, 0xa0103) 12:44:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) [ 334.531482] audit: type=1326 audit(1762519448.876:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5033 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46f1545b19 code=0x0 [ 334.582431] audit: type=1326 audit(1762519448.929:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5039 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facd8845b19 code=0x0 12:44:08 executing program 1: sync() 12:44:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:44:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:44:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) sync() 12:44:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:44:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:17 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) 12:44:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sync() 12:44:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:44:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) sendfile(r3, r6, 0x0, 0xa0103) [ 343.653424] audit: type=1326 audit(1762519457.993:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5078 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facd8845b19 code=0x0 12:44:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sync() 12:44:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:44:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) 12:44:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) sendfile(r3, r6, 0x0, 0xa0103) 12:44:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:29 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:44:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) sync() 12:44:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:44:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) sendfile(r3, r6, 0x0, 0xa0103) [ 355.140428] audit: type=1326 audit(1762519469.488:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5126 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facd8845b19 code=0x0 12:44:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) sync() 12:44:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:44:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:44:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:39 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:44:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:39 executing program 2: sync() 12:44:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r6, 0x0, 0xa0103) 12:44:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:39 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) [ 365.595480] audit: type=1326 audit(1762519479.938:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5163 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facd8845b19 code=0x0 12:44:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:44:40 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:44:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:44:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:44:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:44:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:44:49 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:49 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:44:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:44:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 374.735631] audit: type=1326 audit(1762519489.082:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5201 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facd8845b19 code=0x0 12:44:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:49 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:44:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:44:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:44:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:44:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x5, 0x3) 12:44:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:44:58 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:44:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:44:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) 12:44:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:44:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x5, 0x3) 12:44:58 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:44:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:44:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:44:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:45:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:07 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:45:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:45:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:45:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x5, 0x3) 12:45:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, 0x0, 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:45:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:45:07 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:45:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, 0x0, 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:45:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:45:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:45:07 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:45:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:45:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:45:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, 0x0, 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:45:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:45:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}], 0x3, 0x5, 0x3) 12:45:17 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:45:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:45:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}], 0x3, 0x5, 0x3) 12:45:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:45:17 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:45:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}], 0x3, 0x5, 0x3) 12:45:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:45:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:45:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {0x0}], 0x4, 0x5, 0x3) 12:45:26 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:45:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:45:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:26 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {0x0}], 0x4, 0x5, 0x3) 12:45:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:26 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:45:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {0x0}], 0x4, 0x5, 0x3) 12:45:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:45:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:34 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:45:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:45:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, 0x0, 0x0, 0x0) 12:45:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:45:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:45:34 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x5, 0x3) 12:45:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x5, 0x3) 12:45:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:45:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, 0x0, 0x0, 0x0) 12:45:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:45:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:45:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:45:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x5, 0x3) 12:45:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:45:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, 0x0, 0x0, 0x0) 12:45:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:45:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:45:43 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:45:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) 12:45:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:45:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) 12:45:52 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {0x0}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:45:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:45:52 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}], 0x3, 0x5, 0x3) 12:45:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:45:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) 12:45:52 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}], 0x3, 0x5, 0x3) 12:45:52 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {0x0}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:45:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:45:52 executing program 7: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)=' ', 0x1, 0x0) 12:45:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:45:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:46:01 executing program 7: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:01 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}], 0x3, 0x5, 0x3) 12:46:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {0x0}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, 0x0, 0x0, 0x0) 12:46:01 executing program 6: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:01 executing program 6: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:01 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {0x0}], 0x4, 0x5, 0x3) 12:46:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, 0x0, 0x0, 0x0) 12:46:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {0x0}], 0x4, 0x5, 0x3) 12:46:02 executing program 7: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:46:12 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:12 executing program 6: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:12 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:12 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {0x0}], 0x4, 0x5, 0x3) 12:46:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, 0x0, 0x0, 0x0) 12:46:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:12 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:12 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:46:12 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {0x0}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:20 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:20 executing program 2: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:46:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {0x0}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:20 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) 12:46:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:46:20 executing program 2: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:20 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {0x0}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {0x0}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:46:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) 12:46:20 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:46:29 executing program 2: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:29 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x0) 12:46:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {0x0}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:46:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {0x0}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:38 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:38 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:38 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:38 executing program 0: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:39 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:39 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:46:48 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:48 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000080)=""/29, 0x1d}], 0x5, 0x5, 0x3) 12:46:48 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:48 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:48 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:48 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:48 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {0x0}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:46:48 executing program 1: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:46:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:48 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {0x0}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {0x0}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:46:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:58 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:46:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x0, 0x3) 12:46:58 executing program 1: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x0, 0x0) 12:46:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:46:58 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:58 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:58 executing program 1: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:46:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x3, 0x5, 0x3) 12:46:58 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:46:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r6, 0x0, 0xa0103) 12:47:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:07 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r6, 0x0, 0xa0103) 12:47:07 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:07 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:07 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:47:07 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:47:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:47:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x5, 0x3) 12:47:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r6, 0x0, 0xa0103) 12:47:15 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:47:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:47:15 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x0, 0x3) 12:47:15 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:47:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:47:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/92, 0x5c}], 0x4, 0x0, 0x0) 12:47:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 4: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:47:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 4: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) 12:47:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:25 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:47:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:36 executing program 4: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:36 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:36 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:47:46 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:47:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:47:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:47:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:47:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:47:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:47:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:47:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:47:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:48:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:06 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:48:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:48:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:48:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:48:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:48:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:48:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:48:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:48:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:48:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:48:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:48:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:48:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:48:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:48:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 0: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:05 executing program 0: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:15 executing program 0: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:15 executing program 3: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:24 executing program 3: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:24 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:25 executing program 3: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:25 executing program 5: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:25 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:34 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:34 executing program 5: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:34 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 5: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:49:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:49:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:49:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:03 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:50:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:50:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:50:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:50:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:50:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:50:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:50:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:50:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:50:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:50:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:50:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:50:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:50:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:50:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:50:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:50:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:50:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:50:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:50:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:50:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:50:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:50:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:50:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:50:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:50:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:50:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:50:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:50 executing program 6: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:50:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:50:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:51:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:51:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:51:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:51:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:51:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:51:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:51:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:51:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:51:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:51:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:51:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:51:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:51:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:51:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:51:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:51:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:51:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:51:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:51:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:51:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:51:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:51:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:51:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r5, 0x0, 0xa0103) 12:51:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, 0x0, 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:51:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:51:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sync() 12:51:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) sync() 12:51:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) 12:51:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:51:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x4d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7c9}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) syz_open_dev$sg(0x0, 0x0, 0x206400) sync() 12:51:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup(r7) sendfile(r3, r6, 0x0, 0xa0103) 12:51:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) io_setup(0xc1, &(0x7f0000000040)=0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, 0x0) io_cancel(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000000140)="b0fdf2d4b016fccd912881564317a2ed6797e69742f7f6d509a820fb5de1c4f5f280a5e9e07ab9f37d914b0a365f81fc84e9a4b9529b54537cd7c8e9c3b7f248cfaa89728f97f3d8e262ab66d3eb962c4dda1ba445fb2099f15cdf47cb7914889911b0828d0f21a7197a3a7328d2e5ecfb1fcd22bb86dec1b0dc858a949cd5b8c40d28bfe9a11d71973a1ece98adba31d4ec0324e119e7a97dd1883471a8db5fe3fc1b67b35aac37ff53c15d9376983cca2df198c6be163b924edcc85b", 0xbd, 0x5, 0x0, 0x2}, &(0x7f0000000200)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r6, 0x0, 0xa0103) 12:51:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r2, &(0x7f0000000140)=' ', 0x1, 0x0) 12:51:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 1) 12:51:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 1) [ 790.819681] FAULT_INJECTION: forcing a failure. [ 790.819681] name failslab, interval 1, probability 0, space 0, times 1 [ 790.820654] CPU: 1 UID: 0 PID: 6882 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 790.820671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 790.820679] Call Trace: [ 790.820683] [ 790.820688] dump_stack_lvl+0xfa/0x120 [ 790.820737] should_fail_ex+0x4d7/0x5e0 [ 790.820752] should_failslab+0xc2/0x120 [ 790.820768] __kmalloc_cache_noprof+0x81/0x6b0 [ 790.820784] ? __might_fault+0xe0/0x190 [ 790.820802] ? alloc_pipe_info+0x10d/0x5a0 [ 790.820816] ? find_held_lock+0x2b/0x80 [ 790.820832] ? alloc_pipe_info+0x10d/0x5a0 [ 790.820844] alloc_pipe_info+0x10d/0x5a0 [ 790.820857] splice_direct_to_actor+0x78c/0x9d0 [ 790.820875] ? __lock_acquire+0x694/0x1b70 [ 790.820891] ? __pfx_direct_splice_actor+0x10/0x10 [ 790.820907] ? lock_acquire+0xc2/0x2f0 [ 790.820924] ? find_held_lock+0x2b/0x80 [ 790.820936] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 790.820953] ? lock_acquire+0x15e/0x2f0 [ 790.820971] do_splice_direct+0x179/0x250 [ 790.820987] ? __pfx_do_splice_direct+0x10/0x10 [ 790.821003] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 790.821020] ? security_file_permission+0x22/0x90 [ 790.821038] do_sendfile+0xa8e/0xdc0 [ 790.821059] ? __pfx_do_sendfile+0x10/0x10 [ 790.821077] ? __fget_files+0x20d/0x3b0 [ 790.821102] __x64_sys_sendfile64+0x1d3/0x210 [ 790.821116] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 790.821130] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 790.821150] do_syscall_64+0xbf/0x430 [ 790.821164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.821176] RIP: 0033:0x7fb3e5a3eb19 [ 790.821186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 790.821197] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 790.821209] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 790.821217] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 790.821224] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 790.821231] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 790.821239] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 790.821254] 12:51:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 790.938910] FAULT_INJECTION: forcing a failure. [ 790.938910] name failslab, interval 1, probability 0, space 0, times 0 [ 790.939978] CPU: 1 UID: 0 PID: 6885 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 790.939994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 790.940003] Call Trace: [ 790.940009] [ 790.940013] dump_stack_lvl+0xfa/0x120 [ 790.940039] should_fail_ex+0x4d7/0x5e0 [ 790.940053] should_failslab+0xc2/0x120 [ 790.940067] __kmalloc_cache_noprof+0x81/0x6b0 [ 790.940084] ? __might_fault+0xe0/0x190 [ 790.940101] ? alloc_pipe_info+0x10d/0x5a0 [ 790.940114] ? find_held_lock+0x2b/0x80 [ 790.940130] ? alloc_pipe_info+0x10d/0x5a0 [ 790.940142] alloc_pipe_info+0x10d/0x5a0 [ 790.940155] splice_direct_to_actor+0x78c/0x9d0 [ 790.940176] ? __lock_acquire+0x694/0x1b70 [ 790.940197] ? __pfx_direct_splice_actor+0x10/0x10 [ 790.940213] ? lock_acquire+0xc2/0x2f0 [ 790.940230] ? find_held_lock+0x2b/0x80 [ 790.940242] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 790.940259] ? lock_acquire+0x15e/0x2f0 [ 790.940278] do_splice_direct+0x179/0x250 [ 790.940293] ? __pfx_do_splice_direct+0x10/0x10 [ 790.940309] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 790.940327] ? security_file_permission+0x22/0x90 [ 790.940344] do_sendfile+0xa8e/0xdc0 [ 790.940365] ? __pfx_do_sendfile+0x10/0x10 [ 790.940382] ? __fget_files+0x20d/0x3b0 [ 790.940406] __x64_sys_sendfile64+0x1d3/0x210 [ 790.940420] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 790.940434] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 790.940454] do_syscall_64+0xbf/0x430 [ 790.940467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.940480] RIP: 0033:0x7fc11b623b19 [ 790.940489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 790.940501] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 790.940513] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 790.940521] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 790.940528] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 790.940535] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 790.940542] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 790.940558] 12:51:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 1) 12:51:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 2) 12:51:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 1) 12:51:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:51:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:51:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:51:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 2) [ 798.374883] FAULT_INJECTION: forcing a failure. [ 798.374883] name failslab, interval 1, probability 0, space 0, times 0 [ 798.375811] CPU: 1 UID: 0 PID: 6903 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 798.375828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 798.375837] Call Trace: [ 798.375843] [ 798.375848] dump_stack_lvl+0xfa/0x120 [ 798.375875] should_fail_ex+0x4d7/0x5e0 [ 798.375890] should_failslab+0xc2/0x120 [ 798.375904] __kmalloc_cache_noprof+0x81/0x6b0 [ 798.375921] ? __might_fault+0xe0/0x190 [ 798.375939] ? alloc_pipe_info+0x10d/0x5a0 [ 798.375952] ? find_held_lock+0x2b/0x80 [ 798.375969] ? alloc_pipe_info+0x10d/0x5a0 [ 798.375980] alloc_pipe_info+0x10d/0x5a0 [ 798.375994] splice_direct_to_actor+0x78c/0x9d0 [ 798.376012] ? __lock_acquire+0x694/0x1b70 [ 798.376028] ? __pfx_direct_splice_actor+0x10/0x10 [ 798.376044] ? lock_acquire+0xc2/0x2f0 [ 798.376060] ? find_held_lock+0x2b/0x80 [ 798.376072] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 798.376090] ? lock_acquire+0x15e/0x2f0 [ 798.376108] do_splice_direct+0x179/0x250 [ 798.376123] ? __pfx_do_splice_direct+0x10/0x10 [ 798.376139] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 798.376156] ? security_file_permission+0x22/0x90 [ 798.376174] do_sendfile+0xa8e/0xdc0 [ 798.376200] ? __pfx_do_sendfile+0x10/0x10 [ 798.376217] ? __fget_files+0x20d/0x3b0 [ 798.376242] __x64_sys_sendfile64+0x1d3/0x210 [ 798.376256] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 798.376270] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 798.376290] do_syscall_64+0xbf/0x430 [ 798.376303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.376317] RIP: 0033:0x7faea702db19 [ 798.376326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.376338] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 798.376350] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 798.376358] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 798.376365] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.376372] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 798.376380] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 798.376395] [ 798.400085] FAULT_INJECTION: forcing a failure. [ 798.400085] name failslab, interval 1, probability 0, space 0, times 0 [ 798.401253] CPU: 1 UID: 0 PID: 6904 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 798.401278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 798.401289] Call Trace: [ 798.401297] [ 798.401303] dump_stack_lvl+0xfa/0x120 [ 798.401341] should_fail_ex+0x4d7/0x5e0 [ 798.401363] should_failslab+0xc2/0x120 [ 798.401384] __kmalloc_cache_noprof+0x81/0x6b0 [ 798.401410] ? __might_fault+0xe0/0x190 [ 798.401438] ? alloc_pipe_info+0x10d/0x5a0 [ 798.401457] ? find_held_lock+0x2b/0x80 [ 798.401483] ? alloc_pipe_info+0x10d/0x5a0 [ 798.401502] alloc_pipe_info+0x10d/0x5a0 [ 798.401522] splice_direct_to_actor+0x78c/0x9d0 [ 798.401546] ? __lock_acquire+0x694/0x1b70 [ 798.401570] ? __pfx_direct_splice_actor+0x10/0x10 [ 798.401596] ? lock_acquire+0xc2/0x2f0 [ 798.401623] ? find_held_lock+0x2b/0x80 [ 798.401642] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 798.401670] ? lock_acquire+0x15e/0x2f0 [ 798.401699] do_splice_direct+0x179/0x250 [ 798.401721] ? __pfx_do_splice_direct+0x10/0x10 [ 798.401745] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 798.401771] ? security_file_permission+0x22/0x90 [ 798.401796] do_sendfile+0xa8e/0xdc0 [ 798.401829] ? __pfx_do_sendfile+0x10/0x10 [ 798.401855] ? __fget_files+0x20d/0x3b0 [ 798.401888] __x64_sys_sendfile64+0x1d3/0x210 [ 798.401907] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 798.401925] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 798.401957] do_syscall_64+0xbf/0x430 [ 798.401977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.401996] RIP: 0033:0x7f26afb47b19 [ 798.402010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.402029] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 798.402046] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 798.402059] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 798.402069] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.402080] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 798.402091] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 798.402113] 12:51:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 2) 12:51:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 2) 12:51:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 3) [ 798.695434] FAULT_INJECTION: forcing a failure. [ 798.695434] name failslab, interval 1, probability 0, space 0, times 0 [ 798.696430] CPU: 1 UID: 0 PID: 6919 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 798.696447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 798.696455] Call Trace: [ 798.696459] [ 798.696464] dump_stack_lvl+0xfa/0x120 [ 798.696491] should_fail_ex+0x4d7/0x5e0 [ 798.696507] should_failslab+0xc2/0x120 [ 798.696521] __kmalloc_noprof+0xcd/0x680 [ 798.696537] ? alloc_pipe_info+0x1e8/0x5a0 [ 798.696553] alloc_pipe_info+0x1e8/0x5a0 [ 798.696567] splice_direct_to_actor+0x78c/0x9d0 [ 798.696585] ? __lock_acquire+0x694/0x1b70 [ 798.696602] ? __pfx_direct_splice_actor+0x10/0x10 [ 798.696618] ? lock_acquire+0xc2/0x2f0 [ 798.696635] ? find_held_lock+0x2b/0x80 [ 798.696648] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 798.696665] ? lock_acquire+0x15e/0x2f0 [ 798.696683] do_splice_direct+0x179/0x250 [ 798.696699] ? __pfx_do_splice_direct+0x10/0x10 [ 798.696715] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 798.696732] ? security_file_permission+0x22/0x90 [ 798.696751] do_sendfile+0xa8e/0xdc0 [ 798.696772] ? __pfx_do_sendfile+0x10/0x10 [ 798.696789] ? __fget_files+0x20d/0x3b0 [ 798.696815] __x64_sys_sendfile64+0x1d3/0x210 [ 798.696829] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 798.696843] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 798.696863] do_syscall_64+0xbf/0x430 [ 798.696876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.696889] RIP: 0033:0x7fb3e5a3eb19 [ 798.696899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.696911] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 798.696922] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 798.696930] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 798.696937] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.696945] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 798.696952] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 798.696967] 12:52:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 4) 12:52:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 3) 12:52:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:52:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 3) 12:52:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 3) 12:52:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 807.959962] FAULT_INJECTION: forcing a failure. [ 807.959962] name failslab, interval 1, probability 0, space 0, times 0 [ 807.961289] CPU: 0 UID: 0 PID: 6926 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 807.961309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 807.961319] Call Trace: [ 807.961324] [ 807.961330] dump_stack_lvl+0xfa/0x120 [ 807.961359] should_fail_ex+0x4d7/0x5e0 [ 807.961378] should_failslab+0xc2/0x120 [ 807.961395] __kmalloc_noprof+0xcd/0x680 [ 807.961414] ? alloc_pipe_info+0x1e8/0x5a0 [ 807.961434] alloc_pipe_info+0x1e8/0x5a0 [ 807.961451] splice_direct_to_actor+0x78c/0x9d0 [ 807.961472] ? __lock_acquire+0x694/0x1b70 [ 807.961493] ? __pfx_direct_splice_actor+0x10/0x10 [ 807.961513] ? lock_acquire+0xc2/0x2f0 [ 807.961535] ? find_held_lock+0x2b/0x80 [ 807.961550] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 807.961572] ? lock_acquire+0x15e/0x2f0 [ 807.961596] do_splice_direct+0x179/0x250 [ 807.961616] ? __pfx_do_splice_direct+0x10/0x10 [ 807.961636] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 807.961658] ? security_file_permission+0x22/0x90 [ 807.961679] do_sendfile+0xa8e/0xdc0 [ 807.961706] ? __pfx_do_sendfile+0x10/0x10 [ 807.961728] ? __fget_files+0x20d/0x3b0 [ 807.961756] __x64_sys_sendfile64+0x1d3/0x210 [ 807.961773] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 807.961791] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 807.961817] do_syscall_64+0xbf/0x430 [ 807.961833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.961848] RIP: 0033:0x7faea702db19 [ 807.961860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.961874] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 807.961889] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 807.961898] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 807.961907] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 807.961916] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 807.961925] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 807.961944] 12:52:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 4) [ 808.040813] FAULT_INJECTION: forcing a failure. [ 808.040813] name failslab, interval 1, probability 0, space 0, times 0 [ 808.042789] CPU: 1 UID: 0 PID: 6935 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 808.042819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.042832] Call Trace: [ 808.042839] [ 808.042847] dump_stack_lvl+0xfa/0x120 [ 808.042888] should_fail_ex+0x4d7/0x5e0 [ 808.042913] should_failslab+0xc2/0x120 [ 808.042937] __kmalloc_noprof+0xcd/0x680 [ 808.042964] ? alloc_pipe_info+0x1e8/0x5a0 [ 808.042991] alloc_pipe_info+0x1e8/0x5a0 [ 808.043016] splice_direct_to_actor+0x78c/0x9d0 [ 808.043047] ? __lock_acquire+0x694/0x1b70 [ 808.043077] ? __pfx_direct_splice_actor+0x10/0x10 [ 808.043106] ? lock_acquire+0xc2/0x2f0 [ 808.043137] ? find_held_lock+0x2b/0x80 [ 808.043160] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 808.043199] ? lock_acquire+0x15e/0x2f0 [ 808.043232] do_splice_direct+0x179/0x250 [ 808.043261] ? __pfx_do_splice_direct+0x10/0x10 [ 808.043291] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 808.043322] ? security_file_permission+0x22/0x90 [ 808.043353] do_sendfile+0xa8e/0xdc0 [ 808.043391] ? __pfx_do_sendfile+0x10/0x10 [ 808.043423] ? __fget_files+0x20d/0x3b0 [ 808.043464] __x64_sys_sendfile64+0x1d3/0x210 [ 808.043489] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 808.043515] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 808.043552] do_syscall_64+0xbf/0x430 [ 808.043575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.043597] RIP: 0033:0x7fc11b623b19 [ 808.043614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.043634] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 808.043656] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 808.043670] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 808.043682] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.043695] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 808.043708] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 808.043736] [ 808.078837] FAULT_INJECTION: forcing a failure. [ 808.078837] name failslab, interval 1, probability 0, space 0, times 0 [ 808.080895] CPU: 1 UID: 0 PID: 6934 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 808.080928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.080942] Call Trace: [ 808.080950] [ 808.080959] dump_stack_lvl+0xfa/0x120 [ 808.081003] should_fail_ex+0x4d7/0x5e0 [ 808.081031] should_failslab+0xc2/0x120 [ 808.081057] __kmalloc_noprof+0xcd/0x680 [ 808.081088] ? alloc_pipe_info+0x1e8/0x5a0 [ 808.081118] alloc_pipe_info+0x1e8/0x5a0 [ 808.081146] splice_direct_to_actor+0x78c/0x9d0 [ 808.081181] ? __lock_acquire+0x694/0x1b70 [ 808.081224] ? __pfx_direct_splice_actor+0x10/0x10 [ 808.081257] ? lock_acquire+0xc2/0x2f0 [ 808.081292] ? find_held_lock+0x2b/0x80 [ 808.081318] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 808.081353] ? lock_acquire+0x15e/0x2f0 [ 808.081391] do_splice_direct+0x179/0x250 [ 808.081423] ? __pfx_do_splice_direct+0x10/0x10 [ 808.081456] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 808.081492] ? security_file_permission+0x22/0x90 [ 808.081526] do_sendfile+0xa8e/0xdc0 [ 808.081568] ? __pfx_do_sendfile+0x10/0x10 [ 808.081604] ? __fget_files+0x20d/0x3b0 [ 808.081650] __x64_sys_sendfile64+0x1d3/0x210 [ 808.081678] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 808.081707] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 808.081749] do_syscall_64+0xbf/0x430 [ 808.081774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.081798] RIP: 0033:0x7f26afb47b19 [ 808.081817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.081840] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 808.081864] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 808.081879] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 808.081893] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.081908] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 808.081922] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 808.081954] 12:52:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 5) 12:52:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) 12:52:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 4) 12:52:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 4) [ 808.242021] FAULT_INJECTION: forcing a failure. [ 808.242021] name failslab, interval 1, probability 0, space 0, times 0 [ 808.244251] CPU: 1 UID: 0 PID: 6946 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 808.244285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.244300] Call Trace: [ 808.244308] [ 808.244316] dump_stack_lvl+0xfa/0x120 [ 808.244359] should_fail_ex+0x4d7/0x5e0 [ 808.244387] should_failslab+0xc2/0x120 [ 808.244411] __kmalloc_noprof+0xcd/0x680 [ 808.244438] ? lock_acquire+0x15e/0x2f0 [ 808.244471] ? obj_cgroup_charge_account+0x11a/0x6e0 [ 808.244504] ? copy_splice_read+0x15b/0xc00 [ 808.244539] copy_splice_read+0x15b/0xc00 [ 808.244569] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 808.244609] ? __pfx_copy_splice_read+0x10/0x10 [ 808.244638] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 808.244676] ? look_up_lock_class+0x56/0x150 [ 808.244711] ? register_lock_class+0x41/0x560 [ 808.244743] ? lockdep_init_map_type+0x4b/0x240 [ 808.244779] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 808.244817] ? __pfx_copy_splice_read+0x10/0x10 [ 808.244848] do_splice_read+0x1f8/0x2a0 [ 808.244881] splice_direct_to_actor+0x2a8/0x9d0 [ 808.244914] ? __pfx_direct_splice_actor+0x10/0x10 [ 808.244952] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 808.244986] ? lock_acquire+0x15e/0x2f0 [ 808.245022] do_splice_direct+0x179/0x250 [ 808.245053] ? __pfx_do_splice_direct+0x10/0x10 [ 808.245085] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 808.245119] ? security_file_permission+0x22/0x90 [ 808.245152] do_sendfile+0xa8e/0xdc0 [ 808.245199] ? __pfx_do_sendfile+0x10/0x10 [ 808.245234] ? __fget_files+0x20d/0x3b0 [ 808.245278] __x64_sys_sendfile64+0x1d3/0x210 [ 808.245305] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 808.245332] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 808.245373] do_syscall_64+0xbf/0x430 [ 808.245396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.245420] RIP: 0033:0x7fb3e5a3eb19 [ 808.245438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.245460] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 808.245483] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 808.245498] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 808.245512] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.245526] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 808.245540] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 808.245570] 12:52:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 6) 12:52:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 5) 12:52:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 5) 12:52:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 5) [ 816.976827] FAULT_INJECTION: forcing a failure. [ 816.976827] name failslab, interval 1, probability 0, space 0, times 0 [ 816.977862] CPU: 0 UID: 0 PID: 6968 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 816.977878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 816.977886] Call Trace: [ 816.977890] [ 816.977895] dump_stack_lvl+0xfa/0x120 [ 816.977918] should_fail_ex+0x4d7/0x5e0 [ 816.977933] should_failslab+0xc2/0x120 [ 816.977946] __kmalloc_noprof+0xcd/0x680 [ 816.977960] ? mod_objcg_mlstate+0x16d/0x2a0 [ 816.977973] ? copy_splice_read+0x15b/0xc00 [ 816.977991] copy_splice_read+0x15b/0xc00 [ 816.978006] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 816.978027] ? __pfx_copy_splice_read+0x10/0x10 [ 816.978042] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 816.978061] ? look_up_lock_class+0x56/0x150 [ 816.978079] ? register_lock_class+0x41/0x560 [ 816.978097] ? lockdep_init_map_type+0x4b/0x240 [ 816.978114] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 816.978134] ? __pfx_copy_splice_read+0x10/0x10 [ 816.978150] do_splice_read+0x1f8/0x2a0 [ 816.978166] splice_direct_to_actor+0x2a8/0x9d0 [ 816.978187] ? __pfx_direct_splice_actor+0x10/0x10 [ 816.978206] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 816.978223] ? lock_acquire+0x15e/0x2f0 [ 816.978245] do_splice_direct+0x179/0x250 [ 816.978260] ? __pfx_do_splice_direct+0x10/0x10 [ 816.978276] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 816.978293] ? security_file_permission+0x22/0x90 [ 816.978310] do_sendfile+0xa8e/0xdc0 [ 816.978331] ? __pfx_do_sendfile+0x10/0x10 [ 816.978349] ? __fget_files+0x20d/0x3b0 [ 816.978371] __x64_sys_sendfile64+0x1d3/0x210 [ 816.978385] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 816.978399] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 816.978431] do_syscall_64+0xbf/0x430 [ 816.978444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.978456] RIP: 0033:0x7fc11b623b19 [ 816.978466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 816.978477] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 816.978488] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 816.978496] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 816.978503] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.978510] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 816.978517] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 816.978532] [ 817.026001] FAULT_INJECTION: forcing a failure. [ 817.026001] name failslab, interval 1, probability 0, space 0, times 0 [ 817.028089] CPU: 1 UID: 0 PID: 6973 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 817.028120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.028134] Call Trace: [ 817.028142] [ 817.028150] dump_stack_lvl+0xfa/0x120 [ 817.028202] should_fail_ex+0x4d7/0x5e0 [ 817.028229] should_failslab+0xc2/0x120 [ 817.028254] __kmalloc_noprof+0xcd/0x680 [ 817.028280] ? lock_release+0xc8/0x290 [ 817.028313] ? copy_splice_read+0x15b/0xc00 [ 817.028347] copy_splice_read+0x15b/0xc00 [ 817.028375] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 817.028413] ? __pfx_copy_splice_read+0x10/0x10 [ 817.028441] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 817.028476] ? look_up_lock_class+0x56/0x150 [ 817.028511] ? register_lock_class+0x41/0x560 [ 817.028541] ? lockdep_init_map_type+0x4b/0x240 [ 817.028574] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 817.028611] ? __pfx_copy_splice_read+0x10/0x10 [ 817.028640] do_splice_read+0x1f8/0x2a0 [ 817.028671] splice_direct_to_actor+0x2a8/0x9d0 [ 817.028701] ? __pfx_direct_splice_actor+0x10/0x10 [ 817.028737] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 817.028769] ? lock_acquire+0x15e/0x2f0 [ 817.028803] do_splice_direct+0x179/0x250 [ 817.028832] ? __pfx_do_splice_direct+0x10/0x10 [ 817.028862] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 817.028894] ? security_file_permission+0x22/0x90 [ 817.028925] do_sendfile+0xa8e/0xdc0 [ 817.028964] ? __pfx_do_sendfile+0x10/0x10 [ 817.028996] ? __fget_files+0x20d/0x3b0 [ 817.029039] __x64_sys_sendfile64+0x1d3/0x210 [ 817.029064] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 817.029090] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 817.029133] do_syscall_64+0xbf/0x430 [ 817.029156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.029179] RIP: 0033:0x7faea702db19 [ 817.029196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.029217] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 817.029238] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 817.029253] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 817.029265] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.029279] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 817.029292] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 817.029320] [ 817.080069] FAULT_INJECTION: forcing a failure. [ 817.080069] name failslab, interval 1, probability 0, space 0, times 0 [ 817.081889] CPU: 1 UID: 0 PID: 6976 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 817.081919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.081932] Call Trace: [ 817.081939] [ 817.081947] dump_stack_lvl+0xfa/0x120 [ 817.081987] should_fail_ex+0x4d7/0x5e0 [ 817.082013] should_failslab+0xc2/0x120 [ 817.082036] __kmalloc_noprof+0xcd/0x680 [ 817.082062] ? lock_release+0xc8/0x290 [ 817.082094] ? copy_splice_read+0x15b/0xc00 [ 817.082128] copy_splice_read+0x15b/0xc00 [ 817.082156] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 817.082203] ? __pfx_copy_splice_read+0x10/0x10 [ 817.082231] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 817.082267] ? look_up_lock_class+0x56/0x150 [ 817.082301] ? register_lock_class+0x41/0x560 [ 817.082333] ? lockdep_init_map_type+0x4b/0x240 [ 817.082367] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 817.082402] ? __pfx_copy_splice_read+0x10/0x10 [ 817.082445] do_splice_read+0x1f8/0x2a0 [ 817.082476] splice_direct_to_actor+0x2a8/0x9d0 [ 817.082508] ? __pfx_direct_splice_actor+0x10/0x10 [ 817.082544] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 817.082577] ? lock_acquire+0x15e/0x2f0 [ 817.082611] do_splice_direct+0x179/0x250 [ 817.082641] ? __pfx_do_splice_direct+0x10/0x10 [ 817.082672] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 817.082704] ? security_file_permission+0x22/0x90 [ 817.082735] do_sendfile+0xa8e/0xdc0 [ 817.082774] ? __pfx_do_sendfile+0x10/0x10 [ 817.082807] ? __fget_files+0x20d/0x3b0 [ 817.082849] __x64_sys_sendfile64+0x1d3/0x210 [ 817.082875] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 817.082902] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 817.082941] do_syscall_64+0xbf/0x430 [ 817.082964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.082986] RIP: 0033:0x7f26afb47b19 [ 817.083003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.083025] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 817.083046] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 817.083061] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 817.083074] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.083087] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 817.083100] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 817.083129] 12:52:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 7) 12:52:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 817.130607] FAULT_INJECTION: forcing a failure. [ 817.130607] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 817.131681] CPU: 0 UID: 0 PID: 6979 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 817.131698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.131706] Call Trace: [ 817.131710] [ 817.131715] dump_stack_lvl+0xfa/0x120 [ 817.131740] should_fail_ex+0x4d7/0x5e0 [ 817.131755] should_fail_alloc_page+0xe0/0x110 [ 817.131771] prepare_alloc_pages+0x1eb/0x550 [ 817.131793] alloc_pages_bulk_noprof+0x148/0xc30 [ 817.131809] ? find_held_lock+0x2b/0x80 [ 817.131825] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 817.131842] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 817.131860] ? trace_kmalloc+0x1f/0xb0 [ 817.131870] ? __kmalloc_noprof+0x274/0x680 [ 817.131883] ? lock_acquire+0x15e/0x2f0 [ 817.131899] ? obj_cgroup_charge_account+0x11a/0x6e0 [ 817.131917] ? copy_splice_read+0x15b/0xc00 [ 817.131935] copy_splice_read+0x192/0xc00 [ 817.131954] ? __pfx_copy_splice_read+0x10/0x10 [ 817.131969] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 817.131988] ? look_up_lock_class+0x56/0x150 [ 817.132006] ? register_lock_class+0x41/0x560 [ 817.132022] ? lockdep_init_map_type+0x4b/0x240 [ 817.132041] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 817.132061] ? __pfx_copy_splice_read+0x10/0x10 [ 817.132077] do_splice_read+0x1f8/0x2a0 [ 817.132093] splice_direct_to_actor+0x2a8/0x9d0 [ 817.132110] ? __pfx_direct_splice_actor+0x10/0x10 [ 817.132129] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 817.132146] ? lock_acquire+0x15e/0x2f0 [ 817.132164] do_splice_direct+0x179/0x250 [ 817.132179] ? __pfx_do_splice_direct+0x10/0x10 [ 817.132199] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 817.132220] ? security_file_permission+0x22/0x90 [ 817.132238] do_sendfile+0xa8e/0xdc0 [ 817.132259] ? __pfx_do_sendfile+0x10/0x10 [ 817.132276] ? __fget_files+0x20d/0x3b0 [ 817.132299] __x64_sys_sendfile64+0x1d3/0x210 [ 817.132313] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 817.132327] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 817.132347] do_syscall_64+0xbf/0x430 [ 817.132359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.132372] RIP: 0033:0x7fb3e5a3eb19 [ 817.132381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.132392] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 817.132404] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 817.132412] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 817.132418] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.132425] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 817.132432] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 817.132447] 12:52:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 6) 12:52:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 6) 12:52:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 6) 12:52:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 8) [ 817.401464] FAULT_INJECTION: forcing a failure. [ 817.401464] name failslab, interval 1, probability 0, space 0, times 0 [ 817.402633] CPU: 0 UID: 0 PID: 6997 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 817.402649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.402657] Call Trace: [ 817.402661] [ 817.402666] dump_stack_lvl+0xfa/0x120 [ 817.402691] should_fail_ex+0x4d7/0x5e0 [ 817.402706] should_failslab+0xc2/0x120 [ 817.402719] __kmalloc_noprof+0xcd/0x680 [ 817.402735] ? iter_file_splice_write+0x1cd/0x11f0 [ 817.402756] iter_file_splice_write+0x1cd/0x11f0 [ 817.402774] ? kfree+0x284/0x550 [ 817.402787] ? copy_splice_read+0x83d/0xc00 [ 817.402805] ? __pfx_iter_file_splice_write+0x10/0x10 [ 817.402826] ? __lock_acquire+0xc65/0x1b70 [ 817.402854] ? lock_is_held_type+0x9e/0x120 [ 817.402872] ? __pfx_iter_file_splice_write+0x10/0x10 [ 817.402889] direct_splice_actor+0x192/0x7b0 [ 817.402907] splice_direct_to_actor+0x347/0x9d0 [ 817.402923] ? __pfx_direct_splice_actor+0x10/0x10 [ 817.402942] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 817.402959] ? lock_acquire+0x15e/0x2f0 [ 817.402977] do_splice_direct+0x179/0x250 [ 817.402993] ? __pfx_do_splice_direct+0x10/0x10 [ 817.403009] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 817.403026] ? security_file_permission+0x22/0x90 [ 817.403043] do_sendfile+0xa8e/0xdc0 [ 817.403065] ? __pfx_do_sendfile+0x10/0x10 [ 817.403082] ? __fget_files+0x20d/0x3b0 [ 817.403105] __x64_sys_sendfile64+0x1d3/0x210 [ 817.403118] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 817.403132] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 817.403153] do_syscall_64+0xbf/0x430 [ 817.403165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.403178] RIP: 0033:0x7fb3e5a3eb19 [ 817.403192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.403203] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 817.403215] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 817.403222] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 817.403229] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.403236] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 817.403243] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 817.403258] 12:52:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 7) [ 817.575400] FAULT_INJECTION: forcing a failure. [ 817.575400] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 817.576425] CPU: 0 UID: 0 PID: 6999 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 817.576441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.576453] Call Trace: [ 817.576458] [ 817.576463] dump_stack_lvl+0xfa/0x120 [ 817.576487] should_fail_ex+0x4d7/0x5e0 [ 817.576503] should_fail_alloc_page+0xe0/0x110 [ 817.576517] prepare_alloc_pages+0x1eb/0x550 [ 817.576540] alloc_pages_bulk_noprof+0x148/0xc30 [ 817.576556] ? find_held_lock+0x2b/0x80 [ 817.576572] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 817.576589] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 817.576607] ? trace_kmalloc+0x1f/0xb0 [ 817.576617] ? __kmalloc_noprof+0x274/0x680 [ 817.576630] ? lock_acquire+0x15e/0x2f0 [ 817.576646] ? obj_cgroup_charge_account+0x11a/0x6e0 [ 817.576663] ? copy_splice_read+0x15b/0xc00 [ 817.576682] copy_splice_read+0x192/0xc00 [ 817.576700] ? __pfx_copy_splice_read+0x10/0x10 [ 817.576715] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 817.576734] ? look_up_lock_class+0x56/0x150 [ 817.576752] ? register_lock_class+0x41/0x560 [ 817.576768] ? lockdep_init_map_type+0x4b/0x240 [ 817.576786] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 817.576806] ? __pfx_copy_splice_read+0x10/0x10 [ 817.576822] do_splice_read+0x1f8/0x2a0 [ 817.576838] splice_direct_to_actor+0x2a8/0x9d0 [ 817.576854] ? __pfx_direct_splice_actor+0x10/0x10 [ 817.576873] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 817.576890] ? lock_acquire+0x15e/0x2f0 [ 817.576908] do_splice_direct+0x179/0x250 [ 817.576924] ? __pfx_do_splice_direct+0x10/0x10 [ 817.576940] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 817.576957] ? security_file_permission+0x22/0x90 [ 817.576974] do_sendfile+0xa8e/0xdc0 [ 817.576995] ? __pfx_do_sendfile+0x10/0x10 [ 817.577012] ? __fget_files+0x20d/0x3b0 [ 817.577035] __x64_sys_sendfile64+0x1d3/0x210 [ 817.577048] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 817.577062] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 817.577082] do_syscall_64+0xbf/0x430 [ 817.577094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.577107] RIP: 0033:0x7fc11b623b19 [ 817.577116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.577128] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 817.577139] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 817.577147] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 817.577154] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.577161] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 817.577168] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 817.577187] 12:52:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 8) 12:52:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 7) 12:52:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 7) 12:52:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 9) 12:52:20 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 826.151477] FAULT_INJECTION: forcing a failure. [ 826.151477] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 826.152541] CPU: 1 UID: 0 PID: 7010 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 826.152558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 826.152566] Call Trace: [ 826.152570] [ 826.152575] dump_stack_lvl+0xfa/0x120 [ 826.152602] should_fail_ex+0x4d7/0x5e0 [ 826.152617] should_fail_alloc_page+0xe0/0x110 [ 826.152633] prepare_alloc_pages+0x1eb/0x550 [ 826.152656] alloc_pages_bulk_noprof+0x148/0xc30 [ 826.152672] ? find_held_lock+0x2b/0x80 [ 826.152689] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 826.152707] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 826.152724] ? trace_kmalloc+0x1f/0xb0 [ 826.152735] ? __kmalloc_noprof+0x274/0x680 [ 826.152748] ? lock_release+0xc8/0x290 [ 826.152765] ? copy_splice_read+0x15b/0xc00 [ 826.152784] copy_splice_read+0x192/0xc00 [ 826.152803] ? __pfx_copy_splice_read+0x10/0x10 [ 826.152817] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 826.152838] ? look_up_lock_class+0x56/0x150 [ 826.152856] ? register_lock_class+0x41/0x560 [ 826.152873] ? lockdep_init_map_type+0x4b/0x240 [ 826.152891] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 826.152911] ? __pfx_copy_splice_read+0x10/0x10 [ 826.152927] do_splice_read+0x1f8/0x2a0 [ 826.152943] splice_direct_to_actor+0x2a8/0x9d0 [ 826.152959] ? __pfx_direct_splice_actor+0x10/0x10 [ 826.152978] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 826.152995] ? lock_acquire+0x15e/0x2f0 [ 826.153013] do_splice_direct+0x179/0x250 [ 826.153029] ? __pfx_do_splice_direct+0x10/0x10 [ 826.153045] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 826.153062] ? security_file_permission+0x22/0x90 [ 826.153079] do_sendfile+0xa8e/0xdc0 [ 826.153101] ? __pfx_do_sendfile+0x10/0x10 [ 826.153118] ? __fget_files+0x20d/0x3b0 [ 826.153141] __x64_sys_sendfile64+0x1d3/0x210 [ 826.153155] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 826.153169] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 826.153194] do_syscall_64+0xbf/0x430 [ 826.153207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.153220] RIP: 0033:0x7f26afb47b19 [ 826.153229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 826.153241] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 826.153253] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 826.153261] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 826.153268] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 826.153275] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 826.153282] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 826.153297] [ 826.185168] FAULT_INJECTION: forcing a failure. [ 826.185168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 826.186132] CPU: 1 UID: 0 PID: 7013 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 826.186149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 826.186156] Call Trace: [ 826.186160] [ 826.186164] dump_stack_lvl+0xfa/0x120 [ 826.186192] should_fail_ex+0x4d7/0x5e0 [ 826.186206] should_fail_alloc_page+0xe0/0x110 [ 826.186219] prepare_alloc_pages+0x1eb/0x550 [ 826.186241] alloc_pages_bulk_noprof+0x148/0xc30 [ 826.186257] ? find_held_lock+0x2b/0x80 [ 826.186272] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 826.186288] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 826.186305] ? trace_kmalloc+0x1f/0xb0 [ 826.186315] ? __kmalloc_noprof+0x274/0x680 [ 826.186329] ? lock_release+0xc8/0x290 [ 826.186345] ? copy_splice_read+0x15b/0xc00 [ 826.186362] copy_splice_read+0x192/0xc00 [ 826.186381] ? __pfx_copy_splice_read+0x10/0x10 [ 826.186396] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 826.186415] ? look_up_lock_class+0x56/0x150 [ 826.186432] ? register_lock_class+0x41/0x560 [ 826.186449] ? lockdep_init_map_type+0x4b/0x240 [ 826.186467] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 826.186486] ? __pfx_copy_splice_read+0x10/0x10 [ 826.186502] do_splice_read+0x1f8/0x2a0 [ 826.186518] splice_direct_to_actor+0x2a8/0x9d0 [ 826.186548] ? __pfx_direct_splice_actor+0x10/0x10 [ 826.186567] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 826.186584] ? lock_acquire+0x15e/0x2f0 [ 826.186605] do_splice_direct+0x179/0x250 [ 826.186623] ? __pfx_do_splice_direct+0x10/0x10 [ 826.186639] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 826.186657] ? security_file_permission+0x22/0x90 [ 826.186673] do_sendfile+0xa8e/0xdc0 [ 826.186693] ? __pfx_do_sendfile+0x10/0x10 [ 826.186710] ? __fget_files+0x20d/0x3b0 [ 826.186733] __x64_sys_sendfile64+0x1d3/0x210 [ 826.186746] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 826.186760] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 826.186780] do_syscall_64+0xbf/0x430 [ 826.186793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.186805] RIP: 0033:0x7faea702db19 [ 826.186813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 826.186824] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 826.186835] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 826.186843] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 826.186850] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 826.186857] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 826.186864] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 826.186880] [ 826.247765] FAULT_INJECTION: forcing a failure. [ 826.247765] name failslab, interval 1, probability 0, space 0, times 0 [ 826.249590] CPU: 0 UID: 0 PID: 7019 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 826.249620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 826.249632] Call Trace: [ 826.249640] [ 826.249648] dump_stack_lvl+0xfa/0x120 [ 826.249690] should_fail_ex+0x4d7/0x5e0 [ 826.249716] should_failslab+0xc2/0x120 [ 826.249740] __kmalloc_noprof+0xcd/0x680 [ 826.249768] ? iter_file_splice_write+0x1cd/0x11f0 [ 826.249805] iter_file_splice_write+0x1cd/0x11f0 [ 826.249839] ? kfree+0x284/0x550 [ 826.249863] ? copy_splice_read+0x83d/0xc00 [ 826.249896] ? __pfx_iter_file_splice_write+0x10/0x10 [ 826.249934] ? __lock_acquire+0xc65/0x1b70 [ 826.249985] ? lock_is_held_type+0x9e/0x120 [ 826.250017] ? __pfx_iter_file_splice_write+0x10/0x10 [ 826.250049] direct_splice_actor+0x192/0x7b0 [ 826.250082] splice_direct_to_actor+0x347/0x9d0 [ 826.250113] ? __pfx_direct_splice_actor+0x10/0x10 [ 826.250148] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 826.250180] ? lock_acquire+0x15e/0x2f0 [ 826.250221] do_splice_direct+0x179/0x250 [ 826.250249] ? __pfx_do_splice_direct+0x10/0x10 [ 826.250279] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 826.250311] ? security_file_permission+0x22/0x90 [ 826.250342] do_sendfile+0xa8e/0xdc0 [ 826.250381] ? __pfx_do_sendfile+0x10/0x10 [ 826.250413] ? __fget_files+0x20d/0x3b0 [ 826.250455] __x64_sys_sendfile64+0x1d3/0x210 [ 826.250480] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 826.250506] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 12:52:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 8) [ 826.250556] do_syscall_64+0xbf/0x430 [ 826.250578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.250601] RIP: 0033:0x7fc11b623b19 [ 826.250617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 826.250638] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 826.250659] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 826.250674] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 12:52:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 10) 12:52:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 8) [ 826.250686] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 826.250699] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 826.250712] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 826.250741] [ 826.356038] FAULT_INJECTION: forcing a failure. [ 826.356038] name failslab, interval 1, probability 0, space 0, times 0 [ 826.357882] CPU: 0 UID: 0 PID: 7023 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 826.357912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 826.357924] Call Trace: [ 826.357931] [ 826.357939] dump_stack_lvl+0xfa/0x120 [ 826.357979] should_fail_ex+0x4d7/0x5e0 [ 826.358005] should_failslab+0xc2/0x120 [ 826.358029] __kmalloc_noprof+0xcd/0x680 [ 826.358057] ? iter_file_splice_write+0x1cd/0x11f0 [ 826.358095] iter_file_splice_write+0x1cd/0x11f0 [ 826.358130] ? kfree+0x284/0x550 [ 826.358154] ? copy_splice_read+0x83d/0xc00 [ 826.358197] ? __pfx_iter_file_splice_write+0x10/0x10 [ 826.358232] ? __lock_acquire+0xc65/0x1b70 [ 826.358282] ? lock_is_held_type+0x9e/0x120 [ 826.358317] ? __pfx_iter_file_splice_write+0x10/0x10 [ 826.358352] direct_splice_actor+0x192/0x7b0 [ 826.358385] splice_direct_to_actor+0x347/0x9d0 [ 826.358416] ? __pfx_direct_splice_actor+0x10/0x10 [ 826.358451] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 826.358483] ? lock_acquire+0x15e/0x2f0 [ 826.358517] do_splice_direct+0x179/0x250 [ 826.358559] ? __pfx_do_splice_direct+0x10/0x10 [ 826.358590] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 826.358624] ? security_file_permission+0x22/0x90 [ 826.358657] do_sendfile+0xa8e/0xdc0 [ 826.358696] ? __pfx_do_sendfile+0x10/0x10 [ 826.358729] ? __fget_files+0x20d/0x3b0 [ 826.358770] __x64_sys_sendfile64+0x1d3/0x210 [ 826.358796] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 826.358821] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 826.358859] do_syscall_64+0xbf/0x430 [ 826.358882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.358905] RIP: 0033:0x7f26afb47b19 [ 826.358923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 826.358943] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 826.358964] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 826.358979] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 826.358992] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 826.359007] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 826.359020] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 826.359049] 12:52:20 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 826.425248] FAULT_INJECTION: forcing a failure. [ 826.425248] name failslab, interval 1, probability 0, space 0, times 0 [ 826.427365] CPU: 0 UID: 0 PID: 7026 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 826.427400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 826.427412] Call Trace: [ 826.427419] [ 826.427427] dump_stack_lvl+0xfa/0x120 [ 826.427464] should_fail_ex+0x4d7/0x5e0 [ 826.427489] ? jbd2__journal_start+0x193/0x6b0 [ 826.427523] should_failslab+0xc2/0x120 [ 826.427547] kmem_cache_alloc_noprof+0x80/0x690 [ 826.427584] ? jbd2__journal_start+0x193/0x6b0 [ 826.427616] jbd2__journal_start+0x193/0x6b0 [ 826.427653] __ext4_journal_start_sb+0x325/0x5d0 [ 826.427680] ? ext4_dirty_inode+0xa5/0x130 [ 826.427711] ext4_dirty_inode+0xa5/0x130 [ 826.427738] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 826.427765] __mark_inode_dirty+0x1b7/0x1470 [ 826.427794] generic_update_time+0xcb/0xf0 [ 826.427819] file_modified+0x1f0/0x230 [ 826.427844] ext4_file_write_iter+0xca6/0x19f0 [ 826.427877] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 826.427900] ? trace_kmalloc+0x1f/0xb0 [ 826.427918] ? __kmalloc_noprof+0x274/0x680 [ 826.427944] ? splice_from_pipe_next.part.0+0x165/0x510 [ 826.427981] iter_file_splice_write+0xa3a/0x11f0 [ 826.428026] ? __pfx_iter_file_splice_write+0x10/0x10 [ 826.428080] ? lock_is_held_type+0x9e/0x120 [ 826.428112] ? __pfx_iter_file_splice_write+0x10/0x10 [ 826.428145] direct_splice_actor+0x192/0x7b0 [ 826.428178] splice_direct_to_actor+0x347/0x9d0 [ 826.428216] ? __pfx_direct_splice_actor+0x10/0x10 [ 826.428251] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 826.428283] ? lock_acquire+0x15e/0x2f0 [ 826.428318] do_splice_direct+0x179/0x250 [ 826.428347] ? __pfx_do_splice_direct+0x10/0x10 [ 826.428377] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 826.428409] ? security_file_permission+0x22/0x90 [ 826.428440] do_sendfile+0xa8e/0xdc0 [ 826.428479] ? __pfx_do_sendfile+0x10/0x10 [ 826.428511] ? __fget_files+0x20d/0x3b0 [ 826.428553] __x64_sys_sendfile64+0x1d3/0x210 [ 826.428578] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 826.428613] do_syscall_64+0xbf/0x430 [ 826.428635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.428657] RIP: 0033:0x7fb3e5a3eb19 [ 826.428674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 826.428695] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 826.428716] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 826.428730] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 826.428742] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 826.428755] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 826.428768] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 826.428797] [ 826.483316] FAULT_INJECTION: forcing a failure. [ 826.483316] name failslab, interval 1, probability 0, space 0, times 0 [ 826.485069] CPU: 0 UID: 0 PID: 7027 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 826.485098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 826.485110] Call Trace: [ 826.485116] [ 826.485124] dump_stack_lvl+0xfa/0x120 [ 826.485163] should_fail_ex+0x4d7/0x5e0 [ 826.485195] should_failslab+0xc2/0x120 [ 826.485218] __kmalloc_noprof+0xcd/0x680 [ 826.485245] ? iter_file_splice_write+0x1cd/0x11f0 [ 826.485280] iter_file_splice_write+0x1cd/0x11f0 [ 826.485313] ? kfree+0x284/0x550 [ 826.485337] ? copy_splice_read+0x83d/0xc00 [ 826.485371] ? __pfx_iter_file_splice_write+0x10/0x10 [ 826.485403] ? __lock_acquire+0xc65/0x1b70 [ 826.485452] ? lock_is_held_type+0x9e/0x120 [ 826.485483] ? __pfx_iter_file_splice_write+0x10/0x10 [ 826.485516] direct_splice_actor+0x192/0x7b0 [ 826.485548] splice_direct_to_actor+0x347/0x9d0 [ 826.485579] ? __pfx_direct_splice_actor+0x10/0x10 [ 826.485615] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 826.485646] ? lock_acquire+0x15e/0x2f0 [ 826.485681] do_splice_direct+0x179/0x250 [ 826.485709] ? __pfx_do_splice_direct+0x10/0x10 [ 826.485740] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 826.485772] ? security_file_permission+0x22/0x90 [ 826.485802] do_sendfile+0xa8e/0xdc0 [ 826.485840] ? __pfx_do_sendfile+0x10/0x10 [ 826.485872] ? __fget_files+0x20d/0x3b0 [ 826.485913] __x64_sys_sendfile64+0x1d3/0x210 [ 826.485938] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 826.485964] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 826.486002] do_syscall_64+0xbf/0x430 [ 826.486024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.486046] RIP: 0033:0x7faea702db19 [ 826.486062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 826.486082] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 826.486103] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 826.486117] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 826.486130] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 826.486143] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 826.486156] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 826.486185] 12:52:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 11) 12:52:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 9) 12:52:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 9) 12:52:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 9) 12:52:28 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 12) 12:52:28 executing program 6: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 834.419955] FAULT_INJECTION: forcing a failure. [ 834.419955] name failslab, interval 1, probability 0, space 0, times 0 [ 834.421935] CPU: 1 UID: 0 PID: 7054 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 834.421967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 834.421981] Call Trace: [ 834.421989] [ 834.421997] dump_stack_lvl+0xfa/0x120 [ 834.422041] should_fail_ex+0x4d7/0x5e0 [ 834.422068] ? jbd2__journal_start+0x193/0x6b0 [ 834.422104] should_failslab+0xc2/0x120 [ 834.422131] kmem_cache_alloc_noprof+0x80/0x690 [ 834.422172] ? jbd2__journal_start+0x193/0x6b0 [ 834.422215] jbd2__journal_start+0x193/0x6b0 [ 834.422255] __ext4_journal_start_sb+0x325/0x5d0 [ 834.422283] ? ext4_file_write_iter+0xd77/0x19f0 [ 834.422312] ext4_file_write_iter+0xd77/0x19f0 [ 834.422348] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 834.422373] ? trace_kmalloc+0x1f/0xb0 [ 834.422392] ? __kmalloc_noprof+0x274/0x680 [ 834.422421] ? splice_from_pipe_next.part.0+0x165/0x510 [ 834.422462] iter_file_splice_write+0xa3a/0x11f0 [ 834.422510] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.422568] ? lock_is_held_type+0x9e/0x120 [ 834.422602] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.422655] direct_splice_actor+0x192/0x7b0 [ 834.422690] splice_direct_to_actor+0x347/0x9d0 [ 834.422724] ? __pfx_direct_splice_actor+0x10/0x10 [ 834.422762] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 834.422797] ? lock_acquire+0x15e/0x2f0 [ 834.422835] do_splice_direct+0x179/0x250 [ 834.422866] ? __pfx_do_splice_direct+0x10/0x10 [ 834.422898] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 834.422933] ? security_file_permission+0x22/0x90 [ 834.422967] do_sendfile+0xa8e/0xdc0 [ 834.423008] ? __pfx_do_sendfile+0x10/0x10 [ 834.423043] ? __fget_files+0x20d/0x3b0 [ 834.423088] __x64_sys_sendfile64+0x1d3/0x210 [ 834.423116] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 834.423143] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 834.423185] do_syscall_64+0xbf/0x430 [ 834.423209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.423233] RIP: 0033:0x7fb3e5a3eb19 [ 834.423251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 834.423273] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 834.423295] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 834.423311] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 834.423324] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 834.423338] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 834.423352] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 834.423383] 12:52:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 10) 12:52:28 executing program 6: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 10) 12:52:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 834.630963] FAULT_INJECTION: forcing a failure. [ 834.630963] name failslab, interval 1, probability 0, space 0, times 0 [ 834.632698] CPU: 0 UID: 0 PID: 7060 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 834.632729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 834.632741] Call Trace: [ 834.632749] [ 834.632758] dump_stack_lvl+0xfa/0x120 [ 834.632797] should_fail_ex+0x4d7/0x5e0 [ 834.632823] ? jbd2__journal_start+0x193/0x6b0 [ 834.632856] should_failslab+0xc2/0x120 [ 834.632879] kmem_cache_alloc_noprof+0x80/0x690 [ 834.632916] ? jbd2__journal_start+0x193/0x6b0 [ 834.632947] jbd2__journal_start+0x193/0x6b0 [ 834.632984] __ext4_journal_start_sb+0x325/0x5d0 [ 834.633011] ? ext4_dirty_inode+0xa5/0x130 [ 834.633042] ext4_dirty_inode+0xa5/0x130 [ 834.633069] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 834.633095] __mark_inode_dirty+0x1b7/0x1470 [ 834.633125] generic_update_time+0xcb/0xf0 [ 834.633150] file_modified+0x1f0/0x230 [ 834.633174] ext4_file_write_iter+0xca6/0x19f0 [ 834.633215] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 834.633238] ? trace_kmalloc+0x1f/0xb0 [ 834.633256] ? __kmalloc_noprof+0x274/0x680 [ 834.633282] ? splice_from_pipe_next.part.0+0x165/0x510 [ 834.633319] iter_file_splice_write+0xa3a/0x11f0 [ 834.633364] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.633417] ? lock_is_held_type+0x9e/0x120 [ 834.633449] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.633482] direct_splice_actor+0x192/0x7b0 [ 834.633515] splice_direct_to_actor+0x347/0x9d0 [ 834.633545] ? __pfx_direct_splice_actor+0x10/0x10 [ 834.633581] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 834.633613] ? lock_acquire+0x15e/0x2f0 [ 834.633648] do_splice_direct+0x179/0x250 [ 834.633677] ? __pfx_do_splice_direct+0x10/0x10 [ 834.633707] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 834.633739] ? security_file_permission+0x22/0x90 [ 834.633770] do_sendfile+0xa8e/0xdc0 [ 834.633808] ? __pfx_do_sendfile+0x10/0x10 [ 834.633840] ? __fget_files+0x20d/0x3b0 [ 834.633882] __x64_sys_sendfile64+0x1d3/0x210 [ 834.633907] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 834.633933] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 834.633971] do_syscall_64+0xbf/0x430 [ 834.633993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.634015] RIP: 0033:0x7f26afb47b19 [ 834.634032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 834.634052] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 834.634073] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 834.634088] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 834.634101] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 834.634114] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 834.634126] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 834.634156] 12:52:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 13) 12:52:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 10) 12:52:29 executing program 6: pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:52:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 834.833229] FAULT_INJECTION: forcing a failure. [ 834.833229] name failslab, interval 1, probability 0, space 0, times 0 [ 834.834917] CPU: 1 UID: 0 PID: 7070 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 834.834946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 834.834959] Call Trace: [ 834.834967] [ 834.834975] dump_stack_lvl+0xfa/0x120 [ 834.835018] should_fail_ex+0x4d7/0x5e0 [ 834.835044] ? jbd2__journal_start+0x193/0x6b0 [ 834.835078] should_failslab+0xc2/0x120 [ 834.835102] kmem_cache_alloc_noprof+0x80/0x690 [ 834.835139] ? jbd2__journal_start+0x193/0x6b0 [ 834.835170] jbd2__journal_start+0x193/0x6b0 [ 834.835215] __ext4_journal_start_sb+0x325/0x5d0 [ 834.835241] ? ext4_dirty_inode+0xa5/0x130 [ 834.835272] ext4_dirty_inode+0xa5/0x130 [ 834.835300] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 834.835325] __mark_inode_dirty+0x1b7/0x1470 [ 834.835355] generic_update_time+0xcb/0xf0 [ 834.835380] file_modified+0x1f0/0x230 [ 834.835405] ext4_file_write_iter+0xca6/0x19f0 [ 834.835438] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 834.835466] ? splice_from_pipe_next.part.0+0x165/0x510 [ 834.835512] iter_file_splice_write+0xa3a/0x11f0 [ 834.835580] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.835657] ? lock_is_held_type+0x9e/0x120 [ 834.835690] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.835723] direct_splice_actor+0x192/0x7b0 [ 834.835756] splice_direct_to_actor+0x347/0x9d0 [ 834.835786] ? __pfx_direct_splice_actor+0x10/0x10 [ 834.835822] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 834.835854] ? lock_acquire+0x15e/0x2f0 [ 834.835890] do_splice_direct+0x179/0x250 [ 834.835920] ? __pfx_do_splice_direct+0x10/0x10 [ 834.835952] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 834.835985] ? security_file_permission+0x22/0x90 [ 834.836016] do_sendfile+0xa8e/0xdc0 [ 834.836055] ? __pfx_do_sendfile+0x10/0x10 [ 834.836087] ? __fget_files+0x20d/0x3b0 [ 834.836129] __x64_sys_sendfile64+0x1d3/0x210 [ 834.836156] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 834.836182] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 834.836220] do_syscall_64+0xbf/0x430 [ 834.836243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.836265] RIP: 0033:0x7fc11b623b19 [ 834.836282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 834.836303] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 834.836324] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 834.836339] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 834.836351] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 834.836364] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 834.836377] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 834.836406] [ 834.878611] FAULT_INJECTION: forcing a failure. [ 834.878611] name failslab, interval 1, probability 0, space 0, times 0 [ 834.880580] CPU: 1 UID: 0 PID: 7069 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 834.880609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 834.880620] Call Trace: [ 834.880627] [ 834.880636] dump_stack_lvl+0xfa/0x120 [ 834.880671] should_fail_ex+0x4d7/0x5e0 [ 834.880694] ? jbd2__journal_start+0x193/0x6b0 [ 834.880726] should_failslab+0xc2/0x120 [ 834.880747] kmem_cache_alloc_noprof+0x80/0x690 [ 834.880783] ? jbd2__journal_start+0x193/0x6b0 [ 834.880815] jbd2__journal_start+0x193/0x6b0 [ 834.880852] __ext4_journal_start_sb+0x325/0x5d0 [ 834.880877] ? ext4_dirty_inode+0xa5/0x130 [ 834.880907] ext4_dirty_inode+0xa5/0x130 [ 834.880935] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 834.880961] __mark_inode_dirty+0x1b7/0x1470 [ 834.880990] generic_update_time+0xcb/0xf0 [ 834.881014] file_modified+0x1f0/0x230 [ 834.881039] ext4_file_write_iter+0xca6/0x19f0 [ 834.881072] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 834.881095] ? trace_kmalloc+0x1f/0xb0 [ 834.881113] ? __kmalloc_noprof+0x274/0x680 [ 834.881140] ? splice_from_pipe_next.part.0+0x165/0x510 [ 834.881176] iter_file_splice_write+0xa3a/0x11f0 [ 834.881229] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.881283] ? lock_is_held_type+0x9e/0x120 [ 834.881314] ? __pfx_iter_file_splice_write+0x10/0x10 [ 834.881347] direct_splice_actor+0x192/0x7b0 [ 834.881380] splice_direct_to_actor+0x347/0x9d0 [ 834.881410] ? __pfx_direct_splice_actor+0x10/0x10 [ 834.881446] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 834.881478] ? lock_acquire+0x15e/0x2f0 [ 834.881512] do_splice_direct+0x179/0x250 [ 834.881541] ? __pfx_do_splice_direct+0x10/0x10 [ 834.881571] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 834.881603] ? security_file_permission+0x22/0x90 [ 834.881633] do_sendfile+0xa8e/0xdc0 [ 834.881671] ? __pfx_do_sendfile+0x10/0x10 [ 834.881703] ? __fget_files+0x20d/0x3b0 [ 834.881744] __x64_sys_sendfile64+0x1d3/0x210 [ 834.881770] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 834.881795] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 834.881833] do_syscall_64+0xbf/0x430 [ 834.881855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.881876] RIP: 0033:0x7faea702db19 [ 834.881893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 834.881913] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 834.881933] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 834.881947] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 834.881960] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 834.881973] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 834.881985] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 834.882015] 12:52:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 14) 12:52:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 835.088067] FAULT_INJECTION: forcing a failure. [ 835.088067] name failslab, interval 1, probability 0, space 0, times 0 [ 835.090022] CPU: 0 UID: 0 PID: 7077 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 835.090058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 835.090071] Call Trace: [ 835.090079] [ 835.090088] dump_stack_lvl+0xfa/0x120 [ 835.090129] should_fail_ex+0x4d7/0x5e0 [ 835.090155] should_failslab+0xc2/0x120 [ 835.090178] __kmalloc_cache_noprof+0x81/0x6b0 [ 835.090211] ? do_splice_direct+0x179/0x250 [ 835.090239] ? do_sendfile+0xa8e/0xdc0 [ 835.090270] ? __x64_sys_sendfile64+0x1d3/0x210 [ 835.090292] ? do_syscall_64+0xbf/0x430 [ 835.090312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.090334] ? __iomap_dio_rw+0x271/0x1c90 [ 835.090360] ? __iomap_dio_rw+0x271/0x1c90 [ 835.090379] __iomap_dio_rw+0x271/0x1c90 [ 835.090404] ? __virt_addr_valid+0x1c6/0x5d0 [ 835.090428] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 835.090464] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 835.090498] ? lock_release+0xc8/0x290 [ 835.090531] ? __pfx___iomap_dio_rw+0x10/0x10 [ 835.090554] ? mark_held_locks+0x49/0x80 [ 835.090587] ? kasan_quarantine_put+0x84/0x1e0 [ 835.090626] ? trace_jbd2_handle_start+0x173/0x1e0 [ 835.090697] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 835.090717] ? __pfx_ext4_orphan_add+0x10/0x10 [ 835.090753] iomap_dio_rw+0x40/0xa0 [ 835.090776] ext4_file_write_iter+0xe0e/0x19f0 [ 835.090811] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 835.090834] ? trace_kmalloc+0x1f/0xb0 [ 835.090852] ? __kmalloc_noprof+0x274/0x680 [ 835.090878] ? splice_from_pipe_next.part.0+0x165/0x510 [ 835.090914] iter_file_splice_write+0xa3a/0x11f0 [ 835.090959] ? __pfx_iter_file_splice_write+0x10/0x10 [ 835.091013] ? lock_is_held_type+0x9e/0x120 [ 835.091045] ? __pfx_iter_file_splice_write+0x10/0x10 [ 835.091077] direct_splice_actor+0x192/0x7b0 [ 835.091110] splice_direct_to_actor+0x347/0x9d0 [ 835.091141] ? __pfx_direct_splice_actor+0x10/0x10 [ 835.091177] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 835.091209] ? lock_acquire+0x15e/0x2f0 [ 835.091243] do_splice_direct+0x179/0x250 [ 835.091272] ? __pfx_do_splice_direct+0x10/0x10 [ 835.091302] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 835.091334] ? security_file_permission+0x22/0x90 [ 835.091366] do_sendfile+0xa8e/0xdc0 [ 835.091404] ? __pfx_do_sendfile+0x10/0x10 [ 835.091436] ? __fget_files+0x20d/0x3b0 [ 835.091484] __x64_sys_sendfile64+0x1d3/0x210 [ 835.091509] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 835.091535] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 835.091573] do_syscall_64+0xbf/0x430 [ 835.091595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.091616] RIP: 0033:0x7fb3e5a3eb19 [ 835.091633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 835.091653] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 835.091675] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 835.091689] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 835.091702] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 835.091714] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 835.091727] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 835.091757] 12:52:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 15) 12:52:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:39 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 11) 12:52:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 11) 12:52:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 11) 12:52:39 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, 0x0, 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 12) 12:52:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:39 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 845.650746] FAULT_INJECTION: forcing a failure. [ 845.650746] name failslab, interval 1, probability 0, space 0, times 0 [ 845.651900] CPU: 1 UID: 0 PID: 7111 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 845.651917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 845.651926] Call Trace: [ 845.651930] [ 845.651935] dump_stack_lvl+0xfa/0x120 [ 845.651962] should_fail_ex+0x4d7/0x5e0 [ 845.651977] ? jbd2__journal_start+0x193/0x6b0 [ 845.651997] should_failslab+0xc2/0x120 [ 845.652011] kmem_cache_alloc_noprof+0x80/0x690 [ 845.652029] ? lock_is_held_type+0x9e/0x120 [ 845.652051] ? jbd2__journal_start+0x193/0x6b0 [ 845.652068] ? __mark_inode_dirty+0x254/0x1470 [ 845.652081] jbd2__journal_start+0x193/0x6b0 [ 845.652102] __ext4_journal_start_sb+0x325/0x5d0 [ 845.652117] ? ext4_file_write_iter+0xd77/0x19f0 [ 845.652132] ext4_file_write_iter+0xd77/0x19f0 [ 845.652151] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 845.652163] ? trace_kmalloc+0x1f/0xb0 [ 845.652173] ? __kmalloc_noprof+0x274/0x680 [ 845.652192] ? splice_from_pipe_next.part.0+0x165/0x510 [ 845.652212] iter_file_splice_write+0xa3a/0x11f0 [ 845.652236] ? __pfx_iter_file_splice_write+0x10/0x10 [ 845.652265] ? lock_is_held_type+0x9e/0x120 [ 845.652282] ? __pfx_iter_file_splice_write+0x10/0x10 [ 845.652300] direct_splice_actor+0x192/0x7b0 [ 845.652318] splice_direct_to_actor+0x347/0x9d0 [ 845.652334] ? __pfx_direct_splice_actor+0x10/0x10 [ 845.652356] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 845.652376] ? lock_acquire+0x15e/0x2f0 [ 845.652396] do_splice_direct+0x179/0x250 [ 845.652412] ? __pfx_do_splice_direct+0x10/0x10 [ 845.652428] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 845.652445] ? security_file_permission+0x22/0x90 [ 845.652463] do_sendfile+0xa8e/0xdc0 [ 845.652485] ? __pfx_do_sendfile+0x10/0x10 [ 845.652503] ? __fget_files+0x20d/0x3b0 [ 845.652526] __x64_sys_sendfile64+0x1d3/0x210 [ 845.652540] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 845.652554] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 845.652575] do_syscall_64+0xbf/0x430 [ 845.652588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.652601] RIP: 0033:0x7f26afb47b19 [ 845.652611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 845.652622] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 845.652634] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 845.652643] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 845.652650] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 845.652657] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 845.652664] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 845.652680] 12:52:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 12) 12:52:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 13) 12:52:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 12) 12:52:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 16) [ 855.385944] FAULT_INJECTION: forcing a failure. [ 855.385944] name failslab, interval 1, probability 0, space 0, times 0 [ 855.387828] CPU: 0 UID: 0 PID: 7130 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 855.387857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 855.387869] Call Trace: [ 855.387877] [ 855.387885] dump_stack_lvl+0xfa/0x120 [ 855.387926] should_fail_ex+0x4d7/0x5e0 [ 855.387950] ? ext4_init_io_end+0x27/0x180 [ 855.387982] should_failslab+0xc2/0x120 [ 855.388005] kmem_cache_alloc_noprof+0x80/0x690 [ 855.388042] ? ext4_init_io_end+0x27/0x180 [ 855.388072] ext4_init_io_end+0x27/0x180 [ 855.388104] ext4_do_writepages+0xb82/0x3880 [ 855.388143] ? __lock_acquire+0x5f1/0x1b70 [ 855.388180] ? __pfx_ext4_do_writepages+0x10/0x10 [ 855.388223] ? lock_is_held_type+0x9e/0x120 [ 855.388259] ext4_writepages+0x369/0x7a0 [ 855.388286] ? __pfx_ext4_writepages+0x10/0x10 [ 855.388323] ? do_writepages+0x469/0x5c0 [ 855.388350] ? lock_release+0xc8/0x290 [ 855.388382] ? __pfx_ext4_writepages+0x10/0x10 [ 855.388409] do_writepages+0x244/0x5c0 [ 855.388442] filemap_writeback+0x223/0x2d0 [ 855.388471] ? __pfx_filemap_writeback+0x10/0x10 [ 855.388533] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 855.388562] ? __create_object+0x59/0x80 [ 855.388591] ? trace_kmalloc+0x1f/0xb0 [ 855.388609] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 855.388639] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 855.388679] kiocb_invalidate_pages+0xe4/0x180 [ 855.388716] __iomap_dio_rw+0xf08/0x1c90 [ 855.388747] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 855.388787] ? __pfx___iomap_dio_rw+0x10/0x10 [ 855.388810] ? mark_held_locks+0x49/0x80 [ 855.388843] ? kasan_quarantine_put+0x84/0x1e0 [ 855.388882] ? trace_jbd2_handle_start+0x173/0x1e0 [ 855.388917] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 855.388943] ? __pfx_ext4_orphan_add+0x10/0x10 [ 855.388979] iomap_dio_rw+0x40/0xa0 [ 855.389002] ext4_file_write_iter+0xe0e/0x19f0 [ 855.389036] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 855.389059] ? trace_kmalloc+0x1f/0xb0 [ 855.389077] ? __kmalloc_noprof+0x274/0x680 [ 855.389103] ? splice_from_pipe_next.part.0+0x165/0x510 [ 855.389140] iter_file_splice_write+0xa3a/0x11f0 [ 855.389185] ? __pfx_iter_file_splice_write+0x10/0x10 [ 855.389240] ? lock_is_held_type+0x9e/0x120 [ 855.389270] ? __pfx_iter_file_splice_write+0x10/0x10 [ 855.389303] direct_splice_actor+0x192/0x7b0 [ 855.389336] splice_direct_to_actor+0x347/0x9d0 [ 855.389366] ? __pfx_direct_splice_actor+0x10/0x10 [ 855.389402] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 855.389434] ? lock_acquire+0x15e/0x2f0 [ 855.389468] do_splice_direct+0x179/0x250 [ 855.389497] ? __pfx_do_splice_direct+0x10/0x10 [ 855.389527] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 855.389559] ? security_file_permission+0x22/0x90 [ 855.389590] do_sendfile+0xa8e/0xdc0 [ 855.389628] ? __pfx_do_sendfile+0x10/0x10 [ 855.389664] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 855.389705] __x64_sys_sendfile64+0x1d3/0x210 [ 855.389731] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 855.389765] do_syscall_64+0xbf/0x430 [ 855.389787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.389809] RIP: 0033:0x7fb3e5a3eb19 [ 855.389826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 855.389847] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 855.389868] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 855.389882] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 855.389895] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 855.389908] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 855.389921] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 855.389950] [ 855.409778] FAULT_INJECTION: forcing a failure. [ 855.409778] name failslab, interval 1, probability 0, space 0, times 0 [ 855.413016] FAULT_INJECTION: forcing a failure. [ 855.413016] name failslab, interval 1, probability 0, space 0, times 0 [ 855.413125] CPU: 1 UID: 0 PID: 7133 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 855.413153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 855.413165] Call Trace: [ 855.413172] [ 855.413180] dump_stack_lvl+0xfa/0x120 [ 855.413224] should_fail_ex+0x4d7/0x5e0 [ 855.413247] ? jbd2__journal_start+0x193/0x6b0 [ 855.413277] should_failslab+0xc2/0x120 [ 855.413299] kmem_cache_alloc_noprof+0x80/0x690 [ 855.413327] ? lock_is_held_type+0x9e/0x120 [ 855.413359] ? jbd2__journal_start+0x193/0x6b0 [ 855.413387] ? __mark_inode_dirty+0x254/0x1470 [ 855.413409] jbd2__journal_start+0x193/0x6b0 [ 855.413441] __ext4_journal_start_sb+0x325/0x5d0 [ 855.413465] ? ext4_file_write_iter+0xd77/0x19f0 [ 855.413488] ext4_file_write_iter+0xd77/0x19f0 [ 855.413518] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 855.413538] ? trace_kmalloc+0x1f/0xb0 [ 855.413554] ? __kmalloc_noprof+0x274/0x680 [ 855.413578] ? splice_from_pipe_next.part.0+0x165/0x510 [ 855.413610] iter_file_splice_write+0xa3a/0x11f0 [ 855.413650] ? __pfx_iter_file_splice_write+0x10/0x10 [ 855.413697] ? lock_is_held_type+0x9e/0x120 [ 855.413724] ? __pfx_iter_file_splice_write+0x10/0x10 [ 855.413752] direct_splice_actor+0x192/0x7b0 [ 855.413781] splice_direct_to_actor+0x347/0x9d0 [ 855.413809] ? __pfx_direct_splice_actor+0x10/0x10 [ 855.413841] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 855.413869] ? lock_acquire+0x15e/0x2f0 [ 855.413901] do_splice_direct+0x179/0x250 [ 855.413927] ? __pfx_do_splice_direct+0x10/0x10 [ 855.413953] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 855.413981] ? security_file_permission+0x22/0x90 [ 855.414009] do_sendfile+0xa8e/0xdc0 [ 855.414044] ? __pfx_do_sendfile+0x10/0x10 [ 855.414072] ? __fget_files+0x20d/0x3b0 [ 855.414110] __x64_sys_sendfile64+0x1d3/0x210 [ 855.414132] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 855.414154] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 855.414188] do_syscall_64+0xbf/0x430 [ 855.414208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.414228] RIP: 0033:0x7fc11b623b19 [ 855.414243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 855.414262] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 855.414280] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 855.414293] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 855.414304] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 855.414315] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 855.414327] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 855.414352] [ 855.488178] CPU: 0 UID: 0 PID: 7132 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 855.488216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 855.488230] Call Trace: [ 855.488239] [ 855.488247] dump_stack_lvl+0xfa/0x120 [ 855.488290] should_fail_ex+0x4d7/0x5e0 [ 855.488316] ? jbd2__journal_start+0x193/0x6b0 [ 855.488349] should_failslab+0xc2/0x120 [ 855.488373] kmem_cache_alloc_noprof+0x80/0x690 [ 855.488404] ? lock_is_held_type+0x9e/0x120 [ 855.488442] ? jbd2__journal_start+0x193/0x6b0 [ 855.488473] ? __mark_inode_dirty+0x254/0x1470 [ 855.488498] jbd2__journal_start+0x193/0x6b0 [ 855.488536] __ext4_journal_start_sb+0x325/0x5d0 [ 855.488563] ? ext4_file_write_iter+0xd77/0x19f0 [ 855.488590] ext4_file_write_iter+0xd77/0x19f0 [ 855.488624] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 855.488647] ? trace_kmalloc+0x1f/0xb0 [ 855.488665] ? __kmalloc_noprof+0x274/0x680 [ 855.488692] ? splice_from_pipe_next.part.0+0x165/0x510 [ 855.488729] iter_file_splice_write+0xa3a/0x11f0 [ 855.488774] ? __pfx_iter_file_splice_write+0x10/0x10 [ 855.488828] ? lock_is_held_type+0x9e/0x120 [ 855.488859] ? __pfx_iter_file_splice_write+0x10/0x10 [ 855.488892] direct_splice_actor+0x192/0x7b0 [ 855.488925] splice_direct_to_actor+0x347/0x9d0 [ 855.488957] ? __pfx_direct_splice_actor+0x10/0x10 [ 855.488992] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 855.489024] ? lock_acquire+0x15e/0x2f0 [ 855.489061] do_splice_direct+0x179/0x250 [ 855.489090] ? __pfx_do_splice_direct+0x10/0x10 [ 855.489120] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 855.489153] ? security_file_permission+0x22/0x90 [ 855.489184] do_sendfile+0xa8e/0xdc0 [ 855.489224] ? __pfx_do_sendfile+0x10/0x10 [ 855.489256] ? __fget_files+0x20d/0x3b0 [ 855.489299] __x64_sys_sendfile64+0x1d3/0x210 [ 855.489324] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 855.489350] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 855.489389] do_syscall_64+0xbf/0x430 [ 855.489412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.489434] RIP: 0033:0x7faea702db19 [ 855.489452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 855.489474] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 855.489495] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 855.489510] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 855.489523] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 855.489536] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 855.489549] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 855.489578] 12:52:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 13) 12:52:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 14) 12:52:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 13) 12:52:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 855.661976] FAULT_INJECTION: forcing a failure. [ 855.661976] name failslab, interval 1, probability 0, space 0, times 0 [ 855.663778] CPU: 0 UID: 0 PID: 7143 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 855.663807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 855.663820] Call Trace: [ 855.663828] [ 855.663836] dump_stack_lvl+0xfa/0x120 [ 855.663877] should_fail_ex+0x4d7/0x5e0 [ 855.663903] should_failslab+0xc2/0x120 [ 855.663927] __kmalloc_cache_noprof+0x81/0x6b0 [ 855.663953] ? do_splice_direct+0x179/0x250 [ 855.663982] ? do_sendfile+0xa8e/0xdc0 [ 855.664013] ? __x64_sys_sendfile64+0x1d3/0x210 [ 855.664036] ? do_syscall_64+0xbf/0x430 [ 855.664056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.664079] ? __iomap_dio_rw+0x271/0x1c90 [ 855.664105] ? __iomap_dio_rw+0x271/0x1c90 [ 855.664124] __iomap_dio_rw+0x271/0x1c90 [ 855.664148] ? __virt_addr_valid+0x1c6/0x5d0 [ 855.664171] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 855.664215] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 855.664249] ? lock_release+0xc8/0x290 [ 855.664283] ? __pfx___iomap_dio_rw+0x10/0x10 [ 855.664305] ? mark_held_locks+0x49/0x80 [ 855.664338] ? kasan_quarantine_put+0x84/0x1e0 [ 855.664378] ? trace_jbd2_handle_start+0x173/0x1e0 [ 855.664413] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 855.664433] ? __pfx_ext4_orphan_add+0x10/0x10 [ 855.664469] iomap_dio_rw+0x40/0xa0 [ 855.664491] ext4_file_write_iter+0xe0e/0x19f0 [ 855.664527] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 855.664549] ? trace_kmalloc+0x1f/0xb0 [ 855.664567] ? __kmalloc_noprof+0x274/0x680 [ 855.664594] ? splice_from_pipe_next.part.0+0x165/0x510 [ 855.664630] iter_file_splice_write+0xa3a/0x11f0 [ 855.664675] ? __pfx_iter_file_splice_write+0x10/0x10 [ 855.664728] ? lock_is_held_type+0x9e/0x120 [ 855.664760] ? __pfx_iter_file_splice_write+0x10/0x10 [ 855.664793] direct_splice_actor+0x192/0x7b0 [ 855.664826] splice_direct_to_actor+0x347/0x9d0 [ 855.664856] ? __pfx_direct_splice_actor+0x10/0x10 [ 855.664892] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 855.664924] ? lock_acquire+0x15e/0x2f0 [ 855.664959] do_splice_direct+0x179/0x250 [ 855.664988] ? __pfx_do_splice_direct+0x10/0x10 [ 855.665018] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 855.665050] ? security_file_permission+0x22/0x90 [ 855.665081] do_sendfile+0xa8e/0xdc0 [ 855.665119] ? __pfx_do_sendfile+0x10/0x10 [ 855.665151] ? __fget_files+0x20d/0x3b0 [ 855.665194] __x64_sys_sendfile64+0x1d3/0x210 [ 855.665219] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 855.665244] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 855.665282] do_syscall_64+0xbf/0x430 [ 855.665304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.665325] RIP: 0033:0x7f26afb47b19 [ 855.665342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 855.665363] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 855.665384] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 855.665399] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 855.665411] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 855.665424] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 855.665437] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 855.665466] 12:52:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 17) 12:52:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 15) 12:52:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 14) 12:52:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 14) 12:52:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 864.934065] FAULT_INJECTION: forcing a failure. [ 864.934065] name failslab, interval 1, probability 0, space 0, times 0 [ 864.934881] FAULT_INJECTION: forcing a failure. [ 864.934881] name failslab, interval 1, probability 0, space 0, times 0 [ 864.934993] CPU: 1 UID: 0 PID: 7170 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 864.935009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.935017] Call Trace: [ 864.935029] [ 864.935034] dump_stack_lvl+0xfa/0x120 [ 864.935058] should_fail_ex+0x4d7/0x5e0 [ 864.935073] ? ext4_init_io_end+0x27/0x180 [ 864.935091] should_failslab+0xc2/0x120 [ 864.935104] kmem_cache_alloc_noprof+0x80/0x690 [ 864.935125] ? ext4_init_io_end+0x27/0x180 [ 864.935141] ext4_init_io_end+0x27/0x180 [ 864.935158] ext4_do_writepages+0xb82/0x3880 [ 864.935183] ? __lock_acquire+0x5f1/0x1b70 [ 864.935204] ? __pfx_ext4_do_writepages+0x10/0x10 [ 864.935223] ? lock_is_held_type+0x9e/0x120 [ 864.935243] ext4_writepages+0x369/0x7a0 [ 864.935257] ? __pfx_ext4_writepages+0x10/0x10 [ 864.935277] ? do_writepages+0x469/0x5c0 [ 864.935292] ? lock_release+0xc8/0x290 [ 864.935310] ? __pfx_ext4_writepages+0x10/0x10 [ 864.935324] do_writepages+0x244/0x5c0 [ 864.935342] filemap_writeback+0x223/0x2d0 [ 864.935358] ? __pfx_filemap_writeback+0x10/0x10 [ 864.935392] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 864.935407] ? __create_object+0x59/0x80 [ 864.935423] ? trace_kmalloc+0x1f/0xb0 [ 864.935433] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 864.935449] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 864.935469] kiocb_invalidate_pages+0xe4/0x180 [ 864.935488] __iomap_dio_rw+0xf08/0x1c90 [ 864.935506] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 864.935529] ? __pfx___iomap_dio_rw+0x10/0x10 [ 864.935541] ? mark_held_locks+0x49/0x80 [ 864.935559] ? kasan_quarantine_put+0x84/0x1e0 [ 864.935580] ? trace_jbd2_handle_start+0x173/0x1e0 [ 864.935599] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 864.935610] ? __pfx_ext4_orphan_add+0x10/0x10 [ 864.935630] iomap_dio_rw+0x40/0xa0 [ 864.935642] ext4_file_write_iter+0xe0e/0x19f0 [ 864.935661] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 864.935673] ? trace_kmalloc+0x1f/0xb0 [ 864.935683] ? __kmalloc_noprof+0x274/0x680 [ 864.935697] ? splice_from_pipe_next.part.0+0x165/0x510 [ 864.935718] iter_file_splice_write+0xa3a/0x11f0 [ 864.935743] ? __pfx_iter_file_splice_write+0x10/0x10 [ 864.935772] ? lock_is_held_type+0x9e/0x120 [ 864.935788] ? __pfx_iter_file_splice_write+0x10/0x10 [ 864.935806] direct_splice_actor+0x192/0x7b0 [ 864.935824] splice_direct_to_actor+0x347/0x9d0 [ 864.935841] ? __pfx_direct_splice_actor+0x10/0x10 [ 864.935860] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 864.935877] ? lock_acquire+0x15e/0x2f0 [ 864.935895] do_splice_direct+0x179/0x250 [ 864.935911] ? __pfx_do_splice_direct+0x10/0x10 [ 864.935927] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 864.935944] ? security_file_permission+0x22/0x90 [ 864.935962] do_sendfile+0xa8e/0xdc0 [ 864.935983] ? __pfx_do_sendfile+0x10/0x10 [ 864.936000] ? __fget_files+0x20d/0x3b0 [ 864.936023] __x64_sys_sendfile64+0x1d3/0x210 [ 864.936037] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 864.936051] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 864.936071] do_syscall_64+0xbf/0x430 [ 864.936084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.936096] RIP: 0033:0x7faea702db19 [ 864.936106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.936118] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 864.936129] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 864.936137] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 864.936144] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.936151] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 864.936158] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 864.936174] [ 865.000784] CPU: 0 UID: 0 PID: 7167 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 865.000818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 865.000832] Call Trace: [ 865.000840] [ 865.000849] dump_stack_lvl+0xfa/0x120 [ 865.000894] should_fail_ex+0x4d7/0x5e0 [ 865.000921] should_failslab+0xc2/0x120 [ 865.000946] __kmalloc_cache_noprof+0x81/0x6b0 [ 865.000974] ? do_splice_direct+0x179/0x250 [ 865.001004] ? do_sendfile+0xa8e/0xdc0 [ 865.001036] ? __x64_sys_sendfile64+0x1d3/0x210 [ 865.001061] ? do_syscall_64+0xbf/0x430 [ 865.001081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.001105] ? __iomap_dio_rw+0x271/0x1c90 [ 865.001133] ? __iomap_dio_rw+0x271/0x1c90 [ 865.001153] __iomap_dio_rw+0x271/0x1c90 [ 865.001179] ? __virt_addr_valid+0x1c6/0x5d0 [ 865.001212] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 865.001251] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 865.001288] ? lock_release+0xc8/0x290 [ 865.001323] ? __pfx___iomap_dio_rw+0x10/0x10 [ 865.001348] ? mark_held_locks+0x49/0x80 [ 865.001383] ? kasan_quarantine_put+0x84/0x1e0 [ 865.001424] ? trace_jbd2_handle_start+0x173/0x1e0 [ 865.001462] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 865.001484] ? __pfx_ext4_orphan_add+0x10/0x10 [ 865.001522] iomap_dio_rw+0x40/0xa0 [ 865.001546] ext4_file_write_iter+0xe0e/0x19f0 [ 865.001584] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 865.001608] ? trace_kmalloc+0x1f/0xb0 [ 865.001627] ? __kmalloc_noprof+0x274/0x680 [ 865.001655] ? splice_from_pipe_next.part.0+0x165/0x510 [ 865.001694] iter_file_splice_write+0xa3a/0x11f0 [ 865.001742] ? __pfx_iter_file_splice_write+0x10/0x10 [ 865.001800] ? lock_is_held_type+0x9e/0x120 [ 865.001834] ? __pfx_iter_file_splice_write+0x10/0x10 [ 865.001868] direct_splice_actor+0x192/0x7b0 [ 865.001904] splice_direct_to_actor+0x347/0x9d0 [ 865.001937] ? __pfx_direct_splice_actor+0x10/0x10 [ 865.001974] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 865.002009] ? lock_acquire+0x15e/0x2f0 [ 865.002045] do_splice_direct+0x179/0x250 [ 865.002077] ? __pfx_do_splice_direct+0x10/0x10 [ 865.002109] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 865.002143] ? security_file_permission+0x22/0x90 [ 865.002177] do_sendfile+0xa8e/0xdc0 [ 865.002217] ? __pfx_do_sendfile+0x10/0x10 [ 865.002252] ? __fget_files+0x20d/0x3b0 [ 865.002296] __x64_sys_sendfile64+0x1d3/0x210 [ 865.002323] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 865.002351] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 865.002392] do_syscall_64+0xbf/0x430 [ 865.002415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.002438] RIP: 0033:0x7fc11b623b19 [ 865.002457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 865.002479] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 865.002502] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 865.002517] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 865.002531] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 865.002545] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 865.002558] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 865.002590] 12:52:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 18) 12:52:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:52:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 865.181444] FAULT_INJECTION: forcing a failure. [ 865.181444] name failslab, interval 1, probability 0, space 0, times 0 [ 865.182861] CPU: 1 UID: 0 PID: 7180 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 865.182882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 865.182891] Call Trace: [ 865.182897] [ 865.182903] dump_stack_lvl+0xfa/0x120 [ 865.182933] should_fail_ex+0x4d7/0x5e0 [ 865.182951] ? ext4_init_io_end+0x27/0x180 [ 865.182975] should_failslab+0xc2/0x120 [ 865.182992] kmem_cache_alloc_noprof+0x80/0x690 [ 865.183018] ? ext4_init_io_end+0x27/0x180 [ 865.183048] ext4_init_io_end+0x27/0x180 [ 865.183070] ext4_do_writepages+0xc87/0x3880 [ 865.183098] ? __lock_acquire+0x5f1/0x1b70 [ 865.183125] ? __pfx_ext4_do_writepages+0x10/0x10 [ 865.183150] ? lock_is_held_type+0x9e/0x120 [ 865.183176] ext4_writepages+0x369/0x7a0 [ 865.183200] ? __pfx_ext4_writepages+0x10/0x10 [ 865.183230] ? lock_release+0xc8/0x290 [ 865.183252] ? do_raw_spin_unlock+0x53/0x220 [ 865.183267] ? __pfx_ext4_writepages+0x10/0x10 [ 865.183285] do_writepages+0x244/0x5c0 [ 865.183309] filemap_writeback+0x223/0x2d0 [ 865.183331] ? __pfx_filemap_writeback+0x10/0x10 [ 865.183374] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 865.183394] ? __create_object+0x59/0x80 [ 865.183415] ? trace_kmalloc+0x1f/0xb0 [ 865.183427] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 865.183448] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 865.183475] kiocb_invalidate_pages+0xe4/0x180 [ 865.183500] __iomap_dio_rw+0xf08/0x1c90 [ 865.183522] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 865.183550] ? __pfx___iomap_dio_rw+0x10/0x10 [ 865.183566] ? mark_held_locks+0x49/0x80 [ 865.183590] ? kasan_quarantine_put+0x84/0x1e0 [ 865.183617] ? trace_jbd2_handle_start+0x173/0x1e0 [ 865.183642] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 865.183656] ? __pfx_ext4_orphan_add+0x10/0x10 [ 865.183682] iomap_dio_rw+0x40/0xa0 [ 865.183698] ext4_file_write_iter+0xe0e/0x19f0 [ 865.183722] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 865.183738] ? trace_kmalloc+0x1f/0xb0 [ 865.183750] ? __kmalloc_noprof+0x274/0x680 [ 865.183769] ? splice_from_pipe_next.part.0+0x165/0x510 [ 865.183796] iter_file_splice_write+0xa3a/0x11f0 [ 865.183827] ? __pfx_iter_file_splice_write+0x10/0x10 [ 865.183865] ? lock_is_held_type+0x9e/0x120 [ 865.183886] ? __pfx_iter_file_splice_write+0x10/0x10 [ 865.183909] direct_splice_actor+0x192/0x7b0 [ 865.183932] splice_direct_to_actor+0x347/0x9d0 [ 865.183954] ? __pfx_direct_splice_actor+0x10/0x10 [ 865.183979] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 865.184001] ? lock_acquire+0x15e/0x2f0 [ 865.184025] do_splice_direct+0x179/0x250 [ 865.184046] ? __pfx_do_splice_direct+0x10/0x10 [ 865.184067] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 865.184089] ? security_file_permission+0x22/0x90 [ 865.184111] do_sendfile+0xa8e/0xdc0 [ 865.184139] ? __pfx_do_sendfile+0x10/0x10 [ 865.184161] ? __fget_files+0x20d/0x3b0 [ 865.184191] __x64_sys_sendfile64+0x1d3/0x210 [ 865.184209] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 865.184227] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 865.184254] do_syscall_64+0xbf/0x430 [ 865.184270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.184286] RIP: 0033:0x7fb3e5a3eb19 [ 865.184298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 865.184313] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 865.184328] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 865.184338] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 865.184347] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 865.184356] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 865.184365] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 865.184386] 12:52:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 16) 12:53:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 19) 12:53:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 17) 12:53:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 15) 12:53:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 15) 12:53:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:53:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 16) 12:53:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 874.869447] FAULT_INJECTION: forcing a failure. [ 874.869447] name failslab, interval 1, probability 0, space 0, times 0 [ 874.870496] CPU: 0 UID: 0 PID: 7209 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 874.870513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 874.870521] Call Trace: [ 874.870525] [ 874.870529] dump_stack_lvl+0xfa/0x120 [ 874.870554] should_fail_ex+0x4d7/0x5e0 [ 874.870569] ? ext4_init_io_end+0x27/0x180 [ 874.870587] should_failslab+0xc2/0x120 [ 874.870601] kmem_cache_alloc_noprof+0x80/0x690 [ 874.870621] ? ext4_init_io_end+0x27/0x180 [ 874.870637] ext4_init_io_end+0x27/0x180 [ 874.870655] ext4_do_writepages+0xb82/0x3880 [ 874.870677] ? __lock_acquire+0x5f1/0x1b70 [ 874.870697] ? __pfx_ext4_do_writepages+0x10/0x10 [ 874.870716] ? lock_is_held_type+0x9e/0x120 [ 874.870736] ext4_writepages+0x369/0x7a0 [ 874.870751] ? __pfx_ext4_writepages+0x10/0x10 [ 874.870771] ? lock_release+0xc8/0x290 [ 874.870788] ? do_raw_spin_unlock+0x53/0x220 [ 874.870799] ? __pfx_ext4_writepages+0x10/0x10 [ 874.870814] do_writepages+0x244/0x5c0 [ 874.870832] filemap_writeback+0x223/0x2d0 [ 874.870849] ? __pfx_filemap_writeback+0x10/0x10 [ 874.870882] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 874.870898] ? __create_object+0x59/0x80 [ 874.870913] ? trace_kmalloc+0x1f/0xb0 [ 874.870923] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 874.870939] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 874.870959] kiocb_invalidate_pages+0xe4/0x180 [ 874.870978] __iomap_dio_rw+0xf08/0x1c90 [ 874.870996] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 874.871018] ? __pfx___iomap_dio_rw+0x10/0x10 [ 874.871031] ? mark_held_locks+0x49/0x80 [ 874.871048] ? kasan_quarantine_put+0x84/0x1e0 [ 874.871070] ? trace_jbd2_handle_start+0x173/0x1e0 [ 874.871089] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 874.871100] ? __pfx_ext4_orphan_add+0x10/0x10 [ 874.871120] iomap_dio_rw+0x40/0xa0 [ 874.871132] ext4_file_write_iter+0xe0e/0x19f0 [ 874.871163] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 874.871175] ? trace_kmalloc+0x1f/0xb0 [ 874.871188] ? __kmalloc_noprof+0x274/0x680 [ 874.871202] ? splice_from_pipe_next.part.0+0x165/0x510 [ 874.871224] iter_file_splice_write+0xa3a/0x11f0 [ 874.871248] ? __pfx_iter_file_splice_write+0x10/0x10 [ 874.871277] ? lock_is_held_type+0x9e/0x120 [ 874.871294] ? __pfx_iter_file_splice_write+0x10/0x10 [ 874.871311] direct_splice_actor+0x192/0x7b0 [ 874.871329] splice_direct_to_actor+0x347/0x9d0 [ 874.871346] ? __pfx_direct_splice_actor+0x10/0x10 [ 874.871365] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 874.871382] ? lock_acquire+0x15e/0x2f0 [ 874.871400] do_splice_direct+0x179/0x250 [ 874.871416] ? __pfx_do_splice_direct+0x10/0x10 [ 874.871432] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 874.871450] ? security_file_permission+0x22/0x90 [ 874.871467] do_sendfile+0xa8e/0xdc0 [ 874.871488] ? __pfx_do_sendfile+0x10/0x10 [ 874.871506] ? __fget_files+0x20d/0x3b0 [ 874.871529] __x64_sys_sendfile64+0x1d3/0x210 [ 874.871542] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 874.871556] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 874.871577] do_syscall_64+0xbf/0x430 [ 874.871589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.871602] RIP: 0033:0x7faea702db19 [ 874.871612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 874.871623] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 874.871635] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 874.871643] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 874.871649] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 874.871656] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 874.871663] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 874.871679] 12:53:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) 12:53:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 16) 12:53:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 18) [ 875.029527] FAULT_INJECTION: forcing a failure. [ 875.029527] name failslab, interval 1, probability 0, space 0, times 0 [ 875.030585] CPU: 0 UID: 0 PID: 7216 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 875.030601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 875.030608] Call Trace: [ 875.030613] [ 875.030617] dump_stack_lvl+0xfa/0x120 [ 875.030641] should_fail_ex+0x4d7/0x5e0 [ 875.030656] ? ext4_init_io_end+0x27/0x180 [ 875.030677] should_failslab+0xc2/0x120 [ 875.030693] kmem_cache_alloc_noprof+0x80/0x690 [ 875.030713] ? ext4_init_io_end+0x27/0x180 [ 875.030730] ext4_init_io_end+0x27/0x180 [ 875.030747] ext4_do_writepages+0xb82/0x3880 [ 875.030769] ? __lock_acquire+0x5f1/0x1b70 [ 875.030790] ? __pfx_ext4_do_writepages+0x10/0x10 [ 875.030809] ? lock_is_held_type+0x9e/0x120 [ 875.030830] ext4_writepages+0x369/0x7a0 [ 875.030844] ? __pfx_ext4_writepages+0x10/0x10 [ 875.030865] ? lock_release+0xc8/0x290 [ 875.030882] ? do_raw_spin_unlock+0x53/0x220 [ 875.030894] ? __pfx_ext4_writepages+0x10/0x10 [ 875.030908] do_writepages+0x244/0x5c0 [ 875.030926] filemap_writeback+0x223/0x2d0 [ 875.030943] ? __pfx_filemap_writeback+0x10/0x10 [ 875.030976] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 875.030993] ? __create_object+0x59/0x80 [ 875.031008] ? trace_kmalloc+0x1f/0xb0 [ 875.031018] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 875.031034] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 875.031055] kiocb_invalidate_pages+0xe4/0x180 [ 875.031074] __iomap_dio_rw+0xf08/0x1c90 [ 875.031091] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 875.031114] ? __pfx___iomap_dio_rw+0x10/0x10 [ 875.031126] ? mark_held_locks+0x49/0x80 [ 875.031143] ? kasan_quarantine_put+0x84/0x1e0 [ 875.031184] ? trace_jbd2_handle_start+0x173/0x1e0 [ 875.031203] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 875.031214] ? __pfx_ext4_orphan_add+0x10/0x10 [ 875.031234] iomap_dio_rw+0x40/0xa0 [ 875.031249] ext4_file_write_iter+0xe0e/0x19f0 [ 875.031268] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 875.031280] ? trace_kmalloc+0x1f/0xb0 [ 875.031290] ? __kmalloc_noprof+0x274/0x680 [ 875.031304] ? splice_from_pipe_next.part.0+0x165/0x510 [ 875.031325] iter_file_splice_write+0xa3a/0x11f0 [ 875.031349] ? __pfx_iter_file_splice_write+0x10/0x10 [ 875.031378] ? lock_is_held_type+0x9e/0x120 [ 875.031395] ? __pfx_iter_file_splice_write+0x10/0x10 [ 875.031412] direct_splice_actor+0x192/0x7b0 [ 875.031430] splice_direct_to_actor+0x347/0x9d0 [ 875.031447] ? __pfx_direct_splice_actor+0x10/0x10 [ 875.031466] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 875.031483] ? lock_acquire+0x15e/0x2f0 [ 875.031501] do_splice_direct+0x179/0x250 [ 875.031517] ? __pfx_do_splice_direct+0x10/0x10 [ 875.031533] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 875.031550] ? security_file_permission+0x22/0x90 [ 875.031568] do_sendfile+0xa8e/0xdc0 [ 875.031589] ? __pfx_do_sendfile+0x10/0x10 [ 875.031607] ? __fget_files+0x20d/0x3b0 [ 875.031630] __x64_sys_sendfile64+0x1d3/0x210 [ 875.031644] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 875.031658] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 875.031678] do_syscall_64+0xbf/0x430 [ 875.031691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.031703] RIP: 0033:0x7fc11b623b19 [ 875.031712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 875.031724] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 875.031735] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 875.031743] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 875.031750] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 875.031757] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 875.031764] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 875.031780] 12:53:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 875.089630] FAULT_INJECTION: forcing a failure. [ 875.089630] name failslab, interval 1, probability 0, space 0, times 0 [ 875.091646] CPU: 1 UID: 0 PID: 7220 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 875.091680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 875.091695] Call Trace: [ 875.091703] [ 875.091712] dump_stack_lvl+0xfa/0x120 [ 875.091761] should_fail_ex+0x4d7/0x5e0 [ 875.091790] ? ext4_init_io_end+0x27/0x180 [ 875.091829] should_failslab+0xc2/0x120 [ 875.091856] kmem_cache_alloc_noprof+0x80/0x690 [ 875.091899] ? ext4_init_io_end+0x27/0x180 [ 875.091933] ext4_init_io_end+0x27/0x180 [ 875.091969] ext4_do_writepages+0xc87/0x3880 [ 875.092016] ? __lock_acquire+0x5f1/0x1b70 [ 875.092059] ? __pfx_ext4_do_writepages+0x10/0x10 [ 875.092099] ? lock_is_held_type+0x9e/0x120 [ 875.092142] ext4_writepages+0x369/0x7a0 [ 875.092172] ? __pfx_ext4_writepages+0x10/0x10 [ 875.092223] ? lock_release+0xc8/0x290 [ 875.092258] ? do_raw_spin_unlock+0x53/0x220 [ 875.092283] ? __pfx_ext4_writepages+0x10/0x10 [ 875.092313] do_writepages+0x244/0x5c0 [ 875.092352] filemap_writeback+0x223/0x2d0 [ 875.092386] ? __pfx_filemap_writeback+0x10/0x10 [ 875.092455] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 875.092489] ? __create_object+0x59/0x80 [ 875.092522] ? trace_kmalloc+0x1f/0xb0 [ 875.092542] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 875.092576] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 875.092619] kiocb_invalidate_pages+0xe4/0x180 [ 875.092659] __iomap_dio_rw+0xf08/0x1c90 [ 875.092694] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 875.092741] ? __pfx___iomap_dio_rw+0x10/0x10 [ 875.092767] ? mark_held_locks+0x49/0x80 [ 875.092804] ? kasan_quarantine_put+0x84/0x1e0 [ 875.092848] ? trace_jbd2_handle_start+0x173/0x1e0 [ 875.092887] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 875.092910] ? __pfx_ext4_orphan_add+0x10/0x10 [ 875.092951] iomap_dio_rw+0x40/0xa0 [ 875.092977] ext4_file_write_iter+0xe0e/0x19f0 [ 875.093016] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 875.093042] ? trace_kmalloc+0x1f/0xb0 [ 875.093062] ? __kmalloc_noprof+0x274/0x680 [ 875.093092] ? splice_from_pipe_next.part.0+0x165/0x510 [ 875.093135] iter_file_splice_write+0xa3a/0x11f0 [ 875.093186] ? __pfx_iter_file_splice_write+0x10/0x10 [ 875.093247] ? lock_is_held_type+0x9e/0x120 [ 875.093282] ? __pfx_iter_file_splice_write+0x10/0x10 [ 875.093319] direct_splice_actor+0x192/0x7b0 [ 875.093356] splice_direct_to_actor+0x347/0x9d0 [ 875.093391] ? __pfx_direct_splice_actor+0x10/0x10 [ 875.093431] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 875.093467] ? lock_acquire+0x15e/0x2f0 [ 875.093505] do_splice_direct+0x179/0x250 [ 875.093538] ? __pfx_do_splice_direct+0x10/0x10 [ 875.093572] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 875.093608] ? security_file_permission+0x22/0x90 [ 875.093643] do_sendfile+0xa8e/0xdc0 [ 875.093688] ? __pfx_do_sendfile+0x10/0x10 [ 875.093725] ? __fget_files+0x20d/0x3b0 [ 875.093773] __x64_sys_sendfile64+0x1d3/0x210 [ 875.093802] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 875.093831] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 875.093874] do_syscall_64+0xbf/0x430 [ 875.093900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.093924] RIP: 0033:0x7f26afb47b19 [ 875.093943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 875.093967] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 875.093991] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 875.094007] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 875.094021] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 875.094036] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 875.094050] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 875.094083] 12:53:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 19) 12:53:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 17) 12:53:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 20) 12:53:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 17) 12:53:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:53:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 883.450055] FAULT_INJECTION: forcing a failure. [ 883.450055] name failslab, interval 1, probability 0, space 0, times 0 [ 883.451980] CPU: 1 UID: 0 PID: 7230 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 883.452010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 883.452023] Call Trace: [ 883.452030] [ 883.452038] dump_stack_lvl+0xfa/0x120 [ 883.452079] should_fail_ex+0x4d7/0x5e0 [ 883.452105] ? jbd2__journal_start+0x193/0x6b0 [ 883.452138] should_failslab+0xc2/0x120 [ 883.452163] kmem_cache_alloc_noprof+0x80/0x690 [ 883.452201] ? lock_is_held_type+0x9e/0x120 [ 883.452237] ? jbd2__journal_start+0x193/0x6b0 [ 883.452269] jbd2__journal_start+0x193/0x6b0 [ 883.452307] __ext4_journal_start_sb+0x325/0x5d0 [ 883.452333] ? ext4_do_writepages+0xd95/0x3880 [ 883.452358] ? ext4_meta_trans_blocks+0x256/0x310 [ 883.452386] ext4_do_writepages+0xd95/0x3880 [ 883.452426] ? __lock_acquire+0x5f1/0x1b70 [ 883.452463] ? __pfx_ext4_do_writepages+0x10/0x10 [ 883.452498] ? lock_is_held_type+0x9e/0x120 [ 883.452533] ext4_writepages+0x369/0x7a0 [ 883.452560] ? __pfx_ext4_writepages+0x10/0x10 [ 883.452597] ? do_writepages+0x469/0x5c0 [ 883.452624] ? lock_release+0xc8/0x290 [ 883.452657] ? __pfx_ext4_writepages+0x10/0x10 [ 883.452683] do_writepages+0x244/0x5c0 [ 883.452716] filemap_writeback+0x223/0x2d0 [ 883.452746] ? __pfx_filemap_writeback+0x10/0x10 [ 883.452808] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 883.452837] ? __create_object+0x59/0x80 [ 883.452866] ? trace_kmalloc+0x1f/0xb0 [ 883.452884] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 883.452913] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 883.452951] kiocb_invalidate_pages+0xe4/0x180 [ 883.452987] __iomap_dio_rw+0xf08/0x1c90 [ 883.453018] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 883.453059] ? __pfx___iomap_dio_rw+0x10/0x10 [ 883.453082] ? mark_held_locks+0x49/0x80 [ 883.453115] ? kasan_quarantine_put+0x84/0x1e0 [ 883.453154] ? trace_jbd2_handle_start+0x173/0x1e0 [ 883.453187] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 883.453208] ? __pfx_ext4_orphan_add+0x10/0x10 [ 883.453244] iomap_dio_rw+0x40/0xa0 [ 883.453266] ext4_file_write_iter+0xe0e/0x19f0 [ 883.453301] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 883.453324] ? trace_kmalloc+0x1f/0xb0 [ 883.453341] ? __kmalloc_noprof+0x274/0x680 [ 883.453368] ? splice_from_pipe_next.part.0+0x165/0x510 [ 883.453406] iter_file_splice_write+0xa3a/0x11f0 [ 883.453451] ? __pfx_iter_file_splice_write+0x10/0x10 [ 883.453505] ? lock_is_held_type+0x9e/0x120 [ 883.453536] ? __pfx_iter_file_splice_write+0x10/0x10 [ 883.453568] direct_splice_actor+0x192/0x7b0 [ 883.453601] splice_direct_to_actor+0x347/0x9d0 [ 883.453632] ? __pfx_direct_splice_actor+0x10/0x10 [ 883.453668] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 883.453700] ? lock_acquire+0x15e/0x2f0 [ 883.453734] do_splice_direct+0x179/0x250 [ 883.453763] ? __pfx_do_splice_direct+0x10/0x10 [ 883.453793] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 883.453825] ? security_file_permission+0x22/0x90 [ 883.453857] do_sendfile+0xa8e/0xdc0 [ 883.453895] ? __pfx_do_sendfile+0x10/0x10 [ 883.453928] ? __fget_files+0x20d/0x3b0 [ 883.453970] __x64_sys_sendfile64+0x1d3/0x210 [ 883.453995] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 883.454021] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 883.454059] do_syscall_64+0xbf/0x430 [ 883.454082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.454104] RIP: 0033:0x7fb3e5a3eb19 [ 883.454121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 883.454142] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 883.454163] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 883.454177] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 883.454190] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 883.454203] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 883.454215] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 883.454245] [ 883.509792] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16010; err -12 12:53:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:53:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 18) 12:53:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:53:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 20) 12:53:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 18) 12:53:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:53:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:53:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 883.881651] FAULT_INJECTION: forcing a failure. [ 883.881651] name failslab, interval 1, probability 0, space 0, times 0 [ 883.883233] CPU: 1 UID: 0 PID: 7253 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 883.883260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 883.883284] Call Trace: [ 883.883291] [ 883.883299] dump_stack_lvl+0xfa/0x120 [ 883.883338] should_fail_ex+0x4d7/0x5e0 [ 883.883362] ? ext4_init_io_end+0x27/0x180 [ 883.883392] should_failslab+0xc2/0x120 [ 883.883415] kmem_cache_alloc_noprof+0x80/0x690 [ 883.883449] ? ext4_init_io_end+0x27/0x180 [ 883.883477] ext4_init_io_end+0x27/0x180 [ 883.883507] ext4_do_writepages+0xc87/0x3880 [ 883.883544] ? __lock_acquire+0x5f1/0x1b70 [ 883.883579] ? __pfx_ext4_do_writepages+0x10/0x10 [ 883.883612] ? lock_is_held_type+0x9e/0x120 [ 883.883646] ext4_writepages+0x369/0x7a0 [ 883.883671] ? __pfx_ext4_writepages+0x10/0x10 [ 883.883706] ? lock_release+0xc8/0x290 [ 883.883735] ? do_raw_spin_unlock+0x53/0x220 [ 883.883755] ? __pfx_ext4_writepages+0x10/0x10 [ 883.883780] do_writepages+0x244/0x5c0 [ 883.883812] filemap_writeback+0x223/0x2d0 [ 883.883841] ? __pfx_filemap_writeback+0x10/0x10 [ 883.883898] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 883.883926] ? __create_object+0x59/0x80 [ 883.883953] ? trace_kmalloc+0x1f/0xb0 [ 883.883970] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 883.883998] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 883.884034] kiocb_invalidate_pages+0xe4/0x180 [ 883.884067] __iomap_dio_rw+0xf08/0x1c90 [ 883.884096] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 883.884134] ? __pfx___iomap_dio_rw+0x10/0x10 [ 883.884155] ? mark_held_locks+0x49/0x80 [ 883.884193] ? kasan_quarantine_put+0x84/0x1e0 [ 883.884230] ? trace_jbd2_handle_start+0x173/0x1e0 [ 883.884262] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 883.884282] ? __pfx_ext4_orphan_add+0x10/0x10 [ 883.884316] iomap_dio_rw+0x40/0xa0 [ 883.884337] ext4_file_write_iter+0xe0e/0x19f0 [ 883.884371] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 883.884393] ? trace_kmalloc+0x1f/0xb0 [ 883.884409] ? __kmalloc_noprof+0x274/0x680 [ 883.884433] ? splice_from_pipe_next.part.0+0x165/0x510 [ 883.884469] iter_file_splice_write+0xa3a/0x11f0 [ 883.884511] ? __pfx_iter_file_splice_write+0x10/0x10 [ 883.884561] ? lock_is_held_type+0x9e/0x120 [ 883.884589] ? __pfx_iter_file_splice_write+0x10/0x10 [ 883.884620] direct_splice_actor+0x192/0x7b0 [ 883.884650] splice_direct_to_actor+0x347/0x9d0 [ 883.884679] ? __pfx_direct_splice_actor+0x10/0x10 [ 883.884712] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 883.884742] ? lock_acquire+0x15e/0x2f0 [ 883.884773] do_splice_direct+0x179/0x250 [ 883.884800] ? __pfx_do_splice_direct+0x10/0x10 [ 883.884828] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 883.884858] ? security_file_permission+0x22/0x90 [ 883.884887] do_sendfile+0xa8e/0xdc0 [ 883.884923] ? __pfx_do_sendfile+0x10/0x10 [ 883.884953] ? __fget_files+0x20d/0x3b0 [ 883.884993] __x64_sys_sendfile64+0x1d3/0x210 [ 883.885016] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 883.885040] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 883.885075] do_syscall_64+0xbf/0x430 [ 883.885096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.885117] RIP: 0033:0x7faea702db19 [ 883.885133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 883.885152] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 883.885172] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 883.885186] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 883.885197] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 883.885209] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 883.885221] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 883.885249] [ 883.932607] FAULT_INJECTION: forcing a failure. [ 883.932607] name failslab, interval 1, probability 0, space 0, times 0 [ 883.934284] CPU: 0 UID: 0 PID: 7254 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 883.934314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 883.934327] Call Trace: [ 883.934335] [ 883.934344] dump_stack_lvl+0xfa/0x120 [ 883.934386] should_fail_ex+0x4d7/0x5e0 [ 883.934411] ? jbd2__journal_start+0x193/0x6b0 [ 883.934446] should_failslab+0xc2/0x120 [ 883.934470] kmem_cache_alloc_noprof+0x80/0x690 [ 883.934501] ? lock_is_held_type+0x9e/0x120 [ 883.934538] ? jbd2__journal_start+0x193/0x6b0 [ 883.934571] jbd2__journal_start+0x193/0x6b0 [ 883.934608] __ext4_journal_start_sb+0x325/0x5d0 [ 883.934635] ? ext4_do_writepages+0xd95/0x3880 [ 883.934661] ? ext4_meta_trans_blocks+0x256/0x310 [ 883.934689] ext4_do_writepages+0xd95/0x3880 [ 883.934729] ? __lock_acquire+0x5f1/0x1b70 [ 883.934766] ? __pfx_ext4_do_writepages+0x10/0x10 [ 883.934802] ? lock_is_held_type+0x9e/0x120 [ 883.934837] ext4_writepages+0x369/0x7a0 [ 883.934863] ? __pfx_ext4_writepages+0x10/0x10 [ 883.934901] ? lock_release+0xc8/0x290 [ 883.934932] ? do_raw_spin_unlock+0x53/0x220 [ 883.934954] ? __pfx_ext4_writepages+0x10/0x10 [ 883.934980] do_writepages+0x244/0x5c0 [ 883.935014] filemap_writeback+0x223/0x2d0 [ 883.935045] ? __pfx_filemap_writeback+0x10/0x10 [ 883.935106] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 883.935136] ? __create_object+0x59/0x80 [ 883.935165] ? trace_kmalloc+0x1f/0xb0 [ 883.935190] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 883.935221] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 883.935258] kiocb_invalidate_pages+0xe4/0x180 [ 883.935305] __iomap_dio_rw+0xf08/0x1c90 [ 883.935336] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 883.935377] ? __pfx___iomap_dio_rw+0x10/0x10 [ 883.935399] ? mark_held_locks+0x49/0x80 [ 883.935432] ? kasan_quarantine_put+0x84/0x1e0 [ 883.935471] ? trace_jbd2_handle_start+0x173/0x1e0 [ 883.935505] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 883.935525] ? __pfx_ext4_orphan_add+0x10/0x10 [ 883.935562] iomap_dio_rw+0x40/0xa0 [ 883.935584] ext4_file_write_iter+0xe0e/0x19f0 [ 883.935620] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 883.935642] ? trace_kmalloc+0x1f/0xb0 [ 883.935660] ? __kmalloc_noprof+0x274/0x680 [ 883.935686] ? splice_from_pipe_next.part.0+0x165/0x510 [ 883.935724] iter_file_splice_write+0xa3a/0x11f0 [ 883.935769] ? __pfx_iter_file_splice_write+0x10/0x10 [ 883.935824] ? lock_is_held_type+0x9e/0x120 [ 883.935854] ? __pfx_iter_file_splice_write+0x10/0x10 [ 883.935887] direct_splice_actor+0x192/0x7b0 [ 883.935920] splice_direct_to_actor+0x347/0x9d0 [ 883.935951] ? __pfx_direct_splice_actor+0x10/0x10 [ 883.935986] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 883.936018] ? lock_acquire+0x15e/0x2f0 [ 883.936053] do_splice_direct+0x179/0x250 [ 883.936082] ? __pfx_do_splice_direct+0x10/0x10 [ 883.936111] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 883.936144] ? security_file_permission+0x22/0x90 [ 883.936175] do_sendfile+0xa8e/0xdc0 [ 883.936215] ? __pfx_do_sendfile+0x10/0x10 [ 883.936247] ? __fget_files+0x20d/0x3b0 [ 883.936289] __x64_sys_sendfile64+0x1d3/0x210 [ 883.936314] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 883.936340] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 883.936378] do_syscall_64+0xbf/0x430 [ 883.936401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.936423] RIP: 0033:0x7f26afb47b19 [ 883.936440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 883.936460] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 883.936481] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 883.936496] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 883.936509] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 883.936521] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 883.936534] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 883.936563] [ 883.991431] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16003; err -12 [ 884.042381] FAULT_INJECTION: forcing a failure. [ 884.042381] name failslab, interval 1, probability 0, space 0, times 0 [ 884.044674] CPU: 0 UID: 0 PID: 7261 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 884.044706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 884.044719] Call Trace: [ 884.044727] [ 884.044736] dump_stack_lvl+0xfa/0x120 [ 884.044777] should_fail_ex+0x4d7/0x5e0 [ 884.044802] ? ext4_init_io_end+0x27/0x180 [ 884.044835] should_failslab+0xc2/0x120 [ 884.044859] kmem_cache_alloc_noprof+0x80/0x690 [ 884.044896] ? ext4_init_io_end+0x27/0x180 12:53:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 21) 12:53:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) [ 884.044926] ext4_init_io_end+0x27/0x180 [ 884.044958] ext4_do_writepages+0xc87/0x3880 [ 884.044998] ? __lock_acquire+0x5f1/0x1b70 [ 884.045035] ? __pfx_ext4_do_writepages+0x10/0x10 [ 884.045071] ? lock_is_held_type+0x9e/0x120 [ 884.045107] ext4_writepages+0x369/0x7a0 [ 884.045133] ? __pfx_ext4_writepages+0x10/0x10 [ 884.045171] ? lock_release+0xc8/0x290 [ 884.045210] ? do_raw_spin_unlock+0x53/0x220 [ 884.045231] ? __pfx_ext4_writepages+0x10/0x10 [ 884.045257] do_writepages+0x244/0x5c0 [ 884.045291] filemap_writeback+0x223/0x2d0 [ 884.045321] ? __pfx_filemap_writeback+0x10/0x10 [ 884.045383] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 884.045412] ? __create_object+0x59/0x80 [ 884.045441] ? trace_kmalloc+0x1f/0xb0 [ 884.045459] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 884.045489] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 884.045527] kiocb_invalidate_pages+0xe4/0x180 [ 884.045562] __iomap_dio_rw+0xf08/0x1c90 [ 884.045593] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 884.045634] ? __pfx___iomap_dio_rw+0x10/0x10 [ 884.045657] ? mark_held_locks+0x49/0x80 [ 884.045694] ? kasan_quarantine_put+0x84/0x1e0 [ 884.045733] ? trace_jbd2_handle_start+0x173/0x1e0 [ 884.045768] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 884.045789] ? __pfx_ext4_orphan_add+0x10/0x10 [ 884.045825] iomap_dio_rw+0x40/0xa0 [ 884.045848] ext4_file_write_iter+0xe0e/0x19f0 [ 884.045883] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 884.045905] ? trace_kmalloc+0x1f/0xb0 [ 884.045923] ? __kmalloc_noprof+0x274/0x680 [ 884.045949] ? splice_from_pipe_next.part.0+0x165/0x510 [ 884.045987] iter_file_splice_write+0xa3a/0x11f0 [ 884.046032] ? __pfx_iter_file_splice_write+0x10/0x10 [ 884.046086] ? lock_is_held_type+0x9e/0x120 [ 884.046117] ? __pfx_iter_file_splice_write+0x10/0x10 [ 884.046149] direct_splice_actor+0x192/0x7b0 [ 884.046182] splice_direct_to_actor+0x347/0x9d0 [ 884.046213] ? __pfx_direct_splice_actor+0x10/0x10 [ 884.046249] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 884.046281] ? lock_acquire+0x15e/0x2f0 [ 884.046315] do_splice_direct+0x179/0x250 [ 884.046344] ? __pfx_do_splice_direct+0x10/0x10 [ 884.046374] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 884.046406] ? security_file_permission+0x22/0x90 [ 884.046438] do_sendfile+0xa8e/0xdc0 [ 884.046476] ? __pfx_do_sendfile+0x10/0x10 [ 884.046509] ? __fget_files+0x20d/0x3b0 [ 884.046551] __x64_sys_sendfile64+0x1d3/0x210 [ 884.046582] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 884.046612] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 884.046650] do_syscall_64+0xbf/0x430 [ 884.046673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.046695] RIP: 0033:0x7fc11b623b19 [ 884.046712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 884.046732] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 884.046753] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 884.046767] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 884.046780] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 884.046793] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 884.046805] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 884.046835] 12:53:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:53:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:53:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 19) 12:53:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 22) 12:53:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:53:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 21) 12:53:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 19) [ 893.464435] FAULT_INJECTION: forcing a failure. [ 893.464435] name failslab, interval 1, probability 0, space 0, times 0 [ 893.465939] CPU: 1 UID: 0 PID: 7289 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 893.465961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.465972] Call Trace: [ 893.465977] [ 893.465984] dump_stack_lvl+0xfa/0x120 [ 893.466016] should_fail_ex+0x4d7/0x5e0 [ 893.466036] ? jbd2__journal_start+0x249/0x6b0 [ 893.466062] should_failslab+0xc2/0x120 [ 893.466081] kmem_cache_alloc_noprof+0x80/0x690 [ 893.466110] ? jbd2__journal_start+0x249/0x6b0 [ 893.466134] jbd2__journal_start+0x249/0x6b0 [ 893.466163] __ext4_journal_start_sb+0x325/0x5d0 [ 893.466189] ? ext4_do_writepages+0xd95/0x3880 [ 893.466209] ? ext4_meta_trans_blocks+0x256/0x310 [ 893.466235] ext4_do_writepages+0xd95/0x3880 [ 893.466265] ? __lock_acquire+0x5f1/0x1b70 [ 893.466295] ? __pfx_ext4_do_writepages+0x10/0x10 [ 893.466322] ? lock_is_held_type+0x9e/0x120 [ 893.466350] ext4_writepages+0x369/0x7a0 [ 893.466370] ? __pfx_ext4_writepages+0x10/0x10 [ 893.466398] ? do_writepages+0x469/0x5c0 [ 893.466420] ? lock_release+0xc8/0x290 [ 893.466445] ? __pfx_ext4_writepages+0x10/0x10 [ 893.466465] do_writepages+0x244/0x5c0 [ 893.466490] filemap_writeback+0x223/0x2d0 [ 893.466513] ? __pfx_filemap_writeback+0x10/0x10 [ 893.466561] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 893.466583] ? __create_object+0x59/0x80 [ 893.466606] ? trace_kmalloc+0x1f/0xb0 [ 893.466620] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 893.466643] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 893.466671] kiocb_invalidate_pages+0xe4/0x180 [ 893.466699] __iomap_dio_rw+0xf08/0x1c90 [ 893.466723] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 893.466754] ? __pfx___iomap_dio_rw+0x10/0x10 [ 893.466772] ? mark_held_locks+0x49/0x80 [ 893.466797] ? kasan_quarantine_put+0x84/0x1e0 [ 893.466827] ? trace_jbd2_handle_start+0x173/0x1e0 [ 893.466853] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 893.466869] ? __pfx_ext4_orphan_add+0x10/0x10 [ 893.466897] iomap_dio_rw+0x40/0xa0 [ 893.466914] ext4_file_write_iter+0xe0e/0x19f0 [ 893.466941] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 893.466958] ? trace_kmalloc+0x1f/0xb0 [ 893.466972] ? __kmalloc_noprof+0x274/0x680 [ 893.466992] ? splice_from_pipe_next.part.0+0x165/0x510 [ 893.467022] iter_file_splice_write+0xa3a/0x11f0 [ 893.467056] ? __pfx_iter_file_splice_write+0x10/0x10 [ 893.467098] ? lock_is_held_type+0x9e/0x120 [ 893.467121] ? __pfx_iter_file_splice_write+0x10/0x10 [ 893.467146] direct_splice_actor+0x192/0x7b0 [ 893.467172] splice_direct_to_actor+0x347/0x9d0 [ 893.467195] ? __pfx_direct_splice_actor+0x10/0x10 [ 893.467223] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 893.467247] ? lock_acquire+0x15e/0x2f0 [ 893.467274] do_splice_direct+0x179/0x250 [ 893.467296] ? __pfx_do_splice_direct+0x10/0x10 [ 893.467319] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 893.467344] ? security_file_permission+0x22/0x90 [ 893.467368] do_sendfile+0xa8e/0xdc0 [ 893.467410] ? __pfx_do_sendfile+0x10/0x10 [ 893.467434] ? __fget_files+0x20d/0x3b0 [ 893.467467] __x64_sys_sendfile64+0x1d3/0x210 [ 893.467487] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 893.467507] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 893.467536] do_syscall_64+0xbf/0x430 [ 893.467553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.467570] RIP: 0033:0x7fb3e5a3eb19 [ 893.467584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.467600] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 893.467616] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 893.467627] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 893.467637] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 893.467647] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 893.467657] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 893.467679] [ 893.510281] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16044; err -12 12:53:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 20) 12:53:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:53:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 23) 12:53:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 22) 