0x0) fstatfs(r8, &(0x7f0000000240)=""/219) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:08:39 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfd7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x200082, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0xffffffff00000000, 0x5}, 0x0, 0x0, 0x3ff, 0x1, 0xff, 0x3f, 0x3, 0x0, 0x4}, r1, 0x4, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200010000000000000000000c00000002"], 0x28}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2, 0x2, 0x2, 0x4, 0x0, 0x30000000000000, 0x10, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x8000, 0xb96, 0x5, 0x9, 0x4, 0x80000001, 0x3, 0x0, 0x7a, 0x0, 0x1}, 0xffffffffffffffff, 0xf, r0, 0x8) 12:08:39 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x27) syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) dup(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'trusted.', '/dev/hwrng\x00'}, &(0x7f0000000600)=""/196, 0xc4) r3 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0xd3, 0x3, 0x4, 0x80, 0x0, 0xaee, 0x48018, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000100)}, 0xa220, 0x0, 0x20, 0x7, 0x81, 0x800, 0x200, 0x0, 0x80000001, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r2, 0x8) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000140)=""/244, &(0x7f0000000240)=0xf4) pwritev2(r3, &(0x7f0000000400)=[{&(0x7f0000000300)="07bcae6c", 0x4}], 0x1, 0x3, 0x7, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x5, 0x3, 0x7, 0x0, 0x1f, 0x10, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0xd, 0x81, 0x7ff, 0x9, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0xeda9554}, 0xffffffffffffffff, 0x3, r1, 0x9) 12:08:39 executing program 2: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:08:39 executing program 5: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) syz_io_uring_setup(0x29c9, &(0x7f0000000280)={0x0, 0xe225, 0x2, 0x0, 0xae, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x3f00}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20002000}) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) dup(r3) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000400)='./file0\x00', 0x10, 0x7, &(0x7f0000001880)=[{&(0x7f0000000440)="22a8fce565ad134bfc3589e1f320423e211aaad3837436dcf33d641f529190660bb1e9bf96a355d9f52f7a47f5713d6a0f57f90dbf2c63f1ef32ecc5905d431e9a363c4e0e78f67b6dc6c7878c46e7ce20b6ced44fed79c36cc739c41acbec7236f8c63b592809a7cd55e28aa26877128e74ac31220a1b15c99d70ad854b737bbd1025cd22412a700c374a5ca1f56e837dd8f709058b0a4832555ab8779988e0c283d9", 0xa3}, {&(0x7f0000000500)="9af4533354eb031828908a4c4e5b38c965bbb82fdca93dfebde838cfbf3ed6d44c61ad811f7c2b41e508752c589c0e3efbacdd625ab97eae88ee0395cba1b4219d9af773", 0x44, 0x6434}, {&(0x7f0000000580)="615845714df7145d5be7228dc4b3d4d981fb14c38950f84260d0da1550be5a231da42efacade582be38c5d5aa5a81ac98a1d11507a32df8e3003ee64ef1122a5eed739ef8ce321078783aa092271d51790e903e8639a59d930e25c15c16dd6d2774931e5019da2f61d82e6b602b015354842998f21d7d6b411d8c8e974da8829f306bc68b4e10a2765ed0da685fded0e9e3a72dca4e172819e8e1384e7ac", 0x9e, 0x4}, {&(0x7f0000000640)="d04fc9fcbff25f09e86182e6d3581b544b93e8fbfc56c9a5d6b6a1a49e08d0a09b893f8576833a117119d8726a42c476ed7cc7019871bde75cd9a15f16d5079d4e16ebf4be8536d7e4167f71180aedce2865ff4ccc62ca2d613ffde8bd51bff0d40520ca381936921877d737851110cef3ee8a5b0c4f53bd8e3d595212fbb99213a4b6e676cc7f03aceaa0e3ae42fa37ac62e8237161f3e74197db2e2f0ca413bc65ad7bdd0ed76fa31f6f5033f055eb78081fe871cd79b130c51a5a77ea552b06bd02d616470a280c69", 0xca, 0x8}, {&(0x7f0000000740)="bfbca1f1065aeddea4529968942b2088e3879dd16f6c3e4dd0b7a43bfb2ea61ff0622172ad3a0a76ed1ffb64cbd01fc27ca8beed9d8c7a631a5e4f5ce47c0198", 0x40, 0x7}, {&(0x7f0000000780)="cd5529bbabee2308c7828caf36567fd24da30b842f417048b329feebb6988d55263ab7481fef8d37f2ab8deccfbab2e7586910ecbcb8ca7620ccefe2fec3114120166cd9298fa376aeeae8d98bc5c87256898497dd118513dcd71e485bc26685ee50403df33d41ed7830ed4843441f13fc6412a5b3bf7dd80f3ee69ceeecf9d79fba299b8f8ca555f02b11701174f6be88f6b978c8267f36493bbea66bfdb979e64281c896a53e4d00d564060bff912c850947156e3a74a524481dd2b02b98c9833087b08b530631816ba248ff4bab0207a82e6fabb80f5eff", 0xd9}, {&(0x7f0000000880)="f3be8fde2a8811c72678e5cc7bcfacdf8d7d09fe4d2f6b799cac8a1a025ff9513691a78142e61aa38f0e887d871090ee029d6b543b0ffbde7b9464781fca5a5a7797114197f65252da8eecf95d1e8b4335d9f2bbfb946fa974491c0053a15f7ee03e6922d6839ac5e9c8aed55dcdfaa3a2fd3f3145e4ee0997e5e530556b9f28f82e23a0adb1209d1b5d94cc95d3d79fc6c2ab7fb7b42e6a3f3285b9002b7cec9dc4297bba5ccbeffa32a42225c4ddee1e2b42a57d5acdbaf078ded3dca257fe85df77ca8817543c6906f6c0a290d1f1be7906d9a673313b8a3070565ebc206adf5b591128cd874ada2e949f2f2e44b4231336f3858ab393698f13aaf333ed9ae2d65d7b4fcbcbc4ac91f09963a4019dd043f17f3315001ae60feab2452dff71f9e7f5f3537835287b72c3d2252b6b625d93eae3d36b27da6031ff8fd774ee34409c06ff805b98de651865d4e45e182b121cd20d6f3d1543b4fb01993467947863303ebe8b1b57eb523236b98cce0579dd309b4e9fd71c8bcb8099bcb5369a4fcc5da92d554dab7095471b3baf28b942347c5d6411f564499c07132d59ebfa12570fe29b0deea7d9f72c023f6ce884e5fd8a81e245307d97dedd30683367e4f35bf855d148f309b7a3c904a49c4ef8e1831dbc884f9cf32b5ab261b926287e2132fb6c441a94eb6228d374b47572b8857d850f188e00dcc530771d819807ceffddbfa3c299da7bdfa5daa088a1b2bce3535b9f84fb8615068253fdee52dd8b431f98d996bd8115d67eed1be94472b309b80f562f67f99c7e464e23ef6beeae9cea0e1e3eea04ec927ca9314b3ada7b9763b047bf0fde5aaef1f0a59b3262bf0beaa1fafc9581053cbc99c77d69e04622f56c2f8bedf694f398dd4d3918851f3b0a84b1de34b97bac9954fe20cc45249ded37b2e43d502b2705fac03b060a8230d946bdf45a63483fd88801714be52e2fec49cade2f7c981b23132d55e1cb67642466ac5865e0f6665f8cb28e352d0a86f19a2a9ab537fda19d88f9590f3b77f10fa6bd6a3a70390f89ef7ff68cfec745e4dd7a24f949ff2b94ae8c75e0f25e5649a600c97559efd6f8d599434575f6ec2b2064201c66956b5783ad7c2af9b041c2cb25279b4fc27f0d7913a07f24ce49bd2572800aeebda007ee4379a664dc926511207efdef4477addaed521eb0a2d2af2002a3c89e9856229053247e28755d6ec12c978bdaa20640e289083f34008f4fdb212e12969beb4ba64c0dab6952400aeb5f8303231e0f665caf726484e87dcef56785495b94dcdd99e3d694bb7a653af3373240d52f90406acea5991e36954dac532d3270a7fc3ada2235d9e05d92602a0855f98668ea4e5acdb924e6454495bfb54b30816bc1e7f94867c4d07dd7e39ac780e761a893e8b8c4a981c87eac6d6c0bcf5f9fbad6169c1dd8e287101e54c7788813a022f65896edf95e64d75be0cb8946faf2f1ceb4283dcdaa296951e580f1ad14261e38345b274acb23da335f7e5375c38f7b1d326e333ac8fd4601442a6a8c15f650e6737ca3b9eb5fe95a17742aae7fd9b575eeca5c855aecb0809152e39b7e447d3d30c219f4d63b0bc9b90d45271ea0e125593ed1dbe6ca771f282872deb0286d19d96690907f5e720a4f611ac77da0a1645d8a4b1b601220d28ced33528a36ee10850fe41eb00f53dd1582b246109a832081e50501085829203748a9e9ae37ac649501588b15200253fe90b5f54b8e7a01c79c93e63f432250c8479de905ab2d0515e51915ade96e6b0e967f05d01288ad8da9f4cab304f957f22b616633a7de935e170e68bd10b7fc681ea6a805abbc460a85eccec4c5c9fbc28c23ee26f058515a66b772fbb4af5aec0f1aa7e411c7bbc02eb536854314e9da1de88de5fd9e040db165bf3890432adebf4e63d61421e59400f284ab4ab53301183e9f086fb0ad4a880da1fb51d9dba0f673000213afd5c0de3f44ed877ccd94de35e177e11fee9e6dde5000b51435459aa97dcd6dc874081de036f55cf1d81c6fe017b7c1174e3f4bdd69cb03e5d0f38e90fcf0228c10a1d9346346256dc19e41193d21b2a1c4030aed453508e879fc5876bb804923f80be20f03f467600c3e5e13b9186a9de15d770ef76a27c1f14530cce74599870b9ef8bbadd1284fa85f46c8c0da00a3c8175c4e8ee8ea9a4604465894d6daa4186d804de7491ba218267074a02f6d960ba0d83e11b5090a5ebb77d8537092b23f4aa3ce7b43788b93f5b48f02098ca4b07485d737ff03f08256e5ec482da0d3b4a12a8a474748af97f257476104f90b797c82fa50e883a696fe8a5e3891fa3d64d68755b8ca64a3be5c91a38826204be431e8280b67c8bbdc4ce754f870f3ff515dd1a7a74e46b6585faf27be741e533cf1abd7cc95dfb7094c461e5ff16c3606199bd037567c837623d7290e406e5fbcd3bbcd0b9e51ef26cee46937de02d8fb02d4e6d40fac2810a26f3726e3ed63fd5f9b728e626772b06e59269159bacffb6ca9926f0a8bfa4dde7982561d34aa0d1a83176cbd2405642a128cd95a5e2025ad1d5d56e7120ad18ead2f07cb833f3a1ac50c62084b6ea1a8db66c02eaa6f5ea734be7e55d859d2a65961ddff9e98c82563b87b65b1e39a2a75b9601591393259694f8b3cf95be2aeb84b1ff00b3331ccb0934758fe4418b698004c0dc03f15fe6951be16b27f682322788429e94b98cb8dfa516c7abe8fce7739879aeedc0c12e61fae4e7cb195f935753af60ef70c03c291df3891719517ae12fdd39504e83de33082164b12b8218ae627cfa119808f263dcb892f57236c96d82b22f043209a13ffbb921b1f830504c5e119fef07668e025e68924e16dab4bec0494ac626b1a3fd268eb533f8f1f4e71dd5270080f4649125e72f05beedb6f767379a9454ce64ee75d922be6a4a64450ae8cfc2324309b62925fcf8c06290569af50ef7b4a1c29c800ca6858adffbc947f2acc8cccd5b52c29a516c99f037240a77787a937c1e1118aa3b45943e0f2359460b85a518ea7f73875d6405f28074c21fa9523a0b21997dd63fb166b892a392fbaa4cbe0ee3d7a06c820113ae0fb75e917db29963b99093dc9f80eb4445e7942143f9e5191e91e1eb13ffe087ae67ea2dac9c399378d0ad828e72963ed5f1016f6de0f806a37331806bce111427fc377210d06f008e5de08302ceeb4b5101ffe4c6dd47409c31e66834df86c6b5afc36d418504d481088742d407c411dd20a6023e8e95317f10c6847a25c8cd63eae6249897721aa178068daf6667ec6057eb6e1d9661807b45986ae8152b589107c2eb064f825f91770723f87e02e75602c4d9db3ecdae58fb82a683d18c606254dee3afac7f876682537b4a064a81986c95edb2294c4bbd84dcfafa91984556dcc90f381de086eebfede4b7fa7ce0d580e18a439cf3e66be7ca028d29cbf47efea67d929027315acbbcfdf22f3b79441d97587afa44ffaf4146eeead933829fdbf8ed44e71f7bae1745a180d21acc1c5066fae0dfb9049cbd462d76cffe0fcedab1dd736f40eeabbf649cb85250433bb04ec616da5d17d02364b82eebbbc2bef98b9ed287ae75b28716de235e2f2a2e194f245cc245310daefc0069ed594ef2fcfddf627d02736477422b3595b7d16bc657d04630a0648e8e30998321ad3159e31a0a625fa002b066feca2ce0458b94ff1952ca0db60061ffef99621f58b796265c0f9ff1f061ab8f7a47ea7cc38147803a05e42090e4188c79827108f40178ffa4207206e7b13a235dffa954ec0c9a51b588c16a60ea4d17d5daed786d1d476085e072083ec672fbf4708817f9b7bdc6f153366f6d82841d661e6a8c1f62ad4e851fc30e665300b7fb82348f0742b5e921f472fa0ff9fb119ea31586d4ab40de70004d1aeaea9e1a8385dedd8880a351d66c1a316e24c64c1bf69dcc00500a9a41cc88b03e16a8640ff4491a2ff1ba432acf88b790cd07a4722ace13e5dd820846fbc08655ce01ab317a72f01c2f30046c6bb06a83a5f69607adf956b9dfdda34878b0b5313eb27f0133686e6d0e3349c7d0d7b9a03c44a6df33a9a3a70b2b585c5ad7cee23718e932b391262125e84c389a8e35237f826203f47da34a277c3da4c2ad664b426c2f1a28e8e8e55459545dc1c6d39752f6d29e3614d4ad7d045d4ccbd843c9f251443bde48e05fb3201c3a512f4fa697b205a2784214786c1c9caa910fb5e6c404e798b024a51db7df333c47390f5a13d7edb2e623ccd46e1f7ee85a126370feb9d906469d8277aa3c2258c39d30f156c2681d10af9ac1f78f59df690c4162b8f0833a1e15d945447da1e2ccb6cdbfdd57ff52eadd7caccfdda3306fb698334ed45d45f30ce8eff23de8f327db899af28b57c8a84a70ffeb09f1d1dfcaf1592f556b32c0005999e5902c795f430dcd11521737302f14312bf7cee8aa68862f62b35b750281d8ddc5147a8ca92d2cffefe614f99c90fa752412e61b9b0780a887f6c49d399a2584b5edc40dfb034dcad9c09cb8ad5a962a4f37635ec01166e657c9f59ccb266a50326c2da006d98e542be230dd9ded91a7f5e98c1bda432fb152173c4d8cf515a5cfec46a29ec190a9ff508e6a09b918a686a77363be5e10c0844725ed6c3b0fc96ebfd507b9c4734dbe069fa3e3cefaafbf0ab202dacbdc077442c6d8a528a9528fbe80bd15c869c3f6d6569194aa354be29302b1a5cb2d10b09543818779e4cf52a8ffa7b369c6922e5062f06b79d18420c0adf93032b664290d0edda785c301a33cd05dfc1139261f6b7151c08c00b9a48fe1e8f21f81147575621b704a5f15eb7f128e6152094337072586431667a65fcd5b665d3f72eb019b178f7c9cad29b5288f41dc059b36af1e0e72968043f55259264ccea0447c8d48c1c0110bb7946d890f443689b1932b0e9929367ecd658b9ab88887d5bbc56d1514f47ec40eb780321216aa0f669f33b42b30cb303f3d11fd91194ff51ce3061e7aa752f29e7cffeb05352a91e573c756e56bf230e87cddbbfc90dffd8e75aef2326dfcd41ebdcfcb4503321a7273c989f54f2ac9a1156f2c5911bccbbf3dd8de6f06c649b7ed1b25cf49fab52540f8ae4829a5544e42ded19159ba16dab55c0756b99dfde17bb04329719671341d36912a2f8d3247ba810d0c495a4d73f216a2a58f6799d155275662ae9fcfcf5e7c74d85cf8fce71ef38eaf824509954817945d18832c0659d448c07331d6ca75665963bfd9ed9c8823a70a6f1cdd5eba8c0a40ce72e02a39958ec2859fcc7d55dea47ff1ff354cd39c2c61a9bcbcb9144676739bbb0f4c8279f62761a5a4d5abab720eb185693932da665dad2e3ab7ee85f85164cae0c4f52ae60b9c2c9dcfe6b392d717f1e91ceda46349d55691784d3dbce3a0825c912ad8fb6c036a6e51aa57efdfd04b8e7c04974be71f5651cbc49b05d77234306f70f1b5cee7e35d75ae9e574878bfeee04e949e998d980b75a9881e8ba464a52dad02b3e94b2e3d6498bbebab4a78989da0867256044d6278b85ffd69df582694d77901ba1211c4016ac87d444a29acd5b3e82a080879cce08fe3bff66fc6ddbc49c7f32662ec0b9bb3a88a94b89254a0372a823200b5f83af37275370b35acff4fc50405067045f37e260d5c115a8399deb97767c49510e0e2db30cff04c4e5b2842bebad30bb60ff02b6c0cc6b212b59c5fc56c7491289fd746c3018b5e3292ee5b69a839a2b971570c847ae7e50ee6174e5122ca3c611a5d3f8562f823b97d8a6", 0x1000, 0x3f}], 0x100000, &(0x7f0000001940)=ANY=[@ANYBLOB="726f6469722c866f723d3f2c00"]) close_range(r0, 0xffffffffffffffff, 0x0) 12:08:39 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:08:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = getpgid(0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', &(0x7f0000001800)={0x8002, 0x8, 0x10}, 0x18) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x9, 0x9, 0x7, 0x0, 0x8, 0x800, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x9, 0x7cdf}, 0x40c, 0x9, 0x4, 0x6, 0x6, 0xffffffff, 0x81a8, 0x0, 0x4, 0x0, 0x48000000000}, r5, 0xd, r6, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30532529e14f1147b9f1daff24eefbf2819abd31176f7cb1dd9a361a0ab00460ca22ecc63d41cd8fdcb9be83b18a7f643dc8892f9ca3f8", @ANYRES16=r2, @ANYBLOB='\x00'/14, @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20044094) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) [ 181.309643] audit: type=1400 audit(1761653319.880:11): avc: denied { write } for pid=4581 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 181.336232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.357822] loop2: detected capacity change from 0 to 4 [ 181.372996] audit: type=1400 audit(1761653319.944:12): avc: denied { block_suspend } for pid=4582 comm="syz-executor.5" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 181.378537] EXT4-fs (loop2): Can't read superblock on 2nd try [ 181.408508] loop5: detected capacity change from 0 to 100 12:08:39 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202100, 0x0) fstatfs(r8, &(0x7f0000000240)=""/219) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:08:40 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfd7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x200082, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0xffffffff00000000, 0x5}, 0x0, 0x0, 0x3ff, 0x1, 0xff, 0x3f, 0x3, 0x0, 0x4}, r1, 0x4, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200010000000000000000000c00000002"], 0x28}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2, 0x2, 0x2, 0x4, 0x0, 0x30000000000000, 0x10, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x8000, 0xb96, 0x5, 0x9, 0x4, 0x80000001, 0x3, 0x0, 0x7a, 0x0, 0x1}, 0xffffffffffffffff, 0xf, r0, 0x8) [ 181.487636] loop5: detected capacity change from 0 to 100 [ 181.549283] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 12:08:49 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 12:08:49 executing program 2: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:08:49 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202100, 0x0) fstatfs(r8, &(0x7f0000000240)=""/219) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:08:49 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x15c00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000dc0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00)={0x0}, &(0x7f0000000e40)=0xc) r4 = fork() ptrace(0x10, r4) clone3(&(0x7f0000000ec0)={0x110001200, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180), {0x23}, &(0x7f00000001c0)=""/38, 0x26, &(0x7f0000000cc0)=""/199, &(0x7f0000000e80)=[r2, r3, r4], 0x3}, 0x58) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xff, 0x9, 0x40, 0xa3, 0x0, 0x100, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x80000001}, 0x1000, 0x40e, 0x7, 0x7, 0x80, 0x9, 0x1ff, 0x0, 0x40, 0x0, 0x6}, r2, 0xb, r5, 0x9) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x81, 0x7, 0x33, 0x80, 0x0, 0x1, 0x2020, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x4100, 0x2, 0x8001, 0x9, 0x1, 0x401b, 0x5, 0x0, 0xffffffff, 0x0, 0x6}, r1, 0x3, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}], 0x0, &(0x7f0000012900)) 12:08:49 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:08:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = getpgid(0xffffffffffffffff) r6 = openat2(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', &(0x7f0000001800)={0x8002, 0x8, 0x10}, 0x18) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x9, 0x9, 0x7, 0x0, 0x8, 0x800, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x9, 0x7cdf}, 0x40c, 0x9, 0x4, 0x6, 0x6, 0xffffffff, 0x81a8, 0x0, 0x4, 0x0, 0x48000000000}, r5, 0xd, r6, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30532529e14f1147b9f1daff24eefbf2819abd31176f7cb1dd9a361a0ab00460ca22ecc63d41cd8fdcb9be83b18a7f643dc8892f9ca3f8", @ANYRES16=r2, @ANYBLOB='\x00'/14, @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20044094) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 12:08:49 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x768, 0x4, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001140)=""/227, 0xe3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)) 12:08:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000300)=@can={0x1d, 0x0}, &(0x7f0000000380)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x25}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="a56fae37acea5268aabfda962dadbd9fa84714809c770b5087a3da9c2ba16d4637f903181b033e974202e8f73350c0e433885f7a9e05e40d1b2235f04947b1dee6f8cd37649ccdb343456d2d058413b0aa2656efe7bfcdad264d08206f36f23455f00875515b67090efc0fb3d249fc464e4531d5e135496a97", 0x79}, {&(0x7f0000000140)="d552d0b7854a692292126e492ff971c1720fe96865f107b67b5b888682", 0x1d}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x456}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7c1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xa8}}, {{&(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast1}}}, @ip_tos_int={{0x14}}], 0x70}}, {{&(0x7f0000000440)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="91677c7c9630f7c86e2970bf3f988cafa0d277eac79e42289e8d078d1971714df3ca9302d2b92455459c8634744998d8038f37237c5ab62dd1b32a3cded17b0e1fa7b3d0e68542191a01258687701114ce4ba9b7304f616d658a2b58dd130352f98480b5fa9880a81c9886f3ff22ec24e029f06f9c769b734987e9ebddef3dc601fa5e65bd7aab50379eb1fefa2f8abf7e3bd201bf345ffe8776117f9a02d43148055877129c95a33131e190569e042d4e435c77a8", 0xb5}, {&(0x7f0000000540)="73fe1f95187fa18649cc06bb678ed2078dd624a2d9cffd01ec6b3152dd2675701614e52cfe50a9e3a8f055e608a2f48d534c7d05ceb0503affbc5f0d3c9a5571bb98b116f50e67ee554e5f67137894ed8a60a6f9421aab73a89f4a61171409cacd996fd8ccfc03431f1d742702ff15ccae162ff647e43fe08fdd0ca30b1a3ce4597dd279d9cdc644a7a1d019f123c235dc3d03562f5777ebbd56549d234f2f01f4b02fd243261858284fe720c380d6044801b6ccc5244afd55129f83f491db839114ccd7b3e35675835bc7f554aa91bea83ad1309cbcd53594385ffa32", 0xdd}, {&(0x7f0000000640)="bd65a33611aad9b1156d2291cf6c5aad07a7e54772cf57c53abe57b3de1caa92b2e4042a8c9dec4a5f242491c01267413190d47266cf04ecf06b5f1829b0bdcb784f48348b4235ee09a3e68ddb63a91e6dbfbba9bdaff8a28353c73fbe1fc1d4ac832ad5c3062a195d9bd65b474523e36d40b268a799deec6bc8b6c1b25167180da255bf3e64a30cfcccc4e12adcc1c8536e46506b71cedec4d64994270798013b48bb76ab1354e14827f6d1efac3c6710992d0f5d007177ace5a1b3efbbedf40ca3e79215840c085239d2ebcd1b179e2b64706e6bd0d5b92aa039afbf06a975914f8fd03e36723ec7e815713c18e6201f", 0xf1}], 0x3, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000800)="4709457f758bd8f3e3eb2ba622bfa7fcbe2553e130dac0373200c35b75215149ba73524c5fc5c72b39d7034c78c1cc734f93c1075c86b1c91a7cb261a39605e74ed11c92d500f56a2a4d43631601b32adba5a6c13a6230947e3f55ab91e041a8dccadadc54c3f2068d138173c733785db9127e2bb72296e28dd6cbe7492028b871831e4f8558f5ef32442e8f3c6590782e1ea108a04dd7dd389a45a0155577cf19bd51361c95eb4eb94e8927fc4d549da735336b441df7ffc2b0221dc4eec6c60b4cb52b84a97855b39d29acc0f7b4a79c9bea00d6e5e5379b3c3d6a", 0xdc}, {&(0x7f0000000900)="d69ec73baed4d2588cc146d6b47d17011bd48b218c79fc409df291210fe79063fad6d47067123fb49f7529a6077904884b31e42c94ae777f8822b62f52bf7ae7f7e4dfe8d4b73522c2eeffc5e7a5727764e83d68e327e257dcf8118be7a3ed44283a44e76c981b2eeb9b4a186e37d82a3e4648048d50c7be5a0e615eee3dc717214d6d74131ce769d879c6b12503561bff008fa9f686e776d70ab79f1e5f12939d814bd39192f85427b6ff3c9aec3610941789adce0c50d1443867d071c42b6e335fbbfa05b1beba9798e258f499b8d8ca96597c71f8f1416f798e118f5115abef73037d788f288a38b22a58bcfcb05a8f7dcdff07", 0xf5}, {&(0x7f0000000a00)="1aaa73db8d50cdf4816c7ec6c7c19e38537deba8ae394dd7cc2033ef4347d60ea04737f1e9095e5f2912a57acdc8e10ddacb01ef22805e3d489c89c32b54074c5886083e2b138256c11e1cb147ac4da3e3f99022ff2878a58730939eef7d2dc77151be3dfc59e43a5f7a597a80ca47016f243932d7a2fcf3ffa77e94f244fb8d01624a4c31392cb571478cc87a1829baa246390780ade5c3d546a04ea5eddd1f9bd83d21264755a0d57252db08bb4e12afaf0e0418e0", 0xb6}, {&(0x7f0000000ac0)="304352301744c26ea36861e030f21d5e66341c83cf02bbfc917bcae67278554ad8057d3467e25239d6ee8de9d5da60b5957135d034eaf7ce82fa01d9c3ca726502f12e349b250a180e7d12a1dc2569cb129b1c845f888ce95fd90218f3e04622a00e866614997b71eec38cbd03b11cf18a716a0bd83324c7efd15eed375efb075e4611bfebbfe0cf8aed1fb4114724499552b548d4cc5cfff6b0b4ff22c829f35d081d882d91843e2036fb91131d4f444e6c4273c2d6b989b72873bb135b000eeb9be5f47d0be5f3014649196706f7c9d417e5a731f99a032b0851c535c177e75574", 0xe2}, {&(0x7f0000000bc0)="97b2dc58768cc7fb94dca8b52f7506db0f9f0d9a9d24c799beba8813da3503ea122a0bc13af5a7062554c02718afeb4c462f5db9bcd699b95b3063a76bc16d4a8d5dc95df06a07ae8a9aa2b84d189a1cd0baccff88139140f0d961443e67bbb7aac10286221961eb5667f4b0d683c12def4cc0174b18fed8ecb98155c06a29d531cdc4502f4ac7436213a5de9a143824cf30135346b72575dc7bb34a06e362fd1aa29d550160b002e24d6f0adcbea0e776f793f9e2aa1c656bd6a116955949e58be70672d23d04cc1749967223cfde2665e40129c8e435deebe96f773daf8a49d07601c1a9117c1a738412b46669add58a", 0xf1}], 0x5, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x60}}, {{&(0x7f0000000dc0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002000)=[{&(0x7f0000000e00)="531ef334a381f1cbd89a7eabd31e34e18d5b004aeb824e45f31198a4f925fb3ebc0af3e6da4892a805ee0fc56ecc77ef6fe5da960430a403657017ed", 0x3c}, {&(0x7f0000000e40)="4306f305773b6c930920af5be7e1c54cb320462309ca5a70108a3afa8e7139983703079a05ef5ef029792b49f1f54b20b57244392b902e5f401b16bd3f98acecaa5bcf7b1a77080702e1308cffd69110247fd6174df5e8249857db247a7548506039105ac6f28e06110c848642ce37e93d3219b9d2727446df75ea30e5133ae9a5f989e477a2d7d3c5b585e7e6fbdd74e1e24988bd6e9866d3209649da167ae359c626546db659709e14a47a119ceee4e608e017070a7d48d1c068562d7180e09e218fe95e48d39be1690b89d28ee46b797ec7e1c9ee2c39193e94add9abe10a", 0xe0}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="28168b71f79062f1734f879d85e5443d67008a35f97ea81f03afba03b0abfdc56da3b2e811f1d68270d7cce62e8a471e9162308ba81be9fb37ef24b4c124837c145aacb93cf218b7483122caad49295ca96ca7a3628ff65c3b12d19bf3331ae93d59eaced47e357514e5e0931943d8ae2ef92f987c0f3058c4720f3760393c2673cfe32a398895641cb73af55f1f4c2f74cfa558ac252b385fb7958ad724629de4cf4c", 0xa3}], 0x4, &(0x7f0000002040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000002080)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000002200)=[{&(0x7f00000020c0)="00cf4ad29c8e4576651906b02624a69f34879fc2a0137285593998c8db08a1fc3a950885fb768e7d8435d8e52baaf7ee7f214f2e1c40c2363022d90f7941a519b3353ece02d6db90bec622d4f1659ab8d27c893209e3b4504ba19a7c129fc6cbfa452491e409acd0b3bcd4cbca5e1d4ee9333c02df5f4bf8c9eb5fc02b9af1dfa95cd8cf97f67aacc3568cfc9681970652a96081916dfa3b5458a72fa85ba8914cd51480aa7447165866bd6862f8fce87a11d5a1b066bacde13db29b1418417fa286a1eed4f68531ab2dbeacee7bc14e0f79d9188cbdc401c2823e2987bd18", 0xdf}, {&(0x7f00000021c0)="58845288402bf4afe8a4f72308dc5f16912457f79c9b23a96a46dc1811a8dc8503ffb989ec4757052fde3a6cf0cfbd0b17e3b5b9a1", 0x35}], 0x2}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002240)="cc86b3b4928efba17ca8771d18a0fe909e00b595686df42ffa6c8171f41471813e9fade99524c36fd0eb86218495c296587f62793c064799fe23b391606ef04cc038a8c4e961c12a9cc3b050979f862203f596e04afb51b09557a870694fc6a90480", 0x62}, {&(0x7f00000022c0)="c29cc6e613d2215a37beee270413f89567985f69bb1c4fbf90af7e3d3b2f6934d27822d0ebaea3df45b48ea0e6f84d5f497a281c66", 0x35}, {&(0x7f0000002300)="c0190ef6c1561dc3beb3a13c3d3eb80a98c99f5f601104b62d97efdf81689a5172", 0x21}, {&(0x7f0000002340)="3e63692593547ed67c49f4a509d6d1e675d430ddfce7e17e9d67068183982a3df219b80060f9d62d12b0088afd601ff0c0d6d5b59c7bc8b9440bca15663e74a817428cee411d3d4f06fb23495a86ffaffcfb8359ea3b20cdb5082eb2a27823f23be484e1cb903b053d43a88112c60e0eed74eb8c2c9a745b8869a370a8391976594fac4bd8958c0f643db942869297ebf4c048868a7534aff5fc491872a7281f3d8a9e654672e02d1a8d815695fabd9783a1f95251035ffd1636ac31d4796308db3951c6983e74f028813e24b0f64a3710b7b89c3eb62d721b8d481ff1e57a5a9b2c1dde435226f9d022eed4eb1e365cdff59220a21dff9906289e793632ba", 0xff}], 0x4, &(0x7f0000002480)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x38, [@local, @multicast2]}, @ssrr={0x89, 0x1f, 0xfa, [@remote, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @local, @rand_addr=0x64010100]}, @noop, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x84, 0x0, 0x7, {[@end, @end, @generic={0x83, 0x6, "a47affe1"}, @generic={0x86, 0xc, "2b73315307ab727c4bc1"}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x3, [0x7fff]}, @timestamp={0x44, 0x20, 0xb4, 0x0, 0x4, [0x101, 0x1ff, 0x80, 0xfffff001, 0x200, 0x81, 0x9]}, @ssrr={0x89, 0x13, 0xc3, [@local, @broadcast, @multicast2, @empty]}, @end, @rr={0x7, 0x23, 0xbd, [@multicast2, @local, @empty, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @broadcast}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x76, 0x0, 0x3, [0x400, 0x3, 0x0, 0x8, 0x6, 0x1, 0x3]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1b, 0x1, [{0x5, 0x4, "a851"}, {0x2, 0x6, "45b3bbd5"}, {0x7, 0xb, "cba0d8d16189fa643e"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x1c8}}, {{&(0x7f0000002680)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000026c0), 0x0, &(0x7f0000002700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0xcb, [@rand_addr=0x64010102, @private=0xa010101, @local, @empty, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1]}, @cipso={0x86, 0x26, 0x3, [{0x0, 0x8, "f09b371ed24c"}, {0x5, 0x6, "13889545"}, {0x5, 0x4, "ae5c"}, {0x5, 0xe, "e28cf08215d79099d3420276"}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xb7, 0x1, 0x1, [{@loopback, 0x7f}, {@rand_addr=0x64010102, 0x65}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5387}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa5}, {@private=0xa010102, 0x4}, {@local, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0xb75}, {@local, 0x3}]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0x69, 0x0, 0x0, [0x4, 0x80, 0xffffff00, 0x8000, 0x400, 0x9, 0xffff, 0x60, 0x100, 0x7]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x190}}, {{&(0x7f00000028c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000002900)="36bc0f6a0414991d54ab43cf417eaceadfb01e44b3fcd20d2fa48ff6b16abf89d4b720232fd4c6c8b88c9761ef61da94d69156038953ed1fc45a7a5f1cf5a999eccaeb6e26f5cb9a605094f13736c195593bcda41b50a05628d5c5218471568fb891236e835a2ea5202b375f5d53662dbce671fed116af4eeb05c0a7a52d067706bdf49579032cdbe4b66eb5be7ae34ab2a2a73beceef9e20f09ac5d40c17c2dc24d7674cf4f483dd2f752f74a0344cb7771102cad49e56d5d30bda0a16cd0eed965d77a89f3bbbdfb9728c51c138f720109fbb25f0d2a6801b9f23b0c630ca32d3b1bf49969575900", 0xe9}], 0x1}}], 0x9, 0x50) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) socketpair(0xb, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0xd22e) r7 = socket$inet_icmp(0x2, 0x2, 0x1) close_range(0xffffffffffffffff, r7, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {0x25}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r9, 0x1, 0x0, 0x0, {0x25}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002c80)={0x1bc, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008084}, 0x20000800) [ 191.187299] loop2: detected capacity change from 0 to 4 [ 191.203050] audit: type=1400 audit(1761653329.769:13): avc: denied { watch_reads } for pid=4620 comm="syz-executor.1" path="/syzkaller-testdir236599061/syzkaller.enOeDk/5" dev="sda" ino=15975 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 [ 191.209566] EXT4-fs (loop2): Can't read superblock on 2nd try [ 191.308760] loop7: detected capacity change from 0 to 512 12:08:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) [ 191.368594] EXT4-fs error (device loop7): __ext4_fill_super:5512: inode #2: comm syz-executor.7: iget: special inode unallocated [ 191.371751] EXT4-fs (loop7): get root inode failed [ 191.372927] EXT4-fs (loop7): mount failed 12:08:49 executing program 2: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:08:49 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) [ 191.500982] loop7: detected capacity change from 0 to 512 [ 191.508690] loop2: detected capacity change from 0 to 4 12:08:50 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202100, 0x0) fstatfs(r8, &(0x7f0000000240)=""/219) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 191.558036] EXT4-fs (loop2): Can't read superblock on 2nd try 12:08:50 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x1d}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000810) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000300)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f0000000840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r2) fork() r3 = getpgrp(0x0) tgkill(r3, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000002c0)={0x5, 0x4, 0xfffffffe, 0x400, 0x17, "fd4b7df5be179422c2dc7d06001b005d60ebc9"}) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000001200)='.log\x00', 0xc000, 0x2) perf_event_open(&(0x7f0000001040)={0x0, 0x80, 0x8, 0x1f, 0xff, 0x40, 0x0, 0x80, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x10001, 0x4}, 0x400, 0x4, 0x8f, 0x9, 0x7fffffff, 0x1, 0x8, 0x0, 0x7, 0x0, 0x6}, r3, 0x0, r5, 0x2) 12:08:50 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) sendfile(r3, r4, 0x0, 0xfdef) [ 191.585887] EXT4-fs error (device loop7): __ext4_fill_super:5512: inode #2: comm syz-executor.7: iget: special inode unallocated 12:08:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000300)=@can={0x1d, 0x0}, &(0x7f0000000380)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x25}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="a56fae37acea5268aabfda962dadbd9fa84714809c770b5087a3da9c2ba16d4637f903181b033e974202e8f73350c0e433885f7a9e05e40d1b2235f04947b1dee6f8cd37649ccdb343456d2d058413b0aa2656efe7bfcdad264d08206f36f23455f00875515b67090efc0fb3d249fc464e4531d5e135496a97", 0x79}, {&(0x7f0000000140)="d552d0b7854a692292126e492ff971c1720fe96865f107b67b5b888682", 0x1d}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x456}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7c1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xa8}}, {{&(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast1}}}, @ip_tos_int={{0x14}}], 0x70}}, {{&(0x7f0000000440)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="91677c7c9630f7c86e2970bf3f988cafa0d277eac79e42289e8d078d1971714df3ca9302d2b92455459c8634744998d8038f37237c5ab62dd1b32a3cded17b0e1fa7b3d0e68542191a01258687701114ce4ba9b7304f616d658a2b58dd130352f98480b5fa9880a81c9886f3ff22ec24e029f06f9c769b734987e9ebddef3dc601fa5e65bd7aab50379eb1fefa2f8abf7e3bd201bf345ffe8776117f9a02d43148055877129c95a33131e190569e042d4e435c77a8", 0xb5}, {&(0x7f0000000540)="73fe1f95187fa18649cc06bb678ed2078dd624a2d9cffd01ec6b3152dd2675701614e52cfe50a9e3a8f055e608a2f48d534c7d05ceb0503affbc5f0d3c9a5571bb98b116f50e67ee554e5f67137894ed8a60a6f9421aab73a89f4a61171409cacd996fd8ccfc03431f1d742702ff15ccae162ff647e43fe08fdd0ca30b1a3ce4597dd279d9cdc644a7a1d019f123c235dc3d03562f5777ebbd56549d234f2f01f4b02fd243261858284fe720c380d6044801b6ccc5244afd55129f83f491db839114ccd7b3e35675835bc7f554aa91bea83ad1309cbcd53594385ffa32", 0xdd}, {&(0x7f0000000640)="bd65a33611aad9b1156d2291cf6c5aad07a7e54772cf57c53abe57b3de1caa92b2e4042a8c9dec4a5f242491c01267413190d47266cf04ecf06b5f1829b0bdcb784f48348b4235ee09a3e68ddb63a91e6dbfbba9bdaff8a28353c73fbe1fc1d4ac832ad5c3062a195d9bd65b474523e36d40b268a799deec6bc8b6c1b25167180da255bf3e64a30cfcccc4e12adcc1c8536e46506b71cedec4d64994270798013b48bb76ab1354e14827f6d1efac3c6710992d0f5d007177ace5a1b3efbbedf40ca3e79215840c085239d2ebcd1b179e2b64706e6bd0d5b92aa039afbf06a975914f8fd03e36723ec7e815713c18e6201f", 0xf1}], 0x3, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000800)="4709457f758bd8f3e3eb2ba622bfa7fcbe2553e130dac0373200c35b75215149ba73524c5fc5c72b39d7034c78c1cc734f93c1075c86b1c91a7cb261a39605e74ed11c92d500f56a2a4d43631601b32adba5a6c13a6230947e3f55ab91e041a8dccadadc54c3f2068d138173c733785db9127e2bb72296e28dd6cbe7492028b871831e4f8558f5ef32442e8f3c6590782e1ea108a04dd7dd389a45a0155577cf19bd51361c95eb4eb94e8927fc4d549da735336b441df7ffc2b0221dc4eec6c60b4cb52b84a97855b39d29acc0f7b4a79c9bea00d6e5e5379b3c3d6a", 0xdc}, {&(0x7f0000000900)="d69ec73baed4d2588cc146d6b47d17011bd48b218c79fc409df291210fe79063fad6d47067123fb49f7529a6077904884b31e42c94ae777f8822b62f52bf7ae7f7e4dfe8d4b73522c2eeffc5e7a5727764e83d68e327e257dcf8118be7a3ed44283a44e76c981b2eeb9b4a186e37d82a3e4648048d50c7be5a0e615eee3dc717214d6d74131ce769d879c6b12503561bff008fa9f686e776d70ab79f1e5f12939d814bd39192f85427b6ff3c9aec3610941789adce0c50d1443867d071c42b6e335fbbfa05b1beba9798e258f499b8d8ca96597c71f8f1416f798e118f5115abef73037d788f288a38b22a58bcfcb05a8f7dcdff07", 0xf5}, {&(0x7f0000000a00)="1aaa73db8d50cdf4816c7ec6c7c19e38537deba8ae394dd7cc2033ef4347d60ea04737f1e9095e5f2912a57acdc8e10ddacb01ef22805e3d489c89c32b54074c5886083e2b138256c11e1cb147ac4da3e3f99022ff2878a58730939eef7d2dc77151be3dfc59e43a5f7a597a80ca47016f243932d7a2fcf3ffa77e94f244fb8d01624a4c31392cb571478cc87a1829baa246390780ade5c3d546a04ea5eddd1f9bd83d21264755a0d57252db08bb4e12afaf0e0418e0", 0xb6}, {&(0x7f0000000ac0)="304352301744c26ea36861e030f21d5e66341c83cf02bbfc917bcae67278554ad8057d3467e25239d6ee8de9d5da60b5957135d034eaf7ce82fa01d9c3ca726502f12e349b250a180e7d12a1dc2569cb129b1c845f888ce95fd90218f3e04622a00e866614997b71eec38cbd03b11cf18a716a0bd83324c7efd15eed375efb075e4611bfebbfe0cf8aed1fb4114724499552b548d4cc5cfff6b0b4ff22c829f35d081d882d91843e2036fb91131d4f444e6c4273c2d6b989b72873bb135b000eeb9be5f47d0be5f3014649196706f7c9d417e5a731f99a032b0851c535c177e75574", 0xe2}, {&(0x7f0000000bc0)="97b2dc58768cc7fb94dca8b52f7506db0f9f0d9a9d24c799beba8813da3503ea122a0bc13af5a7062554c02718afeb4c462f5db9bcd699b95b3063a76bc16d4a8d5dc95df06a07ae8a9aa2b84d189a1cd0baccff88139140f0d961443e67bbb7aac10286221961eb5667f4b0d683c12def4cc0174b18fed8ecb98155c06a29d531cdc4502f4ac7436213a5de9a143824cf30135346b72575dc7bb34a06e362fd1aa29d550160b002e24d6f0adcbea0e776f793f9e2aa1c656bd6a116955949e58be70672d23d04cc1749967223cfde2665e40129c8e435deebe96f773daf8a49d07601c1a9117c1a738412b46669add58a", 0xf1}], 0x5, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x60}}, {{&(0x7f0000000dc0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002000)=[{&(0x7f0000000e00)="531ef334a381f1cbd89a7eabd31e34e18d5b004aeb824e45f31198a4f925fb3ebc0af3e6da4892a805ee0fc56ecc77ef6fe5da960430a403657017ed", 0x3c}, {&(0x7f0000000e40)="4306f305773b6c930920af5be7e1c54cb320462309ca5a70108a3afa8e7139983703079a05ef5ef029792b49f1f54b20b57244392b902e5f401b16bd3f98acecaa5bcf7b1a77080702e1308cffd69110247fd6174df5e8249857db247a7548506039105ac6f28e06110c848642ce37e93d3219b9d2727446df75ea30e5133ae9a5f989e477a2d7d3c5b585e7e6fbdd74e1e24988bd6e9866d3209649da167ae359c626546db659709e14a47a119ceee4e608e017070a7d48d1c068562d7180e09e218fe95e48d39be1690b89d28ee46b797ec7e1c9ee2c39193e94add9abe10a", 0xe0}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="28168b71f79062f1734f879d85e5443d67008a35f97ea81f03afba03b0abfdc56da3b2e811f1d68270d7cce62e8a471e9162308ba81be9fb37ef24b4c124837c145aacb93cf218b7483122caad49295ca96ca7a3628ff65c3b12d19bf3331ae93d59eaced47e357514e5e0931943d8ae2ef92f987c0f3058c4720f3760393c2673cfe32a398895641cb73af55f1f4c2f74cfa558ac252b385fb7958ad724629de4cf4c", 0xa3}], 0x4, &(0x7f0000002040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000002080)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000002200)=[{&(0x7f00000020c0)="00cf4ad29c8e4576651906b02624a69f34879fc2a0137285593998c8db08a1fc3a950885fb768e7d8435d8e52baaf7ee7f214f2e1c40c2363022d90f7941a519b3353ece02d6db90bec622d4f1659ab8d27c893209e3b4504ba19a7c129fc6cbfa452491e409acd0b3bcd4cbca5e1d4ee9333c02df5f4bf8c9eb5fc02b9af1dfa95cd8cf97f67aacc3568cfc9681970652a96081916dfa3b5458a72fa85ba8914cd51480aa7447165866bd6862f8fce87a11d5a1b066bacde13db29b1418417fa286a1eed4f68531ab2dbeacee7bc14e0f79d9188cbdc401c2823e2987bd18", 0xdf}, {&(0x7f00000021c0)="58845288402bf4afe8a4f72308dc5f16912457f79c9b23a96a46dc1811a8dc8503ffb989ec4757052fde3a6cf0cfbd0b17e3b5b9a1", 0x35}], 0x2}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002240)="cc86b3b4928efba17ca8771d18a0fe909e00b595686df42ffa6c8171f41471813e9fade99524c36fd0eb86218495c296587f62793c064799fe23b391606ef04cc038a8c4e961c12a9cc3b050979f862203f596e04afb51b09557a870694fc6a90480", 0x62}, {&(0x7f00000022c0)="c29cc6e613d2215a37beee270413f89567985f69bb1c4fbf90af7e3d3b2f6934d27822d0ebaea3df45b48ea0e6f84d5f497a281c66", 0x35}, {&(0x7f0000002300)="c0190ef6c1561dc3beb3a13c3d3eb80a98c99f5f601104b62d97efdf81689a5172", 0x21}, {&(0x7f0000002340)="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", 0xff}], 0x4, &(0x7f0000002480)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x38, [@local, @multicast2]}, @ssrr={0x89, 0x1f, 0xfa, [@remote, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @local, @rand_addr=0x64010100]}, @noop, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x84, 0x0, 0x7, {[@end, @end, @generic={0x83, 0x6, "a47affe1"}, @generic={0x86, 0xc, "2b73315307ab727c4bc1"}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x3, [0x7fff]}, @timestamp={0x44, 0x20, 0xb4, 0x0, 0x4, [0x101, 0x1ff, 0x80, 0xfffff001, 0x200, 0x81, 0x9]}, @ssrr={0x89, 0x13, 0xc3, [@local, @broadcast, @multicast2, @empty]}, @end, @rr={0x7, 0x23, 0xbd, [@multicast2, @local, @empty, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @broadcast}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x76, 0x0, 0x3, [0x400, 0x3, 0x0, 0x8, 0x6, 0x1, 0x3]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1b, 0x1, [{0x5, 0x4, "a851"}, {0x2, 0x6, "45b3bbd5"}, {0x7, 0xb, "cba0d8d16189fa643e"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x1c8}}, {{&(0x7f0000002680)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000026c0), 0x0, &(0x7f0000002700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0xcb, [@rand_addr=0x64010102, @private=0xa010101, @local, @empty, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1]}, @cipso={0x86, 0x26, 0x3, [{0x0, 0x8, "f09b371ed24c"}, {0x5, 0x6, "13889545"}, {0x5, 0x4, "ae5c"}, {0x5, 0xe, "e28cf08215d79099d3420276"}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xb7, 0x1, 0x1, [{@loopback, 0x7f}, {@rand_addr=0x64010102, 0x65}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5387}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa5}, {@private=0xa010102, 0x4}, {@local, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0xb75}, {@local, 0x3}]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0x69, 0x0, 0x0, [0x4, 0x80, 0xffffff00, 0x8000, 0x400, 0x9, 0xffff, 0x60, 0x100, 0x7]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x190}}, {{&(0x7f00000028c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000002900)="36bc0f6a0414991d54ab43cf417eaceadfb01e44b3fcd20d2fa48ff6b16abf89d4b720232fd4c6c8b88c9761ef61da94d69156038953ed1fc45a7a5f1cf5a999eccaeb6e26f5cb9a605094f13736c195593bcda41b50a05628d5c5218471568fb891236e835a2ea5202b375f5d53662dbce671fed116af4eeb05c0a7a52d067706bdf49579032cdbe4b66eb5be7ae34ab2a2a73beceef9e20f09ac5d40c17c2dc24d7674cf4f483dd2f752f74a0344cb7771102cad49e56d5d30bda0a16cd0eed965d77a89f3bbbdfb9728c51c138f720109fbb25f0d2a6801b9f23b0c630ca32d3b1bf49969575900", 0xe9}], 0x1}}], 0x9, 0x50) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) socketpair(0xb, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0xd22e) r7 = socket$inet_icmp(0x2, 0x2, 0x1) close_range(0xffffffffffffffff, r7, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {0x25}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r9, 0x1, 0x0, 0x0, {0x25}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002c80)={0x1bc, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20008084}, 0x20000800) [ 191.602936] EXT4-fs (loop7): get root inode failed [ 191.603437] EXT4-fs (loop7): mount failed 12:08:50 executing program 2: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:08:50 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) sendfile(r3, r4, 0x0, 0xfdef) 12:08:50 executing program 7: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc400028e) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0xee00, 0x0) [ 191.704399] loop3: detected capacity change from 0 to 64 12:08:50 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) [ 191.775405] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 191.782748] loop2: detected capacity change from 0 to 4 [ 191.796717] EXT4-fs (loop2): Can't read superblock on 2nd try 12:08:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:08:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000006200)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x1, 0x0) close(r2) 12:08:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 191.935520] loop2: detected capacity change from 0 to 4 [ 191.944068] EXT4-fs (loop2): Can't read superblock on 2nd try 12:08:59 executing program 5: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e90408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576541c6b8442859e22fa980db69b5a000000001e5c32bed0b821c0e1ea75877b4645"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'syz_tun\x00'}) 12:08:59 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x1d}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000810) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000300)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f0000000840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r2) fork() r3 = getpgrp(0x0) tgkill(r3, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000002c0)={0x5, 0x4, 0xfffffffe, 0x400, 0x17, "fd4b7df5be179422c2dc7d06001b005d60ebc9"}) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000001200)='.log\x00', 0xc000, 0x2) perf_event_open(&(0x7f0000001040)={0x0, 0x80, 0x8, 0x1f, 0xff, 0x40, 0x0, 0x80, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x10001, 0x4}, 0x400, 0x4, 0x8f, 0x9, 0x7fffffff, 0x1, 0x8, 0x0, 0x7, 0x0, 0x6}, r3, 0x0, r5, 0x2) 12:08:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202100, 0x0) fstatfs(r8, &(0x7f0000000240)=""/219) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:08:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:08:59 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 12:08:59 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000080)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f0000012e00)="ed61000000080000d0f4655fd2f4655fd2f4655f00000000000004", 0x1b, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) faccessat(r0, &(0x7f00000003c0)='./file0\x00', 0x20) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000780)={{{@in=@empty, @in=@loopback}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000880)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x20, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r2}}, {@posixacl}], [{@uid_gt={'uid>', r3}}, {@measure}, {@obj_role={'obj_role', 0x3d, '9p\x00'}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@euid_gt={'euid>', r5}}]}}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, 0x0) r7 = geteuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wno=\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',uname=,permit_directio,smackfstransmute=ext4\x00,euid<', @ANYRESDEC=r7, @ANYBLOB="2c32f95c33666c6f6f0000000000000000e9160f90b0997104d78d1ef0d5a0d7fa8e080d7a136de31ab6cc9718df1ce03b7008d0d445f910020076b630406d5cd685c9108541d1dfae61d9f14389f8ee2a32ffa48d45ddd4fe0dc009e66f"]) 12:08:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:08:59 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) sendfile(r3, r4, 0x0, 0xfdef) [ 201.074427] loop7: detected capacity change from 0 to 512 [ 201.082584] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 201.083333] EXT4-fs (loop7): mount failed [ 201.120735] loop2: detected capacity change from 0 to 4 [ 201.123322] 9pnet_fd: Insufficient options for proto=fd [ 201.131394] loop7: detected capacity change from 0 to 512 12:08:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202100, 0x0) fstatfs(r8, &(0x7f0000000240)=""/219) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 201.151364] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 201.153928] EXT4-fs (loop7): mount failed [ 201.215303] 9pnet_fd: Insufficient options for proto=fd 12:08:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:08:59 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x1d}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000810) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000300)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f0000000840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r2) fork() r3 = getpgrp(0x0) tgkill(r3, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000002c0)={0x5, 0x4, 0xfffffffe, 0x400, 0x17, "fd4b7df5be179422c2dc7d06001b005d60ebc9"}) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000001200)='.log\x00', 0xc000, 0x2) perf_event_open(&(0x7f0000001040)={0x0, 0x80, 0x8, 0x1f, 0xff, 0x40, 0x0, 0x80, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x10001, 0x4}, 0x400, 0x4, 0x8f, 0x9, 0x7fffffff, 0x1, 0x8, 0x0, 0x7, 0x0, 0x6}, r3, 0x0, r5, 0x2) [ 201.309507] loop2: detected capacity change from 0 to 4 12:09:09 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x1d}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000810) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000300)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f0000000840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r2) fork() r3 = getpgrp(0x0) tgkill(r3, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000002c0)={0x5, 0x4, 0xfffffffe, 0x400, 0x17, "fd4b7df5be179422c2dc7d06001b005d60ebc9"}) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000001200)='.log\x00', 0xc000, 0x2) perf_event_open(&(0x7f0000001040)={0x0, 0x80, 0x8, 0x1f, 0xff, 0x40, 0x0, 0x80, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x10001, 0x4}, 0x400, 0x4, 0x8f, 0x9, 0x7fffffff, 0x1, 0x8, 0x0, 0x7, 0x0, 0x6}, r3, 0x0, r5, 0x2) 12:09:09 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x80000000, @private0, 0x2}, 0x1c) timer_create(0x0, 0x0, 0x0) 12:09:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202100, 0x0) fstatfs(r8, &(0x7f0000000240)=""/219) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:09:09 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:09:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:09:09 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202100, 0x0) fstatfs(r8, &(0x7f0000000240)=""/219) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:09:09 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 210.817541] loop2: detected capacity change from 0 to 4 12:09:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202100, 0x0) fstatfs(r8, &(0x7f0000000240)=""/219) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:09:09 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:09:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:09:09 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x80000000, @private0, 0x2}, 0x1c) timer_create(0x0, 0x0, 0x0) 12:09:09 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:09:09 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) [ 211.071899] loop2: detected capacity change from 0 to 4 12:09:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202100, 0x0) fstatfs(r8, &(0x7f0000000240)=""/219) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 212.355995] Bluetooth: hci0: command 0x0406 tx timeout [ 216.451992] Bluetooth: hci2: command 0x0406 tx timeout [ 216.453343] Bluetooth: hci4: command 0x0406 tx timeout [ 216.453427] Bluetooth: hci5: command 0x0406 tx timeout [ 216.456606] Bluetooth: hci1: command 0x0406 tx timeout [ 216.457435] Bluetooth: hci7: command 0x0406 tx timeout [ 216.458244] Bluetooth: hci3: command 0x0406 tx timeout 12:09:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:09:18 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:18 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202100, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:09:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 12:09:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) 12:09:18 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000002e2f66696c653000f747c1508cc9d36d560ef81c7f873c3e1eefd729e648017bbed6f9a6ff00"/52]) socket$nl_xfrm(0x10, 0x3, 0x6) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 12:09:18 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 219.854436] loop2: detected capacity change from 0 to 4 12:09:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) 12:09:18 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:18 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000002e2f66696c653000f747c1508cc9d36d560ef81c7f873c3e1eefd729e648017bbed6f9a6ff00"/52]) socket$nl_xfrm(0x10, 0x3, 0x6) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 12:09:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:09:18 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 12:09:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) 12:09:18 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 220.080491] loop2: detected capacity change from 0 to 4 12:09:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:09:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:09:18 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:18 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) [ 220.256477] No source specified 12:09:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:09:27 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:09:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 12:09:27 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 12:09:27 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xfdef) 12:09:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:09:27 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:27 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 12:09:28 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xfdef) 12:09:38 executing program 7: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:09:38 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xfdef) 12:09:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:09:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:09:38 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:38 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:09:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 12:09:38 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 12:09:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:09:38 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:09:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:09:38 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:38 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:09:38 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:38 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) unshare(0x24000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 12:09:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}]}) 12:09:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:09:38 executing program 1: r0 = creat(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) [ 240.151373] No source specified 12:09:38 executing program 1: r0 = creat(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:09:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}]}) [ 240.346042] No source specified 12:09:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 12:09:48 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:48 executing program 1: r0 = creat(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:09:48 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:48 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) unshare(0x24000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 12:09:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:09:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:09:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@nobarrier}]}) [ 249.771020] No source specified 12:09:48 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:09:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) 12:09:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@data_ordered}]}) 12:09:48 executing program 6: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) unshare(0x24000000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 12:09:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:09:48 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) [ 249.971127] No source specified 12:09:48 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:09:48 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@data_ordered}]}) 12:09:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 12:09:57 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:57 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) 12:09:57 executing program 6: signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:09:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:09:57 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:57 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) [ 259.016675] No source specified 12:09:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@journal_checksum}, {@data_ordered}]}) 12:09:57 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:09:57 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) [ 259.130420] No source specified 12:09:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:09:57 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:09:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@nobarrier}, {@data_ordered}]}) 12:09:57 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:09:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:09:57 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) [ 259.303052] No source specified 12:10:06 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:10:06 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:10:06 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) 12:10:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) dup2(r5, r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840), &(0x7f0000001880)=0xc) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:10:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x8}, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:10:06 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:10:06 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@nobarrier}, {@data_ordered}]}) [ 268.135635] No source specified 12:10:06 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_continue}, {@prjquota}, {@nobarrier}, {@data_ordered}]}) 12:10:06 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r0, 0x10000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:10:06 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:10:06 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:10:06 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) [ 268.294105] No source specified 12:10:06 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:10:06 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:10:06 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) [ 273.796034] Bluetooth: hci6: command 0x0406 tx timeout 12:10:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:10:15 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:10:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) 12:10:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_continue}, {@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:10:15 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:15 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:10:15 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) [ 276.655284] No source specified 12:10:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) 12:10:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:10:15 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x1, 0x90, 0x0, 0xde, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xda, 0x2, @perf_config_ext={0xff, 0x40}, 0x10, 0x200, 0x10000, 0x2, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x0, 0x11}, 0x0, 0x8, 0xffffffffffffffff, 0x9) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 12:10:15 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:10:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:10:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 276.881189] No source specified 12:10:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:10:24 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:24 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:24 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:24 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:10:24 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:10:24 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 12:10:24 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffff75f4]}, 0x8) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xcb}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 12:10:24 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 12:10:24 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xfdef) 12:10:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:10:24 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:10:24 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000002e2f66696c653000f747c1508cc9d36d560ef81c7f873c3e1eefd729e648017bbed6f9a6ff00"/52]) socket$nl_xfrm(0x10, 0x3, 0x6) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 12:10:24 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) 12:10:24 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:10:33 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) 12:10:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:10:33 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:33 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xfdef) 12:10:33 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:10:33 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:33 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:10:33 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 1) 12:10:33 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) 12:10:33 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 295.000689] FAULT_INJECTION: forcing a failure. [ 295.000689] name failslab, interval 1, probability 0, space 0, times 1 [ 295.002673] CPU: 0 UID: 0 PID: 5138 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 295.002702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 295.002715] Call Trace: [ 295.002721] [ 295.002729] dump_stack_lvl+0xfa/0x120 [ 295.002759] should_fail_ex+0x4d7/0x5e0 [ 295.002786] should_failslab+0xc2/0x120 [ 295.002815] __kmalloc_cache_noprof+0x81/0x6b0 [ 295.002856] ? __might_fault+0xe0/0x190 [ 295.002879] ? alloc_pipe_info+0x10d/0x5a0 [ 295.002906] ? find_held_lock+0x2b/0x80 [ 295.002937] ? alloc_pipe_info+0x10d/0x5a0 [ 295.002964] alloc_pipe_info+0x10d/0x5a0 [ 295.002995] splice_direct_to_actor+0x78c/0x9d0 [ 295.003017] ? __lock_acquire+0x694/0x1b70 [ 295.003044] ? __pfx_direct_splice_actor+0x10/0x10 [ 295.003065] ? lock_acquire+0xd2/0x2f0 [ 295.003095] ? find_held_lock+0x2b/0x80 [ 295.003116] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 295.003139] ? lock_acquire+0x15e/0x2f0 [ 295.003171] do_splice_direct+0x179/0x250 [ 295.003191] ? __pfx_do_splice_direct+0x10/0x10 [ 295.003213] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 295.003250] ? security_file_permission+0x22/0x90 [ 295.003284] do_sendfile+0xa8e/0xdc0 [ 295.003315] ? __pfx_do_sendfile+0x10/0x10 [ 295.003339] ? __fget_files+0x20d/0x3b0 [ 295.003371] __x64_sys_sendfile64+0x1d3/0x210 [ 295.003402] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 295.003441] do_syscall_64+0xbf/0x390 [ 295.003469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.003491] RIP: 0033:0x7f8700fa9b19 [ 295.003508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 295.003527] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 295.003548] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 295.003562] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 295.003575] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 