12:53:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) 12:53:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 20) 12:53:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) [ 902.827691] FAULT_INJECTION: forcing a failure. [ 902.827691] name failslab, interval 1, probability 0, space 0, times 0 [ 902.828632] CPU: 1 UID: 0 PID: 7308 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 902.828648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 902.828655] Call Trace: [ 902.828660] [ 902.828664] dump_stack_lvl+0xfa/0x120 [ 902.828689] should_fail_ex+0x4d7/0x5e0 [ 902.828704] ? jbd2__journal_start+0x193/0x6b0 [ 902.828723] should_failslab+0xc2/0x120 [ 902.828737] kmem_cache_alloc_noprof+0x80/0x690 [ 902.828755] ? lock_is_held_type+0x9e/0x120 [ 902.828776] ? jbd2__journal_start+0x193/0x6b0 [ 902.828794] jbd2__journal_start+0x193/0x6b0 [ 902.828814] __ext4_journal_start_sb+0x325/0x5d0 [ 902.828829] ? ext4_do_writepages+0xd95/0x3880 [ 902.828844] ? ext4_meta_trans_blocks+0x256/0x310 [ 902.828859] ext4_do_writepages+0xd95/0x3880 [ 902.828885] ? __pfx_ext4_do_writepages+0x10/0x10 [ 902.828904] ? lock_is_held_type+0x9e/0x120 [ 902.828923] ext4_writepages+0x369/0x7a0 [ 902.828937] ? __pfx_ext4_writepages+0x10/0x10 [ 902.828957] ? do_writepages+0x469/0x5c0 [ 902.828973] ? lock_release+0xc8/0x290 [ 902.828993] ? __pfx_ext4_writepages+0x10/0x10 [ 902.829007] do_writepages+0x244/0x5c0 [ 902.829024] filemap_writeback+0x223/0x2d0 [ 902.829041] ? __pfx_filemap_writeback+0x10/0x10 [ 902.829074] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 902.829091] ? __create_object+0x59/0x80 [ 902.829107] ? trace_kmalloc+0x1f/0xb0 [ 902.829117] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 902.829133] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 902.829154] kiocb_invalidate_pages+0xe4/0x180 [ 902.829173] __iomap_dio_rw+0xf08/0x1c90 [ 902.829194] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 902.829218] ? __pfx___iomap_dio_rw+0x10/0x10 [ 902.829230] ? mark_held_locks+0x49/0x80 [ 902.829247] ? kasan_quarantine_put+0x84/0x1e0 [ 902.829269] ? trace_jbd2_handle_start+0x173/0x1e0 [ 902.829287] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 902.829298] ? __pfx_ext4_orphan_add+0x10/0x10 [ 902.829318] iomap_dio_rw+0x40/0xa0 [ 902.829330] ext4_file_write_iter+0xe0e/0x19f0 [ 902.829349] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 902.829361] ? trace_kmalloc+0x1f/0xb0 [ 902.829371] ? __kmalloc_noprof+0x274/0x680 [ 902.829385] ? splice_from_pipe_next.part.0+0x165/0x510 [ 902.829407] iter_file_splice_write+0xa3a/0x11f0 [ 902.829431] ? __pfx_iter_file_splice_write+0x10/0x10 [ 902.829460] ? lock_is_held_type+0x9e/0x120 [ 902.829477] ? __pfx_iter_file_splice_write+0x10/0x10 [ 902.829494] direct_splice_actor+0x192/0x7b0 [ 902.829512] splice_direct_to_actor+0x347/0x9d0 [ 902.829529] ? __pfx_direct_splice_actor+0x10/0x10 [ 902.829548] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 902.829565] ? lock_acquire+0x15e/0x2f0 [ 902.829583] do_splice_direct+0x179/0x250 [ 902.829599] ? __pfx_do_splice_direct+0x10/0x10 [ 902.829615] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 902.829632] ? security_file_permission+0x22/0x90 [ 902.829650] do_sendfile+0xa8e/0xdc0 [ 902.829672] ? __pfx_do_sendfile+0x10/0x10 [ 902.829689] ? __fget_files+0x20d/0x3b0 [ 902.829713] __x64_sys_sendfile64+0x1d3/0x210 [ 902.829727] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 902.829741] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 902.829762] do_syscall_64+0xbf/0x430 [ 902.829774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.829787] RIP: 0033:0x7fc11b623b19 [ 902.829796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.829807] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 902.829819] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 902.829827] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 902.829833] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.829840] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 902.829847] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 902.829863] [ 902.853454] FAULT_INJECTION: forcing a failure. [ 902.853454] name failslab, interval 1, probability 0, space 0, times 0 [ 902.854887] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16038; err -12 [ 902.872588] CPU: 0 UID: 0 PID: 7311 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 902.872619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 902.872632] Call Trace: [ 902.872640] [ 902.872649] dump_stack_lvl+0xfa/0x120 [ 902.872691] should_fail_ex+0x4d7/0x5e0 [ 902.872717] ? jbd2__journal_start+0x249/0x6b0 [ 902.872750] should_failslab+0xc2/0x120 [ 902.872774] kmem_cache_alloc_noprof+0x80/0x690 [ 902.872812] ? jbd2__journal_start+0x249/0x6b0 [ 902.872844] jbd2__journal_start+0x249/0x6b0 [ 902.872882] __ext4_journal_start_sb+0x325/0x5d0 [ 902.872908] ? ext4_do_writepages+0xd95/0x3880 [ 902.872934] ? ext4_meta_trans_blocks+0x256/0x310 [ 902.872962] ext4_do_writepages+0xd95/0x3880 [ 902.873001] ? __lock_acquire+0x5f1/0x1b70 [ 902.873039] ? __pfx_ext4_do_writepages+0x10/0x10 [ 902.873074] ? lock_is_held_type+0x9e/0x120 [ 902.873111] ext4_writepages+0x369/0x7a0 [ 902.873137] ? __pfx_ext4_writepages+0x10/0x10 [ 902.873174] ? do_writepages+0x469/0x5c0 [ 902.873209] ? lock_release+0xc8/0x290 [ 902.873245] ? __pfx_ext4_writepages+0x10/0x10 [ 902.873286] do_writepages+0x244/0x5c0 [ 902.873338] filemap_writeback+0x223/0x2d0 [ 902.873383] ? __pfx_filemap_writeback+0x10/0x10 [ 902.873444] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 902.873474] ? __create_object+0x59/0x80 [ 902.873502] ? trace_kmalloc+0x1f/0xb0 [ 902.873520] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 902.873550] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 902.873588] kiocb_invalidate_pages+0xe4/0x180 [ 902.873624] __iomap_dio_rw+0xf08/0x1c90 [ 902.873654] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 902.873695] ? __pfx___iomap_dio_rw+0x10/0x10 [ 902.873718] ? mark_held_locks+0x49/0x80 [ 902.873751] ? kasan_quarantine_put+0x84/0x1e0 [ 902.873790] ? trace_jbd2_handle_start+0x173/0x1e0 [ 902.873823] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 902.873844] ? __pfx_ext4_orphan_add+0x10/0x10 [ 902.873879] iomap_dio_rw+0x40/0xa0 [ 902.873902] ext4_file_write_iter+0xe0e/0x19f0 [ 902.873937] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 902.873959] ? trace_kmalloc+0x1f/0xb0 [ 902.873979] ? __kmalloc_noprof+0x274/0x680 [ 902.874020] ? splice_from_pipe_next.part.0+0x165/0x510 [ 902.874081] iter_file_splice_write+0xa3a/0x11f0 [ 902.874157] ? __pfx_iter_file_splice_write+0x10/0x10 [ 902.874242] ? lock_is_held_type+0x9e/0x120 [ 902.874292] ? __pfx_iter_file_splice_write+0x10/0x10 [ 902.874344] direct_splice_actor+0x192/0x7b0 [ 902.874398] splice_direct_to_actor+0x347/0x9d0 [ 902.874449] ? __pfx_direct_splice_actor+0x10/0x10 [ 902.874500] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 902.874533] ? lock_acquire+0x15e/0x2f0 [ 902.874567] do_splice_direct+0x179/0x250 [ 902.874596] ? __pfx_do_splice_direct+0x10/0x10 [ 902.874626] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 902.874658] ? security_file_permission+0x22/0x90 [ 902.874690] do_sendfile+0xa8e/0xdc0 [ 902.874728] ? __pfx_do_sendfile+0x10/0x10 [ 902.874761] ? __fget_files+0x20d/0x3b0 [ 902.874803] __x64_sys_sendfile64+0x1d3/0x210 [ 902.874840] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 902.874866] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 902.874904] do_syscall_64+0xbf/0x430 [ 902.874927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.874949] RIP: 0033:0x7f26afb47b19 [ 902.874966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.874986] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 902.875007] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 902.875022] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 902.875034] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.875047] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 902.875060] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 902.875089] [ 902.929239] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16043; err -12 12:53:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:53:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 902.979814] FAULT_INJECTION: forcing a failure. [ 902.979814] name failslab, interval 1, probability 0, space 0, times 0 [ 902.980900] CPU: 1 UID: 0 PID: 7312 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 902.980917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 902.980925] Call Trace: [ 902.980929] [ 902.980934] dump_stack_lvl+0xfa/0x120 [ 902.980961] should_fail_ex+0x4d7/0x5e0 [ 902.980977] ? jbd2__journal_start+0x193/0x6b0 [ 902.980998] should_failslab+0xc2/0x120 [ 902.981012] kmem_cache_alloc_noprof+0x80/0x690 [ 902.981031] ? lock_is_held_type+0x9e/0x120 [ 902.981053] ? jbd2__journal_start+0x193/0x6b0 [ 902.981071] jbd2__journal_start+0x193/0x6b0 [ 902.981091] __ext4_journal_start_sb+0x325/0x5d0 [ 902.981107] ? ext4_do_writepages+0xd95/0x3880 [ 902.981123] ? ext4_meta_trans_blocks+0x256/0x310 [ 902.981139] ext4_do_writepages+0xd95/0x3880 [ 902.981160] ? __lock_acquire+0x5f1/0x1b70 [ 902.981186] ? __pfx_ext4_do_writepages+0x10/0x10 [ 902.981206] ? lock_is_held_type+0x9e/0x120 [ 902.981225] ext4_writepages+0x369/0x7a0 [ 902.981240] ? __pfx_ext4_writepages+0x10/0x10 [ 902.981260] ? do_writepages+0x469/0x5c0 [ 902.981277] ? lock_release+0xc8/0x290 [ 902.981295] ? __pfx_ext4_writepages+0x10/0x10 [ 902.981310] do_writepages+0x244/0x5c0 [ 902.981328] filemap_writeback+0x223/0x2d0 [ 902.981349] ? __pfx_filemap_writeback+0x10/0x10 [ 902.981384] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 902.981401] ? __create_object+0x59/0x80 [ 902.981418] ? trace_kmalloc+0x1f/0xb0 [ 902.981428] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 902.981445] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 902.981466] kiocb_invalidate_pages+0xe4/0x180 [ 902.981485] __iomap_dio_rw+0xf08/0x1c90 [ 902.981503] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 902.981529] ? __pfx___iomap_dio_rw+0x10/0x10 [ 902.981541] ? mark_held_locks+0x49/0x80 [ 902.981559] ? kasan_quarantine_put+0x84/0x1e0 [ 902.981580] ? trace_jbd2_handle_start+0x173/0x1e0 [ 902.981599] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 902.981610] ? __pfx_ext4_orphan_add+0x10/0x10 [ 902.981630] iomap_dio_rw+0x40/0xa0 [ 902.981643] ext4_file_write_iter+0xe0e/0x19f0 [ 902.981665] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 902.981677] ? trace_kmalloc+0x1f/0xb0 [ 902.981687] ? __kmalloc_noprof+0x274/0x680 [ 902.981702] ? splice_from_pipe_next.part.0+0x165/0x510 [ 902.981727] iter_file_splice_write+0xa3a/0x11f0 [ 902.981752] ? __pfx_iter_file_splice_write+0x10/0x10 [ 902.981781] ? lock_is_held_type+0x9e/0x120 [ 902.981803] ? __pfx_iter_file_splice_write+0x10/0x10 [ 902.981822] direct_splice_actor+0x192/0x7b0 [ 902.981839] splice_direct_to_actor+0x347/0x9d0 [ 902.981857] ? __pfx_direct_splice_actor+0x10/0x10 [ 902.981876] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 902.981894] ? lock_acquire+0x15e/0x2f0 [ 902.981912] do_splice_direct+0x179/0x250 [ 902.981928] ? __pfx_do_splice_direct+0x10/0x10 [ 902.981944] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 902.981962] ? security_file_permission+0x22/0x90 [ 902.981980] do_sendfile+0xa8e/0xdc0 [ 902.982003] ? __pfx_do_sendfile+0x10/0x10 [ 902.982020] ? __fget_files+0x20d/0x3b0 [ 902.982046] __x64_sys_sendfile64+0x1d3/0x210 [ 902.982061] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 902.982075] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 902.982095] do_syscall_64+0xbf/0x430 [ 902.982109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.982122] RIP: 0033:0x7faea702db19 [ 902.982132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.982144] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 902.982156] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 902.982164] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 902.982172] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.982179] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 902.982186] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 902.982202] [ 903.012936] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16045; err -12 12:53:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:53:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:53:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 24) 12:53:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) [ 903.133545] FAULT_INJECTION: forcing a failure. [ 903.133545] name failslab, interval 1, probability 0, space 0, times 0 [ 903.134737] CPU: 1 UID: 0 PID: 7324 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 903.134754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 903.134761] Call Trace: [ 903.134765] [ 903.134770] dump_stack_lvl+0xfa/0x120 [ 903.134796] should_fail_ex+0x4d7/0x5e0 [ 903.134812] ? ext4_alloc_io_end_vec+0x23/0x130 [ 903.134832] should_failslab+0xc2/0x120 [ 903.134846] kmem_cache_alloc_noprof+0x80/0x690 [ 903.134867] ? ext4_alloc_io_end_vec+0x23/0x130 [ 903.134887] ext4_alloc_io_end_vec+0x23/0x130 [ 903.134906] ext4_do_writepages+0x187e/0x3880 [ 903.134929] ? __lock_acquire+0x5f1/0x1b70 [ 903.134952] ? __pfx_ext4_do_writepages+0x10/0x10 [ 903.134972] ? lock_is_held_type+0x9e/0x120 [ 903.134994] ext4_writepages+0x369/0x7a0 [ 903.135008] ? __pfx_ext4_writepages+0x10/0x10 [ 903.135029] ? lock_release+0xc8/0x290 [ 903.135046] ? do_raw_spin_unlock+0x53/0x220 [ 903.135058] ? __pfx_ext4_writepages+0x10/0x10 [ 903.135072] do_writepages+0x244/0x5c0 [ 903.135092] filemap_writeback+0x223/0x2d0 [ 903.135111] ? __pfx_filemap_writeback+0x10/0x10 [ 903.135146] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 903.135164] ? __create_object+0x59/0x80 [ 903.135187] ? trace_kmalloc+0x1f/0xb0 [ 903.135199] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 903.135216] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 903.135238] kiocb_invalidate_pages+0xe4/0x180 [ 903.135258] __iomap_dio_rw+0xf08/0x1c90 [ 903.135279] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 903.135303] ? __pfx___iomap_dio_rw+0x10/0x10 [ 903.135315] ? mark_held_locks+0x49/0x80 [ 903.135333] ? kasan_quarantine_put+0x84/0x1e0 [ 903.135357] ? trace_jbd2_handle_start+0x173/0x1e0 [ 903.135379] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 903.135391] ? __pfx_ext4_orphan_add+0x10/0x10 [ 903.135411] iomap_dio_rw+0x40/0xa0 [ 903.135424] ext4_file_write_iter+0xe0e/0x19f0 [ 903.135444] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 903.135456] ? trace_kmalloc+0x1f/0xb0 [ 903.135466] ? __kmalloc_noprof+0x274/0x680 [ 903.135480] ? splice_from_pipe_next.part.0+0x165/0x510 [ 903.135502] iter_file_splice_write+0xa3a/0x11f0 [ 903.135534] ? __pfx_iter_file_splice_write+0x10/0x10 [ 903.135563] ? lock_is_held_type+0x9e/0x120 [ 903.135580] ? __pfx_iter_file_splice_write+0x10/0x10 [ 903.135598] direct_splice_actor+0x192/0x7b0 [ 903.135615] splice_direct_to_actor+0x347/0x9d0 [ 903.135632] ? __pfx_direct_splice_actor+0x10/0x10 [ 903.135651] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 903.135669] ? lock_acquire+0x15e/0x2f0 [ 903.135687] do_splice_direct+0x179/0x250 [ 903.135703] ? __pfx_do_splice_direct+0x10/0x10 [ 903.135719] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 903.135737] ? security_file_permission+0x22/0x90 [ 903.135755] do_sendfile+0xa8e/0xdc0 [ 903.135777] ? __pfx_do_sendfile+0x10/0x10 [ 903.135794] ? __fget_files+0x20d/0x3b0 [ 903.135819] __x64_sys_sendfile64+0x1d3/0x210 [ 903.135834] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 903.135848] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 903.135868] do_syscall_64+0xbf/0x430 [ 903.135881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.135894] RIP: 0033:0x7fb3e5a3eb19 [ 903.135904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.135915] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 903.135927] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 903.135935] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 903.135942] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.135949] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 903.135957] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 903.135973] 12:53:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 23) 12:53:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 21) [ 903.295504] FAULT_INJECTION: forcing a failure. [ 903.295504] name failslab, interval 1, probability 0, space 0, times 0 [ 903.296504] CPU: 1 UID: 0 PID: 7329 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 903.296521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 903.296529] Call Trace: [ 903.296533] [ 903.296538] dump_stack_lvl+0xfa/0x120 [ 903.296565] should_fail_ex+0x4d7/0x5e0 [ 903.296580] ? jbd2__journal_start+0x193/0x6b0 [ 903.296600] should_failslab+0xc2/0x120 [ 903.296614] kmem_cache_alloc_noprof+0x80/0x690 [ 903.296632] ? lock_is_held_type+0x9e/0x120 [ 903.296654] ? jbd2__journal_start+0x193/0x6b0 [ 903.296674] jbd2__journal_start+0x193/0x6b0 [ 903.296694] __ext4_journal_start_sb+0x325/0x5d0 [ 903.296709] ? ext4_do_writepages+0xd95/0x3880 [ 903.296724] ? ext4_meta_trans_blocks+0x256/0x310 [ 903.296739] ext4_do_writepages+0xd95/0x3880 [ 903.296760] ? __lock_acquire+0x5f1/0x1b70 [ 903.296782] ? __pfx_ext4_do_writepages+0x10/0x10 [ 903.296801] ? lock_is_held_type+0x9e/0x120 [ 903.296820] ext4_writepages+0x369/0x7a0 [ 903.296834] ? __pfx_ext4_writepages+0x10/0x10 [ 903.296855] ? lock_release+0xc8/0x290 [ 903.296872] ? do_raw_spin_unlock+0x53/0x220 [ 903.296885] ? __pfx_ext4_writepages+0x10/0x10 [ 903.296900] do_writepages+0x244/0x5c0 [ 903.296919] filemap_writeback+0x223/0x2d0 [ 903.296936] ? __pfx_filemap_writeback+0x10/0x10 [ 903.296969] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 903.296986] ? __create_object+0x59/0x80 [ 903.297001] ? trace_kmalloc+0x1f/0xb0 [ 903.297011] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 903.297028] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 903.297049] kiocb_invalidate_pages+0xe4/0x180 [ 903.297068] __iomap_dio_rw+0xf08/0x1c90 [ 903.297085] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 903.297109] ? __pfx___iomap_dio_rw+0x10/0x10 [ 903.297121] ? mark_held_locks+0x49/0x80 [ 903.297139] ? kasan_quarantine_put+0x84/0x1e0 [ 903.297160] ? trace_jbd2_handle_start+0x173/0x1e0 12:53:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 21) 12:53:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:53:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:53:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:53:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 903.297183] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 903.297194] ? __pfx_ext4_orphan_add+0x10/0x10 [ 903.297214] iomap_dio_rw+0x40/0xa0 [ 903.297226] ext4_file_write_iter+0xe0e/0x19f0 [ 903.297246] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 903.297259] ? trace_kmalloc+0x1f/0xb0 [ 903.297268] ? __kmalloc_noprof+0x274/0x680 [ 903.297283] ? splice_from_pipe_next.part.0+0x165/0x510 [ 903.297305] iter_file_splice_write+0xa3a/0x11f0 [ 903.297329] ? __pfx_iter_file_splice_write+0x10/0x10 [ 903.297360] ? lock_is_held_type+0x9e/0x120 [ 903.297376] ? __pfx_iter_file_splice_write+0x10/0x10 [ 903.297394] direct_splice_actor+0x192/0x7b0 [ 903.297411] splice_direct_to_actor+0x347/0x9d0 [ 903.297428] ? __pfx_direct_splice_actor+0x10/0x10 [ 903.297447] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 903.297464] ? irqentry_exit+0x17b/0x650 [ 903.297480] ? trace_irq_disable.constprop.0+0xc2/0x100 [ 903.297503] do_splice_direct+0x179/0x250 [ 903.297519] ? __pfx_do_splice_direct+0x10/0x10 [ 903.297535] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 903.297552] ? security_file_permission+0x22/0x90 [ 903.297570] do_sendfile+0xa8e/0xdc0 [ 903.297592] ? __pfx_do_sendfile+0x10/0x10 [ 903.297610] ? __fget_files+0x20d/0x3b0 [ 903.297634] __x64_sys_sendfile64+0x1d3/0x210 [ 903.297648] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 903.297662] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 903.297684] do_syscall_64+0xbf/0x430 [ 903.297699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.297711] RIP: 0033:0x7fc11b623b19 [ 903.297720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.297732] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 903.297744] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 903.297752] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 903.297758] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.297765] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 903.297772] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 903.297788] [ 903.327899] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16009; err -12 12:53:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 25) 12:53:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 24) 12:53:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:53:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:53:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) 12:53:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 903.551066] FAULT_INJECTION: forcing a failure. [ 903.551066] name failslab, interval 1, probability 0, space 0, times 0 [ 903.553141] CPU: 0 UID: 0 PID: 7348 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 903.553198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 903.553218] Call Trace: [ 903.553229] [ 903.553241] dump_stack_lvl+0xfa/0x120 [ 903.553307] should_fail_ex+0x4d7/0x5e0 [ 903.553348] ? ext4_alloc_io_end_vec+0x23/0x130 [ 903.553404] should_failslab+0xc2/0x120 [ 903.553441] kmem_cache_alloc_noprof+0x80/0x690 [ 903.553506] ? ext4_alloc_io_end_vec+0x23/0x130 [ 903.553559] ext4_alloc_io_end_vec+0x23/0x130 [ 903.553617] ext4_do_writepages+0x187e/0x3880 [ 903.553687] ? __lock_acquire+0x5f1/0x1b70 [ 903.553751] ? __pfx_ext4_do_writepages+0x10/0x10 [ 903.553813] ? lock_is_held_type+0x9e/0x120 [ 903.553876] ext4_writepages+0x369/0x7a0 [ 903.553921] ? __pfx_ext4_writepages+0x10/0x10 [ 903.553987] ? lock_release+0xc8/0x290 [ 903.554041] ? do_raw_spin_unlock+0x53/0x220 [ 903.554075] ? __pfx_ext4_writepages+0x10/0x10 [ 903.554115] do_writepages+0x244/0x5c0 [ 903.554173] filemap_writeback+0x223/0x2d0 [ 903.554223] ? __pfx_filemap_writeback+0x10/0x10 [ 903.554333] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 903.554384] ? __create_object+0x59/0x80 [ 903.554432] ? trace_kmalloc+0x1f/0xb0 [ 903.554465] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 903.554518] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 903.554584] kiocb_invalidate_pages+0xe4/0x180 [ 903.554645] __iomap_dio_rw+0xf08/0x1c90 [ 903.554695] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 903.554766] ? __pfx___iomap_dio_rw+0x10/0x10 [ 903.554805] ? mark_held_locks+0x49/0x80 [ 903.554862] ? kasan_quarantine_put+0x84/0x1e0 [ 903.554928] ? trace_jbd2_handle_start+0x173/0x1e0 [ 903.554988] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 903.555021] ? __pfx_ext4_orphan_add+0x10/0x10 [ 903.555080] iomap_dio_rw+0x40/0xa0 [ 903.555119] ext4_file_write_iter+0xe0e/0x19f0 [ 903.555176] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 903.555215] ? trace_kmalloc+0x1f/0xb0 [ 903.555245] ? __kmalloc_noprof+0x274/0x680 [ 903.555290] ? splice_from_pipe_next.part.0+0x165/0x510 [ 903.555356] iter_file_splice_write+0xa3a/0x11f0 [ 903.555433] ? __pfx_iter_file_splice_write+0x10/0x10 [ 903.555576] ? lock_is_held_type+0x9e/0x120 [ 903.555631] ? __pfx_iter_file_splice_write+0x10/0x10 [ 903.555687] direct_splice_actor+0x192/0x7b0 [ 903.555758] splice_direct_to_actor+0x347/0x9d0 [ 903.555813] ? __pfx_direct_splice_actor+0x10/0x10 [ 903.555873] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 903.555929] ? lock_acquire+0x15e/0x2f0 [ 903.555987] do_splice_direct+0x179/0x250 [ 903.556036] ? __pfx_do_splice_direct+0x10/0x10 [ 903.556087] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 903.556141] ? security_file_permission+0x22/0x90 [ 903.556193] do_sendfile+0xa8e/0xdc0 [ 903.556261] ? __pfx_do_sendfile+0x10/0x10 [ 903.556318] ? __fget_files+0x20d/0x3b0 [ 903.556381] __x64_sys_sendfile64+0x1d3/0x210 [ 903.556419] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 903.556457] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 903.556520] do_syscall_64+0xbf/0x430 [ 903.556554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.556590] RIP: 0033:0x7f26afb47b19 [ 903.556614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.556646] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 903.556679] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 903.556701] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 903.556719] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.556738] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 903.556759] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 903.556810] 12:53:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 22) 12:53:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 22) 12:53:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 25) 12:53:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:53:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:53:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 26) 12:53:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) [ 913.180921] FAULT_INJECTION: forcing a failure. [ 913.180921] name failslab, interval 1, probability 0, space 0, times 0 [ 913.181937] CPU: 1 UID: 0 PID: 7372 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 913.181955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 913.181963] Call Trace: [ 913.181967] [ 913.181972] dump_stack_lvl+0xfa/0x120 [ 913.182000] should_fail_ex+0x4d7/0x5e0 [ 913.182015] ? jbd2__journal_start+0x249/0x6b0 [ 913.182036] should_failslab+0xc2/0x120 [ 913.182050] kmem_cache_alloc_noprof+0x80/0x690 [ 913.182072] ? jbd2__journal_start+0x249/0x6b0 [ 913.182089] jbd2__journal_start+0x249/0x6b0 [ 913.182109] __ext4_journal_start_sb+0x325/0x5d0 [ 913.182125] ? ext4_do_writepages+0xd95/0x3880 [ 913.182140] ? ext4_meta_trans_blocks+0x256/0x310 [ 913.182155] ext4_do_writepages+0xd95/0x3880 [ 913.182181] ? __lock_acquire+0x5f1/0x1b70 [ 913.182202] ? __pfx_ext4_do_writepages+0x10/0x10 [ 913.182221] ? lock_is_held_type+0x9e/0x120 [ 913.182244] ext4_writepages+0x369/0x7a0 [ 913.182258] ? __pfx_ext4_writepages+0x10/0x10 [ 913.182278] ? do_writepages+0x469/0x5c0 [ 913.182295] ? lock_release+0xc8/0x290 [ 913.182312] ? __pfx_ext4_writepages+0x10/0x10 [ 913.182327] do_writepages+0x244/0x5c0 [ 913.182344] filemap_writeback+0x223/0x2d0 [ 913.182361] ? __pfx_filemap_writeback+0x10/0x10 [ 913.182395] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 913.182411] ? __create_object+0x59/0x80 [ 913.182427] ? trace_kmalloc+0x1f/0xb0 [ 913.182437] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 913.182453] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 913.182474] kiocb_invalidate_pages+0xe4/0x180 [ 913.182503] __iomap_dio_rw+0xf08/0x1c90 [ 913.182524] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 913.182547] ? __pfx___iomap_dio_rw+0x10/0x10 [ 913.182559] ? mark_held_locks+0x49/0x80 [ 913.182578] ? kasan_quarantine_put+0x84/0x1e0 [ 913.182603] ? trace_jbd2_handle_start+0x173/0x1e0 [ 913.182622] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 913.182633] ? __pfx_ext4_orphan_add+0x10/0x10 [ 913.182653] iomap_dio_rw+0x40/0xa0 [ 913.182665] ext4_file_write_iter+0xe0e/0x19f0 [ 913.182684] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 913.182696] ? trace_kmalloc+0x1f/0xb0 [ 913.182706] ? __kmalloc_noprof+0x274/0x680 [ 913.182720] ? splice_from_pipe_next.part.0+0x165/0x510 [ 913.182742] iter_file_splice_write+0xa3a/0x11f0 [ 913.182766] ? __pfx_iter_file_splice_write+0x10/0x10 [ 913.182795] ? lock_is_held_type+0x9e/0x120 [ 913.182812] ? __pfx_iter_file_splice_write+0x10/0x10 [ 913.182830] direct_splice_actor+0x192/0x7b0 [ 913.182848] splice_direct_to_actor+0x347/0x9d0 [ 913.182865] ? __pfx_direct_splice_actor+0x10/0x10 [ 913.182884] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 913.182901] ? lock_acquire+0x15e/0x2f0 [ 913.182920] do_splice_direct+0x179/0x250 [ 913.182936] ? __pfx_do_splice_direct+0x10/0x10 [ 913.182952] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 913.182969] ? security_file_permission+0x22/0x90 [ 913.182987] do_sendfile+0xa8e/0xdc0 [ 913.183010] ? __pfx_do_sendfile+0x10/0x10 [ 913.183029] ? __fget_files+0x20d/0x3b0 [ 913.183052] __x64_sys_sendfile64+0x1d3/0x210 [ 913.183066] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 913.183080] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 913.183101] do_syscall_64+0xbf/0x430 [ 913.183114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.183126] RIP: 0033:0x7fc11b623b19 [ 913.183135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 913.183147] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 913.183159] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 913.183167] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 913.183173] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 913.183180] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 913.183187] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 913.183203] [ 913.213915] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16022; err -12 12:53:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) [ 913.255485] FAULT_INJECTION: forcing a failure. [ 913.255485] name failslab, interval 1, probability 0, space 0, times 0 [ 913.257755] CPU: 0 UID: 0 PID: 7378 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 913.257787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 913.257801] Call Trace: [ 913.257809] [ 913.257818] dump_stack_lvl+0xfa/0x120 [ 