295.003587] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.003600] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 295.003627] 12:10:33 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:10:33 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:10:33 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:10:33 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 2) 12:10:33 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xfdef) 12:10:33 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:33 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:10:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 1) 12:10:33 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:10:34 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:10:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 3) [ 295.507959] FAULT_INJECTION: forcing a failure. [ 295.507959] name failslab, interval 1, probability 0, space 0, times 0 [ 295.509744] CPU: 0 UID: 0 PID: 5161 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 295.509782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 295.509804] Call Trace: [ 295.509812] [ 295.509821] dump_stack_lvl+0xfa/0x120 [ 295.509855] should_fail_ex+0x4d7/0x5e0 [ 295.509892] ? getname_flags.part.0+0x48/0x540 [ 295.509930] should_failslab+0xc2/0x120 [ 295.509963] kmem_cache_alloc_noprof+0x80/0x690 [ 295.510006] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 295.510046] ? getname_flags.part.0+0x48/0x540 [ 295.510084] getname_flags.part.0+0x48/0x540 [ 295.510125] __x64_sys_mkdir+0xdb/0x140 [ 295.510158] do_syscall_64+0xbf/0x390 [ 295.510190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.510214] RIP: 0033:0x7fc352503c27 [ 295.510231] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 295.510253] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 295.510275] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 295.510290] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 295.510304] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 295.510317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 295.510331] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 295.510364] [ 295.683792] FAULT_INJECTION: forcing a failure. [ 295.683792] name failslab, interval 1, probability 0, space 0, times 0 [ 295.687014] CPU: 1 UID: 0 PID: 5168 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 295.687043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 295.687060] Call Trace: [ 295.687068] [ 295.687076] dump_stack_lvl+0xfa/0x120 [ 295.687109] should_fail_ex+0x4d7/0x5e0 [ 295.687139] should_failslab+0xc2/0x120 [ 295.687174] __kmalloc_noprof+0xcd/0x680 [ 295.687210] ? alloc_pipe_info+0x1e8/0x5a0 [ 295.687245] alloc_pipe_info+0x1e8/0x5a0 [ 295.687277] splice_direct_to_actor+0x78c/0x9d0 [ 295.687303] ? __pfx_direct_splice_actor+0x10/0x10 [ 295.687325] ? lock_acquire+0xd2/0x2f0 [ 295.687362] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 295.687387] ? lock_acquire+0x15e/0x2f0 [ 295.687421] do_splice_direct+0x179/0x250 [ 295.687442] ? __pfx_do_splice_direct+0x10/0x10 [ 295.687464] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 295.687504] ? security_file_permission+0x22/0x90 [ 295.687542] do_sendfile+0xa8e/0xdc0 [ 295.687575] ? __pfx_do_sendfile+0x10/0x10 [ 295.687599] ? __fget_files+0x20d/0x3b0 [ 295.687635] __x64_sys_sendfile64+0x1d3/0x210 [ 295.687668] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 295.687709] do_syscall_64+0xbf/0x390 [ 295.687739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.687762] RIP: 0033:0x7f8700fa9b19 [ 295.687779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 295.687800] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 295.687820] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 295.687842] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 295.687854] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 295.687867] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.687880] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 295.687912] 12:10:34 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:34 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:10:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 2) 12:10:34 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 295.836023] No source specified 12:10:42 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:42 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:10:42 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 4) 12:10:42 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:10:42 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 3) 12:10:42 executing program 3: r0 = creat(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:10:42 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 304.324240] FAULT_INJECTION: forcing a failure. [ 304.324240] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 304.326054] CPU: 1 UID: 0 PID: 5200 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 304.326083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 304.326095] Call Trace: [ 304.326103] [ 304.326111] dump_stack_lvl+0xfa/0x120 [ 304.326142] should_fail_ex+0x4d7/0x5e0 [ 304.326170] strncpy_from_user+0x3b/0x2f0 [ 304.326205] getname_flags.part.0+0x8d/0x540 [ 304.326243] __x64_sys_mkdir+0xdb/0x140 [ 304.326273] do_syscall_64+0xbf/0x390 [ 304.326301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.326324] RIP: 0033:0x7fc352503c27 [ 304.326340] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 304.326360] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 304.326381] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 304.326395] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 304.326407] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 304.326420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 304.326433] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 304.326464] 12:10:42 executing program 3: r0 = creat(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:10:42 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 5) 12:10:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 4) 12:10:43 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:43 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xe1, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 304.512414] FAULT_INJECTION: forcing a failure. [ 304.512414] name failslab, interval 1, probability 0, space 0, times 0 [ 304.514282] CPU: 0 UID: 0 PID: 5205 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 304.514311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 304.514323] Call Trace: [ 304.514330] [ 304.514337] dump_stack_lvl+0xfa/0x120 [ 304.514367] should_fail_ex+0x4d7/0x5e0 [ 304.514394] should_failslab+0xc2/0x120 [ 304.514423] __kmalloc_noprof+0xcd/0x680 [ 304.514454] ? __pfx_perf_trace_lock+0x10/0x10 [ 304.514483] ? obj_cgroup_charge_account+0x11a/0x6e0 [ 304.514506] ? copy_splice_read+0x15b/0xc00 [ 304.514544] copy_splice_read+0x15b/0xc00 [ 304.514577] ? __memcg_slab_post_alloc_hook+0x4a2/0x9e0 [ 304.514607] ? __pfx_copy_splice_read+0x10/0x10 [ 304.514639] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 304.514666] ? look_up_lock_class+0x56/0x150 [ 304.514690] ? register_lock_class+0x41/0x560 [ 304.514719] ? lockdep_init_map_type+0x4b/0x240 [ 304.514750] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 304.514777] ? __pfx_copy_splice_read+0x10/0x10 [ 304.514812] do_splice_read+0x1f8/0x2a0 [ 304.514856] splice_direct_to_actor+0x2a8/0x9d0 [ 304.514879] ? __pfx_direct_splice_actor+0x10/0x10 [ 304.514906] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 304.514930] ? lock_acquire+0x15e/0x2f0 [ 304.514963] do_splice_direct+0x179/0x250 [ 304.514983] ? __pfx_do_splice_direct+0x10/0x10 [ 304.515004] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 304.515042] ? security_file_permission+0x22/0x90 [ 304.515077] do_sendfile+0xa8e/0xdc0 [ 304.515108] ? __pfx_do_sendfile+0x10/0x10 [ 304.515132] ? __fget_files+0x20d/0x3b0 [ 304.515172] __x64_sys_sendfile64+0x1d3/0x210 [ 304.515203] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 304.515243] do_syscall_64+0xbf/0x390 [ 304.515270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.515291] RIP: 0033:0x7f8700fa9b19 [ 304.515308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 304.515327] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 304.515348] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 304.515362] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 304.515374] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 304.515386] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.515399] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 304.515429] 12:10:43 executing program 3: r0 = creat(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:10:43 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) [ 304.659389] FAULT_INJECTION: forcing a failure. [ 304.659389] name failslab, interval 1, probability 0, space 0, times 0 [ 304.661158] CPU: 0 UID: 0 PID: 5214 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 304.661186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 304.661198] Call Trace: [ 304.661206] [ 304.661214] dump_stack_lvl+0xfa/0x120 [ 304.661248] should_fail_ex+0x4d7/0x5e0 [ 304.661276] ? __d_alloc+0x31/0xa10 [ 304.661306] should_failslab+0xc2/0x120 [ 304.661339] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 304.661379] ? __d_lookup+0x255/0x490 [ 304.661410] ? __d_alloc+0x31/0xa10 [ 304.661439] __d_alloc+0x31/0xa10 [ 304.661473] d_alloc+0x4a/0x1e0 [ 304.661505] lookup_one_qstr_excl+0x174/0x270 [ 304.661539] ? mnt_want_write+0x153/0x420 [ 304.661563] filename_create+0x1ca/0x480 [ 304.661589] ? __pfx_filename_create+0x10/0x10 [ 304.661611] ? __virt_addr_valid+0x2e8/0x5d0 [ 304.661650] do_mkdirat+0x9a/0x3d0 [ 304.661681] ? __pfx_do_mkdirat+0x10/0x10 [ 304.661721] __x64_sys_mkdir+0xf3/0x140 [ 304.661751] do_syscall_64+0xbf/0x390 [ 304.661786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.661808] RIP: 0033:0x7fc352503c27 [ 304.661830] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 304.661849] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 304.661869] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 304.661883] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 304.661895] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 304.661908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 304.661920] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 304.661969] 12:10:52 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:10:52 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:52 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:10:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:10:52 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 6) 12:10:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 5) 12:10:52 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:10:52 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:10:52 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) [ 313.675410] No source specified 12:10:52 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 7) 12:10:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 6) 12:10:52 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) [ 313.850067] FAULT_INJECTION: forcing a failure. [ 313.850067] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 313.852039] CPU: 1 UID: 0 PID: 5249 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 313.852068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 313.852081] Call Trace: [ 313.852087] [ 313.852095] dump_stack_lvl+0xfa/0x120 [ 313.852126] should_fail_ex+0x4d7/0x5e0 [ 313.852154] should_fail_alloc_page+0xe0/0x110 [ 313.852186] prepare_alloc_pages+0x1eb/0x550 [ 313.852213] ? irqentry_exit+0x3b/0x90 [ 313.852239] alloc_pages_bulk_noprof+0x148/0xc30 [ 313.852282] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 313.852316] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 313.852356] ? trace_kmalloc+0x1f/0xb0 [ 313.852381] ? __kmalloc_noprof+0x274/0x680 [ 313.852412] ? __pfx_perf_trace_lock+0x10/0x10 [ 313.852442] ? obj_cgroup_charge_account+0x11a/0x6e0 [ 313.852465] ? copy_splice_read+0x15b/0xc00 [ 313.852505] copy_splice_read+0x192/0xc00 [ 313.852547] ? __pfx_copy_splice_read+0x10/0x10 [ 313.852579] ? __memcg_slab_post_alloc_hook+0x4ac/0x9e0 [ 313.852608] ? look_up_lock_class+0x56/0x150 [ 313.852631] ? register_lock_class+0x41/0x560 [ 313.852661] ? lockdep_init_map_type+0x4b/0x240 [ 313.852693] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 313.852721] ? __pfx_copy_splice_read+0x10/0x10 [ 313.852757] do_splice_read+0x1f8/0x2a0 [ 313.852794] splice_direct_to_actor+0x2a8/0x9d0 [ 313.852817] ? __pfx_direct_splice_actor+0x10/0x10 [ 313.852853] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 313.852877] ? lock_acquire+0x15e/0x2f0 [ 313.852911] do_splice_direct+0x179/0x250 [ 313.852931] ? __pfx_do_splice_direct+0x10/0x10 [ 313.852953] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 313.852992] ? security_file_permission+0x22/0x90 [ 313.853028] do_sendfile+0xa8e/0xdc0 [ 313.853060] ? __pfx_do_sendfile+0x10/0x10 [ 313.853085] ? __fget_files+0x20d/0x3b0 [ 313.853120] __x64_sys_sendfile64+0x1d3/0x210 [ 313.853151] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 313.853193] do_syscall_64+0xbf/0x390 [ 313.853220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.853243] RIP: 0033:0x7f8700fa9b19 [ 313.853260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 313.853280] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 313.853300] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 313.853315] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 313.853327] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 313.853339] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.853352] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 313.853383] [ 313.897438] FAULT_INJECTION: forcing a failure. [ 313.897438] name failslab, interval 1, probability 0, space 0, times 0 [ 313.899065] CPU: 1 UID: 0 PID: 5252 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 313.899092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 313.899104] Call Trace: [ 313.899111] [ 313.899119] dump_stack_lvl+0xfa/0x120 [ 313.899143] should_fail_ex+0x4d7/0x5e0 [ 313.899168] ? ext4_alloc_inode+0x28/0x600 [ 313.899200] should_failslab+0xc2/0x120 [ 313.899228] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 313.899267] ? perf_trace_lock+0xb5/0x5d0 [ 313.899297] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 313.899332] ? ext4_alloc_inode+0x28/0x600 [ 313.899363] ext4_alloc_inode+0x28/0x600 [ 313.899396] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 313.899428] alloc_inode+0x67/0x250 [ 313.899459] new_inode+0x1e/0x160 [ 313.899493] __ext4_new_inode+0x35d/0x4d70 [ 313.899533] ? avc_has_perm_noaudit+0x150/0x3d0 [ 313.899569] ? __pfx___ext4_new_inode+0x10/0x10 [ 313.899602] ? __pfx_avc_has_perm+0x10/0x10 [ 313.899632] ? __pfx___dquot_initialize+0x10/0x10 [ 313.899680] ext4_mkdir+0x331/0xb30 [ 313.899714] ? __pfx_ext4_mkdir+0x10/0x10 [ 313.899734] ? security_inode_permission+0x72/0xe0 [ 313.899769] vfs_mkdir+0x59a/0x8d0 [ 313.899796] do_mkdirat+0x19f/0x3d0 [ 313.899826] ? __pfx_do_mkdirat+0x10/0x10 [ 313.899871] __x64_sys_mkdir+0xf3/0x140 [ 313.899900] do_syscall_64+0xbf/0x390 [ 313.899926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.899947] RIP: 0033:0x7fc352503c27 [ 313.899963] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 313.899982] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 313.900002] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 313.900016] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 313.900029] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 313.900041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 313.900054] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 313.900086] 12:11:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 7) 12:11:00 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:11:00 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 8) 12:11:00 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:11:00 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:00 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) 12:11:00 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 322.029679] No source specified 12:11:00 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:11:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 8) [ 322.072470] FAULT_INJECTION: forcing a failure. [ 322.072470] name failslab, interval 1, probability 0, space 0, times 0 [ 322.074422] CPU: 1 UID: 0 PID: 5273 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 322.074455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 322.074469] Call Trace: [ 322.074477] [ 322.074485] dump_stack_lvl+0xfa/0x120 [ 322.074518] should_fail_ex+0x4d7/0x5e0 [ 322.074548] should_failslab+0xc2/0x120 [ 322.074585] __kvmalloc_node_noprof+0x11f/0x770 [ 322.074614] ? alloc_pages_bulk_noprof+0x839/0xc30 [ 322.074658] ? seq_read_iter+0x82f/0x1320 [ 322.074689] ? seq_read_iter+0x82f/0x1320 [ 322.074712] seq_read_iter+0x82f/0x1320 [ 322.074742] ? __pfx_trace_kmem_cache_alloc+0x10/0x10 [ 322.074777] ? __kmalloc_noprof+0x274/0x680 [ 322.074822] proc_reg_read_iter+0x20e/0x2e0 [ 322.074857] copy_splice_read+0x5c2/0xc00 [ 322.074911] ? __pfx_copy_splice_read+0x10/0x10 [ 322.074961] ? look_up_lock_class+0x56/0x150 [ 322.074994] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 322.075026] ? __pfx_copy_splice_read+0x10/0x10 [ 322.075073] do_splice_read+0x1f8/0x2a0 [ 322.075121] splice_direct_to_actor+0x2a8/0x9d0 [ 322.075147] ? __pfx_direct_splice_actor+0x10/0x10 [ 322.075178] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 322.075205] ? lock_acquire+0x15e/0x2f0 [ 322.075249] do_splice_direct+0x179/0x250 [ 322.075272] ? __pfx_do_splice_direct+0x10/0x10 [ 322.075297] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 322.075346] ? security_file_permission+0x22/0x90 [ 322.075389] do_sendfile+0xa8e/0xdc0 [ 322.075426] ? __pfx_do_sendfile+0x10/0x10 [ 322.075456] ? __fget_files+0x20d/0x3b0 [ 322.075496] __x64_sys_sendfile64+0x1d3/0x210 [ 322.075537] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 322.075587] do_syscall_64+0xbf/0x390 [ 322.075620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.075644] RIP: 0033:0x7f8700fa9b19 [ 322.075663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 322.075686] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 322.075709] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 322.075726] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 322.075740] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.075754] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.075769] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 322.075800] [ 322.130464] FAULT_INJECTION: forcing a failure. [ 322.130464] name failslab, interval 1, probability 0, space 0, times 0 [ 322.131458] CPU: 0 UID: 0 PID: 5279 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 322.131474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 322.131481] Call Trace: [ 322.131485] [ 322.131489] dump_stack_lvl+0xfa/0x120 [ 322.131508] should_fail_ex+0x4d7/0x5e0 [ 322.131523] ? security_inode_alloc+0x3e/0x130 [ 322.131537] should_failslab+0xc2/0x120 [ 322.131554] kmem_cache_alloc_noprof+0x80/0x690 [ 322.131572] ? __pfx_map_id_range_down+0x10/0x10 [ 322.131594] ? security_inode_alloc+0x3e/0x130 [ 322.131606] security_inode_alloc+0x3e/0x130 [ 322.131620] inode_init_always_gfp+0xc94/0xff0 [ 322.131639] alloc_inode+0x8d/0x250 [ 322.131655] new_inode+0x1e/0x160 [ 322.131673] __ext4_new_inode+0x35d/0x4d70 [ 322.131694] ? avc_has_perm_noaudit+0x150/0x3d0 [ 322.131713] ? __pfx___ext4_new_inode+0x10/0x10 [ 322.131730] ? __pfx_avc_has_perm+0x10/0x10 [ 322.131746] ? __pfx___dquot_initialize+0x10/0x10 [ 322.131771] ext4_mkdir+0x331/0xb30 [ 322.131788] ? __pfx_ext4_mkdir+0x10/0x10 12:11:00 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 322.131799] ? security_inode_permission+0x72/0xe0 [ 322.131817] vfs_mkdir+0x59a/0x8d0 [ 322.131835] do_mkdirat+0x19f/0x3d0 [ 322.131851] ? __pfx_do_mkdirat+0x10/0x10 [ 322.131870] __x64_sys_mkdir+0xf3/0x140 [ 322.131885] do_syscall_64+0xbf/0x390 [ 322.131901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.131913] RIP: 0033:0x7fc352503c27 [ 322.131923] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 322.131933] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 322.131945] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 322.131952] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 322.131959] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 322.131966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 322.131973] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 322.131988] 12:11:00 executing program 3: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:11:08 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 9) 12:11:08 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 9) 12:11:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:11:08 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:11:08 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) 12:11:08 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) 12:11:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:08 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 10) [ 330.176777] No source specified 12:11:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 330.230382] FAULT_INJECTION: forcing a failure. [ 330.230382] name failslab, interval 1, probability 0, space 0, times 0 [ 330.232475] CPU: 1 UID: 0 PID: 5309 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 330.232507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 330.232520] Call Trace: [ 330.232527] [ 330.232536] dump_stack_lvl+0xfa/0x120 [ 330.232564] should_fail_ex+0x4d7/0x5e0 [ 330.232591] should_failslab+0xc2/0x120 [ 330.232622] __kmalloc_noprof+0xcd/0x680 [ 330.232656] ? finish_task_switch.isra.0+0x206/0x840 [ 330.232682] ? iter_file_splice_write+0x1cd/0x11f0 [ 330.232712] iter_file_splice_write+0x1cd/0x11f0 [ 330.232734] ? trace_sched_exit_tp+0xbf/0x100 [ 330.232756] ? __schedule+0xf95/0x3e30 [ 330.232802] ? __pfx___schedule+0x10/0x10 [ 330.232844] ? __pfx_iter_file_splice_write+0x10/0x10 [ 330.232868] ? __lock_acquire+0xc65/0x1b70 [ 330.232920] ? lock_is_held_type+0x9e/0x120 [ 330.232943] ? __pfx_iter_file_splice_write+0x10/0x10 [ 330.232969] direct_splice_actor+0x192/0x7b0 [ 330.232995] splice_direct_to_actor+0x347/0x9d0 [ 330.233020] ? __pfx_direct_splice_actor+0x10/0x10 [ 330.233051] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 330.233076] ? lock_acquire+0x15e/0x2f0 [ 330.233111] do_splice_direct+0x179/0x250 [ 330.233133] ? __pfx_do_splice_direct+0x10/0x10 [ 330.233156] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 330.233196] ? security_file_permission+0x22/0x90 [ 330.233233] do_sendfile+0xa8e/0xdc0 [ 330.233266] ? __pfx_do_sendfile+0x10/0x10 [ 330.233292] ? __fget_files+0x20d/0x3b0 [ 330.233327] __x64_sys_sendfile64+0x1d3/0x210 [ 330.233360] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 330.233403] do_syscall_64+0xbf/0x390 [ 330.233431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.233454] RIP: 0033:0x7f8700fa9b19 [ 330.233472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 330.233493] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 330.233515] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 330.233530] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 330.233543] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 330.233557] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.233571] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 330.233601] 12:11:08 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:11:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 10) 12:11:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:08 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) 12:11:08 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 330.365472] FAULT_INJECTION: forcing a failure. [ 330.365472] name failslab, interval 1, probability 0, space 0, times 0 [ 330.366505] CPU: 0 UID: 0 PID: 5320 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 330.366521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 330.366529] Call Trace: [ 330.366533] [ 330.366538] dump_stack_lvl+0xfa/0x120 [ 330.366558] should_fail_ex+0x4d7/0x5e0 [ 330.366575] ? jbd2__journal_start+0x193/0x6b0 [ 330.366589] should_failslab+0xc2/0x120 [ 330.366606] kmem_cache_alloc_noprof+0x80/0x690 [ 330.366627] ? lock_is_held_type+0x9e/0x120 [ 330.366644] ? jbd2__journal_start+0x193/0x6b0 [ 330.366656] jbd2__journal_start+0x193/0x6b0 [ 330.366671] __ext4_journal_start_sb+0x325/0x5d0 [ 330.366692] __ext4_new_inode+0x2cbe/0x4d70 [ 330.366717] ? __pfx___ext4_new_inode+0x10/0x10 [ 330.366734] ? __pfx_avc_has_perm+0x10/0x10 [ 330.366752] ? __pfx___dquot_initialize+0x10/0x10 [ 330.366780] ext4_mkdir+0x331/0xb30 [ 330.366797] ? __pfx_ext4_mkdir+0x10/0x10 [ 330.366808] ? security_inode_permission+0x72/0xe0 [ 330.366831] vfs_mkdir+0x59a/0x8d0 [ 330.366847] do_mkdirat+0x19f/0x3d0 [ 330.366864] ? __pfx_do_mkdirat+0x10/0x10 [ 330.366883] __x64_sys_mkdir+0xf3/0x140 [ 330.366898] do_syscall_64+0xbf/0x390 [ 330.366913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.366926] RIP: 0033:0x7fc352503c27 [ 330.366935] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 330.366946] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 330.366958] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 330.366966] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 330.366973] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 330.366980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 330.366987] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 330.367003] [ 330.381593] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory 12:11:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 11) 12:11:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(0x0, 0x0) 12:11:18 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 11) 12:11:18 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) 12:11:18 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000000) 12:11:18 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) 12:11:18 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 339.783672] No source specified 12:11:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:18 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 12) 12:11:18 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 12:11:18 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 12) 12:11:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(0x0, 0x0) 12:11:18 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) [ 339.999343] FAULT_INJECTION: forcing a failure. [ 339.999343] name failslab, interval 1, probability 0, space 0, times 0 [ 340.001198] CPU: 1 UID: 0 PID: 5357 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 340.001228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 340.001240] Call Trace: [ 340.001247] [ 340.001255] dump_stack_lvl+0xfa/0x120 [ 340.001285] should_fail_ex+0x4d7/0x5e0 [ 340.001312] should_failslab+0xc2/0x120 [ 340.001341] __kmalloc_noprof+0xcd/0x680 [ 340.001372] ? current_umask+0x12/0x80 [ 340.001401] ? posix_acl_create.part.0+0x2a0/0x480 [ 340.001427] ? security_inode_init_security+0x113/0x370 [ 340.001455] security_inode_init_security+0x113/0x370 [ 340.001476] ? __pfx_ext4_initxattrs+0x10/0x10 [ 340.001500] ? __pfx_security_inode_init_security+0x10/0x10 [ 340.001525] ? crc32c+0x1ae/0x350 [ 340.001562] __ext4_new_inode+0x3452/0x4d70 [ 340.001607] ? __pfx___ext4_new_inode+0x10/0x10 [ 340.001641] ? __pfx___dquot_initialize+0x10/0x10 [ 340.001687] ext4_mkdir+0x331/0xb30 [ 340.001718] ? __pfx_ext4_mkdir+0x10/0x10 [ 340.001738] ? security_inode_permission+0x72/0xe0 [ 340.001772] vfs_mkdir+0x59a/0x8d0 [ 340.001798] do_mkdirat+0x19f/0x3d0 [ 340.001835] ? __pfx_do_mkdirat+0x10/0x10 [ 340.001870] __x64_sys_mkdir+0xf3/0x140 [ 340.001898] do_syscall_64+0xbf/0x390 [ 340.001926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.001948] RIP: 0033:0x7fc352503c27 [ 340.001965] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 340.001985] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 340.002005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 340.002019] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 340.002032] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 340.002044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 340.002057] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 340.002086] 12:11:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:18 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:18 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 12:11:18 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 13) 12:11:18 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:11:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 13) 12:11:29 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:11:29 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 14) 12:11:29 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) 12:11:29 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 12:11:29 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(0x0, 0x0) [ 350.844199] FAULT_INJECTION: forcing a failure. [ 350.844199] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.846731] CPU: 0 UID: 0 PID: 5396 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 350.846762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 350.846775] Call Trace: [ 350.846782] [ 350.846789] dump_stack_lvl+0xfa/0x120 [ 350.846817] should_fail_ex+0x4d7/0x5e0 [ 350.846850] should_fail_alloc_page+0xe0/0x110 [ 350.846881] prepare_alloc_pages+0x1eb/0x550 [ 350.846913] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 350.846945] ? arch_stack_walk+0x9c/0xf0 [ 350.846982] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.847013] ? stack_trace_save+0x8e/0xc0 [ 350.847045] ? stack_depot_save_flags+0x2c/0xa20 [ 350.847085] ? __lock_acquire+0x694/0x1b70 [ 350.847115] ? jbd2_journal_stop+0x532/0xe20 [ 350.847139] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 350.847173] ? policy_nodemask+0xeb/0x4e0 [ 350.847210] alloc_pages_mpol+0xed/0x340 [ 350.847230] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 350.847248] ? find_held_lock+0x2b/0x80 [ 350.847269] ? filemap_get_entry+0x1b1/0x3b0 [ 350.847298] ? lock_release+0xc8/0x290 [ 350.847330] folio_alloc_noprof+0x21/0x80 [ 350.847353] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 350.847380] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 350.847404] ? __lock_acquire+0x694/0x1b70 [ 350.847439] __filemap_get_folio_mpol+0x513/0x9a0 [ 350.847474] ext4_da_write_begin+0x3e4/0xb40 [ 350.847515] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 350.847549] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 350.847584] ? __mark_inode_dirty+0x622/0xd00 [ 350.847618] generic_perform_write+0x391/0x810 [ 350.847651] ? __pfx_generic_perform_write+0x10/0x10 [ 350.847673] ? __mark_inode_dirty+0x5bc/0xd00 [ 350.847705] ? generic_update_time+0xcb/0xf0 [ 350.847734] ? mnt_put_write_access_file+0x45/0xe0 [ 350.847763] ext4_buffered_write_iter+0x11a/0x430 [ 350.847794] ext4_file_write_iter+0x9ea/0x1a00 [ 350.847822] ? mark_held_locks+0x49/0x80 [ 350.847856] ? kasan_save_track+0x14/0x30 [ 350.847888] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 350.847915] ? trace_kmalloc+0x1f/0xb0 [ 350.847940] ? __kmalloc_noprof+0x274/0x680 [ 350.847971] ? finish_task_switch.isra.0+0x206/0x840 [ 350.847994] ? splice_from_pipe_next.part.0+0x165/0x510 [ 350.848022] iter_file_splice_write+0xa3a/0x11f0 [ 350.848056] ? __pfx___schedule+0x10/0x10 [ 350.848089] ? __pfx_iter_file_splice_write+0x10/0x10 [ 350.848134] ? lock_is_held_type+0x9e/0x120 [ 350.848155] ? __pfx_iter_file_splice_write+0x10/0x10 [ 350.848180] direct_splice_actor+0x192/0x7b0 [ 350.848204] splice_direct_to_actor+0x347/0x9d0 [ 350.848226] ? __pfx_direct_splice_actor+0x10/0x10 [ 350.848254] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 350.848277] ? lock_acquire+0x15e/0x2f0 [ 350.848310] do_splice_direct+0x179/0x250 [ 350.848331] ? __pfx_do_splice_direct+0x10/0x10 [ 350.848352] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 350.848390] ? security_file_permission+0x22/0x90 [ 350.848424] do_sendfile+0xa8e/0xdc0 [ 350.848455] ? __pfx_do_sendfile+0x10/0x10 [ 350.848479] ? __fget_files+0x20d/0x3b0 [ 350.848511] __x64_sys_sendfile64+0x1d3/0x210 [ 350.848542] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 350.848582] do_syscall_64+0xbf/0x390 [ 350.848608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.848630] RIP: 0033:0x7f8700fa9b19 [ 350.848646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 350.848666] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 350.848687] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 350.848701] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 350.848713] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 350.848726] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.848739] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 350.848767] [ 350.911273] No source specified 12:11:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 14) [ 350.995785] FAULT_INJECTION: forcing a failure. [ 350.995785] name failslab, interval 1, probability 0, space 0, times 0 [ 350.997794] CPU: 0 UID: 0 PID: 5406 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 350.997824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 350.997842] Call Trace: [ 350.997850] [ 350.997858] dump_stack_lvl+0xfa/0x120 [ 350.997887] should_fail_ex+0x4d7/0x5e0 [ 350.997908] ? vfs_mkdir+0x59a/0x8d0 [ 350.997933] should_failslab+0xc2/0x120 [ 350.997962] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 350.997988] ? sidtab_sid2str_get+0x85/0x6f0 [ 350.998014] ? sidtab_sid2str_get+0x17e/0x6f0 [ 350.998045] kmemdup_noprof+0x2b/0x60 [ 350.998075] sidtab_sid2str_get+0x17e/0x6f0 [ 350.998105] sidtab_entry_to_string+0x33/0x110 [ 350.998132] security_sid_to_context_core+0x350/0x620 [ 350.998159] selinux_inode_init_security+0x432/0x650 [ 350.998189] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 350.998215] ? trace_kmalloc+0x1f/0xb0 [ 350.998241] ? current_umask+0x12/0x80 [ 350.998269] ? posix_acl_create.part.0+0x2a0/0x480 [ 350.998295] ? security_inode_init_security+0x113/0x370 [ 350.998322] security_inode_init_security+0x1bc/0x370 [ 350.998344] ? __pfx_ext4_initxattrs+0x10/0x10 [ 350.998366] ? __pfx_security_inode_init_security+0x10/0x10 [ 350.998392] ? crc32c+0x1ae/0x350 [ 350.998427] __ext4_new_inode+0x3452/0x4d70 [ 350.998472] ? __pfx___ext4_new_inode+0x10/0x10 [ 350.998507] ? __pfx___dquot_initialize+0x10/0x10 [ 350.998552] ext4_mkdir+0x331/0xb30 [ 350.998584] ? __pfx_ext4_mkdir+0x10/0x10 [ 350.998604] ? security_inode_permission+0x72/0xe0 [ 350.998651] vfs_mkdir+0x59a/0x8d0 [ 350.998677] do_mkdirat+0x19f/0x3d0 [ 350.998706] ? __pfx_do_mkdirat+0x10/0x10 [ 350.998742] __x64_sys_mkdir+0xf3/0x140 [ 350.998770] do_syscall_64+0xbf/0x390 [ 350.998798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.998820] RIP: 0033:0x7fc352503c27 12:11:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 350.998836] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 350.998856] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 350.998876] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 350.998890] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 350.998903] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 350.998916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 350.998928] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 350.998958] 12:11:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:11:29 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 15) 12:11:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 16) 12:11:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:11:40 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:40 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:11:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 15) 12:11:40 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:11:40 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:11:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 362.213390] No source specified [ 362.227105] FAULT_INJECTION: forcing a failure. [ 362.227105] name failslab, interval 1, probability 0, space 0, times 0 [ 362.229177] CPU: 1 UID: 0 PID: 5432 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 362.229208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 362.229224] Call Trace: [ 362.229231] [ 362.229240] dump_stack_lvl+0xfa/0x120 [ 362.229267] should_fail_ex+0x4d7/0x5e0 [ 362.229296] should_failslab+0xc2/0x120 [ 362.229327] __kmalloc_noprof+0xcd/0x680 [ 362.229359] ? __is_insn_slot_addr+0x140/0x290 [ 362.229389] ? ext4_find_extent+0x7f5/0xa00 [ 362.229424] ? kernel_text_address+0x5b/0xc0 [ 362.229461] ext4_find_extent+0x7f5/0xa00 [ 362.229506] ext4_ext_map_blocks+0x1cc/0x5f70 [ 362.229540] ? __pfx_perf_trace_lock+0x10/0x10 [ 362.229571] ? unwind_next_frame+0xb9/0x2540 [ 362.229599] ? lock_acquire+0x15e/0x2f0 [ 362.229637] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 362.229667] ? perf_trace_lock+0xb5/0x5d0 [ 362.229697] ? look_up_lock_class+0x56/0x150 [ 362.229723] ? register_lock_class+0x41/0x560 [ 362.229759] ? __lock_acquire+0xc65/0x1b70 [ 362.229805] ? lock_acquire+0x15e/0x2f0 [ 362.229843] ? ext4_da_get_block_prep+0x590/0x1050 [ 362.229878] ext4_map_query_blocks+0x117/0x890 [ 362.229907] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 362.229933] ? __pfx_down_read+0x10/0x10 [ 362.229959] ? ext4_es_lookup_extent+0xc8/0xb30 [ 362.229995] ext4_da_get_block_prep+0x92b/0x1050 [ 362.230030] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 362.230061] ? find_held_lock+0x2b/0x80 [ 362.230084] ? create_empty_buffers+0x219/0x460 [ 362.230113] ? lock_release+0xc8/0x290 [ 362.230145] ? do_raw_spin_unlock+0x53/0x220 [ 362.230167] ? _raw_spin_unlock+0x1e/0x40 [ 362.230200] ? create_empty_buffers+0x219/0x460 [ 362.230232] ext4_block_write_begin+0x7d1/0xcd0 [ 362.230274] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 362.230305] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 362.230341] ? __filemap_get_folio_mpol+0x2c4/0x9a0 [ 362.230381] ext4_da_write_begin+0x4d8/0xb40 [ 362.230426] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 362.230463] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 362.230501] ? __mark_inode_dirty+0x622/0xd00 [ 362.230538] generic_perform_write+0x391/0x810 [ 362.230576] ? __pfx_generic_perform_write+0x10/0x10 [ 362.230600] ? __mark_inode_dirty+0x5bc/0xd00 [ 362.230636] ? generic_update_time+0xcb/0xf0 [ 362.230667] ? mnt_put_write_access_file+0x45/0xe0 [ 362.230699] ext4_buffered_write_iter+0x11a/0x430 [ 362.230733] ext4_file_write_iter+0x9ea/0x1a00 [ 362.230764] ? mark_held_locks+0x49/0x80 [ 362.230801] ? kasan_save_track+0x14/0x30 [ 362.230847] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 362.230877] ? trace_kmalloc+0x1f/0xb0 [ 362.230903] ? __kmalloc_noprof+0x274/0x680 [ 362.230938] ? splice_from_pipe_next.part.0+0x165/0x510 [ 362.230970] iter_file_splice_write+0xa3a/0x11f0 [ 362.231012] ? __pfx_iter_file_splice_write+0x10/0x10 [ 362.231065] ? lock_is_held_type+0x9e/0x120 [ 362.231088] ? __pfx_iter_file_splice_write+0x10/0x10 [ 362.231115] direct_splice_actor+0x192/0x7b0 [ 362.231142] splice_direct_to_actor+0x347/0x9d0 [ 362.231167] ? __pfx_direct_splice_actor+0x10/0x10 [ 362.231197] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 362.231224] ? lock_acquire+0x15e/0x2f0 [ 362.231260] do_splice_direct+0x179/0x250 [ 362.231283] ? __pfx_do_splice_direct+0x10/0x10 [ 362.231306] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 362.231348] ? security_file_permission+0x22/0x90 [ 362.231387] do_sendfile+0xa8e/0xdc0 [ 362.231421] ? __pfx_do_sendfile+0x10/0x10 [ 362.231447] ? __fget_files+0x20d/0x3b0 [ 362.231485] __x64_sys_sendfile64+0x1d3/0x210 [ 362.231519] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 362.231564] do_syscall_64+0xbf/0x390 [ 362.231592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.231615] RIP: 0033:0x7f8700fa9b19 [ 362.231633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 362.231654] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 362.231676] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 362.231691] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 362.231704] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 362.231717] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.231731] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 362.231765] 12:11:40 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 16) 12:11:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 362.411726] FAULT_INJECTION: forcing a failure. [ 362.411726] name failslab, interval 1, probability 0, space 0, times 0 [ 362.414252] CPU: 0 UID: 0 PID: 5446 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 362.414282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 362.414295] Call Trace: [ 362.414303] [ 362.414311] dump_stack_lvl+0xfa/0x120 [ 362.414343] should_fail_ex+0x4d7/0x5e0 [ 362.414372] should_failslab+0xc2/0x120 [ 362.414403] __kmalloc_noprof+0xcd/0x680 [ 362.414434] ? find_held_lock+0x2b/0x80 [ 362.414463] ? ext4_find_extent+0x7f5/0xa00 [ 362.414504] ext4_find_extent+0x7f5/0xa00 [ 362.414546] ext4_ext_map_blocks+0x1cc/0x5f70 [ 362.414568] ? fs_reclaim_acquire+0xae/0x150 [ 362.414596] ? lock_is_held_type+0x9e/0x120 [ 362.414632] ? bdev_getblk+0xd6/0x660 [ 362.414668] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 362.414692] ? map_id_range_up+0x1d5/0x350 [ 362.414726] ? look_up_lock_class+0x56/0x150 [ 362.414748] ? register_lock_class+0x41/0x560 [ 362.414781] ? register_lock_class+0x41/0x560 [ 362.414833] ? __lock_acquire+0xc65/0x1b70 [ 362.414877] ? lock_acquire+0x15e/0x2f0 [ 362.414905] ? ext4_map_blocks+0x49f/0x14a0 [ 362.414940] ext4_map_query_blocks+0x117/0x890 [ 362.414968] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 362.414992] ? __pfx_down_read+0x10/0x10 [ 362.415018] ? ext4_es_lookup_extent+0xc8/0xb30 [ 362.415053] ext4_map_blocks+0x4b3/0x14a0 [ 362.415088] ? __pfx_ext4_map_blocks+0x10/0x10 [ 362.415114] ? __pfx_ext4_initxattrs+0x10/0x10 [ 362.415137] ? __pfx_security_inode_init_security+0x10/0x10 [ 362.415165] ? crc32c+0x1ae/0x350 [ 362.415200] ? __brelse+0x7f/0xa0 [ 362.415221] ? __ext4_new_inode+0x116/0x4d70 [ 362.415257] ext4_append+0x1b6/0x530 [ 362.415296] ? __pfx_ext4_append+0x10/0x10 [ 362.415328] ? __pfx___ext4_new_inode+0x10/0x10 [ 362.415369] ext4_init_new_dir+0x13c/0x240 [ 362.415391] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 362.415424] ext4_mkdir+0x3c5/0xb30 [ 362.415453] ? __pfx_ext4_mkdir+0x10/0x10 [ 362.415473] ? security_inode_permission+0x72/0xe0 [ 362.415510] vfs_mkdir+0x59a/0x8d0 [ 362.415539] do_mkdirat+0x19f/0x3d0 [ 362.415570] ? __pfx_do_mkdirat+0x10/0x10 [ 362.415608] __x64_sys_mkdir+0xf3/0x140 [ 362.415637] do_syscall_64+0xbf/0x390 [ 362.415665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.415687] RIP: 0033:0x7fc352503c27 [ 362.415704] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 362.415724] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 362.415745] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 362.415759] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 362.415772] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 362.415785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 362.415797] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 362.415830] 12:11:41 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 17) 12:11:41 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:41 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:11:41 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:11:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:41 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:11:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 17) 12:11:50 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:11:50 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:11:50 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:11:50 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 18) 12:11:50 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:11:50 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 371.972054] No source specified 12:11:50 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:11:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 18) [ 372.157505] FAULT_INJECTION: forcing a failure. [ 372.157505] name failslab, interval 1, probability 0, space 0, times 0 [ 372.159576] CPU: 1 UID: 0 PID: 5489 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 372.159605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 372.159618] Call Trace: [ 372.159625] [ 372.159633] dump_stack_lvl+0xfa/0x120 [ 372.159664] should_fail_ex+0x4d7/0x5e0 [ 372.159693] ? __es_insert_extent+0xed2/0x1370 [ 372.159717] should_failslab+0xc2/0x120 [ 372.159750] kmem_cache_alloc_noprof+0x80/0x690 [ 372.159787] ? do_syscall_64+0xbf/0x390 [ 372.159820] ? __es_insert_extent+0xed2/0x1370 [ 372.159849] __es_insert_extent+0xed2/0x1370 [ 372.159875] ? __pfx_do_raw_write_lock+0x10/0x10 [ 372.159909] ext4_es_insert_extent+0x4d0/0x1100 [ 372.159946] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 372.159971] ? __pfx_perf_trace_lock+0x10/0x10 [ 372.160008] ? lock_acquire+0x15e/0x2f0 [ 372.160039] ? find_held_lock+0x2b/0x80 [ 372.160062] ? ext4_es_find_extent_range+0x1cf/0x510 [ 372.160087] ? lock_release+0xc8/0x290 [ 372.160118] ? do_raw_read_unlock+0x44/0xe0 [ 372.160146] ext4_ext_map_blocks+0x178d/0x5f70 [ 372.160188] ? bdev_getblk+0xd6/0x660 [ 372.160224] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 372.160248] ? map_id_range_up+0x1d5/0x350 [ 372.160285] ? look_up_lock_class+0x56/0x150 [ 372.160309] ? register_lock_class+0x41/0x560 [ 372.160344] ? __lock_acquire+0xc65/0x1b70 [ 372.160387] ? lock_acquire+0x15e/0x2f0 [ 372.160415] ? ext4_map_blocks+0x49f/0x14a0 [ 372.160448] ext4_map_query_blocks+0x117/0x890 [ 372.160476] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 372.160500] ? __pfx_down_read+0x10/0x10 [ 372.160525] ? ext4_es_lookup_extent+0xc8/0xb30 [ 372.160560] ext4_map_blocks+0x4b3/0x14a0 [ 372.160595] ? __pfx_ext4_map_blocks+0x10/0x10 [ 372.160621] ? __pfx_ext4_initxattrs+0x10/0x10 [ 372.160644] ? __pfx_security_inode_init_security+0x10/0x10 [ 372.160672] ? crc32c+0x1ae/0x350 [ 372.160705] ? __brelse+0x7f/0xa0 [ 372.160727] ? __ext4_new_inode+0x116/0x4d70 [ 372.160763] ext4_append+0x1b6/0x530 [ 372.160798] ? __pfx_ext4_append+0x10/0x10 [ 372.160831] ? __pfx___ext4_new_inode+0x10/0x10 [ 372.160871] ext4_init_new_dir+0x13c/0x240 [ 372.160893] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 372.160927] ext4_mkdir+0x3c5/0xb30 [ 372.160955] ? __pfx_ext4_mkdir+0x10/0x10 [ 372.160976] ? security_inode_permission+0x72/0xe0 [ 372.161012] vfs_mkdir+0x59a/0x8d0 [ 372.161040] do_mkdirat+0x19f/0x3d0 [ 372.161071] ? __pfx_do_mkdirat+0x10/0x10 [ 372.161109] __x64_sys_mkdir+0xf3/0x140 [ 372.161138] do_syscall_64+0xbf/0x390 [ 372.161165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.161187] RIP: 0033:0x7fc352503c27 [ 372.161203] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 372.161223] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 372.161244] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 372.161258] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 372.161270] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 372.161283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 372.161295] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 372.161328] [ 372.236770] No source specified 12:11:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 19) 12:11:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:59 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:11:59 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 19) 12:11:59 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:59 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:11:59 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:11:59 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 380.756896] No source specified 12:11:59 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:11:59 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 20) 12:11:59 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:59 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:11:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 20) [ 380.862576] FAULT_INJECTION: forcing a failure. [ 380.862576] name failslab, interval 1, probability 0, space 0, times 0 [ 380.863713] CPU: 0 UID: 0 PID: 5518 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 380.863730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 380.863737] Call Trace: [ 380.863742] [ 380.863746] dump_stack_lvl+0xfa/0x120 [ 380.863763] should_fail_ex+0x4d7/0x5e0 [ 380.863780] ? __es_insert_extent+0xed2/0x1370 [ 380.863795] should_failslab+0xc2/0x120 [ 380.863815] kmem_cache_alloc_noprof+0x80/0x690 [ 380.863841] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 380.863857] ? __es_insert_extent+0xed2/0x1370 [ 380.863869] __es_insert_extent+0xed2/0x1370 [ 380.863891] ext4_es_insert_delayed_extent+0x383/0x8a0 [ 380.863908] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 380.863924] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 380.863936] ? find_held_lock+0x2b/0x80 [ 380.863951] ? ext4_da_reserve_space+0x1e0/0x430 [ 380.863966] ? lock_release+0xc8/0x290 [ 380.863983] ? do_raw_spin_unlock+0x53/0x220 [ 380.863994] ? _raw_spin_unlock+0x1e/0x40 [ 380.864015] ? ext4_da_reserve_space+0xf9/0x430 [ 380.864031] ext4_da_get_block_prep+0x8f6/0x1050 [ 380.864048] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 380.864064] ? find_held_lock+0x2b/0x80 [ 380.864076] ? create_empty_buffers+0x219/0x460 [ 380.864093] ? lock_release+0xc8/0x290 [ 380.864109] ? do_raw_spin_unlock+0x53/0x220 [ 380.864120] ? _raw_spin_unlock+0x1e/0x40 [ 380.864137] ? create_empty_buffers+0x219/0x460 [ 380.864153] ext4_block_write_begin+0x7d1/0xcd0 [ 380.864175] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 380.864191] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 380.864209] ? __filemap_get_folio_mpol+0x2c4/0x9a0 [ 380.864232] ext4_da_write_begin+0x4d8/0xb40 [ 380.864256] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 380.864274] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 380.864294] ? __mark_inode_dirty+0x622/0xd00 [ 380.864315] generic_perform_write+0x391/0x810 [ 380.864335] ? __pfx_generic_perform_write+0x10/0x10 [ 380.864347] ? __mark_inode_dirty+0x5bc/0xd00 [ 380.864365] ? generic_update_time+0xcb/0xf0 [ 380.864382] ? mnt_put_write_access_file+0x45/0xe0 [ 380.864399] ext4_buffered_write_iter+0x11a/0x430 [ 380.864417] ext4_file_write_iter+0x9ea/0x1a00 [ 380.864432] ? mark_held_locks+0x49/0x80 [ 380.864451] ? kasan_save_track+0x14/0x30 [ 380.864468] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 380.864483] ? trace_kmalloc+0x1f/0xb0 [ 380.864497] ? __kmalloc_noprof+0x274/0x680 [ 380.864515] ? splice_from_pipe_next.part.0+0x165/0x510 [ 380.864531] iter_file_splice_write+0xa3a/0x11f0 [ 380.864553] ? __pfx_iter_file_splice_write+0x10/0x10 [ 380.864581] ? lock_is_held_type+0x9e/0x120 [ 380.864594] ? __pfx_iter_file_splice_write+0x10/0x10 [ 380.864608] direct_splice_actor+0x192/0x7b0 [ 380.864622] splice_direct_to_actor+0x347/0x9d0 [ 380.864635] ? __pfx_direct_splice_actor+0x10/0x10 [ 380.864650] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 380.864664] ? lock_acquire+0x15e/0x2f0 [ 380.864682] do_splice_direct+0x179/0x250 [ 380.864694] ? __pfx_do_splice_direct+0x10/0x10 [ 380.864706] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 380.864727] ? security_file_permission+0x22/0x90 [ 380.864748] do_sendfile+0xa8e/0xdc0 [ 380.864767] ? __pfx_do_sendfile+0x10/0x10 [ 380.864780] ? __fget_files+0x20d/0x3b0 [ 380.864800] __x64_sys_sendfile64+0x1d3/0x210 [ 380.864818] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 380.864841] do_syscall_64+0xbf/0x390 [ 380.864856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.864869] RIP: 0033:0x7f8700fa9b19 [ 380.864878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 380.864889] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 380.864901] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 380.864909] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 380.864915] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 380.864923] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.864930] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 380.864948] 12:11:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:11:59 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) [ 380.963529] FAULT_INJECTION: forcing a failure. [ 380.963529] name failslab, interval 1, probability 0, space 0, times 0 [ 380.964609] CPU: 0 UID: 0 PID: 5528 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 380.964626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 380.964634] Call Trace: [ 380.964639] [ 380.964645] dump_stack_lvl+0xfa/0x120 [ 380.964668] should_fail_ex+0x4d7/0x5e0 [ 380.964686] should_failslab+0xc2/0x120 [ 380.964704] __kmalloc_noprof+0xcd/0x680 [ 380.964723] ? mark_held_locks+0x49/0x80 [ 380.964743] ? ext4_find_extent+0x7f5/0xa00 [ 380.964766] ext4_find_extent+0x7f5/0xa00 [ 380.964788] ext4_ext_map_blocks+0x1cc/0x5f70 [ 380.964816] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 380.964840] ? lock_acquire+0x15e/0x2f0 [ 380.964855] ? ext4_map_blocks+0x55b/0x14a0 [ 380.964878] ? down_write+0x119/0x1f0 [ 380.964896] ? __pfx_down_write+0x10/0x10 [ 380.964908] ? ext4_es_lookup_extent+0xc8/0xb30 [ 380.964928] ext4_map_blocks+0x624/0x14a0 [ 380.964945] ? __up_read+0x197/0x750 [ 380.964964] ? __pfx_ext4_map_blocks+0x10/0x10 [ 380.964978] ? __pfx___up_read+0x10/0x10 [ 380.964996] ? lock_release+0xc8/0x290 [ 380.965015] ? ext4_map_blocks+0x1e0/0x14a0 [ 380.965034] ext4_getblk+0x682/0x8e0 [ 380.965049] ? __pfx_ext4_getblk+0x10/0x10 [ 380.965062] ? __pfx_security_inode_init_security+0x10/0x10 [ 380.965079] ? crc32c+0x1ae/0x350 [ 380.965101] ext4_bread+0x2e/0x1a0 [ 380.965117] ext4_append+0x224/0x530 [ 380.965136] ? __pfx_ext4_append+0x10/0x10 [ 380.965154] ? __pfx___ext4_new_inode+0x10/0x10 [ 380.965176] ext4_init_new_dir+0x13c/0x240 [ 380.965188] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 380.965206] ext4_mkdir+0x3c5/0xb30 [ 380.965221] ? __pfx_ext4_mkdir+0x10/0x10 [ 380.965232] ? security_inode_permission+0x72/0xe0 [ 380.965253] vfs_mkdir+0x59a/0x8d0 [ 380.965270] do_mkdirat+0x19f/0x3d0 [ 380.965287] ? __pfx_do_mkdirat+0x10/0x10 [ 380.965307] __x64_sys_mkdir+0xf3/0x140 [ 380.965323] do_syscall_64+0xbf/0x390 [ 380.965339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.965352] RIP: 0033:0x7fc352503c27 [ 380.965361] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 380.965372] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 380.965384] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 380.965391] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 380.965398] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 380.965405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 380.965412] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 380.965430] 12:11:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 21) 12:11:59 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:11:59 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 21) 12:11:59 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 381.223559] No source specified [ 381.271222] FAULT_INJECTION: forcing a failure. [ 381.271222] name failslab, interval 1, probability 0, space 0, times 0 [ 381.273110] CPU: 1 UID: 0 PID: 5540 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 381.273143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 381.273157] Call Trace: [ 381.273165] [ 381.273173] dump_stack_lvl+0xfa/0x120 [ 381.273203] should_fail_ex+0x4d7/0x5e0 [ 381.273232] ? __es_insert_extent+0xed2/0x1370 [ 381.273260] should_failslab+0xc2/0x120 [ 381.273296] kmem_cache_alloc_noprof+0x80/0x690 [ 381.273342] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 381.273376] ? __es_insert_extent+0xed2/0x1370 [ 381.273401] __es_insert_extent+0xed2/0x1370 [ 381.273445] ext4_es_insert_delayed_extent+0x383/0x8a0 [ 381.273483] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 381.273517] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 381.273541] ? find_held_lock+0x2b/0x80 [ 381.273569] ? ext4_da_reserve_space+0x1e0/0x430 [ 381.273599] ? lock_release+0xc8/0x290 [ 381.273639] ? do_raw_spin_unlock+0x53/0x220 [ 381.273669] ? _raw_spin_unlock+0x1e/0x40 [ 381.273711] ? ext4_da_reserve_space+0xf9/0x430 [ 381.273743] ext4_da_get_block_prep+0x8f6/0x1050 [ 381.273778] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 381.273810] ? find_held_lock+0x2b/0x80 [ 381.273841] ? create_empty_buffers+0x219/0x460 [ 381.273872] ? lock_release+0xc8/0x290 [ 381.273904] ? do_raw_spin_unlock+0x53/0x220 [ 381.273926] ? _raw_spin_unlock+0x1e/0x40 [ 381.273958] ? create_empty_buffers+0x219/0x460 [ 381.273991] ext4_block_write_begin+0x7d1/0xcd0 [ 381.274033] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 381.274064] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 381.274100] ? __filemap_get_folio_mpol+0x2c4/0x9a0 [ 381.274141] ext4_da_write_begin+0x4d8/0xb40 [ 381.274186] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 381.274223] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 381.274262] ? __mark_inode_dirty+0x622/0xd00 [ 381.274300] generic_perform_write+0x391/0x810 [ 381.274339] ? __pfx_generic_perform_write+0x10/0x10 [ 381.274363] ? __mark_inode_dirty+0x5bc/0xd00 [ 381.274399] ? generic_update_time+0xcb/0xf0 [ 381.274431] ? mnt_put_write_access_file+0x45/0xe0 [ 381.274463] ext4_buffered_write_iter+0x11a/0x430 [ 381.274498] ext4_file_write_iter+0x9ea/0x1a00 [ 381.274530] ? mark_held_locks+0x49/0x80 [ 381.274568] ? kasan_save_track+0x14/0x30 [ 381.274602] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 381.274632] ? trace_kmalloc+0x1f/0xb0 [ 381.274658] ? __kmalloc_noprof+0x274/0x680 [ 381.274690] ? trace_irq_enable.constprop.0+0x26/0x100 [ 381.274722] ? finish_task_switch.isra.0+0x206/0x840 [ 381.274753] ? splice_from_pipe_next.part.0+0x165/0x510 [ 381.274795] iter_file_splice_write+0xa3a/0x11f0 [ 381.274835] ? __pfx___schedule+0x10/0x10 [ 381.274872] ? __pfx_iter_file_splice_write+0x10/0x10 [ 381.274926] ? lock_is_held_type+0x9e/0x120 [ 381.274949] ? __pfx_iter_file_splice_write+0x10/0x10 [ 381.274976] direct_splice_actor+0x192/0x7b0 [ 381.275003] splice_direct_to_actor+0x347/0x9d0 [ 381.275029] ? __pfx_direct_splice_actor+0x10/0x10 [ 381.275059] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 381.275100] ? lock_acquire+0x15e/0x2f0 [ 381.275138] do_splice_direct+0x179/0x250 [ 381.275161] ? __pfx_do_splice_direct+0x10/0x10 [ 381.275185] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 381.275227] ? security_file_permission+0x22/0x90 [ 381.275266] do_sendfile+0xa8e/0xdc0 [ 381.275301] ? __pfx_do_sendfile+0x10/0x10 [ 381.275328] ? __fget_files+0x20d/0x3b0 [ 381.275366] __x64_sys_sendfile64+0x1d3/0x210 [ 381.275401] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 381.275446] do_syscall_64+0xbf/0x390 [ 381.275476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.275499] RIP: 0033:0x7f8700fa9b19 [ 381.275517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 381.275538] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 381.275560] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 381.275576] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 381.275589] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 381.275603] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.275617] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 381.275651] 12:12:09 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 22) 12:12:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:12:09 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 22) 12:12:09 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:12:09 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xfdef) 12:12:09 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:12:09 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 390.558658] FAULT_INJECTION: forcing a failure. [ 390.558658] name failslab, interval 1, probability 0, space 0, times 0 [ 390.560533] CPU: 0 UID: 0 PID: 5557 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 