913.257862] should_fail_ex+0x4d7/0x5e0 [ 913.257889] should_failslab+0xc2/0x120 [ 913.257915] __kmalloc_noprof+0xcd/0x680 [ 913.257943] ? unwind_get_return_address+0x59/0xa0 [ 913.257966] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 913.257991] ? arch_stack_walk+0x9c/0xf0 [ 913.258015] ? ext4_find_extent+0x7f5/0xa00 [ 913.258053] ext4_find_extent+0x7f5/0xa00 [ 913.258091] ext4_ext_map_blocks+0x1cc/0x5f30 [ 913.258134] ? lock_acquire+0x15e/0x2f0 [ 913.258167] ? unwind_next_frame+0xb9/0x2540 [ 913.258197] ? find_held_lock+0x2b/0x80 [ 913.258222] ? unwind_next_frame+0x3b2/0x2540 [ 913.258244] ? lock_release+0xc8/0x290 [ 913.258280] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 913.258320] ? unwind_get_return_address+0x59/0xa0 [ 913.258347] ? lock_acquire+0x15e/0x2f0 [ 913.258378] ? ext4_map_blocks+0x564/0x1510 [ 913.258414] ? down_write+0x119/0x1f0 [ 913.258436] ? __pfx_down_write+0x10/0x10 [ 913.258466] ext4_map_blocks+0x62d/0x1510 [ 913.258493] ? mark_held_locks+0x49/0x80 [ 913.258527] ? __pfx_ext4_map_blocks+0x10/0x10 [ 913.258549] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 913.258585] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 913.258606] ? kmem_cache_alloc_noprof+0x270/0x690 [ 913.258639] ? ext4_ext_index_trans_blocks+0x160/0x1a0 [ 913.258673] ? __ext4_journal_ensure_credits+0x267/0x2f0 [ 913.258708] ext4_do_writepages+0x2023/0x3880 [ 913.258760] ? __pfx_ext4_do_writepages+0x10/0x10 [ 913.258804] ? lock_is_held_type+0x9e/0x120 [ 913.258843] ext4_writepages+0x369/0x7a0 [ 913.258872] ? __pfx_ext4_writepages+0x10/0x10 [ 913.258912] ? do_writepages+0x469/0x5c0 [ 913.258942] ? lock_release+0xc8/0x290 [ 913.258977] ? __pfx_ext4_writepages+0x10/0x10 [ 913.259006] do_writepages+0x244/0x5c0 [ 913.259041] filemap_writeback+0x223/0x2d0 [ 913.259073] ? __pfx_filemap_writeback+0x10/0x10 [ 913.259141] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 913.259172] ? __create_object+0x59/0x80 [ 913.259203] ? trace_kmalloc+0x1f/0xb0 [ 913.259222] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 913.259254] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 913.259295] kiocb_invalidate_pages+0xe4/0x180 [ 913.259333] __iomap_dio_rw+0xf08/0x1c90 [ 913.259367] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 913.259411] ? __pfx___iomap_dio_rw+0x10/0x10 [ 913.259436] ? mark_held_locks+0x49/0x80 [ 913.259472] ? kasan_quarantine_put+0x84/0x1e0 [ 913.259515] ? trace_jbd2_handle_start+0x173/0x1e0 [ 913.259552] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 913.259574] ? __pfx_ext4_orphan_add+0x10/0x10 [ 913.259613] iomap_dio_rw+0x40/0xa0 [ 913.259638] ext4_file_write_iter+0xe0e/0x19f0 [ 913.259708] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 913.259743] ? trace_kmalloc+0x1f/0xb0 [ 913.259769] ? __kmalloc_noprof+0x274/0x680 [ 913.259805] ? splice_from_pipe_next.part.0+0x165/0x510 [ 913.259846] iter_file_splice_write+0xa3a/0x11f0 [ 913.259895] ? __pfx_iter_file_splice_write+0x10/0x10 [ 913.259954] ? lock_is_held_type+0x9e/0x120 [ 913.259987] ? __pfx_iter_file_splice_write+0x10/0x10 [ 913.260023] direct_splice_actor+0x192/0x7b0 [ 913.260058] splice_direct_to_actor+0x347/0x9d0 [ 913.260092] ? __pfx_direct_splice_actor+0x10/0x10 [ 913.260130] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 913.260165] ? lock_acquire+0x15e/0x2f0 [ 913.260202] do_splice_direct+0x179/0x250 [ 913.260233] ? __pfx_do_splice_direct+0x10/0x10 [ 913.260265] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 913.260300] ? security_file_permission+0x22/0x90 [ 913.260334] do_sendfile+0xa8e/0xdc0 [ 913.260377] ? __pfx_do_sendfile+0x10/0x10 [ 913.260412] ? __fget_files+0x20d/0x3b0 [ 913.260458] __x64_sys_sendfile64+0x1d3/0x210 [ 913.260485] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 913.260513] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 913.260554] do_syscall_64+0xbf/0x430 [ 913.260579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.260602] RIP: 0033:0x7fb3e5a3eb19 [ 913.260620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 913.260642] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 913.260664] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 913.260680] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 913.260693] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 913.260707] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 913.260721] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 913.260753] [ 913.352123] FAULT_INJECTION: forcing a failure. [ 913.352123] name failslab, interval 1, probability 0, space 0, times 0 [ 913.353247] CPU: 1 UID: 0 PID: 7382 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 913.353264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 913.353272] Call Trace: [ 913.353277] [ 913.353282] dump_stack_lvl+0xfa/0x120 [ 913.353309] should_fail_ex+0x4d7/0x5e0 [ 913.353324] ? jbd2__journal_start+0x249/0x6b0 [ 913.353344] should_failslab+0xc2/0x120 [ 913.353358] kmem_cache_alloc_noprof+0x80/0x690 [ 913.353380] ? jbd2__journal_start+0x249/0x6b0 [ 913.353397] jbd2__journal_start+0x249/0x6b0 [ 913.353418] __ext4_journal_start_sb+0x325/0x5d0 [ 913.353433] ? ext4_do_writepages+0xd95/0x3880 [ 913.353448] ? ext4_meta_trans_blocks+0x256/0x310 [ 913.353463] ext4_do_writepages+0xd95/0x3880 [ 913.353489] ? __lock_acquire+0x5f1/0x1b70 [ 913.353519] ? __pfx_ext4_do_writepages+0x10/0x10 [ 913.353539] ? lock_is_held_type+0x9e/0x120 [ 913.353561] ext4_writepages+0x369/0x7a0 [ 913.353575] ? __pfx_ext4_writepages+0x10/0x10 [ 913.353595] ? do_writepages+0x469/0x5c0 [ 913.353612] ? lock_release+0xc8/0x290 [ 913.353629] ? __pfx_ext4_writepages+0x10/0x10 [ 913.353644] do_writepages+0x244/0x5c0 [ 913.353662] filemap_writeback+0x223/0x2d0 [ 913.353679] ? __pfx_filemap_writeback+0x10/0x10 [ 913.353713] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 913.353730] ? __create_object+0x59/0x80 [ 913.353746] ? trace_kmalloc+0x1f/0xb0 [ 913.353756] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 913.353772] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 913.353794] kiocb_invalidate_pages+0xe4/0x180 [ 913.353813] __iomap_dio_rw+0xf08/0x1c90 [ 913.353831] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 913.353855] ? __pfx___iomap_dio_rw+0x10/0x10 [ 913.353867] ? mark_held_locks+0x49/0x80 [ 913.353885] ? kasan_quarantine_put+0x84/0x1e0 [ 913.353907] ? trace_jbd2_handle_start+0x173/0x1e0 [ 913.353925] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 913.353936] ? __pfx_ext4_orphan_add+0x10/0x10 [ 913.353958] iomap_dio_rw+0x40/0xa0 [ 913.353970] ext4_file_write_iter+0xe0e/0x19f0 [ 913.353990] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 913.354003] ? trace_kmalloc+0x1f/0xb0 [ 913.354012] ? __kmalloc_noprof+0x274/0x680 [ 913.354027] ? splice_from_pipe_next.part.0+0x165/0x510 [ 913.354060] iter_file_splice_write+0xa3a/0x11f0 [ 913.354093] ? __pfx_iter_file_splice_write+0x10/0x10 [ 913.354134] ? lock_is_held_type+0x9e/0x120 [ 913.354153] ? __pfx_iter_file_splice_write+0x10/0x10 [ 913.354185] direct_splice_actor+0x192/0x7b0 [ 913.354213] splice_direct_to_actor+0x347/0x9d0 [ 913.354240] ? __pfx_direct_splice_actor+0x10/0x10 [ 913.354272] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 913.354298] ? lock_acquire+0x15e/0x2f0 [ 913.354327] do_splice_direct+0x179/0x250 [ 913.354351] ? __pfx_do_splice_direct+0x10/0x10 [ 913.354374] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 913.354400] ? security_file_permission+0x22/0x90 [ 913.354427] do_sendfile+0xa8e/0xdc0 [ 913.354456] ? __pfx_do_sendfile+0x10/0x10 [ 913.354481] ? __fget_files+0x20d/0x3b0 [ 913.354518] __x64_sys_sendfile64+0x1d3/0x210 [ 913.354538] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 913.354558] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 913.354589] do_syscall_64+0xbf/0x430 [ 913.354609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.354628] RIP: 0033:0x7faea702db19 [ 913.354641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 913.354659] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 913.354676] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 913.354689] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 913.354699] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 913.354711] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 913.354721] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 913.354748] [ 913.385918] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16040; err -12 12:53:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 1) [ 913.409391] FAULT_INJECTION: forcing a failure. [ 913.409391] name failslab, interval 1, probability 0, space 0, times 0 [ 913.410325] CPU: 1 UID: 0 PID: 7384 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 913.410343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 913.410350] Call Trace: [ 913.410355] [ 913.410359] dump_stack_lvl+0xfa/0x120 [ 913.410381] should_fail_ex+0x4d7/0x5e0 [ 913.410396] should_failslab+0xc2/0x120 [ 913.410408] __kmalloc_cache_noprof+0x81/0x6b0 [ 913.410424] ? __might_fault+0xe0/0x190 [ 913.410441] ? alloc_pipe_info+0x10d/0x5a0 [ 913.410453] ? find_held_lock+0x2b/0x80 [ 913.410469] ? alloc_pipe_info+0x10d/0x5a0 [ 913.410485] alloc_pipe_info+0x10d/0x5a0 [ 913.410505] splice_direct_to_actor+0x78c/0x9d0 [ 913.410526] ? __lock_acquire+0x694/0x1b70 [ 913.410542] ? __pfx_direct_splice_actor+0x10/0x10 [ 913.410558] ? lock_acquire+0xc2/0x2f0 [ 913.410574] ? find_held_lock+0x2b/0x80 [ 913.410587] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 913.410604] ? lock_acquire+0x15e/0x2f0 [ 913.410622] do_splice_direct+0x179/0x250 [ 913.410637] ? __pfx_do_splice_direct+0x10/0x10 [ 913.410653] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 913.410670] ? security_file_permission+0x22/0x90 [ 913.410687] do_sendfile+0xa8e/0xdc0 [ 913.410707] ? __pfx_do_sendfile+0x10/0x10 [ 913.410730] __x64_sys_sendfile64+0x1d3/0x210 [ 913.410744] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 913.410758] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 913.410778] do_syscall_64+0xbf/0x430 [ 913.410790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.410803] RIP: 0033:0x7f46f1545b19 [ 913.410812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 913.410824] RSP: 002b:00007f46eeabb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 913.410835] RAX: ffffffffffffffda RBX: 00007f46f1658f60 RCX: 00007f46f1545b19 [ 913.410843] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 913.410850] RBP: 00007f46eeabb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 913.410858] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 913.410866] R13: 00007ffeefe2d6af R14: 00007f46eeabb300 R15: 0000000000022000 [ 913.410881] 12:53:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 27) 12:53:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 23) 12:53:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:53:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 2) 12:53:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 26) 12:53:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 23) 12:53:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 1) [ 923.120163] FAULT_INJECTION: forcing a failure. [ 923.120163] name failslab, interval 1, probability 0, space 0, times 0 [ 923.121583] CPU: 1 UID: 0 PID: 7398 Comm: syz-executor.5 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 923.121602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 923.121610] Call Trace: [ 923.121615] [ 923.121620] dump_stack_lvl+0xfa/0x120 [ 923.121647] should_fail_ex+0x4d7/0x5e0 [ 923.121663] should_failslab+0xc2/0x120 [ 923.121678] __kmalloc_cache_noprof+0x81/0x6b0 [ 923.121696] ? __might_fault+0xe0/0x190 [ 923.121716] ? alloc_pipe_info+0x10d/0x5a0 [ 923.121729] ? find_held_lock+0x2b/0x80 [ 923.121748] ? alloc_pipe_info+0x10d/0x5a0 [ 923.121761] alloc_pipe_info+0x10d/0x5a0 [ 923.121776] splice_direct_to_actor+0x78c/0x9d0 [ 923.121796] ? __lock_acquire+0x694/0x1b70 [ 923.121814] ? __pfx_direct_splice_actor+0x10/0x10 [ 923.121832] ? lock_acquire+0xc2/0x2f0 [ 923.121851] ? find_held_lock+0x2b/0x80 [ 923.121865] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 923.121885] ? lock_acquire+0x15e/0x2f0 [ 923.121905] do_splice_direct+0x179/0x250 [ 923.121923] ? __pfx_do_splice_direct+0x10/0x10 [ 923.121941] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 923.121961] ? security_file_permission+0x22/0x90 [ 923.121980] do_sendfile+0xa8e/0xdc0 [ 923.122004] ? __pfx_do_sendfile+0x10/0x10 [ 923.122024] ? __fget_files+0x20d/0x3b0 [ 923.122052] __x64_sys_sendfile64+0x1d3/0x210 [ 923.122068] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 923.122083] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 923.122107] do_syscall_64+0xbf/0x430 [ 923.122121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.122135] RIP: 0033:0x7facd8845b19 [ 923.122146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.122159] RSP: 002b:00007facd5dbb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 923.122172] RAX: ffffffffffffffda RBX: 00007facd8958f60 RCX: 00007facd8845b19 [ 923.122186] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 923.122193] RBP: 00007facd5dbb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.122202] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 923.122209] R13: 00007ffda279263f R14: 00007facd5dbb300 R15: 0000000000022000 [ 923.122227] [ 923.144560] FAULT_INJECTION: forcing a failure. [ 923.144560] name failslab, interval 1, probability 0, space 0, times 0 [ 923.145701] CPU: 1 UID: 0 PID: 7397 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 923.145718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 923.145725] Call Trace: [ 923.145729] [ 923.145734] dump_stack_lvl+0xfa/0x120 [ 923.145756] should_fail_ex+0x4d7/0x5e0 [ 923.145772] should_failslab+0xc2/0x120 [ 923.145785] __kmalloc_noprof+0xcd/0x680 [ 923.145800] ? unwind_get_return_address+0x59/0xa0 [ 923.145814] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 923.145829] ? arch_stack_walk+0x9c/0xf0 [ 923.145843] ? ext4_find_extent+0x7f5/0xa00 [ 923.145865] ext4_find_extent+0x7f5/0xa00 [ 923.145886] ext4_ext_map_blocks+0x1cc/0x5f30 [ 923.145911] ? lock_acquire+0x15e/0x2f0 [ 923.145929] ? unwind_next_frame+0xb9/0x2540 [ 923.145941] ? find_held_lock+0x2b/0x80 [ 923.145955] ? unwind_next_frame+0x3b2/0x2540 [ 923.145968] ? lock_release+0xc8/0x290 [ 923.145989] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 923.146011] ? unwind_get_return_address+0x59/0xa0 [ 923.146027] ? lock_acquire+0x15e/0x2f0 [ 923.146044] ? ext4_map_blocks+0x564/0x1510 [ 923.146065] ? down_write+0x119/0x1f0 [ 923.146078] ? __pfx_down_write+0x10/0x10 [ 923.146095] ext4_map_blocks+0x62d/0x1510 [ 923.146110] ? mark_held_locks+0x49/0x80 [ 923.146129] ? __pfx_ext4_map_blocks+0x10/0x10 [ 923.146142] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 923.146163] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 923.146175] ? kmem_cache_alloc_noprof+0x270/0x690 [ 923.146198] ? ext4_ext_index_trans_blocks+0x160/0x1a0 [ 923.146217] ? __ext4_journal_ensure_credits+0x267/0x2f0 [ 923.146237] ext4_do_writepages+0x2023/0x3880 [ 923.146266] ? __pfx_ext4_do_writepages+0x10/0x10 [ 923.146288] ? lock_is_held_type+0x9e/0x120 [ 923.146310] ext4_writepages+0x369/0x7a0 [ 923.146326] ? __pfx_ext4_writepages+0x10/0x10 [ 923.146349] ? do_writepages+0x469/0x5c0 [ 923.146366] ? lock_release+0xc8/0x290 [ 923.146386] ? __pfx_ext4_writepages+0x10/0x10 [ 923.146402] do_writepages+0x244/0x5c0 [ 923.146422] filemap_writeback+0x223/0x2d0 [ 923.146441] ? __pfx_filemap_writeback+0x10/0x10 [ 923.146479] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 923.146497] ? __create_object+0x59/0x80 [ 923.146515] ? trace_kmalloc+0x1f/0xb0 [ 923.146526] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 923.146544] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 923.146568] kiocb_invalidate_pages+0xe4/0x180 [ 923.146589] __iomap_dio_rw+0xf08/0x1c90 [ 923.146609] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 923.146635] ? __pfx___iomap_dio_rw+0x10/0x10 [ 923.146649] ? mark_held_locks+0x49/0x80 [ 923.146669] ? kasan_quarantine_put+0x84/0x1e0 [ 923.146693] ? trace_jbd2_handle_start+0x173/0x1e0 [ 923.146715] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 923.146728] ? __pfx_ext4_orphan_add+0x10/0x10 [ 923.146750] iomap_dio_rw+0x40/0xa0 [ 923.146764] ext4_file_write_iter+0xe0e/0x19f0 [ 923.146786] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 923.146799] ? trace_kmalloc+0x1f/0xb0 [ 923.146810] ? __kmalloc_noprof+0x274/0x680 [ 923.146827] ? splice_from_pipe_next.part.0+0x165/0x510 [ 923.146850] iter_file_splice_write+0xa3a/0x11f0 [ 923.146877] ? __pfx_iter_file_splice_write+0x10/0x10 [ 923.146911] ? lock_is_held_type+0x9e/0x120 [ 923.146930] ? __pfx_iter_file_splice_write+0x10/0x10 [ 923.146950] direct_splice_actor+0x192/0x7b0 [ 923.146970] splice_direct_to_actor+0x347/0x9d0 [ 923.146989] ? __pfx_direct_splice_actor+0x10/0x10 [ 923.147011] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 923.147030] ? lock_acquire+0x15e/0x2f0 [ 923.147051] do_splice_direct+0x179/0x250 [ 923.147069] ? __pfx_do_splice_direct+0x10/0x10 [ 923.147087] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 923.147107] ? security_file_permission+0x22/0x90 [ 923.147126] do_sendfile+0xa8e/0xdc0 [ 923.147149] ? __pfx_do_sendfile+0x10/0x10 [ 923.147169] ? __fget_files+0x20d/0x3b0 [ 923.147195] __x64_sys_sendfile64+0x1d3/0x210 [ 923.147210] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 923.147226] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 923.147249] do_syscall_64+0xbf/0x430 [ 923.147263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.147276] RIP: 0033:0x7f26afb47b19 [ 923.147286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.147299] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 923.147311] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 923.147320] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 923.147327] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.147335] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 923.147343] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 923.147361] 12:53:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 12:53:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 2) 12:53:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 24) 12:53:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 24) 12:53:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 28) 12:53:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:53:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 3) [ 923.385617] FAULT_INJECTION: forcing a failure. [ 923.385617] name failslab, interval 1, probability 0, space 0, times 0 [ 923.386741] CPU: 1 UID: 0 PID: 7412 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 923.386758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 923.386765] Call Trace: [ 923.386769] [ 923.386774] dump_stack_lvl+0xfa/0x120 [ 923.386798] should_fail_ex+0x4d7/0x5e0 [ 923.386812] ? ext4_alloc_io_end_vec+0x23/0x130 [ 923.386831] should_failslab+0xc2/0x120 [ 923.386844] kmem_cache_alloc_noprof+0x80/0x690 [ 923.386865] ? ext4_alloc_io_end_vec+0x23/0x130 [ 923.386882] ext4_alloc_io_end_vec+0x23/0x130 [ 923.386900] ext4_do_writepages+0x187e/0x3880 [ 923.386922] ? __lock_acquire+0x5f1/0x1b70 [ 923.386944] ? __pfx_ext4_do_writepages+0x10/0x10 [ 923.386963] ? lock_is_held_type+0x9e/0x120 [ 923.386984] ext4_writepages+0x369/0x7a0 [ 923.386998] ? __pfx_ext4_writepages+0x10/0x10 [ 923.387019] ? lock_release+0xc8/0x290 [ 923.387035] ? do_raw_spin_unlock+0x53/0x220 [ 923.387047] ? __pfx_ext4_writepages+0x10/0x10 [ 923.387062] do_writepages+0x244/0x5c0 [ 923.387081] filemap_writeback+0x223/0x2d0 [ 923.387098] ? __pfx_filemap_writeback+0x10/0x10 [ 923.387131] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 923.387148] ? __create_object+0x59/0x80 [ 923.387163] ? trace_kmalloc+0x1f/0xb0 [ 923.387173] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 923.387194] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 923.387215] kiocb_invalidate_pages+0xe4/0x180 [ 923.387234] __iomap_dio_rw+0xf08/0x1c90 [ 923.387251] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 923.387274] ? __pfx___iomap_dio_rw+0x10/0x10 [ 923.387286] ? mark_held_locks+0x49/0x80 [ 923.387304] ? kasan_quarantine_put+0x84/0x1e0 [ 923.387326] ? trace_jbd2_handle_start+0x173/0x1e0 [ 923.387345] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 923.387356] ? __pfx_ext4_orphan_add+0x10/0x10 [ 923.387376] iomap_dio_rw+0x40/0xa0 [ 923.387388] ext4_file_write_iter+0xe0e/0x19f0 [ 923.387408] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 923.387420] ? trace_kmalloc+0x1f/0xb0 [ 923.387430] ? __kmalloc_noprof+0x274/0x680 [ 923.387444] ? splice_from_pipe_next.part.0+0x165/0x510 [ 923.387465] iter_file_splice_write+0xa3a/0x11f0 [ 923.387489] ? __pfx_iter_file_splice_write+0x10/0x10 [ 923.387519] ? lock_is_held_type+0x9e/0x120 [ 923.387536] ? __pfx_iter_file_splice_write+0x10/0x10 [ 923.387553] direct_splice_actor+0x192/0x7b0 [ 923.387571] splice_direct_to_actor+0x347/0x9d0 [ 923.387588] ? __pfx_direct_splice_actor+0x10/0x10 [ 923.387607] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 923.387624] ? lock_acquire+0x15e/0x2f0 [ 923.387643] do_splice_direct+0x179/0x250 [ 923.387658] ? __pfx_do_splice_direct+0x10/0x10 [ 923.387675] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 923.387692] ? security_file_permission+0x22/0x90 [ 923.387710] do_sendfile+0xa8e/0xdc0 [ 923.387731] ? __pfx_do_sendfile+0x10/0x10 [ 923.387749] ? __fget_files+0x20d/0x3b0 [ 923.387785] __x64_sys_sendfile64+0x1d3/0x210 [ 923.387799] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 923.387813] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 923.387833] do_syscall_64+0xbf/0x430 [ 923.387846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.387858] RIP: 0033:0x7faea702db19 [ 923.387868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.387879] RSP: 002b:00007faea45a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 923.387891] RAX: ffffffffffffffda RBX: 00007faea7140f60 RCX: 00007faea702db19 [ 923.387899] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 923.387906] RBP: 00007faea45a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.387913] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 923.387919] R13: 00007ffda88b753f R14: 00007faea45a3300 R15: 0000000000022000 [ 923.387935] [ 923.430581] FAULT_INJECTION: forcing a failure. [ 923.430581] name failslab, interval 1, probability 0, space 0, times 0 [ 923.432326] CPU: 1 UID: 0 PID: 7414 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 923.432342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 923.432349] Call Trace: [ 923.432353] [ 923.432357] dump_stack_lvl+0xfa/0x120 [ 923.432378] should_fail_ex+0x4d7/0x5e0 [ 923.432392] ? ext4_alloc_io_end_vec+0x23/0x130 [ 923.432412] should_failslab+0xc2/0x120 [ 923.432424] kmem_cache_alloc_noprof+0x80/0x690 [ 923.432444] ? ext4_alloc_io_end_vec+0x23/0x130 [ 923.432460] ext4_alloc_io_end_vec+0x23/0x130 [ 923.432479] ext4_do_writepages+0x187e/0x3880 [ 923.432501] ? __lock_acquire+0x5f1/0x1b70 [ 923.432520] ? __pfx_ext4_do_writepages+0x10/0x10 [ 923.432539] ? lock_is_held_type+0x9e/0x120 [ 923.432559] ext4_writepages+0x369/0x7a0 [ 923.432573] ? __pfx_ext4_writepages+0x10/0x10 [ 923.432593] ? lock_release+0xc8/0x290 [ 923.432610] ? do_raw_spin_unlock+0x53/0x220 [ 923.432622] ? __pfx_ext4_writepages+0x10/0x10 [ 923.432636] do_writepages+0x244/0x5c0 [ 923.432654] filemap_writeback+0x223/0x2d0 [ 923.432670] ? __pfx_filemap_writeback+0x10/0x10 [ 923.432704] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 923.432720] ? __create_object+0x59/0x80 [ 923.432735] ? trace_kmalloc+0x1f/0xb0 [ 923.432745] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 923.432761] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 923.432782] kiocb_invalidate_pages+0xe4/0x180 [ 923.432801] __iomap_dio_rw+0xf08/0x1c90 [ 923.432818] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 923.432840] ? __pfx___iomap_dio_rw+0x10/0x10 [ 923.432853] ? mark_held_locks+0x49/0x80 [ 923.432870] ? kasan_quarantine_put+0x84/0x1e0 [ 923.432892] ? trace_jbd2_handle_start+0x173/0x1e0 [ 923.432911] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 923.432922] ? __pfx_ext4_orphan_add+0x10/0x10 [ 923.432942] iomap_dio_rw+0x40/0xa0 [ 923.432954] ext4_file_write_iter+0xe0e/0x19f0 [ 923.432973] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 923.432986] ? trace_kmalloc+0x1f/0xb0 [ 923.432995] ? __kmalloc_noprof+0x274/0x680 [ 923.433010] ? splice_from_pipe_next.part.0+0x165/0x510 [ 923.433030] iter_file_splice_write+0xa3a/0x11f0 [ 923.433055] ? __pfx_iter_file_splice_write+0x10/0x10 [ 923.433084] ? lock_is_held_type+0x9e/0x120 [ 923.433101] ? __pfx_iter_file_splice_write+0x10/0x10 [ 923.433118] direct_splice_actor+0x192/0x7b0 [ 923.433136] splice_direct_to_actor+0x347/0x9d0 [ 923.433153] ? __pfx_direct_splice_actor+0x10/0x10 [ 923.433172] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 923.433194] ? lock_acquire+0x15e/0x2f0 [ 923.433212] do_splice_direct+0x179/0x250 [ 923.433228] ? __pfx_do_splice_direct+0x10/0x10 [ 923.433244] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 923.433261] ? security_file_permission+0x22/0x90 [ 923.433278] do_sendfile+0xa8e/0xdc0 [ 923.433299] ? __pfx_do_sendfile+0x10/0x10 [ 923.433316] ? __fget_files+0x20d/0x3b0 [ 923.433340] __x64_sys_sendfile64+0x1d3/0x210 [ 923.433354] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 923.433368] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 923.433389] do_syscall_64+0xbf/0x430 [ 923.433401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.433413] RIP: 0033:0x7fc11b623b19 [ 923.433422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.433433] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 923.433444] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 923.433452] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 923.433458] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.433465] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 923.433472] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 923.433488] [ 923.479696] FAULT_INJECTION: forcing a failure. [ 923.479696] name failslab, interval 1, probability 0, space 0, times 0 [ 923.480727] CPU: 1 UID: 0 PID: 7418 Comm: syz-executor.5 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 923.480743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 923.480749] Call Trace: [ 923.480753] [ 923.480757] dump_stack_lvl+0xfa/0x120 [ 923.480778] should_fail_ex+0x4d7/0x5e0 [ 923.480792] should_failslab+0xc2/0x120 [ 923.480805] __kmalloc_noprof+0xcd/0x680 [ 923.480820] ? alloc_pipe_info+0x1e8/0x5a0 [ 923.480835] alloc_pipe_info+0x1e8/0x5a0 [ 923.480848] splice_direct_to_actor+0x78c/0x9d0 [ 923.480865] ? __lock_acquire+0x694/0x1b70 [ 923.480881] ? __pfx_direct_splice_actor+0x10/0x10 [ 923.480897] ? lock_acquire+0xc2/0x2f0 [ 923.480914] ? find_held_lock+0x2b/0x80 [ 923.480927] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 923.480944] ? lock_acquire+0x15e/0x2f0 [ 923.480962] do_splice_direct+0x179/0x250 [ 923.480977] ? __pfx_do_splice_direct+0x10/0x10 [ 923.480993] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 923.481010] ? security_file_permission+0x22/0x90 [ 923.481027] do_sendfile+0xa8e/0xdc0 [ 923.481047] ? __pfx_do_sendfile+0x10/0x10 [ 923.481064] ? __fget_files+0x20d/0x3b0 [ 923.481088] __x64_sys_sendfile64+0x1d3/0x210 [ 923.481101] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 923.481115] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 923.481135] do_syscall_64+0xbf/0x430 [ 923.481147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.481159] RIP: 0033:0x7facd8845b19 [ 923.481168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.481183] RSP: 002b:00007facd5dbb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 923.481195] RAX: ffffffffffffffda RBX: 00007facd8958f60 RCX: 00007facd8845b19 [ 923.481202] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 923.481209] RBP: 00007facd5dbb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.481216] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 923.481223] R13: 00007ffda279263f R14: 00007facd5dbb300 R15: 0000000000022000 [ 923.481238] 12:53:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 27) [ 923.529002] FAULT_INJECTION: forcing a failure. [ 923.529002] name failslab, interval 1, probability 0, space 0, times 0 [ 923.530115] CPU: 1 UID: 0 PID: 7421 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 923.530132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 923.530139] Call Trace: [ 923.530143] [ 923.530148] dump_stack_lvl+0xfa/0x120 [ 923.530171] should_fail_ex+0x4d7/0x5e0 [ 923.530189] ? ext4_mb_new_blocks+0x64e/0x4580 [ 923.530203] should_failslab+0xc2/0x120 [ 923.530217] kmem_cache_alloc_noprof+0x80/0x690 [ 923.530238] ? ext4_mb_new_blocks+0x64e/0x4580 [ 923.530249] ext4_mb_new_blocks+0x64e/0x4580 [ 923.530263] ? mark_held_locks+0x49/0x80 [ 923.530286] ? kasan_save_track+0x14/0x30 [ 923.530298] ? __kasan_kmalloc+0x7f/0x90 [ 923.530310] ? trace_kmalloc+0x1f/0xb0 [ 923.530320] ? __kmalloc_noprof+0x274/0x680 [ 923.530333] ? unwind_get_return_address+0x59/0xa0 [ 923.530345] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 923.530359] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 923.530373] ? ext4_ext_search_right+0x2e8/0xbd0 [ 923.530388] ? ext4_inode_to_goal_block+0x323/0x430 [ 923.530405] ext4_ext_map_blocks+0x1c55/0x5f30 [ 923.530428] ? unwind_next_frame+0xb9/0x2540 [ 923.530439] ? find_held_lock+0x2b/0x80 [ 923.530451] ? unwind_next_frame+0x3b2/0x2540 [ 923.530462] ? lock_release+0xc8/0x290 [ 923.530480] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 923.530500] ? unwind_get_return_address+0x59/0xa0 [ 923.530514] ? lock_acquire+0x15e/0x2f0 [ 923.530529] ? ext4_map_blocks+0x564/0x1510 [ 923.530549] ? __pfx_down_write+0x10/0x10 [ 923.530566] ext4_map_blocks+0x62d/0x1510 [ 923.530579] ? mark_held_locks+0x49/0x80 [ 923.530596] ? __pfx_ext4_map_blocks+0x10/0x10 [ 923.530607] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 923.530625] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 923.530636] ? kmem_cache_alloc_noprof+0x270/0x690 [ 923.530652] ? ext4_ext_index_trans_blocks+0x160/0x1a0 [ 923.530669] ? __ext4_journal_ensure_credits+0x267/0x2f0 [ 923.530686] ext4_do_writepages+0x2023/0x3880 [ 923.530713] ? __pfx_ext4_do_writepages+0x10/0x10 [ 923.530732] ? lock_is_held_type+0x9e/0x120 [ 923.530751] ext4_writepages+0x369/0x7a0 [ 923.530766] ? __pfx_ext4_writepages+0x10/0x10 [ 923.530786] ? lock_release+0xc8/0x290 [ 923.530803] ? do_raw_spin_unlock+0x53/0x220 [ 923.530814] ? __pfx_ext4_writepages+0x10/0x10 [ 923.530828] do_writepages+0x244/0x5c0 [ 923.530847] filemap_writeback+0x223/0x2d0 [ 923.530864] ? __pfx_filemap_writeback+0x10/0x10 [ 923.530898] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 923.530913] ? __create_object+0x59/0x80 [ 923.530929] ? trace_kmalloc+0x1f/0xb0 [ 923.530938] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 923.530955] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 923.530975] kiocb_invalidate_pages+0xe4/0x180 [ 923.530994] __iomap_dio_rw+0xf08/0x1c90 [ 923.531012] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 923.531034] ? __pfx___iomap_dio_rw+0x10/0x10 [ 923.531047] ? mark_held_locks+0x49/0x80 [ 923.531065] ? kasan_quarantine_put+0x84/0x1e0 [ 923.531089] ? trace_jbd2_handle_start+0x173/0x1e0 [ 923.531110] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 923.531122] ? __pfx_ext4_orphan_add+0x10/0x10 [ 923.531142] iomap_dio_rw+0x40/0xa0 [ 923.531154] ext4_file_write_iter+0xe0e/0x19f0 [ 923.531173] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 923.531185] ? trace_kmalloc+0x1f/0xb0 [ 923.531195] ? __kmalloc_noprof+0x274/0x680 [ 923.531209] ? splice_from_pipe_next.part.0+0x165/0x510 [ 923.531230] iter_file_splice_write+0xa3a/0x11f0 [ 923.531255] ? __pfx_iter_file_splice_write+0x10/0x10 [ 923.531284] ? lock_is_held_type+0x9e/0x120 [ 923.531301] ? __pfx_iter_file_splice_write+0x10/0x10 [ 923.531318] direct_splice_actor+0x192/0x7b0 [ 923.531336] splice_direct_to_actor+0x347/0x9d0 [ 923.531353] ? __pfx_direct_splice_actor+0x10/0x10 [ 923.531372] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 923.531389] ? lock_acquire+0x15e/0x2f0 [ 923.531408] do_splice_direct+0x179/0x250 [ 923.531423] ? __pfx_do_splice_direct+0x10/0x10 [ 923.531440] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 923.531457] ? security_file_permission+0x22/0x90 [ 923.531475] do_sendfile+0xa8e/0xdc0 [ 923.531497] ? __pfx_do_sendfile+0x10/0x10 [ 923.531514] ? __fget_files+0x20d/0x3b0 [ 923.531537] __x64_sys_sendfile64+0x1d3/0x210 [ 923.531551] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 923.531565] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 923.531586] do_syscall_64+0xbf/0x430 [ 923.531598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.531611] RIP: 0033:0x7fb3e5a3eb19 [ 923.531620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.531632] RSP: 002b:00007fb3e2fb4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 923.531644] RAX: ffffffffffffffda RBX: 00007fb3e5b51f60 RCX: 00007fb3e5a3eb19 [ 923.531651] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 923.531658] RBP: 00007fb3e2fb41d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.531665] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 923.531672] R13: 00007fff5b5cd63f R14: 00007fb3e2fb4300 R15: 0000000000022000 [ 923.531688] 12:53:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 4) 12:53:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 3) 12:53:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 1) 12:53:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 923.644721] FAULT_INJECTION: forcing a failure. [ 923.644721] name failslab, interval 1, probability 0, space 0, times 0 [ 923.645647] CPU: 1 UID: 0 PID: 7425 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 923.645663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 923.645671] Call Trace: [ 923.645675] [ 923.645680] dump_stack_lvl+0xfa/0x120 [ 923.645706] should_fail_ex+0x4d7/0x5e0 [ 923.645721] should_failslab+0xc2/0x120 [ 923.645734] __kmalloc_noprof+0xcd/0x680 [ 923.645751] ? alloc_pipe_info+0x1e8/0x5a0 [ 923.645766] alloc_pipe_info+0x1e8/0x5a0 [ 923.645779] splice_direct_to_actor+0x78c/0x9d0 [ 923.645797] ? __lock_acquire+0x694/0x1b70 [ 923.645814] ? __pfx_direct_splice_actor+0x10/0x10 ** 1 printk messages dropped ** [ 923.645847] ? find_held_lock+0x2b/0x80 [ 923.645860] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 923.645877] ? lock_acquire+0x15e/0x2f0 [ 923.645896] do_splice_direct+0x179/0x250 [ 923.645911] ? __pfx_do_splice_direct+0x10/0x10 [ 923.645927] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 923.645945] ? security_file_permission+0x22/0x90 [ 923.645962] do_sendfile+0xa8e/0xdc0 [ 923.645984] ? __pfx_do_sendfile+0x10/0x10 [ 923.646001] ? __fget_files+0x20d/0x3b0 [ 923.646024] __x64_sys_sendfile64+0x1d3/0x210 [ 923.646038] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 923.646052] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 923.646073] do_syscall_64+0xbf/0x430 [ 923.646085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.646099] RIP: 0033:0x7f46f1545b19 [ 923.646108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.646120] RSP: 002b:00007f46eeabb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 923.646132] RAX: ffffffffffffffda RBX: 00007f46f1658f60 RCX: 00007f46f1545b19 [ 923.646140] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 923.646147] RBP: 00007f46eeabb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.646154] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 923.646161] R13: 00007ffeefe2d6af R14: 00007f46eeabb300 R15: 0000000000022000 [ 923.646180] [ 923.650955] ------------[ cut here ]------------ [ 923.650989] WARNING: kernel/printk/printk_ringbuffer.c:1278 at get_data+0x364/0x400, CPU#1: syz-executor.3/7425 [ 923.651015] Modules linked in: [ 923.651035] CPU: 1 UID: 0 PID: 7425 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 923.651050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 923.651056] RIP: 0010:get_data+0x364/0x400 [ 923.651072] Code: e8 83 e0 07 83 c0 03 38 d0 0f 8c be fe ff ff 84 d2 0f 84 b6 fe ff ff 48 89 ef e8 57 c7 5c 00 e9 a9 fe ff ff e8 7d 1d 1f 00 90 <0f> 0b 90 45 31 e4 e9 3b ff ff ff e8 6c 1d 1f 00 90 0f 0b 90 45 31 [ 923.651083] RSP: 0018:ffff88806cf086b8 EFLAGS: 00010046 [ 923.651093] RAX: 0000000000010000 RBX: ffff88806cf087d0 RCX: ffffffff8155afe6 [ 923.651101] RDX: ffff888009e3d340 RSI: ffffffff8155b1b3 RDI: 0000000000000006 [ 923.651108] RBP: ffff88806cf08798 R08: 0000000000001164 R09: 000000d70d94e5a6 [ 923.651116] R10: 0000000000000000 R11: 00001d018200001a R12: ffffffff85d2e610 [ 923.651123] R13: 00003fffffffffff R14: 0000000000000000 R15: 0000000000000000 [ 923.651132] FS: 00007f46eeabb700(0000) GS:ffff8880e5498000(0000) knlGS:0000000000000000 [ 923.651143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 923.651151] CR2: 00007f46eeabaf78 CR3: 000000000e742000 CR4: 0000000000350ef0 [ 923.651158] Call Trace: [ 923.651162] [ 923.651169] _prb_read_valid+0x2f3/0x830 [ 923.651191] ? __pfx__prb_read_valid+0x10/0x10 [ 923.651210] ? __asan_memcpy+0x3d/0x60 [ 923.651223] ? __lock_acquire+0xc65/0x1b70 [ 923.651241] prb_read_valid+0x78/0xa0 [ 923.651257] ? __pfx_prb_read_valid+0x10/0x10 [ 923.651275] ? io_serial_in+0x10/0x80 [ 923.651290] printk_get_next_message+0x10b/0x570 [ 923.651304] ? __pfx_printk_get_next_message+0x10/0x10 [ 923.651318] ? __lock_acquire+0x694/0x1b70 [ 923.651339] ? lock_acquire+0x15e/0x2f0 [ 923.651354] ? console_flush_one_record+0x100/0xb20 [ 923.651369] ? lock_is_held_type+0x9e/0x120 [ 923.651388] console_flush_one_record+0x64f/0xb20 [ 923.651404] ? __pfx_console_flush_one_record+0x10/0x10 [ 923.651419] ? __lock_acquire+0x694/0x1b70 [ 923.651437] ? do_raw_spin_lock+0x123/0x260 [ 923.651450] __console_flush_and_unlock+0xb1/0x1d0 [ 923.651463] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 923.651476] ? do_raw_spin_unlock+0x53/0x220 [ 923.651488] ? is_printk_cpu_sync_owner+0x32/0x40 [ 923.651502] ? is_printk_legacy_deferred+0x67/0x80 [ 923.651518] wake_up_klogd_work_func+0x17c/0x1e0 [ 923.651531] ? __pfx_wake_up_klogd_work_func+0x10/0x10 [ 923.651544] ? __timekeeping_advance.constprop.0+0x6bd/0xa10 [ 923.651567] irq_work_single+0x128/0x260 [ 923.651583] irq_work_run_list+0x91/0xc0 [ 923.651597] update_process_times+0x12f/0x210 [ 923.651612] tick_nohz_handler+0x4ff/0x8c0 [ 923.651630] ? __pfx_tick_nohz_handler+0x10/0x10 [ 923.651645] ? __hrtimer_run_queues+0x571/0xab0 [ 923.651660] ? lock_release+0xc8/0x290 [ 923.651676] ? __pfx_tick_nohz_handler+0x10/0x10 [ 923.651693] __hrtimer_run_queues+0x60f/0xab0 [ 923.651713] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 923.651727] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 923.651744] hrtimer_interrupt+0x369/0x830 [ 923.651765] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 923.651794] sysvec_apic_timer_interrupt+0x6b/0x80 [ 923.651814] [ 923.651817] [ 923.651822] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 923.651834] RIP: 0010:dump_stack_lvl+0x115/0x120 [ 923.651851] Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 46 89 6c fc e8 d1 d2 96 fc 48 89 ee 31 ff e8 d7 08 b7 fc e8 72 0d b7 fc e8 7d 76 bf fc fb 5b <5d> 41 5c e9 63 0d b7 fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 923.651861] RSP: 0018:ffff88804a0bfa80 EFLAGS: 00000206 [ 923.651870] RAX: 00000000000002dd RBX: ffffffff85f02e40 RCX: ffffffff817d3756 [ 923.651878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84bdc1c3 [ 923.651885] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 [ 923.651892] R10: ffffffff8664a557 R11: 0000000000000001 R12: ffffffff85520ea0 [ 923.651900] R13: ffffffff85f02e50 R14: 0000000000000000 R15: 0000000000000000 [ 923.651911] ? trace_irq_enable.constprop.0+0x26/0x100 [ 923.651930] ? dump_stack_lvl+0x113/0x120 [ 923.651949] should_fail_ex+0x4d7/0x5e0 [ 923.651961] should_failslab+0xc2/0x120 [ 923.651972] __kmalloc_noprof+0xcd/0x680 [ 923.651986] ? alloc_pipe_info+0x1e8/0x5a0 [ 923.652000] alloc_pipe_info+0x1e8/0x5a0 [ 923.652013] splice_direct_to_actor+0x78c/0x9d0 [ 923.652029] ? __lock_acquire+0x694/0x1b70 [ 923.652043] ? __pfx_direct_splice_actor+0x10/0x10 [ 923.652058] ? lock_acquire+0xc2/0x2f0 [ 923.652074] ? find_held_lock+0x2b/0x80 [ 923.652086] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 923.652103] ? lock_acquire+0x15e/0x2f0 [ 923.652120] do_splice_direct+0x179/0x250 [ 923.652135] ? __pfx_do_splice_direct+0x10/0x10 [ 923.652150] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 923.652167] ? security_file_permission+0x22/0x90 [ 923.652182] do_sendfile+0xa8e/0xdc0 [ 923.652202] ? __pfx_do_sendfile+0x10/0x10 [ 923.652218] ? __fget_files+0x20d/0x3b0 [ 923.652239] __x64_sys_sendfile64+0x1d3/0x210 [ 923.652252] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 923.652266] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 923.652285] do_syscall_64+0xbf/0x430 [ 923.652297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.652308] RIP: 0033:0x7f46f1545b19 [ 923.652316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.652326] RSP: 002b:00007f46eeabb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 923.652337] RAX: ffffffffffffffda RBX: 00007f46f1658f60 RCX: 00007f46f1545b19 [ 923.652345] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 923.652352] RBP: 00007f46eeabb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.652359] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 923.652366] R13: 00007ffeefe2d6af R14: 00007f46eeabb300 R15: 0000000000022000 [ 923.652382] [ 923.652386] irq event stamp: 734 [ 923.652390] hardirqs last enabled at (733): [] dump_stack_lvl+0x113/0x120 [ 923.652409] hardirqs last disabled at (734): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 923.652426] softirqs last enabled at (442): [] handle_softirqs+0x50c/0x770 [ 923.652442] softirqs last disabled at (427): [] __irq_exit_rcu+0xc4/0x100 [ 923.652455] ---[ end trace 0000000000000000 ]--- [ 923.736445] FAULT_INJECTION: forcing a failure. [ 923.736445] name failslab, interval 1, probability 0, space 0, times 0 [ 923.738264] CPU: 0 UID: 0 PID: 7427 Comm: syz-executor.0 Tainted: G W 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 923.738302] Tainted: [W]=WARN [ 923.738309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 923.738323] Call Trace: [ 923.738331] [ 923.738340] dump_stack_lvl+0xfa/0x120 [ 923.738382] should_fail_ex+0x4d7/0x5e0 [ 923.738409] should_failslab+0xc2/0x120 [ 923.738434] __kmalloc_cache_noprof+0x81/0x6b0 [ 923.738465] ? __might_fault+0xe0/0x190 [ 923.738497] ? alloc_pipe_info+0x10d/0x5a0 [ 923.738521] ? find_held_lock+0x2b/0x80 [ 923.738552] ? alloc_pipe_info+0x10d/0x5a0 [ 923.738575] alloc_pipe_info+0x10d/0x5a0 [ 923.738602] splice_direct_to_actor+0x78c/0x9d0 [ 923.738636] ? __lock_acquire+0x694/0x1b70 [ 923.738667] ? __pfx_direct_splice_actor+0x10/0x10 [ 923.738699] ? lock_acquire+0xc2/0x2f0 [ 923.738732] ? find_held_lock+0x2b/0x80 [ 923.738757] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 923.738791] ? lock_acquire+0x15e/0x2f0 [ 923.738828] do_splice_direct+0x179/0x250 [ 923.738859] ? __pfx_do_splice_direct+0x10/0x10 [ 923.738891] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 923.738926] ? security_file_permission+0x22/0x90 [ 923.738959] do_sendfile+0xa8e/0xdc0 [ 923.739001] ? __pfx_do_sendfile+0x10/0x10 [ 923.739037] ? __fget_files+0x20d/0x3b0 [ 923.739082] __x64_sys_sendfile64+0x1d3/0x210 [ 923.739110] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 923.739137] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 923.739178] do_syscall_64+0xbf/0x430 [ 923.739210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.739234] RIP: 0033:0x7fd307619b19 [ 923.739251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.739274] RSP: 002b:00007fd304b8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 923.739297] RAX: ffffffffffffffda RBX: 00007fd30772cf60 RCX: 00007fd307619b19 [ 923.739313] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 923.739327] RBP: 00007fd304b8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.739341] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 [ 923.739355] R13: 00007ffc3c88165f R14: 00007fd304b8f300 R15: 0000000000022000 [ 923.739386] 12:54:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 25) 12:54:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 5) 12:54:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) 12:54:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 29) 12:54:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 28) 12:54:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 25) 12:54:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 4) 12:54:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 2) [ 933.500628] FAULT_INJECTION: forcing a failure. [ 933.500628] name failslab, interval 1, probability 0, space 0, times 0 [ 933.502582] CPU: 0 UID: 0 PID: 7451 Comm: syz-executor.5 Tainted: G W 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 933.502621] Tainted: [W]=WARN [ 933.502629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 12:54:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 26) [ 933.502643] Call Trace: [ 933.502651] [ 933.502660] dump_stack_lvl+0xfa/0x120 [ 933.502704] should_fail_ex+0x4d7/0x5e0 [ 933.502731] should_failslab+0xc2/0x120 [ 933.502756] __kmalloc_noprof+0xcd/0x680 [ 933.502783] ? lock_acquire+0x15e/0x2f0 [ 933.502816] ? obj_cgroup_charge_account+0x11a/0x6e0 [ 933.502850] ? copy_splice_read+0x15b/0xc00 [ 933.502885] copy_splice_read+0x15b/0xc00 [ 933.502916] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 933.502956] ? __pfx_copy_splice_read+0x10/0x10 [ 933.502985] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 933.503024] ? look_up_lock_class+0x56/0x150 [ 933.503059] ? register_lock_class+0x41/0x560 [ 933.503093] ? lockdep_init_map_type+0x4b/0x240 [ 933.503128] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 933.503167] ? __pfx_copy_splice_read+0x10/0x10 [ 933.503206] do_splice_read+0x1f8/0x2a0 [ 933.503239] splice_direct_to_actor+0x2a8/0x9d0 [ 933.503272] ? __pfx_direct_splice_actor+0x10/0x10 [ 933.503310] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 933.503345] ? lock_acquire+0x15e/0x2f0 [ 933.503381] do_splice_direct+0x179/0x250 [ 933.503412] ? __pfx_do_splice_direct+0x10/0x10 [ 933.503445] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 933.503479] ? security_file_permission+0x22/0x90 [ 933.503512] do_sendfile+0xa8e/0xdc0 [ 933.503553] ? __pfx_do_sendfile+0x10/0x10 [ 933.503588] ? __fget_files+0x20d/0x3b0 [ 933.503633] __x64_sys_sendfile64+0x1d3/0x210 [ 933.503660] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 933.503688] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 933.503729] do_syscall_64+0xbf/0x430 [ 933.503753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.503778] RIP: 0033:0x7facd8845b19 [ 933.503796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 933.503819] RSP: 002b:00007facd5dbb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 933.503842] RAX: ffffffffffffffda RBX: 00007facd8958f60 RCX: 00007facd8845b19 [ 933.503857] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 933.503871] RBP: 00007facd5dbb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 933.503885] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000001 12:54:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 933.503916] R13: 00007ffda279263f R14: 00007facd5dbb300 R15: 0000000000022000 [ 933.503947] [ 933.537136] FAULT_INJECTION: forcing a failure. [ 933.537136] name failslab, interval 1, probability 0, space 0, times 0 [ 933.540579] CPU: 1 UID: 0 PID: 7457 Comm: syz-executor.2 Tainted: G W 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 933.540598] Tainted: [W]=WARN [ 933.540602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 933.540609] Call Trace: [ 933.540613] [ 933.540618] dump_stack_lvl+0xfa/0x120 [ 933.540642] should_fail_ex+0x4d7/0x5e0 [ 933.540656] ? ext4_mb_new_blocks+0x64e/0x4580 [ 933.540670] should_failslab+0xc2/0x120 [ 933.540683] kmem_cache_alloc_noprof+0x80/0x690 [ 933.540704] ? ext4_mb_new_blocks+0x64e/0x4580 [ 933.540716] ext4_mb_new_blocks+0x64e/0x4580 [ 933.540730] ? mark_held_locks+0x49/0x80 [ 933.540750] ? kasan_save_track+0x14/0x30 [ 933.540763] ? __kasan_kmalloc+0x7f/0x90 [ 933.540775] ? trace_kmalloc+0x1f/0xb0 [ 933.540785] ? __kmalloc_noprof+0x274/0x680 [ 933.540799] ? unwind_get_return_address+0x59/0xa0 [ 933.540811] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 933.540824] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 933.540838] ? ext4_ext_search_right+0x2e8/0xbd0 [ 933.540854] ? ext4_inode_to_goal_block+0x323/0x430 [ 933.540872] ext4_ext_map_blocks+0x1c55/0x5f30 [ 933.540895] ? unwind_next_frame+0xb9/0x2540 [ 933.540906] ? find_held_lock+0x2b/0x80 [ 933.540919] ? unwind_next_frame+0x3b2/0x2540 [ 933.540930] ? lock_release+0xc8/0x290 [ 933.540948] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 933.540968] ? unwind_get_return_address+0x59/0xa0 [ 933.540982] ? lock_acquire+0x15e/0x2f0 [ 933.540998] ? ext4_map_blocks+0x564/0x1510 [ 933.541017] ? __pfx_down_write+0x10/0x10 [ 933.541034] ext4_map_blocks+0x62d/0x1510 [ 933.541048] ? mark_held_locks+0x49/0x80 [ 933.541066] ? __pfx_ext4_map_blocks+0x10/0x10 [ 933.541077] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 933.541096] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 933.541106] ? kmem_cache_alloc_noprof+0x270/0x690 [ 933.541123] ? ext4_ext_index_trans_blocks+0x160/0x1a0 [ 933.541140] ? __ext4_journal_ensure_credits+0x267/0x2f0 [ 933.541158] ext4_do_writepages+0x2023/0x3880 [ 933.541188] ? __pfx_ext4_do_writepages+0x10/0x10 [ 933.541208] ? lock_is_held_type+0x9e/0x120 [ 933.541227] ext4_writepages+0x369/0x7a0 [ 933.541242] ? __pfx_ext4_writepages+0x10/0x10 [ 933.541263] ? lock_release+0xc8/0x290 [ 933.541280] ? do_raw_spin_unlock+0x53/0x220 [ 933.541292] ? __pfx_ext4_writepages+0x10/0x10 [ 933.541306] do_writepages+0x244/0x5c0 [ 933.541325] filemap_writeback+0x223/0x2d0 [ 933.541342] ? __pfx_filemap_writeback+0x10/0x10 [ 933.541376] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 933.541391] ? __create_object+0x59/0x80 [ 933.541408] ? trace_kmalloc+0x1f/0xb0 [ 933.541418] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 933.541434] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 933.541455] kiocb_invalidate_pages+0xe4/0x180 [ 933.541474] __iomap_dio_rw+0xf08/0x1c90 [ 933.541492] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 933.541515] ? __pfx___iomap_dio_rw+0x10/0x10 [ 933.541528] ? mark_held_locks+0x49/0x80 [ 933.541546] ? kasan_quarantine_put+0x84/0x1e0 [ 933.541568] ? trace_jbd2_handle_start+0x173/0x1e0 [ 933.541588] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 933.541599] ? __pfx_ext4_orphan_add+0x10/0x10 [ 933.541619] iomap_dio_rw+0x40/0xa0 [ 933.541632] ext4_file_write_iter+0xe0e/0x19f0 [ 933.541651] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 933.541664] ? trace_kmalloc+0x1f/0xb0 [ 933.541674] ? __kmalloc_noprof+0x274/0x680 [ 933.541688] ? splice_from_pipe_next.part.0+0x165/0x510 [ 933.541710] iter_file_splice_write+0xa3a/0x11f0 [ 933.541734] ? __pfx_iter_file_splice_write+0x10/0x10 [ 933.541764] ? lock_is_held_type+0x9e/0x120 [ 933.541781] ? __pfx_iter_file_splice_write+0x10/0x10 [ 933.541799] direct_splice_actor+0x192/0x7b0 12:54:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) (fail_nth: 26) [ 933.541817] splice_direct_to_actor+0x347/0x9d0 12:54:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)='\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) [ 933.541834] ? __pfx_direct_splice_actor+0x10/0x10 [ 933.541854] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 933.541871] ? do_splice_direct+0x7f/0x250 [ 933.541889] do_splice_direct+0x179/0x250 [ 933.541904] ? __pfx_do_splice_direct+0x10/0x10 [ 933.541921] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 933.541939] ? security_file_permission+0x22/0x90 [ 933.541957] do_sendfile+0xa8e/0xdc0 [ 933.541978] ? __pfx_do_sendfile+0x10/0x10 [ 933.541996] ? __fget_files+0x20d/0x3b0 [ 933.542020] __x64_sys_sendfile64+0x1d3/0x210 [ 933.542034] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 933.542048] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 933.542069] do_syscall_64+0xbf/0x430 [ 933.542082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.542094] RIP: 0033:0x7fc11b623b19 [ 933.542104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 933.542116] RSP: 002b:00007fc118b99188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 933.542128] RAX: ffffffffffffffda RBX: 00007fc11b736f60 RCX: 00007fc11b623b19 [ 933.542136] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 933.542143] RBP: 00007fc118b991d0 R08: 0000000000000000 R09: 0000000000000000 [ 933.542151] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 933.542158] R13: 00007ffff9df313f R14: 00007fc118b99300 R15: 0000000000022000 [ 933.542174] [ 933.544894] FAULT_INJECTION: forcing a failure. [ 933.544894] name failslab, interval 1, probability 0, space 0, times 0 [ 933.626574] CPU: 0 UID: 0 PID: 7452 Comm: syz-executor.4 Tainted: G W 6.18.0-rc4-next-20251107 #1 PREEMPT(voluntary) [ 933.626616] Tainted: [W]=WARN [ 933.626624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 933.626638] Call Trace: [ 933.626646] [ 933.626656] dump_stack_lvl+0xfa/0x120 [ 933.626702] should_fail_ex+0x4d7/0x5e0 [ 933.626729] ? ext4_mb_new_blocks+0x64e/0x4580 [ 933.626755] should_failslab+0xc2/0x120 [ 933.626780] kmem_cache_alloc_noprof+0x80/0x690 [ 933.626821] ? ext4_mb_new_blocks+0x64e/0x4580 [ 933.626844] ext4_mb_new_blocks+0x64e/0x4580 [ 933.626872] ? mark_held_locks+0x49/0x80 [ 933.626911] ? kasan_save_track+0x14/0x30 [ 933.626937] ? __kasan_kmalloc+0x7f/0x90 [ 933.626961] ? trace_kmalloc+0x1f/0xb0 [ 933.626981] ? __kmalloc_noprof+0x274/0x680 [ 933.627007] ? unwind_get_return_address+0x59/0xa0 [ 933.627030] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 933.627057] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 933.627085] ? ext4_ext_search_right+0x2e8/0xbd0 [ 933.627116] ? ext4_inode_to_goal_block+0x323/0x430 [ 933.627149] ext4_ext_map_blocks+0x1c55/0x5f30 [ 933.627202] ? unwind_next_frame+0xb9/0x2540 [ 933.627225] ? find_held_lock+0x2b/0x80 [ 933.627250] ? unwind_next_frame+0x3b2/0x2540 [ 933.627272] ? lock_release+0xc8/0x290 [ 933.627309] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 933.627349] ? unwind_get_return_address+0x59/0xa0 [ 933.627376] ? lock_acquire+0x15e/0x2f0 [ 933.627407] ? ext4_map_blocks+0x564/0x1510 [ 933.627445] ? __pfx_down_write+0x10/0x10 [ 933.627477] ext4_map_blocks+0x62d/0x1510 [ 933.627504] ? mark_held_locks+0x49/0x80 [ 933.627538] ? __pfx_ext4_map_blocks+0x10/0x10 [ 933.627560] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 933.627597] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 933.627618] ? kmem_cache_alloc_noprof+0x270/0x690 [ 933.627651] ? ext4_ext_index_trans_blocks+0x160/0x1a0 [ 933.627685] ? __ext4_journal_ensure_credits+0x267/0x2f0 [ 933.627720] ext4_do_writepages+0x2023/0x3880 [ 933.627772] ? __pfx_ext4_do_writepages+0x10/0x10 [ 933.627810] ? lock_is_held_type+0x9e/0x120 [ 933.627850] ext4_writepages+0x369/0x7a0 [ 933.627879] ? __pfx_ext4_writepages+0x10/0x10 [ 933.627934] ? do_writepages+0x469/0x5c0 [ 933.627964] ? lock_release+0xc8/0x290 [ 933.627999] ? __pfx_ext4_writepages+0x10/0x10 [ 933.628029] do_writepages+0x244/0x5c0 [ 933.628064] filemap_writeback+0x223/0x2d0 [ 933.628097] ? __pfx_filemap_writeback+0x10/0x10 [ 933.628168] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 933.628199] ? __create_object+0x59/0x80 [ 933.628230] ? trace_kmalloc+0x1f/0xb0 [ 933.628250] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 933.628282] filemap_write_and_wait_range.part.0+0x8c/0x110 [ 933.628324] kiocb_invalidate_pages+0xe4/0x180 [ 933.628362] __iomap_dio_rw+0xf08/0x1c90 [ 933.628396] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 933.628440] ? __pfx___iomap_dio_rw+0x10/0x10 [ 933.628466] ? mark_held_locks+0x49/0x80 [ 933.628501] ? kasan_quarantine_put+0x84/0x1e0 [ 933.628545] ? trace_jbd2_handle_start+0x173/0x1e0 [ 933.628583] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 933.628606] ? __pfx_ext4_orphan_add+0x10/0x10 [ 933.628645] iomap_dio_rw+0x40/0xa0 [ 933.628670] ext4_file_write_iter+0xe0e/0x19f0 [ 933.628708] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 933.628733] ? trace_kmalloc+0x1f/0xb0 [ 933.628753] ? __kmalloc_noprof+0x274/0x680 [ 933.628782] ? splice_from_pipe_next.part.0+0x165/0x510 [ 933.628823] iter_file_splice_write+0xa3a/0x11f0 [ 933.628873] ? __pfx_iter_file_splice_write+0x10/0x10 [ 933.628932] ? lock_is_held_type+0x9e/0x120 [ 933.628966] ? __pfx_iter_file_splice_write+0x10/0x10 [ 933.629001] direct_splice_actor+0x192/0x7b0 [ 933.629037] splice_direct_to_actor+0x347/0x9d0 [ 933.629071] ? __pfx_direct_splice_actor+0x10/0x10 [ 933.629110] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 933.629144] ? lock_acquire+0x15e/0x2f0 [ 933.629182] do_splice_direct+0x179/0x250 [ 933.629213] ? __pfx_do_splice_direct+0x10/0x10 [ 933.629246] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 933.629282] ? security_file_permission+0x22/0x90 [ 933.629316] do_sendfile+0xa8e/0xdc0 [ 933.629359] ? __pfx_do_sendfile+0x10/0x10 [ 933.629397] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 933.629443] __x64_sys_sendfile64+0x1d3/0x210 [ 933.629471] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 933.629509] do_syscall_64+0xbf/0x430 [ 933.629533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.629559] RIP: 0033:0x7f26afb47b19 [ 933.629579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 933.629603] RSP: 002b:00007f26ad0bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 933.629628] RAX: ffffffffffffffda RBX: 00007f26afc5af60 RCX: 00007f26afb47b19 [ 933.629645] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 933.629660] RBP: 00007f26ad0bd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 933.629675] R10: 00000000000a0103 R11: 0000000000000246 R12: 0000000000000002 [ 933.629690] R13: 00007ffce0ba40df R14: 00007f26ad0bd300 R15: 0000000000022000 [ 933.629723] [ 933.651744] FAULT_INJECTION: forcing a failure. [ 933.651744] name failslab, interval 1, probability 0, space 0, times 0 VM DIAGNOSIS: 12:53:58 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=ffff888047f351a0 RCX=ffffffff81be4917 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000005 RBP=000000000020000c RSP=ffff88800f23fda0 R8 =0000000000000001 R9 =ffffed1001e47fac R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000008000 R15=ffff88801ccbc580 RIP=ffffffff8174c89a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc118b99700 00000000 00000000 GS =0000 ffff8880e5398000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2180d31000 CR3=000000000d237000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82935405 RDI=ffffffff8896b880 RBP=ffffffff8896b840 RSP=ffff88806cf08938 R8 =0000000000000000 R9 =ffffed1001623046 R10=0000000000000033 R11=0000000000000001 R12=0000000000000033 R13=0000000000000010 R14=ffffffff8896b840 R15=ffffffff829353f0 RIP=ffffffff8293545d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f46eeabb700 00000000 00000000 GS =0000 ffff8880e5498000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f46eeabaf78 CR3=000000000e742000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000