390.560564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 390.560577] Call Trace: [ 390.560584] [ 390.560593] dump_stack_lvl+0xfa/0x120 [ 390.560622] should_fail_ex+0x4d7/0x5e0 [ 390.560651] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 390.560685] should_failslab+0xc2/0x120 [ 390.560721] kmem_cache_alloc_noprof+0x80/0x690 [ 390.560763] ? do_raw_spin_unlock+0x53/0x220 [ 390.560794] ? ext4_mb_new_blocks+0x64e/0x45b0 [ 390.560835] ext4_mb_new_blocks+0x64e/0x45b0 [ 390.560882] ? kasan_save_track+0x14/0x30 [ 390.560917] ? __kasan_kmalloc+0x7f/0x90 [ 390.560952] ? trace_kmalloc+0x1f/0xb0 [ 390.560982] ? __kmalloc_noprof+0x274/0x680 [ 390.561022] ? mark_held_locks+0x49/0x80 [ 390.561058] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 390.561095] ? ext4_ext_search_right+0x2e8/0xbd0 [ 390.561136] ? ext4_inode_to_goal_block+0x323/0x430 [ 390.561179] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 390.561232] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 390.561271] ? lock_acquire+0x15e/0x2f0 [ 390.561306] ? ext4_map_blocks+0x55b/0x14a0 [ 390.561355] ? __pfx_down_write+0x10/0x10 [ 390.561384] ? ext4_es_lookup_extent+0xc8/0xb30 [ 390.561423] ext4_map_blocks+0x624/0x14a0 [ 390.561460] ? __up_read+0x197/0x750 [ 390.561501] ? __pfx_ext4_map_blocks+0x10/0x10 [ 390.561533] ? __pfx___up_read+0x10/0x10 [ 390.561576] ? lock_release+0xc8/0x290 [ 390.561618] ? ext4_map_blocks+0x1e0/0x14a0 [ 390.561658] ext4_getblk+0x682/0x8e0 [ 390.561693] ? __pfx_ext4_getblk+0x10/0x10 [ 390.561723] ? __pfx_security_inode_init_security+0x10/0x10 [ 390.561752] ? crc32c+0x1ae/0x350 [ 390.561801] ext4_bread+0x2e/0x1a0 [ 390.561835] ext4_append+0x224/0x530 [ 390.561877] ? __pfx_ext4_append+0x10/0x10 [ 390.561918] ? __pfx___ext4_new_inode+0x10/0x10 [ 390.561966] ext4_init_new_dir+0x13c/0x240 [ 390.561990] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 390.562025] ext4_mkdir+0x3c5/0xb30 [ 390.562056] ? __pfx_ext4_mkdir+0x10/0x10 [ 390.562079] ? security_inode_permission+0x72/0xe0 [ 390.562120] vfs_mkdir+0x59a/0x8d0 [ 390.562150] do_mkdirat+0x19f/0x3d0 [ 390.562186] ? __pfx_do_mkdirat+0x10/0x10 [ 390.562230] __x64_sys_mkdir+0xf3/0x140 [ 390.562265] do_syscall_64+0xbf/0x390 [ 390.562297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.562321] RIP: 0033:0x7fc352503c27 [ 390.562339] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 390.562360] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 12:12:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 390.562382] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 390.562397] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 390.562410] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 390.562424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 390.562437] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 390.562472] [ 390.606008] FAULT_INJECTION: forcing a failure. [ 390.606008] name failslab, interval 1, probability 0, space 0, times 0 [ 390.607933] CPU: 0 UID: 0 PID: 5552 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 390.607964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 390.607976] Call Trace: [ 390.607982] [ 390.607990] dump_stack_lvl+0xfa/0x120 [ 390.608016] should_fail_ex+0x4d7/0x5e0 [ 390.608043] should_failslab+0xc2/0x120 [ 390.608074] __kmalloc_noprof+0xcd/0x680 [ 390.608112] ? copy_splice_read+0x15b/0xc00 [ 390.608156] copy_splice_read+0x15b/0xc00 [ 390.608194] ? __pfx_iter_file_splice_write+0x10/0x10 [ 390.608226] ? __pfx_copy_splice_read+0x10/0x10 [ 390.608264] ? __pfx_perf_trace_lock+0x10/0x10 [ 390.608307] ? find_held_lock+0x2b/0x80 [ 390.608331] ? splice_direct_to_actor+0x347/0x9d0 [ 390.608356] ? __pfx_copy_splice_read+0x10/0x10 [ 390.608397] do_splice_read+0x1f8/0x2a0 [ 390.608439] splice_direct_to_actor+0x2a8/0x9d0 [ 390.608463] ? __pfx_direct_splice_actor+0x10/0x10 [ 390.608493] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 390.608519] ? lock_acquire+0x15e/0x2f0 [ 390.608557] do_splice_direct+0x179/0x250 [ 390.608579] ? __pfx_do_splice_direct+0x10/0x10 [ 390.608603] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 390.608647] ? security_file_permission+0x22/0x90 [ 390.608685] do_sendfile+0xa8e/0xdc0 [ 390.608720] ? __pfx_do_sendfile+0x10/0x10 [ 390.608747] ? __fget_files+0x20d/0x3b0 [ 390.608785] __x64_sys_sendfile64+0x1d3/0x210 [ 390.608821] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 390.608874] do_syscall_64+0xbf/0x390 [ 390.608903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.608925] RIP: 0033:0x7f8700fa9b19 [ 390.608942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 390.608963] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 390.608984] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 390.608999] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 390.609013] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 390.609026] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.609040] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 390.609072] 12:12:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 23) 12:12:09 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 390.782670] No source specified 12:12:09 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 23) 12:12:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:12:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 24) 12:12:09 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:12:09 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xfdef) 12:12:09 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 390.962042] FAULT_INJECTION: forcing a failure. [ 390.962042] name failslab, interval 1, probability 0, space 0, times 0 [ 390.963750] CPU: 0 UID: 0 PID: 5576 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 390.963779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 390.963791] Call Trace: [ 390.963798] [ 390.963807] dump_stack_lvl+0xfa/0x120 [ 390.963844] should_fail_ex+0x4d7/0x5e0 [ 390.963872] ? ext4_mb_new_blocks+0x2414/0x45b0 [ 390.963901] should_failslab+0xc2/0x120 [ 390.963931] kmem_cache_alloc_noprof+0x80/0x690 [ 390.963976] ? ext4_mb_new_blocks+0x2414/0x45b0 [ 390.964003] ext4_mb_new_blocks+0x2414/0x45b0 [ 390.964043] ? kasan_save_track+0x14/0x30 [ 390.964071] ? __kasan_kmalloc+0x7f/0x90 [ 390.964100] ? trace_kmalloc+0x1f/0xb0 [ 390.964124] ? __kmalloc_noprof+0x274/0x680 [ 390.964156] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 390.964187] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 390.964217] ? ext4_ext_search_right+0x2e8/0xbd0 [ 390.964250] ? ext4_inode_to_goal_block+0x323/0x430 [ 390.964287] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 390.964331] ? __pfx___schedule+0x10/0x10 [ 390.964369] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 390.964406] ? lock_acquire+0x15e/0x2f0 [ 390.964435] ? ext4_map_blocks+0x55b/0x14a0 [ 390.964478] ? __pfx_down_write+0x10/0x10 [ 390.964502] ? ext4_es_lookup_extent+0xc8/0xb30 [ 390.964537] ext4_map_blocks+0x624/0x14a0 [ 390.964569] ? __up_read+0x197/0x750 [ 390.964601] ? __pfx_ext4_map_blocks+0x10/0x10 [ 390.964628] ? __pfx___up_read+0x10/0x10 [ 390.964661] ? lock_release+0xc8/0x290 [ 390.964697] ? ext4_map_blocks+0x1e0/0x14a0 [ 390.964732] ext4_getblk+0x682/0x8e0 [ 390.964761] ? __pfx_ext4_getblk+0x10/0x10 [ 390.964785] ? __pfx_security_inode_init_security+0x10/0x10 [ 390.964813] ? crc32c+0x1ae/0x350 [ 390.964852] ext4_bread+0x2e/0x1a0 [ 390.964881] ext4_append+0x224/0x530 [ 390.964915] ? __pfx_ext4_append+0x10/0x10 [ 390.964948] ? __pfx___ext4_new_inode+0x10/0x10 [ 390.964989] ext4_init_new_dir+0x13c/0x240 [ 390.965010] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 390.965044] ext4_mkdir+0x3c5/0xb30 [ 390.965072] ? __pfx_ext4_mkdir+0x10/0x10 [ 390.965093] ? security_inode_permission+0x72/0xe0 [ 390.965129] vfs_mkdir+0x59a/0x8d0 [ 390.965157] do_mkdirat+0x19f/0x3d0 [ 390.965187] ? __pfx_do_mkdirat+0x10/0x10 [ 390.965226] __x64_sys_mkdir+0xf3/0x140 [ 390.965255] do_syscall_64+0xbf/0x390 [ 390.965282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.965305] RIP: 0033:0x7fc352503c27 [ 390.965322] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 390.965342] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 390.965362] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 390.965376] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 390.965389] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 390.965401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 390.965414] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 390.965446] [ 391.052142] FAULT_INJECTION: forcing a failure. [ 391.052142] name failslab, interval 1, probability 0, space 0, times 0 [ 391.054126] CPU: 1 UID: 0 PID: 5580 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 391.054157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 391.054171] Call Trace: [ 391.054178] [ 391.054187] dump_stack_lvl+0xfa/0x120 [ 391.054216] should_fail_ex+0x4d7/0x5e0 [ 391.054245] ? __es_insert_extent+0xed2/0x1370 [ 391.054270] should_failslab+0xc2/0x120 [ 391.054303] kmem_cache_alloc_noprof+0x80/0x690 [ 391.054343] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 391.054376] ? __es_insert_extent+0xed2/0x1370 [ 391.054399] __es_insert_extent+0xed2/0x1370 [ 391.054442] ext4_es_insert_delayed_extent+0x383/0x8a0 [ 391.054477] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 391.054508] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 391.054532] ? find_held_lock+0x2b/0x80 [ 391.054557] ? ext4_da_reserve_space+0x1e0/0x430 [ 391.054585] ? lock_release+0xc8/0x290 [ 391.054619] ? do_raw_spin_unlock+0x53/0x220 [ 391.054641] ? _raw_spin_unlock+0x1e/0x40 [ 391.054676] ? ext4_da_reserve_space+0xf9/0x430 [ 391.054708] ext4_da_get_block_prep+0x8f6/0x1050 [ 391.054743] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 391.054774] ? find_held_lock+0x2b/0x80 [ 391.054798] ? create_empty_buffers+0x219/0x460 [ 391.054834] ? lock_release+0xc8/0x290 [ 391.054867] ? do_raw_spin_unlock+0x53/0x220 [ 391.054889] ? _raw_spin_unlock+0x1e/0x40 [ 391.054921] ? create_empty_buffers+0x219/0x460 [ 391.054954] ext4_block_write_begin+0x7d1/0xcd0 [ 391.054997] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 391.055029] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 391.055066] ? __filemap_get_folio_mpol+0x2c4/0x9a0 [ 391.055108] ext4_da_write_begin+0x4d8/0xb40 [ 391.055156] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 391.055194] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 391.055248] ? __mark_inode_dirty+0x622/0xd00 [ 391.055287] generic_perform_write+0x391/0x810 [ 391.055329] ? __pfx_generic_perform_write+0x10/0x10 [ 391.055353] ? __mark_inode_dirty+0x5bc/0xd00 [ 391.055389] ? generic_update_time+0xcb/0xf0 [ 391.055423] ? mnt_put_write_access_file+0x45/0xe0 [ 391.055457] ext4_buffered_write_iter+0x11a/0x430 [ 391.055492] ext4_file_write_iter+0x9ea/0x1a00 [ 391.055524] ? mark_held_locks+0x49/0x80 [ 391.055563] ? kasan_save_track+0x14/0x30 [ 391.055596] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 391.055626] ? trace_kmalloc+0x1f/0xb0 [ 391.055655] ? __kmalloc_noprof+0x274/0x680 [ 391.055689] ? finish_task_switch.isra.0+0x206/0x840 [ 391.055716] ? splice_from_pipe_next.part.0+0x165/0x510 [ 391.055750] iter_file_splice_write+0xa3a/0x11f0 [ 391.055791] ? __pfx___schedule+0x10/0x10 [ 391.055827] ? __pfx_iter_file_splice_write+0x10/0x10 [ 391.055883] ? lock_is_held_type+0x9e/0x120 [ 391.055907] ? __pfx_iter_file_splice_write+0x10/0x10 [ 391.055934] direct_splice_actor+0x192/0x7b0 [ 391.055962] splice_direct_to_actor+0x347/0x9d0 [ 391.055988] ? __pfx_direct_splice_actor+0x10/0x10 [ 391.056020] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 391.056047] ? lock_acquire+0x15e/0x2f0 [ 391.056083] do_splice_direct+0x179/0x250 [ 391.056106] ? __pfx_do_splice_direct+0x10/0x10 [ 391.056130] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 391.056173] ? security_file_permission+0x22/0x90 [ 391.056212] do_sendfile+0xa8e/0xdc0 [ 391.056248] ? __pfx_do_sendfile+0x10/0x10 [ 391.056275] ? __fget_files+0x20d/0x3b0 [ 391.056314] __x64_sys_sendfile64+0x1d3/0x210 [ 391.056348] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 391.056394] do_syscall_64+0xbf/0x390 [ 391.056424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.056448] RIP: 0033:0x7f8700fa9b19 [ 391.056465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 391.056487] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 391.056509] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 391.056524] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 391.056537] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 391.056551] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.056565] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 391.056601] 12:12:20 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:20 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:20 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xfdef) 12:12:20 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:20 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:12:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:12:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 25) 12:12:20 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 24) [ 401.688533] FAULT_INJECTION: forcing a failure. [ 401.688533] name failslab, interval 1, probability 0, space 0, times 0 [ 401.689576] CPU: 1 UID: 0 PID: 5597 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 401.689593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 401.689600] Call Trace: [ 401.689604] [ 401.689609] dump_stack_lvl+0xfa/0x120 [ 401.689629] should_fail_ex+0x4d7/0x5e0 [ 401.689645] ? ext4_mb_new_blocks+0x2414/0x45b0 [ 401.689663] should_failslab+0xc2/0x120 [ 401.689680] kmem_cache_alloc_noprof+0x80/0x690 [ 401.689705] ? ext4_mb_new_blocks+0x2414/0x45b0 [ 401.689720] ext4_mb_new_blocks+0x2414/0x45b0 [ 401.689742] ? kasan_save_track+0x14/0x30 [ 401.689758] ? __kasan_kmalloc+0x7f/0x90 [ 401.689773] ? trace_kmalloc+0x1f/0xb0 [ 401.689788] ? __kmalloc_noprof+0x274/0x680 [ 401.689805] ? mark_held_locks+0x49/0x80 [ 401.689828] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 401.689845] ? ext4_ext_search_right+0x2e8/0xbd0 [ 401.689863] ? ext4_inode_to_goal_block+0x323/0x430 [ 401.689883] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 401.689911] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 401.689931] ? lock_acquire+0x15e/0x2f0 [ 401.689946] ? ext4_map_blocks+0x55b/0x14a0 [ 401.689969] ? __pfx_down_write+0x10/0x10 [ 401.689986] ? ext4_es_lookup_extent+0xc8/0xb30 [ 401.690005] ext4_map_blocks+0x624/0x14a0 [ 401.690023] ? __up_read+0x197/0x750 [ 401.690041] ? __pfx_ext4_map_blocks+0x10/0x10 [ 401.690055] ? __pfx___up_read+0x10/0x10 [ 401.690074] ? lock_release+0xc8/0x290 [ 401.690093] ? ext4_map_blocks+0x1e0/0x14a0 [ 401.690112] ext4_getblk+0x682/0x8e0 [ 401.690128] ? __pfx_ext4_getblk+0x10/0x10 [ 401.690141] ? __pfx_security_inode_init_security+0x10/0x10 [ 401.690157] ? crc32c+0x1ae/0x350 [ 401.690179] ext4_bread+0x2e/0x1a0 [ 401.690194] ext4_append+0x224/0x530 [ 401.690213] ? __pfx_ext4_append+0x10/0x10 [ 401.690231] ? __pfx___ext4_new_inode+0x10/0x10 [ 401.690254] ext4_init_new_dir+0x13c/0x240 [ 401.690266] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 401.690284] ext4_mkdir+0x3c5/0xb30 [ 401.690299] ? __pfx_ext4_mkdir+0x10/0x10 [ 401.690310] ? security_inode_permission+0x72/0xe0 [ 401.690331] vfs_mkdir+0x59a/0x8d0 [ 401.690347] do_mkdirat+0x19f/0x3d0 [ 401.690364] ? __pfx_do_mkdirat+0x10/0x10 [ 401.690385] __x64_sys_mkdir+0xf3/0x140 [ 401.690401] do_syscall_64+0xbf/0x390 [ 401.690416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.690429] RIP: 0033:0x7fc352503c27 [ 401.690438] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 401.690449] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 401.690461] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 401.690468] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 401.690475] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 401.690482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 401.690490] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 401.690507] [ 401.727670] FAULT_INJECTION: forcing a failure. [ 401.727670] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 401.728620] CPU: 1 UID: 0 PID: 5603 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 401.728636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 401.728643] Call Trace: [ 401.728647] [ 401.728651] dump_stack_lvl+0xfa/0x120 [ 401.728666] should_fail_ex+0x4d7/0x5e0 [ 401.728682] should_fail_alloc_page+0xe0/0x110 [ 401.728702] prepare_alloc_pages+0x1eb/0x550 [ 401.728719] ? __pfx_perf_trace_lock+0x10/0x10 [ 401.728740] alloc_pages_bulk_noprof+0x148/0xc30 [ 401.728763] ? find_held_lock+0x2b/0x80 [ 401.728781] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 401.728804] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 401.728832] ? trace_kmalloc+0x1f/0xb0 [ 401.728847] ? __kmalloc_noprof+0x274/0x680 [ 401.728868] ? copy_splice_read+0x15b/0xc00 [ 401.728893] copy_splice_read+0x192/0xc00 [ 401.728919] ? __pfx_copy_splice_read+0x10/0x10 [ 401.728940] ? __pfx_perf_trace_lock+0x10/0x10 [ 401.728963] ? find_held_lock+0x2b/0x80 [ 401.728975] ? splice_direct_to_actor+0x347/0x9d0 [ 401.728989] ? __pfx_copy_splice_read+0x10/0x10 [ 401.729011] do_splice_read+0x1f8/0x2a0 [ 401.729034] splice_direct_to_actor+0x2a8/0x9d0 [ 401.729047] ? __pfx_direct_splice_actor+0x10/0x10 [ 401.729063] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 401.729077] ? lock_acquire+0x15e/0x2f0 [ 401.729097] do_splice_direct+0x179/0x250 [ 401.729109] ? __pfx_do_splice_direct+0x10/0x10 [ 401.729122] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 401.729145] ? security_file_permission+0x22/0x90 [ 401.729167] do_sendfile+0xa8e/0xdc0 [ 401.729186] ? __pfx_do_sendfile+0x10/0x10 [ 401.729201] ? __fget_files+0x20d/0x3b0 [ 401.729222] __x64_sys_sendfile64+0x1d3/0x210 [ 401.729241] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 401.729266] do_syscall_64+0xbf/0x390 [ 401.729282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.729294] RIP: 0033:0x7f8700fa9b19 [ 401.729304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 401.729315] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 401.729327] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 401.729335] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 401.729342] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 401.729350] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.729357] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 401.729375] 12:12:20 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:20 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:12:20 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:20 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 25) 12:12:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 26) 12:12:20 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 12:12:20 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:12:20 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:20 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 402.022281] FAULT_INJECTION: forcing a failure. [ 402.022281] name failslab, interval 1, probability 0, space 0, times 0 [ 402.023366] CPU: 1 UID: 0 PID: 5629 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 402.023382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 402.023389] Call Trace: [ 402.023402] [ 402.023408] dump_stack_lvl+0xfa/0x120 [ 402.023428] should_fail_ex+0x4d7/0x5e0 [ 402.023441] ? __es_remove_extent+0x53f/0x1570 [ 402.023459] ? __es_insert_extent+0xed2/0x1370 [ 402.023471] should_failslab+0xc2/0x120 [ 402.023488] kmem_cache_alloc_noprof+0x80/0x690 [ 402.023511] ? __pfx___es_remove_extent+0x10/0x10 [ 402.023530] ? __es_insert_extent+0xed2/0x1370 [ 402.023548] __es_insert_extent+0xed2/0x1370 [ 402.023575] ext4_es_insert_extent+0x4d0/0x1100 [ 402.023595] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 402.023609] ? lock_acquire+0x15e/0x2f0 [ 402.023627] ? ext4_map_blocks+0x55b/0x14a0 [ 402.023651] ? __pfx_down_write+0x10/0x10 [ 402.023665] ? ext4_es_lookup_extent+0xc8/0xb30 [ 402.023684] ext4_map_blocks+0x7ff/0x14a0 [ 402.023702] ? __up_read+0x197/0x750 [ 402.023720] ? __pfx_ext4_map_blocks+0x10/0x10 [ 402.023734] ? __pfx___up_read+0x10/0x10 [ 402.023752] ? lock_release+0xc8/0x290 [ 402.023771] ? ext4_map_blocks+0x1e0/0x14a0 [ 402.023790] ext4_getblk+0x682/0x8e0 [ 402.023805] ? __pfx_ext4_getblk+0x10/0x10 [ 402.023819] ? __pfx_security_inode_init_security+0x10/0x10 [ 402.023839] ? crc32c+0x1ae/0x350 [ 402.023861] ext4_bread+0x2e/0x1a0 [ 402.023877] ext4_append+0x224/0x530 [ 402.023896] ? __pfx_ext4_append+0x10/0x10 [ 402.023914] ? __pfx___ext4_new_inode+0x10/0x10 [ 402.023936] ext4_init_new_dir+0x13c/0x240 [ 402.023948] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 402.023966] ext4_mkdir+0x3c5/0xb30 [ 402.023982] ? __pfx_ext4_mkdir+0x10/0x10 [ 402.023993] ? security_inode_permission+0x72/0xe0 [ 402.024013] vfs_mkdir+0x59a/0x8d0 [ 402.024029] do_mkdirat+0x19f/0x3d0 [ 402.024047] ? __pfx_do_mkdirat+0x10/0x10 [ 402.024068] __x64_sys_mkdir+0xf3/0x140 [ 402.024084] do_syscall_64+0xbf/0x390 [ 402.024100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.024112] RIP: 0033:0x7fc352503c27 [ 402.024122] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 402.024133] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 402.024144] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 402.024153] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 402.024160] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 402.024167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 402.024174] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 402.024192] [ 402.067528] No source specified 12:12:20 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 26) 12:12:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 12:12:20 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:12:20 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfdef) 12:12:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 27) [ 402.262700] No source specified 12:12:30 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:12:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 28) 12:12:30 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 27) 12:12:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 12:12:30 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:30 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:30 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfdef) 12:12:30 executing program 5: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 412.004423] FAULT_INJECTION: forcing a failure. [ 412.004423] name failslab, interval 1, probability 0, space 0, times 0 [ 412.006118] CPU: 0 UID: 0 PID: 5657 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 412.006135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 412.006142] Call Trace: [ 412.006146] [ 412.006151] dump_stack_lvl+0xfa/0x120 [ 412.006171] should_fail_ex+0x4d7/0x5e0 [ 412.006188] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 412.006216] should_failslab+0xc2/0x120 [ 412.006234] kmem_cache_alloc_noprof+0x80/0x690 [ 412.006254] ? fs_reclaim_acquire+0xae/0x150 [ 412.006273] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 412.006292] jbd2_journal_add_journal_head+0x367/0x5d0 [ 412.006312] jbd2_journal_get_create_access+0x44/0x560 [ 412.006327] ? lock_is_held_type+0x9e/0x120 [ 412.006345] __ext4_journal_get_create_access+0x54/0x1b0 [ 412.006366] ext4_getblk+0x3c9/0x8e0 [ 412.006383] ? __pfx_ext4_getblk+0x10/0x10 [ 412.006397] ? __pfx_security_inode_init_security+0x10/0x10 [ 412.006413] ? crc32c+0x1ae/0x350 [ 412.006436] ext4_bread+0x2e/0x1a0 [ 412.006451] ext4_append+0x224/0x530 [ 412.006470] ? __pfx_ext4_append+0x10/0x10 [ 412.006488] ? __pfx___ext4_new_inode+0x10/0x10 [ 412.006510] ext4_init_new_dir+0x13c/0x240 [ 412.006522] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 412.006540] ext4_mkdir+0x3c5/0xb30 [ 412.006555] ? __pfx_ext4_mkdir+0x10/0x10 [ 412.006566] ? security_inode_permission+0x72/0xe0 [ 412.006587] vfs_mkdir+0x59a/0x8d0 [ 412.006603] do_mkdirat+0x19f/0x3d0 [ 412.006620] ? __pfx_do_mkdirat+0x10/0x10 [ 412.006640] __x64_sys_mkdir+0xf3/0x140 [ 412.006656] do_syscall_64+0xbf/0x390 [ 412.006671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.006684] RIP: 0033:0x7fc352503c27 [ 412.006694] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 412.006705] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 412.006716] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc352503c27 [ 412.006724] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 412.006731] RBP: 00007fc34fa7a040 R08: 0000000000000000 R09: 0000000000000000 [ 412.006739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 412.006746] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 412.006763] [ 412.025624] ENOMEM in journal_alloc_journal_head, retrying. [ 412.030239] FAULT_INJECTION: forcing a failure. [ 412.030239] name failslab, interval 1, probability 0, space 0, times 0 [ 412.031160] CPU: 0 UID: 0 PID: 5658 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 412.031176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 412.031182] Call Trace: [ 412.031186] [ 412.031191] dump_stack_lvl+0xfa/0x120 [ 412.031203] should_fail_ex+0x4d7/0x5e0 [ 412.031217] should_failslab+0xc2/0x120 [ 412.031232] __kmalloc_noprof+0xcd/0x680 [ 412.031249] ? find_held_lock+0x2b/0x80 [ 412.031264] ? iter_file_splice_write+0x1cd/0x11f0 [ 412.031281] iter_file_splice_write+0x1cd/0x11f0 [ 412.031292] ? trace_sched_exit_tp+0xbf/0x100 [ 412.031305] ? __schedule+0xf95/0x3e30 [ 412.031329] ? __pfx___schedule+0x10/0x10 [ 412.031347] ? __pfx_iter_file_splice_write+0x10/0x10 [ 412.031360] ? __lock_acquire+0xc65/0x1b70 [ 412.031388] ? lock_is_held_type+0x9e/0x120 [ 412.031399] ? __pfx_iter_file_splice_write+0x10/0x10 [ 412.031413] direct_splice_actor+0x192/0x7b0 [ 412.031427] splice_direct_to_actor+0x347/0x9d0 [ 412.031440] ? __pfx_direct_splice_actor+0x10/0x10 [ 412.031455] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 412.031469] ? lock_acquire+0x15e/0x2f0 [ 412.031488] do_splice_direct+0x179/0x250 [ 412.031500] ? __pfx_do_splice_direct+0x10/0x10 [ 412.031512] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 412.031534] ? security_file_permission+0x22/0x90 [ 412.031564] do_sendfile+0xa8e/0xdc0 [ 412.031583] ? __pfx_do_sendfile+0x10/0x10 [ 412.031596] ? __fget_files+0x20d/0x3b0 [ 412.031616] __x64_sys_sendfile64+0x1d3/0x210 [ 412.031633] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 412.031656] do_syscall_64+0xbf/0x390 [ 412.031670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.031682] RIP: 0033:0x7f8700fa9b19 [ 412.031690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 412.031700] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 412.031711] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 412.031719] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 412.031725] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 412.031732] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.031739] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 412.031756] 12:12:30 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 28) [ 412.084193] No source specified 12:12:30 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640), 0x0, 0x0) 12:12:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 29) 12:12:40 executing program 5: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640), 0x0, 0x0) 12:12:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 29) 12:12:40 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfdef) 12:12:40 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:12:40 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:40 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) [ 422.108143] No source specified 12:12:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640), 0x0, 0x0) [ 422.166758] FAULT_INJECTION: forcing a failure. [ 422.166758] name failslab, interval 1, probability 0, space 0, times 0 [ 422.168377] CPU: 0 UID: 0 PID: 5699 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 422.168403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 422.168415] Call Trace: [ 422.168421] [ 422.168428] dump_stack_lvl+0xfa/0x120 [ 422.168454] should_fail_ex+0x4d7/0x5e0 [ 422.168479] ? jbd2__journal_start+0x193/0x6b0 [ 422.168499] should_failslab+0xc2/0x120 [ 422.168526] kmem_cache_alloc_noprof+0x80/0x690 [ 422.168566] ? jbd2__journal_start+0x193/0x6b0 [ 422.168584] jbd2__journal_start+0x193/0x6b0 [ 422.168608] __ext4_journal_start_sb+0x325/0x5d0 [ 422.168637] ? ext4_dirty_inode+0xa5/0x130 [ 422.168671] ext4_dirty_inode+0xa5/0x130 [ 422.168699] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 422.168725] __mark_inode_dirty+0x1b7/0xd00 [ 422.168757] generic_update_time+0xcb/0xf0 [ 422.168786] file_modified+0x1f0/0x230 [ 422.168815] ext4_buffered_write_iter+0xf4/0x430 [ 422.168851] ext4_file_write_iter+0x9ea/0x1a00 [ 422.168875] ? mark_held_locks+0x49/0x80 [ 422.168907] ? kasan_save_track+0x14/0x30 [ 422.168934] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 422.168957] ? trace_kmalloc+0x1f/0xb0 [ 422.168979] ? __kmalloc_noprof+0x274/0x680 [ 422.169007] ? finish_task_switch.isra.0+0x206/0x840 [ 422.169027] ? splice_from_pipe_next.part.0+0x165/0x510 [ 422.169053] iter_file_splice_write+0xa3a/0x11f0 [ 422.169085] ? __pfx___schedule+0x10/0x10 [ 422.169119] ? __pfx_iter_file_splice_write+0x10/0x10 [ 422.169163] ? lock_is_held_type+0x9e/0x120 [ 422.169182] ? __pfx_iter_file_splice_write+0x10/0x10 [ 422.169204] direct_splice_actor+0x192/0x7b0 [ 422.169226] splice_direct_to_actor+0x347/0x9d0 [ 422.169247] ? __pfx_direct_splice_actor+0x10/0x10 [ 422.169272] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 422.169294] ? lock_acquire+0x15e/0x2f0 [ 422.169323] do_splice_direct+0x179/0x250 [ 422.169342] ? __pfx_do_splice_direct+0x10/0x10 [ 422.169361] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 422.169395] ? security_file_permission+0x22/0x90 [ 422.169427] do_sendfile+0xa8e/0xdc0 [ 422.169455] ? __pfx_do_sendfile+0x10/0x10 [ 422.169477] ? __fget_files+0x20d/0x3b0 [ 422.169508] __x64_sys_sendfile64+0x1d3/0x210 [ 422.169536] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 422.169573] do_syscall_64+0xbf/0x390 [ 422.169597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.169616] RIP: 0033:0x7f8700fa9b19 [ 422.169631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.169649] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 422.169667] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 422.169680] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 422.169690] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 422.169701] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.169713] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 422.169741] 12:12:40 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:12:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0xa}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:12:50 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:12:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 30) 12:12:50 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:12:50 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:12:50 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 30) 12:12:50 executing program 7: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:50 executing program 5: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 31) 12:12:50 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:12:50 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) [ 431.650891] No source specified 12:12:50 executing program 7: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0xa}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:12:50 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:50 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 31) 12:12:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 32) 12:12:50 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:12:50 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) [ 431.775179] FAULT_INJECTION: forcing a failure. [ 431.775179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.776167] CPU: 0 UID: 0 PID: 5742 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 431.776183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.776191] Call Trace: [ 431.776196] [ 431.776201] dump_stack_lvl+0xfa/0x120 [ 431.776221] should_fail_ex+0x4d7/0x5e0 [ 431.776238] _copy_from_user+0x30/0xd0 [ 431.776253] memdup_user+0x7e/0xe0 [ 431.776273] strndup_user+0x78/0xe0 [ 431.776289] __x64_sys_mount+0x136/0x310 [ 431.776308] ? __pfx___x64_sys_mount+0x10/0x10 [ 431.776329] do_syscall_64+0xbf/0x390 [ 431.776345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.776358] RIP: 0033:0x7fc35250604a [ 431.776367] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.776378] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 431.776390] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc35250604a [ 431.776398] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 431.776405] RBP: 00007fc34fa7a040 R08: 00007fc34fa7a040 R09: 0000000020000000 [ 431.776412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 431.776419] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 431.776435] 12:12:50 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:12:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 33) 12:12:50 executing program 7: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 431.888153] FAULT_INJECTION: forcing a failure. [ 431.888153] name failslab, interval 1, probability 0, space 0, times 0 [ 431.889112] CPU: 0 UID: 0 PID: 5753 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 431.889129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.889137] Call Trace: [ 431.889142] [ 431.889146] dump_stack_lvl+0xfa/0x120 [ 431.889167] should_fail_ex+0x4d7/0x5e0 [ 431.889185] should_failslab+0xc2/0x120 [ 431.889206] __kmalloc_cache_noprof+0x81/0x6b0 [ 431.889225] ? __might_fault+0xe0/0x190 [ 431.889240] ? copy_mount_options+0x55/0x180 [ 431.889262] ? copy_mount_options+0x55/0x180 [ 431.889278] ? memdup_user+0x95/0xe0 [ 431.889295] copy_mount_options+0x55/0x180 [ 431.889314] __x64_sys_mount+0x1ab/0x310 [ 431.889329] ? __pfx___x64_sys_mount+0x10/0x10 [ 431.889350] do_syscall_64+0xbf/0x390 [ 431.889367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.889380] RIP: 0033:0x7fc35250604a [ 431.889389] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.889400] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 431.889412] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc35250604a [ 431.889419] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 431.889427] RBP: 00007fc34fa7a040 R08: 00007fc34fa7a040 R09: 0000000020000000 [ 431.889434] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 431.889442] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 431.889459] 12:12:50 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:12:50 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 34) [ 432.010574] FAULT_INJECTION: forcing a failure. [ 432.010574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.011785] CPU: 0 UID: 0 PID: 5763 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 432.011801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 432.011809] Call Trace: [ 432.011813] [ 432.011822] dump_stack_lvl+0xfa/0x120 [ 432.011849] should_fail_ex+0x4d7/0x5e0 [ 432.011868] _copy_from_user+0x30/0xd0 [ 432.011885] memdup_user+0x7e/0xe0 [ 432.011904] strndup_user+0x78/0xe0 [ 432.011925] __x64_sys_mount+0x136/0x310 [ 432.011943] ? __pfx___x64_sys_mount+0x10/0x10 [ 432.011964] do_syscall_64+0xbf/0x390 [ 432.011981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.011993] RIP: 0033:0x7fc35250604a [ 432.012002] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 432.012013] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 432.012025] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc35250604a [ 432.012033] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 432.012040] RBP: 00007fc34fa7a040 R08: 00007fc34fa7a040 R09: 0000000020000000 [ 432.012048] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 432.012055] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 432.012072] 12:12:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0xa}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:12:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 35) 12:12:59 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:12:59 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:12:59 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:59 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 32) 12:12:59 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:12:59 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 440.565671] FAULT_INJECTION: forcing a failure. [ 440.565671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.566743] CPU: 0 UID: 0 PID: 5779 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 440.566759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 440.566767] Call Trace: [ 440.566771] [ 440.566775] dump_stack_lvl+0xfa/0x120 [ 440.566796] should_fail_ex+0x4d7/0x5e0 [ 440.566813] _copy_from_user+0x30/0xd0 [ 440.566832] copy_mount_options+0x76/0x180 [ 440.566853] __x64_sys_mount+0x1ab/0x310 [ 440.566870] ? __pfx___x64_sys_mount+0x10/0x10 [ 440.566891] do_syscall_64+0xbf/0x390 [ 440.566909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.566922] RIP: 0033:0x7fc35250604a [ 440.566931] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 440.566942] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 440.566954] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc35250604a [ 440.566961] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 440.566969] RBP: 00007fc34fa7a040 R08: 00007fc34fa7a040 R09: 0000000020000000 [ 440.566976] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 440.566983] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 440.567000] [ 440.593890] No source specified 12:12:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 36) 12:12:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:12:59 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:12:59 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:12:59 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 33) 12:12:59 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) [ 440.752422] FAULT_INJECTION: forcing a failure. [ 440.752422] name failslab, interval 1, probability 0, space 0, times 0 [ 440.754531] CPU: 1 UID: 0 PID: 5790 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 440.754576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 440.754594] Call Trace: [ 440.754604] [ 440.754615] dump_stack_lvl+0xfa/0x120 [ 440.754659] should_fail_ex+0x4d7/0x5e0 [ 440.754700] ? getname_flags.part.0+0x48/0x540 [ 440.754754] should_failslab+0xc2/0x120 [ 440.754798] kmem_cache_alloc_noprof+0x80/0x690 [ 440.754860] ? getname_flags.part.0+0x48/0x540 [ 440.754892] getname_flags.part.0+0x48/0x540 [ 440.754928] getname_flags+0x95/0xe0 [ 440.754954] user_path_at+0x27/0x90 [ 440.754980] __x64_sys_mount+0x1fb/0x310 [ 440.755011] ? __pfx___x64_sys_mount+0x10/0x10 [ 440.755050] do_syscall_64+0xbf/0x390 [ 440.755078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.755101] RIP: 0033:0x7fc35250604a [ 440.755118] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 440.755138] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 440.755159] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc35250604a [ 440.755173] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 440.755186] RBP: 00007fc34fa7a040 R08: 00007fc34fa7a040 R09: 0000000020000000 [ 440.755199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 440.755212] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 440.755243] 12:12:59 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:12:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:08 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 34) 12:13:08 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 37) 12:13:08 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:13:08 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:13:08 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:13:08 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 450.424070] No source specified 12:13:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 38) 12:13:09 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:13:09 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 450.547292] FAULT_INJECTION: forcing a failure. [ 450.547292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.548384] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 450.548400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 450.548408] Call Trace: [ 450.548413] [ 450.548417] dump_stack_lvl+0xfa/0x120 [ 450.548436] should_fail_ex+0x4d7/0x5e0 [ 450.548453] strncpy_from_user+0x3b/0x2f0 [ 450.548473] getname_flags.part.0+0x8d/0x540 [ 450.548495] getname_flags+0x95/0xe0 [ 450.548510] user_path_at+0x27/0x90 [ 450.548524] __x64_sys_mount+0x1fb/0x310 [ 450.548541] ? __pfx___x64_sys_mount+0x10/0x10 [ 450.548561] do_syscall_64+0xbf/0x390 [ 450.548578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.548591] RIP: 0033:0x7fc35250604a [ 450.548600] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 12:13:09 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 35) 12:13:09 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) [ 450.548611] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 450.548623] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc35250604a [ 450.548631] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 450.548638] RBP: 00007fc34fa7a040 R08: 00007fc34fa7a040 R09: 0000000020000000 [ 450.548645] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 450.548652] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 450.548669] [ 450.667359] FAULT_INJECTION: forcing a failure. [ 450.667359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.669428] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 450.669457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 450.669471] Call Trace: [ 450.669478] [ 450.669487] dump_stack_lvl+0xfa/0x120 [ 450.669518] should_fail_ex+0x4d7/0x5e0 [ 450.669548] should_fail_alloc_page+0xe0/0x110 [ 450.669581] prepare_alloc_pages+0x1eb/0x550 [ 450.669609] ? ext4_es_insert_delayed_extent+0x42b/0x8a0 [ 450.669645] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 450.669687] ? __pfx_ext4_es_insert_delayed_extent+0x10/0x10 [ 450.669716] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 450.669741] ? find_held_lock+0x2b/0x80 [ 450.669765] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 450.669799] ? lock_release+0xc8/0x290 [ 450.669842] ? ext4_da_reserve_space+0xf9/0x430 [ 450.669873] ? perf_trace_lock+0xb5/0x5d0 [ 450.669904] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 450.669946] ? policy_nodemask+0xeb/0x4e0 [ 450.669986] alloc_pages_mpol+0xed/0x340 [ 450.670006] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 450.670025] ? find_held_lock+0x2b/0x80 [ 450.670050] ? filemap_get_entry+0x1b1/0x3b0 [ 450.670083] ? lock_release+0xc8/0x290 [ 450.670117] folio_alloc_noprof+0x21/0x80 [ 450.670140] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 450.670169] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 450.670196] ? perf_trace_lock+0xb5/0x5d0 [ 450.670233] __filemap_get_folio_mpol+0x513/0x9a0 [ 450.670270] ext4_da_write_begin+0x3e4/0xb40 [ 450.670314] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 450.670349] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 450.670393] generic_perform_write+0x391/0x810 [ 450.670429] ? __pfx_generic_perform_write+0x10/0x10 [ 450.670452] ? __mark_inode_dirty+0x254/0xd00 [ 450.670487] ? generic_update_time+0xcb/0xf0 [ 450.670518] ? mnt_put_write_access_file+0x45/0xe0 [ 450.670549] ext4_buffered_write_iter+0x11a/0x430 [ 450.670582] ext4_file_write_iter+0x9ea/0x1a00 [ 450.670610] ? mark_held_locks+0x49/0x80 [ 450.670646] ? kasan_save_track+0x14/0x30 [ 450.670676] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 450.670703] ? trace_kmalloc+0x1f/0xb0 [ 450.670729] ? __kmalloc_noprof+0x274/0x680 [ 450.670762] ? finish_task_switch.isra.0+0x206/0x840 [ 450.670786] ? splice_from_pipe_next.part.0+0x165/0x510 [ 450.670817] iter_file_splice_write+0xa3a/0x11f0 [ 450.670855] ? __pfx___schedule+0x10/0x10 [ 450.670892] ? __pfx_iter_file_splice_write+0x10/0x10 [ 450.670944] ? lock_is_held_type+0x9e/0x120 [ 450.670965] ? __pfx_iter_file_splice_write+0x10/0x10 [ 450.670991] direct_splice_actor+0x192/0x7b0 [ 450.671017] splice_direct_to_actor+0x347/0x9d0 [ 450.671041] ? __pfx_direct_splice_actor+0x10/0x10 [ 450.671072] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 450.671098] ? lock_acquire+0x15e/0x2f0 [ 450.671133] do_splice_direct+0x179/0x250 [ 450.671155] ? __pfx_do_splice_direct+0x10/0x10 [ 450.671177] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 450.671217] ? security_file_permission+0x22/0x90 [ 450.671255] do_sendfile+0xa8e/0xdc0 [ 450.671288] ? __pfx_do_sendfile+0x10/0x10 [ 450.671314] ? __fget_files+0x20d/0x3b0 [ 450.671351] __x64_sys_sendfile64+0x1d3/0x210 [ 450.671383] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 450.671427] do_syscall_64+0xbf/0x390 [ 450.671455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.671478] RIP: 0033:0x7f8700fa9b19 [ 450.671495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 450.671515] RSP: 002b:00007f86fe51f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 450.671537] RAX: ffffffffffffffda RBX: 00007f87010bcf60 RCX: 00007f8700fa9b19 [ 450.671551] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 450.671564] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 450.671577] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.671590] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 450.671623] 12:13:17 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 36) 12:13:17 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:13:17 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:13:17 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 39) 12:13:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:17 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:17 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) [ 459.369415] FAULT_INJECTION: forcing a failure. [ 459.369415] name failslab, interval 1, probability 0, space 0, times 0 [ 459.371303] CPU: 1 UID: 0 PID: 5865 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 459.371334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 459.371347] Call Trace: [ 459.371355] [ 459.371364] dump_stack_lvl+0xfa/0x120 [ 459.371394] should_fail_ex+0x4d7/0x5e0 [ 459.371423] should_failslab+0xc2/0x120 [ 459.371455] __kmalloc_cache_noprof+0x81/0x6b0 [ 459.371490] ? find_held_lock+0x2b/0x80 [ 459.371514] ? __get_fs_type+0xe6/0x160 [ 459.371543] ? alloc_fs_context+0x58/0x9e0 [ 459.371577] ? alloc_fs_context+0x58/0x9e0 [ 459.371601] ? _raw_read_unlock+0x1e/0x40 [ 459.371637] alloc_fs_context+0x58/0x9e0 [ 459.371671] path_mount+0xd87/0x2130 [ 459.371702] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 459.371737] ? __pfx_path_mount+0x10/0x10 [ 459.371766] ? kmem_cache_free+0x2a4/0x540 [ 459.371789] ? putname.part.0+0x11b/0x160 [ 459.371830] ? getname_flags.part.0+0x1c6/0x540 [ 459.371869] ? putname.part.0+0x11b/0x160 [ 459.371908] __x64_sys_mount+0x293/0x310 [ 459.371938] ? __pfx___x64_sys_mount+0x10/0x10 [ 459.371979] do_syscall_64+0xbf/0x390 [ 459.372008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.372032] RIP: 0033:0x7fc35250604a [ 459.372049] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 459.372070] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 459.372093] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc35250604a [ 459.372107] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 459.372121] RBP: 00007fc34fa7a040 R08: 00007fc34fa7a040 R09: 0000000020000000 [ 459.372135] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 459.372149] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 459.372182] 12:13:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:17 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 37) 12:13:17 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:27 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:13:27 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:27 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:27 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:13:27 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 38) 12:13:27 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:13:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500), 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 40) 12:13:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500), 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 468.547941] No source specified 12:13:27 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:13:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 41) 12:13:27 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:27 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) 12:13:27 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 39) 12:13:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500), 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 468.774398] FAULT_INJECTION: forcing a failure. [ 468.774398] name failslab, interval 1, probability 0, space 0, times 0 [ 468.776373] CPU: 0 UID: 0 PID: 5908 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 468.776404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 468.776417] Call Trace: [ 468.776425] [ 468.776433] dump_stack_lvl+0xfa/0x120 [ 468.776464] should_fail_ex+0x4d7/0x5e0 [ 468.776494] should_failslab+0xc2/0x120 [ 468.776525] __kmalloc_cache_noprof+0x81/0x6b0 [ 468.776561] ? trace_kmalloc+0x1f/0xb0 [ 468.776588] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 468.776622] ? ext4_init_fs_context+0x45/0x110 [ 468.776660] ? ext4_init_fs_context+0x45/0x110 [ 468.776688] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 468.776723] ext4_init_fs_context+0x45/0x110 [ 468.776752] ? __pfx_ext4_init_fs_context+0x10/0x10 [ 468.776783] alloc_fs_context+0x570/0x9e0 [ 468.776826] path_mount+0xd87/0x2130 [ 468.776857] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 468.776892] ? __pfx_path_mount+0x10/0x10 [ 468.776921] ? kmem_cache_free+0x2a4/0x540 [ 468.776944] ? putname.part.0+0x11b/0x160 [ 468.776978] ? getname_flags.part.0+0x1c6/0x540 [ 468.777017] ? putname.part.0+0x11b/0x160 [ 468.777055] __x64_sys_mount+0x293/0x310 [ 468.777086] ? __pfx___x64_sys_mount+0x10/0x10 [ 468.777127] do_syscall_64+0xbf/0x390 [ 468.777157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.777180] RIP: 0033:0x7fc35250604a [ 468.777198] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 468.777219] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 468.777242] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc35250604a [ 468.777256] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 468.777270] RBP: 00007fc34fa7a040 R08: 00007fc34fa7a040 R09: 0000000020000000 [ 468.777284] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 468.777298] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 468.777331] 12:13:27 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:36 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:36 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 42) 12:13:36 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) 12:13:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) (fail_nth: 40) 12:13:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{0x0}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:36 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:13:36 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{0x0}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 477.700040] No source specified [ 477.702918] FAULT_INJECTION: forcing a failure. [ 477.702918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.705030] CPU: 1 UID: 0 PID: 5934 Comm: syz-executor.1 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 477.705062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.705076] Call Trace: [ 477.705084] [ 477.705093] dump_stack_lvl+0xfa/0x120 [ 477.705124] should_fail_ex+0x4d7/0x5e0 [ 477.705154] _copy_to_user+0x32/0xd0 [ 477.705184] simple_read_from_buffer+0xe0/0x180 [ 477.705213] proc_fail_nth_read+0x18a/0x240 [ 477.705247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.705281] ? security_file_permission+0x22/0x90 [ 477.705316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.705349] vfs_read+0x1eb/0xc70 [ 477.705386] ? __pfx_vfs_read+0x10/0x10 [ 477.705416] ? lock_release+0xc8/0x290 [ 477.705456] ? __fget_files+0x20d/0x3b0 [ 477.705499] ksys_read+0x121/0x240 [ 477.705528] ? __pfx_ksys_read+0x10/0x10 [ 477.705570] do_syscall_64+0xbf/0x390 [ 477.705602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.705628] RIP: 0033:0x7f8700f5c69c [ 477.705647] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 477.705671] RSP: 002b:00007f86fe51f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 477.705695] RAX: ffffffffffffffda RBX: 00000000000027bb RCX: 00007f8700f5c69c [ 477.705711] RDX: 000000000000000f RSI: 00007f86fe51f1e0 RDI: 0000000000000005 [ 477.705727] RBP: 00007f86fe51f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 477.705743] R10: 0004000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.705758] R13: 00007fff46697fdf R14: 00007f86fe51f300 R15: 0000000000022000 [ 477.705795] 12:13:36 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:36 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, 0xffffffffffffffff, 0x0, 0xfdef) 12:13:36 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 43) 12:13:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) 12:13:36 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r6, r7, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:13:36 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{0x0}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:36 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 477.979362] FAULT_INJECTION: forcing a failure. [ 477.979362] name failslab, interval 1, probability 0, space 0, times 0 [ 477.980437] CPU: 0 UID: 0 PID: 5955 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 477.980453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.980460] Call Trace: [ 477.980464] [ 477.980469] dump_stack_lvl+0xfa/0x120 [ 477.980497] should_fail_ex+0x4d7/0x5e0 [ 477.980515] should_failslab+0xc2/0x120 [ 477.980534] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 477.980550] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 477.980564] ? kfree+0x231/0x550 [ 477.980582] kmemdup_nul+0x3b/0xa0 [ 477.980600] vfs_parse_fs_qstr+0x112/0x1c0 [ 477.980614] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 477.980635] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 477.980647] vfs_parse_monolithic_sep+0x198/0x220 [ 477.980662] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 477.980675] ? __pfx_ext4_init_fs_context+0x10/0x10 [ 477.980693] ? alloc_fs_context+0x5c0/0x9e0 [ 477.980710] path_mount+0x6d0/0x2130 [ 477.980726] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 477.980744] ? __pfx_path_mount+0x10/0x10 [ 477.980759] ? kmem_cache_free+0x2a4/0x540 [ 477.980770] ? putname.part.0+0x11b/0x160 [ 477.980787] ? getname_flags.part.0+0x1c6/0x540 [ 477.980807] ? putname.part.0+0x11b/0x160 [ 477.980830] __x64_sys_mount+0x293/0x310 [ 477.980845] ? __pfx___x64_sys_mount+0x10/0x10 [ 477.980866] do_syscall_64+0xbf/0x390 [ 477.980883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.980895] RIP: 0033:0x7fc35250604a [ 477.980905] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 477.980916] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 477.980927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc35250604a [ 477.980935] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 477.980942] RBP: 00007fc34fa7a040 R08: 00007fc34fa7a040 R09: 0000000020000000 [ 477.980949] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 477.980956] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 477.980972] 12:13:46 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:46 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:46 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 44) 12:13:46 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:13:46 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000002) 12:13:46 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) [ 487.817298] No source specified 12:13:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:46 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 45) 12:13:46 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000003) 12:13:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 488.050283] FAULT_INJECTION: forcing a failure. [ 488.050283] name failslab, interval 1, probability 0, space 0, times 0 [ 488.052061] CPU: 1 UID: 0 PID: 5998 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 488.052089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 488.052101] Call Trace: [ 488.052108] [ 488.052116] dump_stack_lvl+0xfa/0x120 [ 488.052143] should_fail_ex+0x4d7/0x5e0 [ 488.052170] should_failslab+0xc2/0x120 [ 488.052199] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 488.052227] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 488.052250] ? kfree+0x284/0x550 [ 488.052285] kmemdup_nul+0x3b/0xa0 [ 488.052315] vfs_parse_fs_qstr+0x112/0x1c0 [ 488.052340] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 488.052380] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 488.052403] vfs_parse_monolithic_sep+0x198/0x220 [ 488.052431] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 488.052455] ? __pfx_ext4_init_fs_context+0x10/0x10 [ 488.052485] ? alloc_fs_context+0x5c0/0x9e0 [ 488.052517] path_mount+0x6d0/0x2130 [ 488.052546] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 488.052578] ? __pfx_path_mount+0x10/0x10 [ 488.052606] ? kmem_cache_free+0x2a4/0x540 [ 488.052638] ? putname.part.0+0x11b/0x160 [ 488.052670] ? getname_flags.part.0+0x1c6/0x540 [ 488.052706] ? putname.part.0+0x11b/0x160 [ 488.052743] __x64_sys_mount+0x293/0x310 [ 488.052771] ? __pfx___x64_sys_mount+0x10/0x10 [ 488.052810] do_syscall_64+0xbf/0x390 [ 488.052843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.052865] RIP: 0033:0x7fc35250604a [ 488.052881] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 488.052901] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 488.052921] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc35250604a [ 488.052935] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 488.052948] RBP: 00007fc34fa7a040 R08: 00007fc34fa7a040 R09: 0000000020000000 [ 488.052961] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 488.052973] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 488.053004] 12:13:46 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:13:55 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:13:55 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:55 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r3, 0x0, 0xfdef) 12:13:55 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000004) 12:13:55 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:13:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 46) 12:13:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e029", 0x5}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:55 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e029", 0x5}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:55 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) [ 497.353245] FAULT_INJECTION: forcing a failure. [ 497.353245] name failslab, interval 1, probability 0, space 0, times 0 [ 497.354373] CPU: 0 UID: 0 PID: 6026 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 497.354391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 497.354399] Call Trace: [ 497.354403] [ 497.354409] dump_stack_lvl+0xfa/0x120 [ 497.354429] should_fail_ex+0x4d7/0x5e0 [ 497.354447] should_failslab+0xc2/0x120 [ 497.354466] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 497.354484] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 497.354499] ? kfree+0x284/0x550 [ 497.354520] kmemdup_nul+0x3b/0xa0 [ 497.354540] vfs_parse_fs_qstr+0x112/0x1c0 [ 497.354555] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 497.354579] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 497.354593] vfs_parse_monolithic_sep+0x198/0x220 [ 497.354609] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 497.354624] ? __pfx_ext4_init_fs_context+0x10/0x10 [ 497.354643] ? alloc_fs_context+0x5c0/0x9e0 [ 497.354662] path_mount+0x6d0/0x2130 [ 497.354680] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 497.354700] ? __pfx_path_mount+0x10/0x10 [ 497.354716] ? kmem_cache_free+0x2a4/0x540 [ 497.354728] ? putname.part.0+0x11b/0x160 [ 497.354748] ? getname_flags.part.0+0x1c6/0x540 [ 497.354769] ? putname.part.0+0x11b/0x160 [ 497.354790] __x64_sys_mount+0x293/0x310 [ 497.354807] ? __pfx___x64_sys_mount+0x10/0x10 [ 497.354827] ? trace_csd_function_exit+0x134/0x190 [ 497.354848] do_syscall_64+0xbf/0x390 [ 497.354866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.354880] RIP: 0033:0x7fc35250604a [ 497.354890] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.354902] RSP: 002b:00007fc34fa79fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 497.354914] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc35250604a [ 497.354923] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 497.354931] RBP: 00007fc34fa7a040 R08: 00007fc34fa7a040 R09: 0000000020000000 [ 497.354939] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 497.354946] R13: 0000000020000100 R14: 00007fc34fa7a000 R15: 0000000020000080 [ 497.354964] 12:13:55 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:56 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000005) 12:13:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:13:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 47) 12:13:56 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:13:56 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfdef) 12:13:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e029", 0x5}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:56 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:56 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040), 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:13:56 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 497.651782] No source specified 12:13:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b402", 0x8}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:13:56 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:14:05 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040), 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:05 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfdef) 12:14:05 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:05 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) (fail_nth: 48) 12:14:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b402", 0x8}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:14:05 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:14:05 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000006) [ 507.302665] No source specified [ 507.304132] FAULT_INJECTION: forcing a failure. [ 507.304132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.306063] CPU: 1 UID: 0 PID: 6085 Comm: syz-executor.2 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 507.306092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 507.306105] Call Trace: [ 507.306112] [ 507.306120] dump_stack_lvl+0xfa/0x120 [ 507.306147] should_fail_ex+0x4d7/0x5e0 [ 507.306174] _copy_from_user+0x30/0xd0 [ 507.306200] kstrtouint_from_user+0xbd/0x180 [ 507.306230] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 507.306260] ? __lock_acquire+0xc65/0x1b70 [ 507.306307] proc_fail_nth_write+0x7b/0x220 [ 507.306337] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 507.306368] ? lock_is_held_type+0x9e/0x120 [ 507.306397] vfs_write+0x2b7/0x1150 [ 507.306421] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 507.306456] ? __pfx_vfs_write+0x10/0x10 [ 507.306484] ? lock_release+0xc8/0x290 [ 507.306517] ? __fget_files+0x20d/0x3b0 [ 507.306554] ksys_write+0x121/0x240 [ 507.306579] ? __pfx_ksys_write+0x10/0x10 [ 507.306617] do_syscall_64+0xbf/0x390 [ 507.306644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.306666] RIP: 0033:0x7fc3524b75ff [ 507.306682] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 507.306701] RSP: 002b:00007fc34fa7a170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 507.306722] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc3524b75ff [ 507.306736] RDX: 0000000000000001 RSI: 00007fc34fa7a1e0 RDI: 0000000000000003 [ 507.306749] RBP: 00007fc34fa7a1d0 R08: 0000000000000000 R09: 0000000020000000 [ 507.306761] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 507.306774] R13: 00007fffdf2a9d3f R14: 00007fc34fa7a300 R15: 0000000000022000 [ 507.306806] 12:14:05 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b402", 0x8}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:14:05 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:14:15 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:14:15 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:15 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040), 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:15 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, 0xffffffffffffffff, 0x0, 0xfdef) 12:14:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000007) 12:14:15 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:14:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244", 0x9}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 517.272754] No source specified 12:14:15 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:14:15 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:14:15 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244", 0x9}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:14:16 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000008) 12:14:16 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) [ 517.474461] No source specified [ 517.483360] No source specified 12:14:16 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:24 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:14:24 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r2, 0x0, 0xfdef) 12:14:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244", 0x9}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:14:24 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:14:24 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:24 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x400000000000a) [ 526.437796] No source specified [ 526.450789] No source specified 12:14:25 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:25 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:14:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0xa}], 0x1}}], 0x1, 0x0) 12:14:25 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010) [ 526.573634] No source specified [ 526.578538] No source specified 12:14:25 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:34 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:14:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000052) 12:14:34 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:34 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r2, 0x0, 0xfdef) 12:14:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:14:34 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:14:34 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0xa}], 0x1}}], 0x1, 0x0) [ 535.707156] No source specified [ 535.728888] No source specified 12:14:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000300) 12:14:34 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:14:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0xa}], 0x1}}], 0x1, 0x0) 12:14:34 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:14:34 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:14:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000321) 12:14:34 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:14:34 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r2, 0x0, 0xfdef) 12:14:34 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 535.974679] No source specified [ 535.984576] No source specified 12:14:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0xa}], 0x1, &(0x7f00000005c0)}}], 0x1, 0x0) 12:14:34 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:14:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:14:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000500) [ 536.187096] No source specified [ 536.195734] No source specified 12:14:45 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:14:45 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:14:45 executing program 3: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:45 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000600) 12:14:45 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0xa}], 0x1, &(0x7f00000005c0)}}], 0x1, 0x0) 12:14:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:14:45 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) [ 546.670755] No source specified [ 546.685580] No source specified 12:14:45 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:14:45 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000700) 12:14:55 executing program 3: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0xa}], 0x1, &(0x7f00000005c0)}}], 0x1, 0x0) 12:14:55 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000a00) 12:14:55 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:14:55 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:14:55 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:14:55 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 556.574659] No source specified [ 556.585200] No source specified 12:14:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:14:55 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:55 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000a9f) 12:14:55 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:14:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:14:55 executing program 3: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 556.730442] No source specified 12:14:55 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 556.737736] No source specified 12:14:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:14:55 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:55 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:14:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 556.867060] No source specified [ 556.871092] No source specified 12:15:03 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:03 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00'}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private}}}], 0x20}}], 0x1, 0x0) 12:15:03 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000e91) 12:15:03 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:03 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:15:04 executing program 4: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 565.486120] No source specified [ 565.497511] No source specified 12:15:04 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000002000) 12:15:04 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 565.635961] No source specified [ 565.643119] No source specified 12:15:04 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:12 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000600) 12:15:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x23, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:12 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:12 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:12 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:15:12 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000002103) 12:15:12 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:12 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 573.832497] No source specified [ 573.838917] No source specified 12:15:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:12 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000600) 12:15:12 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:12 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 573.967872] No source specified [ 573.972969] No source specified 12:15:12 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000003f00) 12:15:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 574.113084] No source specified [ 574.116376] No source specified 12:15:12 executing program 6: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:12 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:12 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000006) 12:15:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:12 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000004000) 12:15:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) [ 574.201963] No source specified 12:15:12 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 574.210100] No source specified 12:15:21 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:21 executing program 6: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:21 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:15:21 executing program 0: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:21 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000005200) 12:15:21 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:21 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 583.003298] No source specified [ 583.007796] No source specified 12:15:21 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:31 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:15:31 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24000000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 12:15:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:31 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:31 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:31 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:31 executing program 6: r0 = creat(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:31 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000008008) [ 592.956821] No source specified [ 592.971126] No source specified 12:15:31 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:31 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:31 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x400000000910e) 12:15:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:31 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:31 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:31 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r1, r2, 0x0, 0xfdef) 12:15:31 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:31 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 593.154959] No source specified [ 593.159503] No source specified 12:15:40 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:40 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:40 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000009f0a) 12:15:40 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x20, 0x0, 0x8, 0x2, 0x0, 0xe5, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x3f, 0x12, 0x8, 0x40, 0x1f, 0x104, 0x0, 0x474a, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0xf260f9bf29030134) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xa0103) sendfile(r3, r4, 0x0, 0xfdef) 12:15:40 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) dup(r0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x402000, 0x20, 0xb}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r5, 0x0, 0xa0103) sendfile(r2, r3, 0x0, 0xfdef) 12:15:40 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 601.795793] No source specified [ 601.799132] No source specified 12:15:40 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:40 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:40 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 1) [ 601.920582] No source specified [ 601.932124] No source specified 12:15:40 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:40 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:40 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000080000) 12:15:40 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 1) [ 602.067177] FAULT_INJECTION: forcing a failure. [ 602.067177] name failslab, interval 1, probability 0, space 0, times 0 [ 602.068122] CPU: 0 UID: 0 PID: 6530 Comm: syz-executor.7 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 602.068138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.068145] Call Trace: [ 602.068150] [ 602.068154] dump_stack_lvl+0xfa/0x120 [ 602.068174] should_fail_ex+0x4d7/0x5e0 [ 602.068190] should_failslab+0xc2/0x120 [ 602.068208] __kmalloc_cache_noprof+0x81/0x6b0 [ 602.068227] ? __might_fault+0xe0/0x190 [ 602.068240] ? alloc_pipe_info+0x10d/0x5a0 [ 602.068255] ? find_held_lock+0x2b/0x80 [ 602.068273] ? alloc_pipe_info+0x10d/0x5a0 [ 602.068287] alloc_pipe_info+0x10d/0x5a0 [ 602.068305] splice_direct_to_actor+0x78c/0x9d0 [ 602.068318] ? __pfx_direct_splice_actor+0x10/0x10 [ 602.068330] ? lock_acquire+0xd2/0x2f0 [ 602.068347] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 602.068361] ? lock_acquire+0x15e/0x2f0 [ 602.068378] do_splice_direct+0x179/0x250 [ 602.068390] ? __pfx_do_splice_direct+0x10/0x10 [ 602.068402] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 602.068432] ? security_file_permission+0x22/0x90 [ 602.068462] do_sendfile+0xa8e/0xdc0 [ 602.068482] ? __pfx_do_sendfile+0x10/0x10 [ 602.068495] ? __fget_files+0x20d/0x3b0 [ 602.068514] __x64_sys_sendfile64+0x1d3/0x210 [ 602.068531] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 602.068554] do_syscall_64+0xbf/0x390 [ 602.068570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.068582] RIP: 0033:0x7fbff7719b19 [ 602.068592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 602.068603] RSP: 002b:00007fbff4c6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 602.068614] RAX: ffffffffffffffda RBX: 00007fbff782d020 RCX: 00007fbff7719b19 [ 602.068622] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 602.068629] RBP: 00007fbff4c6e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 602.068635] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000001 [ 602.068642] R13: 00007ffface33a9f R14: 00007fbff4c6e300 R15: 0000000000022000 [ 602.068659] 12:15:40 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 602.172657] FAULT_INJECTION: forcing a failure. [ 602.172657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.173662] CPU: 0 UID: 0 PID: 6540 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 602.173678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.173685] Call Trace: [ 602.173689] [ 602.173694] dump_stack_lvl+0xfa/0x120 [ 602.173714] should_fail_ex+0x4d7/0x5e0 [ 602.173730] _copy_from_user+0x30/0xd0 [ 602.173744] copy_msghdr_from_user+0x88/0x150 [ 602.173764] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 602.173785] ? _kstrtoull+0x13e/0x200 [ 602.173800] ? __pfx__kstrtoull+0x10/0x10 [ 602.173823] ___sys_sendmsg+0xdc/0x1b0 [ 602.173841] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.173857] ? perf_trace_lock+0xb5/0x5d0 [ 602.173877] ? __pfx_perf_trace_lock+0x10/0x10 [ 602.173895] ? lock_acquire+0x15e/0x2f0 [ 602.173911] ? __fget_files+0x34/0x3b0 [ 602.173925] ? find_held_lock+0x2b/0x80 [ 602.173937] ? __fget_files+0x203/0x3b0 [ 602.173950] ? lock_release+0xc8/0x290 [ 602.173967] ? __fget_files+0x20d/0x3b0 [ 602.173986] __sys_sendmmsg+0x1f5/0x420 [ 602.174007] ? __pfx___sys_sendmmsg+0x10/0x10 [ 602.174027] ? __mutex_unlock_slowpath+0x157/0x750 [ 602.174041] ? kernel_write+0x5e3/0x660 [ 602.174058] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 602.174072] ? __fget_files+0x20d/0x3b0 [ 602.174089] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 602.174106] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 602.174122] ? ksys_write+0x1a3/0x240 [ 602.174135] ? __pfx_ksys_write+0x10/0x10 [ 602.174152] __x64_sys_sendmmsg+0x9d/0x110 [ 602.174169] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 602.174185] do_syscall_64+0xbf/0x390 [ 602.174212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.174224] RIP: 0033:0x7fd3cfdceb19 [ 602.174233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 602.174244] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 602.174256] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 602.174263] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 602.174270] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 602.174277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.174283] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 602.174300] [ 602.194676] No source specified [ 602.197414] No source specified 12:15:40 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 2) 12:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:40 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 602.256602] No source specified [ 602.258553] No source specified 12:15:49 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:49 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 3) 12:15:49 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:49 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000100000) 12:15:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb37, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:49 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:49 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 2) 12:15:49 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 610.853754] No source specified [ 610.865184] No source specified [ 610.867985] FAULT_INJECTION: forcing a failure. [ 610.867985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.869947] CPU: 1 UID: 0 PID: 6572 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 610.869979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.869993] Call Trace: [ 610.870001] [ 610.870010] dump_stack_lvl+0xfa/0x120 [ 610.870043] should_fail_ex+0x4d7/0x5e0 [ 610.870074] _copy_from_user+0x30/0xd0 [ 610.870103] move_addr_to_kernel.part.0+0x40/0x120 [ 610.870137] __copy_msghdr+0x3cd/0x4b0 [ 610.870174] copy_msghdr_from_user+0xb3/0x150 [ 610.870211] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 610.870255] ? _kstrtoull+0x13e/0x200 [ 610.870286] ? __pfx__kstrtoull+0x10/0x10 [ 610.870337] ___sys_sendmsg+0xdc/0x1b0 [ 610.870375] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.870408] ? perf_trace_lock+0xb5/0x5d0 [ 610.870448] ? __pfx_perf_trace_lock+0x10/0x10 [ 610.870487] ? lock_acquire+0x15e/0x2f0 [ 610.870519] ? __fget_files+0x34/0x3b0 [ 610.870547] ? find_held_lock+0x2b/0x80 [ 610.870571] ? __fget_files+0x203/0x3b0 [ 610.870597] ? lock_release+0xc8/0x290 [ 610.870635] ? __fget_files+0x20d/0x3b0 [ 610.870674] __sys_sendmmsg+0x1f5/0x420 [ 610.870718] ? __pfx___sys_sendmmsg+0x10/0x10 [ 610.870769] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 610.870801] ? __fget_files+0x20d/0x3b0 [ 610.870843] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 610.870875] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 610.870909] ? ksys_write+0x1a3/0x240 [ 610.870938] ? __pfx_ksys_write+0x10/0x10 [ 610.870974] __x64_sys_sendmmsg+0x9d/0x110 [ 610.871010] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 610.871043] do_syscall_64+0xbf/0x390 [ 610.871073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.871097] RIP: 0033:0x7fd3cfdceb19 [ 610.871121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 610.871143] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 610.871166] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 610.871182] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 610.871196] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.871210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.871224] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 610.871259] 12:15:49 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 4) 12:15:49 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:58 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000200000) 12:15:58 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:58 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 5) 12:15:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 3) 12:15:58 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:58 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1020, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:58 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 619.844311] FAULT_INJECTION: forcing a failure. [ 619.844311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.845608] CPU: 0 UID: 0 PID: 6599 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 619.845627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 619.845636] Call Trace: [ 619.845641] [ 619.845646] dump_stack_lvl+0xfa/0x120 [ 619.845666] should_fail_ex+0x4d7/0x5e0 [ 619.845685] _copy_from_user+0x30/0xd0 [ 619.845703] ____sys_sendmsg+0x1ab/0xc20 [ 619.845725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.845744] ? _kstrtoull+0x13e/0x200 [ 619.845764] ? __pfx__kstrtoull+0x10/0x10 [ 619.845786] ___sys_sendmsg+0x10f/0x1b0 [ 619.845813] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.845833] ? perf_trace_lock+0xb5/0x5d0 [ 619.845856] ? __pfx_perf_trace_lock+0x10/0x10 [ 619.845879] ? lock_acquire+0x15e/0x2f0 [ 619.845898] ? __fget_files+0x34/0x3b0 [ 619.845917] ? find_held_lock+0x2b/0x80 [ 619.845935] ? lock_release+0xc8/0x290 [ 619.845958] ? __fget_files+0x20d/0x3b0 [ 619.845981] __sys_sendmmsg+0x1f5/0x420 [ 619.846006] ? __pfx___sys_sendmmsg+0x10/0x10 [ 619.846035] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 619.846057] ? __fget_files+0x20d/0x3b0 [ 619.846077] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 619.846096] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 619.846116] ? ksys_write+0x1a3/0x240 [ 619.846134] ? __pfx_ksys_write+0x10/0x10 [ 619.846155] __x64_sys_sendmmsg+0x9d/0x110 [ 619.846175] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 619.846195] do_syscall_64+0xbf/0x390 [ 619.846214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.846229] RIP: 0033:0x7fd3cfdceb19 [ 619.846240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 619.846253] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 619.846267] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 619.846276] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 619.846285] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 619.846293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.846301] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 619.846322] [ 619.852311] No source specified [ 619.906330] No source specified 12:15:58 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000001000000) 12:15:58 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 4) 12:15:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1400, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:15:58 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 620.026232] FAULT_INJECTION: forcing a failure. [ 620.026232] name failslab, interval 1, probability 0, space 0, times 0 [ 620.027942] CPU: 1 UID: 0 PID: 6612 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 620.027973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 620.027986] Call Trace: [ 620.027994] [ 620.028003] dump_stack_lvl+0xfa/0x120 [ 620.028035] should_fail_ex+0x4d7/0x5e0 [ 620.028064] should_failslab+0xc2/0x120 [ 620.028095] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 620.028136] ? __alloc_skb+0x2ab/0x370 [ 620.028176] ? __alloc_skb+0x2ab/0x370 [ 620.028208] __alloc_skb+0x2ab/0x370 [ 620.028245] ? __pfx___alloc_skb+0x10/0x10 [ 620.028280] ? __is_insn_slot_addr+0x136/0x290 [ 620.028310] ? lock_release+0xc8/0x290 [ 620.028356] alloc_skb_with_frags+0x8f/0x7c0 [ 620.028382] ? __kernel_text_address+0xd/0x40 [ 620.028417] ? unwind_get_return_address+0x59/0xa0 [ 620.028439] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.028486] sock_alloc_send_pskb+0x7cb/0x950 [ 620.028522] ? perf_trace_lock+0xb5/0x5d0 [ 620.028563] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 620.028598] ? __pfx_perf_trace_lock+0x10/0x10 [ 620.028628] ? fib_table_lookup+0x6bc/0x20a0 [ 620.028680] __ip_append_data+0x152e/0x40d0 [ 620.028718] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 620.028755] ? lock_acquire+0x15e/0x2f0 [ 620.028821] ? lock_release+0xc8/0x290 [ 620.028849] ? lock_is_held_type+0x9e/0x120 [ 620.028874] ? __pfx___ip_append_data+0x10/0x10 [ 620.028908] ? ip_dst_mtu_maybe_forward.constprop.0+0x260/0x5f0 [ 620.028955] ip_make_skb+0x22b/0x2a0 [ 620.028987] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 620.029015] ? __pfx_ip_make_skb+0x10/0x10 [ 620.029050] ? lock_acquire+0x15e/0x2f0 [ 620.029088] ? xfrm_lookup_route+0x69/0x200 [ 620.029119] udp_sendmsg+0x1647/0x22c0 [ 620.029148] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 620.029177] ? __pfx_udp_sendmsg+0x10/0x10 [ 620.029210] ? perf_trace_lock+0xb5/0x5d0 [ 620.029245] ? __pfx_perf_trace_lock+0x10/0x10 [ 620.029274] ? reacquire_held_locks+0xd1/0x200 [ 620.029303] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 620.029340] ? find_held_lock+0x2b/0x80 [ 620.029366] ? __local_bh_enable_ip+0xa1/0x110 [ 620.029390] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 620.029419] ? inet_autobind+0x13f/0x1a0 [ 620.029441] ? __local_bh_enable_ip+0xa1/0x110 [ 620.029465] ? inet_autobind+0x144/0x1a0 [ 620.029490] ? __pfx_udp_sendmsg+0x10/0x10 [ 620.029514] inet_sendmsg+0x109/0x150 [ 620.029542] ____sys_sendmsg+0x947/0xc20 [ 620.029571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.029602] ? _kstrtoull+0x13e/0x200 [ 620.029630] ? __pfx__kstrtoull+0x10/0x10 [ 620.029665] ___sys_sendmsg+0x10f/0x1b0 [ 620.029699] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.029729] ? perf_trace_lock+0xb5/0x5d0 [ 620.029781] ? __pfx_perf_trace_lock+0x10/0x10 [ 620.029824] ? lock_acquire+0x15e/0x2f0 [ 620.029853] ? __fget_files+0x34/0x3b0 [ 620.029878] ? find_held_lock+0x2b/0x80 [ 620.029903] ? lock_release+0xc8/0x290 [ 620.029936] ? __fget_files+0x20d/0x3b0 [ 620.029972] __sys_sendmmsg+0x1f5/0x420 [ 620.030011] ? __pfx___sys_sendmmsg+0x10/0x10 [ 620.030057] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 620.030085] ? __fget_files+0x20d/0x3b0 [ 620.030117] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 620.030144] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 620.030174] ? ksys_write+0x1a3/0x240 [ 620.030201] ? __pfx_ksys_write+0x10/0x10 [ 620.030233] __x64_sys_sendmmsg+0x9d/0x110 [ 620.030266] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 620.030295] do_syscall_64+0xbf/0x390 [ 620.030323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.030345] RIP: 0033:0x7fd3cfdceb19 [ 620.030362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 620.030384] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 620.030405] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 620.030420] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 620.030450] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 620.030463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.030475] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 620.030507] [ 620.053771] No source specified 12:15:58 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:58 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:58 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000002000000) 12:15:58 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 6) 12:15:58 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040), 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 620.157753] No source specified 12:15:58 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:15:58 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:07 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040), 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:07 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 5) 12:16:07 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:07 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 7) 12:16:07 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000003000000) 12:16:07 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 628.558867] No source specified [ 628.562256] No source specified 12:16:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2010, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:07 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:16:07 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:16:07 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 8) 12:16:07 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000004000000) [ 628.685476] No source specified [ 628.691416] No source specified 12:16:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 6) 12:16:15 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:16:15 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000005000000) 12:16:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 7) 12:16:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2300, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:15 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 9) 12:16:15 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:16:15 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040), 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 8) [ 637.253523] No source specified [ 637.255487] No source specified 12:16:15 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:16:15 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:16:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2400, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000006000000) [ 637.396899] No source specified [ 637.411939] No source specified 12:16:15 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 10) 12:16:26 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:26 executing program 5: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:16:26 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:16:26 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000007000000) 12:16:26 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:26 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 11) 12:16:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x370b, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 9) [ 647.895803] FAULT_INJECTION: forcing a failure. [ 647.895803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.896796] CPU: 0 UID: 0 PID: 6730 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 647.896815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 647.896822] Call Trace: [ 647.896826] [ 647.896831] dump_stack_lvl+0xfa/0x120 [ 647.896847] should_fail_ex+0x4d7/0x5e0 [ 647.896863] _copy_from_iter+0x1dc/0x1660 [ 647.896877] ? lock_acquire+0x15e/0x2f0 [ 647.896893] ? __virt_addr_valid+0x1c6/0x5d0 [ 647.896905] ? find_held_lock+0x2b/0x80 [ 647.896918] ? __pfx__copy_from_iter+0x10/0x10 [ 647.896929] ? lock_release+0xc8/0x290 [ 647.896946] ? __virt_addr_valid+0x100/0x5d0 [ 647.896959] ? __check_object_size+0x579/0x880 [ 647.896975] ip_generic_getfrag+0x106/0x270 [ 647.896990] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 647.897005] ? sk_page_frag_refill+0x6e/0x340 [ 647.897023] __ip_append_data+0x1178/0x40d0 [ 647.897042] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 647.897060] ? lock_release+0xc8/0x290 [ 647.897074] ? lock_is_held_type+0x9e/0x120 [ 647.897087] ? __pfx___ip_append_data+0x10/0x10 [ 647.897101] ? ip_dst_mtu_maybe_forward.constprop.0+0x260/0x5f0 [ 647.897122] ip_make_skb+0x22b/0x2a0 [ 647.897138] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 647.897152] ? __pfx_ip_make_skb+0x10/0x10 [ 647.897170] ? lock_acquire+0x15e/0x2f0 [ 647.897187] ? xfrm_lookup_route+0x69/0x200 [ 647.897204] udp_sendmsg+0x1647/0x22c0 [ 647.897220] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 647.897235] ? __pfx_udp_sendmsg+0x10/0x10 [ 647.897253] ? perf_trace_lock+0xb5/0x5d0 [ 647.897272] ? __pfx_perf_trace_lock+0x10/0x10 [ 647.897287] ? reacquire_held_locks+0xd1/0x200 [ 647.897303] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 647.897322] ? find_held_lock+0x2b/0x80 [ 647.897336] ? __local_bh_enable_ip+0xa1/0x110 [ 647.897349] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 647.897365] ? inet_autobind+0x13f/0x1a0 [ 647.897377] ? __local_bh_enable_ip+0xa1/0x110 [ 647.897390] ? inet_autobind+0x144/0x1a0 [ 647.897403] ? __pfx_udp_sendmsg+0x10/0x10 [ 647.897416] inet_sendmsg+0x109/0x150 [ 647.897431] ____sys_sendmsg+0x947/0xc20 [ 647.897447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.897463] ? _kstrtoull+0x13e/0x200 [ 647.897478] ? __pfx__kstrtoull+0x10/0x10 [ 647.897497] ___sys_sendmsg+0x10f/0x1b0 [ 647.897515] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.897531] ? perf_trace_lock+0xb5/0x5d0 [ 647.897549] ? __pfx_perf_trace_lock+0x10/0x10 [ 647.897568] ? lock_acquire+0x15e/0x2f0 [ 647.897583] ? __fget_files+0x34/0x3b0 [ 647.897597] ? find_held_lock+0x2b/0x80 [ 647.897610] ? lock_release+0xc8/0x290 [ 647.897628] ? __fget_files+0x20d/0x3b0 [ 647.897647] __sys_sendmmsg+0x1f5/0x420 [ 647.897668] ? __pfx___sys_sendmmsg+0x10/0x10 [ 647.897692] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 647.897708] ? __fget_files+0x20d/0x3b0 [ 647.897724] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 647.897739] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 647.897755] ? ksys_write+0x1a3/0x240 [ 647.897769] ? __pfx_ksys_write+0x10/0x10 [ 647.897787] __x64_sys_sendmmsg+0x9d/0x110 [ 647.897804] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 647.897820] do_syscall_64+0xbf/0x390 [ 647.897834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.897847] RIP: 0033:0x7fd3cfdceb19 [ 647.897856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 647.897868] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 647.897881] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 647.897890] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 647.897898] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 647.897905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.897911] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 647.897928] [ 647.923518] No source specified 12:16:26 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000008800000) [ 647.963228] No source specified 12:16:26 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4300, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:26 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x400000a000000) 12:16:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 10) 12:16:26 executing program 5: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:16:26 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 648.174249] No source specified 12:16:26 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 648.185180] FAULT_INJECTION: forcing a failure. [ 648.185180] name failslab, interval 1, probability 0, space 0, times 0 [ 648.186940] CPU: 1 UID: 0 PID: 6753 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 648.186970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 648.186982] Call Trace: [ 648.186990] [ 648.186999] dump_stack_lvl+0xfa/0x120 [ 648.187030] should_fail_ex+0x4d7/0x5e0 [ 648.187060] should_failslab+0xc2/0x120 [ 648.187090] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 648.187128] ? __alloc_skb+0x2ab/0x370 [ 648.187167] ? __alloc_skb+0x2ab/0x370 [ 648.187195] __alloc_skb+0x2ab/0x370 [ 648.187225] ? __pfx___alloc_skb+0x10/0x10 [ 648.187257] ? __pfx_skb_network_protocol+0x10/0x10 [ 648.187297] skb_segment+0x868/0x3a20 [ 648.187358] __udp_gso_segment+0x1406/0x25a0 [ 648.187386] ? __pfx_sock_wfree+0x10/0x10 [ 648.187432] udp4_ufo_fragment+0x51c/0x730 [ 648.187462] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 648.187491] inet_gso_segment+0x4e6/0x1180 [ 648.187532] ipip_gso_segment+0xc2/0xf0 [ 648.187557] ? __pfx_ipip_gso_segment+0x10/0x10 [ 648.187585] inet_gso_segment+0x4e6/0x1180 [ 648.187625] skb_mac_gso_segment+0x291/0x590 [ 648.187661] ? __pfx_inet_gso_segment+0x10/0x10 [ 648.187688] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 648.187734] __skb_gso_segment+0x397/0x740 [ 648.187774] validate_xmit_skb.constprop.0+0x202/0xdc0 [ 648.187801] ? __skb_flow_dissect+0x1487/0x60b0 [ 648.187834] ? netdev_core_pick_tx+0x1b9/0x330 [ 648.187858] ? __dev_queue_xmit+0x207/0x4210 [ 648.187887] __dev_queue_xmit+0x873/0x4210 [ 648.187931] ? __pfx___dev_queue_xmit+0x10/0x10 [ 648.187963] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 648.187992] ? perf_trace_lock+0xb5/0x5d0 [ 648.188029] ? perf_trace_lock+0xb5/0x5d0 [ 648.188064] ? __pfx_perf_trace_lock+0x10/0x10 [ 648.188096] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 648.188129] ? lock_acquire+0x15e/0x2f0 [ 648.188158] ? find_held_lock+0x2b/0x80 [ 648.188180] ? __ip_finish_output.part.0+0x1bb/0x350 [ 648.188217] ip_finish_output2+0xaa0/0x1bc0 [ 648.188252] ? __pfx_ip_finish_output2+0x10/0x10 [ 648.188277] ? skb_gso_transport_seglen+0x1ca/0x360 [ 648.188320] __ip_finish_output.part.0+0x1bb/0x350 [ 648.188351] ip_output+0x380/0xb20 [ 648.188380] ip_local_out+0x396/0x4d0 [ 648.188410] iptunnel_xmit+0x600/0x9c0 [ 648.188450] ip_tunnel_xmit+0x131e/0x3470 [ 648.188482] ? __mutex_add_waiter+0x160/0x210 [ 648.188522] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 648.188543] ? find_held_lock+0x2b/0x80 [ 648.188564] ? get_page_from_freelist+0x501/0x2600 [ 648.188606] ? skb_network_protocol+0x12b/0x680 [ 648.188639] sit_tunnel_xmit+0xc4f/0x2180 [ 648.188672] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 648.188695] ? netif_skb_features+0x3c7/0x1160 [ 648.188729] ? __pfx_netif_skb_features+0x10/0x10 [ 648.188756] ? lock_is_held_type+0x9e/0x120 [ 648.188788] dev_hard_start_xmit+0x15b/0x6e0 [ 648.188823] __dev_queue_xmit+0x2107/0x4210 [ 648.188861] ? _copy_from_iter+0x24b/0x1660 [ 648.188888] ? __pfx___dev_queue_xmit+0x10/0x10 [ 648.188917] ? perf_trace_lock+0xb5/0x5d0 [ 648.188946] ? lock_release+0x20/0x290 [ 648.188983] ? perf_trace_lock+0xb5/0x5d0 [ 648.189013] ? selinux_current_getlsmprop_subj+0xa2/0x100 [ 648.189043] ? __pfx_perf_trace_lock+0x10/0x10 [ 648.189075] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 648.189106] ? lock_acquire+0x15e/0x2f0 [ 648.189136] ? find_held_lock+0x2b/0x80 [ 648.189157] ? ip_finish_output2+0x6f3/0x1bc0 [ 648.189192] neigh_connected_output+0x335/0x4d0 [ 648.189237] ip_finish_output2+0x6f3/0x1bc0 [ 648.189265] ? lock_is_held_type+0x9e/0x120 [ 648.189291] ? __pfx_ip_finish_output2+0x10/0x10 [ 648.189316] ? skb_gso_transport_seglen+0x1ca/0x360 [ 648.189364] __ip_finish_output.part.0+0x1bb/0x350 [ 648.189395] ip_output+0x380/0xb20 [ 648.189424] ip_send_skb+0x44c/0x5a0 [ 648.189454] udp_send_skb+0x85f/0x1330 [ 648.189488] udp_sendmsg+0x1685/0x22c0 [ 648.189513] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 648.189542] ? __pfx_udp_sendmsg+0x10/0x10 [ 648.189577] ? perf_trace_lock+0xb5/0x5d0 [ 648.189612] ? __pfx_perf_trace_lock+0x10/0x10 [ 648.189639] ? reacquire_held_locks+0xd1/0x200 [ 648.189669] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 648.189704] ? find_held_lock+0x2b/0x80 [ 648.189731] ? __local_bh_enable_ip+0xa1/0x110 [ 648.189755] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 648.189784] ? inet_autobind+0x13f/0x1a0 [ 648.189805] ? __local_bh_enable_ip+0xa1/0x110 [ 648.189829] ? inet_autobind+0x144/0x1a0 [ 648.189853] ? __pfx_udp_sendmsg+0x10/0x10 [ 648.189877] inet_sendmsg+0x109/0x150 [ 648.189906] ____sys_sendmsg+0x947/0xc20 [ 648.189936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.189967] ? _kstrtoull+0x13e/0x200 [ 648.189995] ? __pfx__kstrtoull+0x10/0x10 [ 648.190030] ___sys_sendmsg+0x10f/0x1b0 [ 648.190064] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.190094] ? perf_trace_lock+0xb5/0x5d0 [ 648.190128] ? __pfx_perf_trace_lock+0x10/0x10 [ 648.190164] ? lock_acquire+0x15e/0x2f0 [ 648.190192] ? __fget_files+0x34/0x3b0 [ 648.190217] ? find_held_lock+0x2b/0x80 [ 648.190241] ? lock_release+0xc8/0x290 [ 648.190275] ? __fget_files+0x20d/0x3b0 [ 648.190312] __sys_sendmmsg+0x1f5/0x420 [ 648.190352] ? __pfx___sys_sendmmsg+0x10/0x10 [ 648.190399] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 648.190427] ? __fget_files+0x20d/0x3b0 [ 648.190460] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 648.190487] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 648.190517] ? ksys_write+0x1a3/0x240 [ 648.190543] ? __pfx_ksys_write+0x10/0x10 [ 648.190576] __x64_sys_sendmmsg+0x9d/0x110 [ 648.190607] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 648.190637] do_syscall_64+0xbf/0x390 [ 648.190664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.190687] RIP: 0033:0x7fd3cfdceb19 [ 648.190705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 648.190726] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 648.190747] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 648.190762] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 648.190775] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 648.190788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 648.190814] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 648.190848] [ 648.281064] No source specified 12:16:26 executing program 5: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) [ 648.349633] syz-executor.0 (6753) used greatest stack depth: 21616 bytes left 12:16:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4400, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:36 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 12) 12:16:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 11) 12:16:36 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:16:36 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:36 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:36 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:16:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000010000000) [ 657.828551] No source specified [ 657.836530] No source specified 12:16:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 657.974789] No source specified [ 657.978330] No source specified 12:16:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000020000000) 12:16:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 12) 12:16:36 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:36 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:16:36 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:36 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:16:36 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 13) [ 658.219797] No source specified [ 658.231289] No source specified 12:16:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 13) 12:16:36 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000021030000) 12:16:46 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 14) 12:16:46 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:16:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:46 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:46 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:16:46 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040), 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:46 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x400003f000000) 12:16:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 14) [ 667.808008] FAULT_INJECTION: forcing a failure. [ 667.808008] name failslab, interval 1, probability 0, space 0, times 0 [ 667.808922] CPU: 0 UID: 0 PID: 6841 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 667.808938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 667.808946] Call Trace: [ 667.808950] [ 667.808955] dump_stack_lvl+0xfa/0x120 [ 667.808975] should_fail_ex+0x4d7/0x5e0 [ 667.808994] should_failslab+0xc2/0x120 [ 667.809015] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 667.809036] ? __alloc_skb+0x2ab/0x370 [ 667.809059] ? __alloc_skb+0x2ab/0x370 [ 667.809074] __alloc_skb+0x2ab/0x370 [ 667.809091] ? __pfx___alloc_skb+0x10/0x10 [ 667.809106] ? skb_checksum+0x7df/0x930 [ 667.809129] skb_segment+0x868/0x3a20 [ 667.809163] __udp_gso_segment+0x1406/0x25a0 [ 667.809180] ? __pfx_sock_wfree+0x10/0x10 [ 667.809206] udp4_ufo_fragment+0x51c/0x730 [ 667.809222] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 667.809238] inet_gso_segment+0x4e6/0x1180 [ 667.809261] ipip_gso_segment+0xc2/0xf0 [ 667.809274] ? __pfx_ipip_gso_segment+0x10/0x10 [ 667.809289] inet_gso_segment+0x4e6/0x1180 [ 667.809311] skb_mac_gso_segment+0x291/0x590 [ 667.809336] ? __pfx_inet_gso_segment+0x10/0x10 [ 667.809351] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 667.809380] __skb_gso_segment+0x397/0x740 [ 667.809403] validate_xmit_skb.constprop.0+0x202/0xdc0 [ 667.809418] ? __skb_flow_dissect+0x1487/0x60b0 [ 667.809433] ? netdev_core_pick_tx+0x1b9/0x330 [ 667.809446] ? __dev_queue_xmit+0x207/0x4210 [ 667.809462] __dev_queue_xmit+0x873/0x4210 [ 667.809485] ? __pfx___dev_queue_xmit+0x10/0x10 [ 667.809503] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 667.809519] ? perf_trace_lock+0xb5/0x5d0 [ 667.809542] ? perf_trace_lock+0xb5/0x5d0 [ 667.809561] ? __pfx_perf_trace_lock+0x10/0x10 [ 667.809578] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 667.809596] ? lock_acquire+0x15e/0x2f0 [ 667.809613] ? find_held_lock+0x2b/0x80 [ 667.809625] ? __ip_finish_output.part.0+0x1bb/0x350 [ 667.809646] ip_finish_output2+0xaa0/0x1bc0 [ 667.809665] ? __pfx_ip_finish_output2+0x10/0x10 [ 667.809679] ? skb_gso_transport_seglen+0x1ca/0x360 [ 667.809702] __ip_finish_output.part.0+0x1bb/0x350 [ 667.809718] ip_output+0x380/0xb20 [ 667.809734] ip_local_out+0x396/0x4d0 [ 667.809750] iptunnel_xmit+0x600/0x9c0 [ 667.809772] ip_tunnel_xmit+0x131e/0x3470 [ 667.809790] ? __mutex_add_waiter+0x160/0x210 [ 667.809816] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 667.809827] ? find_held_lock+0x2b/0x80 [ 667.809839] ? get_page_from_freelist+0x501/0x2600 [ 667.809863] ? skb_network_protocol+0x12b/0x680 [ 667.809881] sit_tunnel_xmit+0xc4f/0x2180 [ 667.809899] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 667.809912] ? netif_skb_features+0x3c7/0x1160 [ 667.809930] ? __pfx_netif_skb_features+0x10/0x10 [ 667.809945] ? lock_is_held_type+0x9e/0x120 [ 667.809963] dev_hard_start_xmit+0x15b/0x6e0 [ 667.809981] __dev_queue_xmit+0x2107/0x4210 [ 667.810002] ? _copy_from_iter+0x24b/0x1660 [ 667.810018] ? __pfx___dev_queue_xmit+0x10/0x10 [ 667.810034] ? perf_trace_lock+0xb5/0x5d0 [ 667.810050] ? lock_release+0x20/0x290 [ 667.810069] ? perf_trace_lock+0xb5/0x5d0 [ 667.810086] ? selinux_current_getlsmprop_subj+0xa2/0x100 [ 667.810102] ? __pfx_perf_trace_lock+0x10/0x10 [ 667.810119] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 667.810136] ? lock_acquire+0x15e/0x2f0 [ 667.810152] ? find_held_lock+0x2b/0x80 [ 667.810164] ? ip_finish_output2+0x6f3/0x1bc0 [ 667.810182] neigh_connected_output+0x335/0x4d0 [ 667.810207] ip_finish_output2+0x6f3/0x1bc0 [ 667.810222] ? lock_is_held_type+0x9e/0x120 [ 667.810236] ? __pfx_ip_finish_output2+0x10/0x10 [ 667.810250] ? skb_gso_transport_seglen+0x1ca/0x360 [ 667.810273] __ip_finish_output.part.0+0x1bb/0x350 [ 667.810290] ip_output+0x380/0xb20 [ 667.810305] ip_send_skb+0x44c/0x5a0 [ 667.810322] udp_send_skb+0x85f/0x1330 [ 667.810340] udp_sendmsg+0x1685/0x22c0 [ 667.810353] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 667.810369] ? __pfx_udp_sendmsg+0x10/0x10 [ 667.810388] ? perf_trace_lock+0xb5/0x5d0 [ 667.810407] ? __pfx_perf_trace_lock+0x10/0x10 [ 667.810422] ? reacquire_held_locks+0xd1/0x200 [ 667.810438] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 667.810457] ? find_held_lock+0x2b/0x80 [ 667.810472] ? __local_bh_enable_ip+0xa1/0x110 [ 667.810486] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 667.810502] ? inet_autobind+0x13f/0x1a0 [ 667.810514] ? __local_bh_enable_ip+0xa1/0x110 [ 667.810526] ? inet_autobind+0x144/0x1a0 [ 667.810539] ? __pfx_udp_sendmsg+0x10/0x10 [ 667.810552] inet_sendmsg+0x109/0x150 [ 667.810568] ____sys_sendmsg+0x947/0xc20 [ 667.810585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.810602] ? _kstrtoull+0x13e/0x200 [ 667.810620] ? __pfx__kstrtoull+0x10/0x10 [ 667.810639] ___sys_sendmsg+0x10f/0x1b0 [ 667.810657] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.810674] ? perf_trace_lock+0xb5/0x5d0 [ 667.810692] ? __pfx_perf_trace_lock+0x10/0x10 [ 667.810712] ? lock_acquire+0x15e/0x2f0 [ 667.810726] ? __fget_files+0x34/0x3b0 [ 667.810741] ? find_held_lock+0x2b/0x80 [ 667.810755] ? lock_release+0xc8/0x290 [ 667.810773] ? __fget_files+0x20d/0x3b0 [ 667.810793] __sys_sendmmsg+0x1f5/0x420 [ 667.810815] ? __pfx___sys_sendmmsg+0x10/0x10 [ 667.810840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 667.810857] ? __fget_files+0x20d/0x3b0 [ 667.810875] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 667.810889] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 667.810906] ? ksys_write+0x1a3/0x240 [ 667.810921] ? __pfx_ksys_write+0x10/0x10 [ 667.810939] __x64_sys_sendmmsg+0x9d/0x110 [ 667.810956] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 667.810972] do_syscall_64+0xbf/0x390 [ 667.810987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.811001] RIP: 0033:0x7fd3cfdceb19 [ 667.811010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 667.811022] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 667.811034] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 667.811042] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 667.811049] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 667.811056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.811077] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 667.811096] [ 667.820761] No source specified 12:16:46 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040), 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 667.982677] No source specified 12:16:56 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000040000000) 12:16:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 15) 12:16:56 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040), 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:56 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 15) 12:16:56 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:16:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:56 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:16:56 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) [ 678.035715] No source specified [ 678.043579] No source specified 12:16:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 16) 12:16:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:56 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000052000000) 12:16:56 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:16:56 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:16:56 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 16) 12:16:56 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 678.300695] No source specified 12:16:56 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 678.311371] No source specified 12:16:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 17) 12:16:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:16:57 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000910e0000) [ 678.600354] No source specified [ 678.606176] No source specified 12:17:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:07 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 17) 12:17:07 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:17:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 18) 12:17:07 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x400009f0a0000) 12:17:07 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:07 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:17:07 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 688.984596] FAULT_INJECTION: forcing a failure. [ 688.984596] name failslab, interval 1, probability 0, space 0, times 0 [ 688.986195] CPU: 0 UID: 0 PID: 6924 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 688.986223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 688.986236] Call Trace: [ 688.986243] [ 688.986251] dump_stack_lvl+0xfa/0x120 [ 688.986279] should_fail_ex+0x4d7/0x5e0 [ 688.986306] should_failslab+0xc2/0x120 [ 688.986336] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 688.986373] ? __alloc_skb+0x2ab/0x370 [ 688.986412] ? __alloc_skb+0x2ab/0x370 [ 688.986440] __alloc_skb+0x2ab/0x370 [ 688.986471] ? __pfx___alloc_skb+0x10/0x10 [ 688.986500] ? skb_checksum+0x7df/0x930 [ 688.986542] skb_segment+0x868/0x3a20 [ 688.986603] __udp_gso_segment+0x1406/0x25a0 [ 688.986630] ? __pfx_sock_wfree+0x10/0x10 [ 688.986676] udp4_ufo_fragment+0x51c/0x730 [ 688.986705] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 688.986735] inet_gso_segment+0x4e6/0x1180 [ 688.986775] ipip_gso_segment+0xc2/0xf0 [ 688.986800] ? __pfx_ipip_gso_segment+0x10/0x10 [ 688.986836] inet_gso_segment+0x4e6/0x1180 [ 688.986876] skb_mac_gso_segment+0x291/0x590 [ 688.986911] ? __pfx_inet_gso_segment+0x10/0x10 [ 688.986939] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 688.986985] __skb_gso_segment+0x397/0x740 [ 688.987025] validate_xmit_skb.constprop.0+0x202/0xdc0 [ 688.987052] ? __skb_flow_dissect+0x1487/0x60b0 [ 688.987077] ? netdev_core_pick_tx+0x1b9/0x330 [ 688.987101] ? __dev_queue_xmit+0x207/0x4210 [ 688.987131] __dev_queue_xmit+0x873/0x4210 [ 688.987175] ? __pfx___dev_queue_xmit+0x10/0x10 [ 688.987207] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 688.987236] ? perf_trace_lock+0xb5/0x5d0 [ 688.987272] ? perf_trace_lock+0xb5/0x5d0 [ 688.987307] ? __pfx_perf_trace_lock+0x10/0x10 [ 688.987350] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 688.987383] ? lock_acquire+0x15e/0x2f0 [ 688.987412] ? find_held_lock+0x2b/0x80 [ 688.987434] ? __ip_finish_output.part.0+0x1bb/0x350 [ 688.987471] ip_finish_output2+0xaa0/0x1bc0 [ 688.987506] ? __pfx_ip_finish_output2+0x10/0x10 [ 688.987532] ? skb_gso_transport_seglen+0x1ca/0x360 [ 688.987575] __ip_finish_output.part.0+0x1bb/0x350 [ 688.987605] ip_output+0x380/0xb20 [ 688.987635] ip_local_out+0x396/0x4d0 [ 688.987664] iptunnel_xmit+0x600/0x9c0 [ 688.987705] ip_tunnel_xmit+0x131e/0x3470 [ 688.987736] ? __mutex_add_waiter+0x160/0x210 [ 688.987776] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 688.987797] ? find_held_lock+0x2b/0x80 [ 688.987819] ? get_page_from_freelist+0x501/0x2600 [ 688.987861] ? skb_network_protocol+0x12b/0x680 [ 688.987894] sit_tunnel_xmit+0xc4f/0x2180 [ 688.987927] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 688.987950] ? netif_skb_features+0x3c7/0x1160 [ 688.987984] ? __pfx_netif_skb_features+0x10/0x10 [ 688.988012] ? lock_is_held_type+0x9e/0x120 [ 688.988043] dev_hard_start_xmit+0x15b/0x6e0 [ 688.988078] __dev_queue_xmit+0x2107/0x4210 [ 688.988117] ? _copy_from_iter+0x24b/0x1660 [ 688.988143] ? __pfx___dev_queue_xmit+0x10/0x10 [ 688.988172] ? perf_trace_lock+0xb5/0x5d0 [ 688.988201] ? lock_release+0x20/0x290 [ 688.988238] ? perf_trace_lock+0xb5/0x5d0 [ 688.988271] ? selinux_current_getlsmprop_subj+0xa2/0x100 [ 688.988303] ? __pfx_perf_trace_lock+0x10/0x10 [ 688.988335] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 688.988366] ? lock_acquire+0x15e/0x2f0 [ 688.988396] ? find_held_lock+0x2b/0x80 [ 688.988418] ? ip_finish_output2+0x6f3/0x1bc0 [ 688.988453] neigh_connected_output+0x335/0x4d0 [ 688.988498] ip_finish_output2+0x6f3/0x1bc0 [ 688.988525] ? lock_is_held_type+0x9e/0x120 [ 688.988551] ? __pfx_ip_finish_output2+0x10/0x10 [ 688.988576] ? skb_gso_transport_seglen+0x1ca/0x360 [ 688.988619] __ip_finish_output.part.0+0x1bb/0x350 [ 688.988650] ip_output+0x380/0xb20 [ 688.988679] ip_send_skb+0x44c/0x5a0 [ 688.988710] udp_send_skb+0x85f/0x1330 [ 688.988743] udp_sendmsg+0x1685/0x22c0 [ 688.988768] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 688.988797] ? __pfx_udp_sendmsg+0x10/0x10 [ 688.988833] ? perf_trace_lock+0xb5/0x5d0 [ 688.988868] ? __pfx_perf_trace_lock+0x10/0x10 [ 688.988895] ? reacquire_held_locks+0xd1/0x200 [ 688.988925] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 688.988961] ? find_held_lock+0x2b/0x80 [ 688.988987] ? __local_bh_enable_ip+0xa1/0x110 [ 688.989011] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 688.989040] ? inet_autobind+0x13f/0x1a0 [ 688.989061] ? __local_bh_enable_ip+0xa1/0x110 [ 688.989085] ? inet_autobind+0x144/0x1a0 [ 688.989109] ? __pfx_udp_sendmsg+0x10/0x10 [ 688.989134] inet_sendmsg+0x109/0x150 [ 688.989162] ____sys_sendmsg+0x947/0xc20 [ 688.989192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.989223] ? _kstrtoull+0x13e/0x200 [ 688.989251] ? __pfx__kstrtoull+0x10/0x10 [ 688.989287] ___sys_sendmsg+0x10f/0x1b0 [ 688.989320] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.989350] ? perf_trace_lock+0xb5/0x5d0 [ 688.989385] ? __pfx_perf_trace_lock+0x10/0x10 [ 688.989421] ? lock_acquire+0x15e/0x2f0 [ 688.989449] ? __fget_files+0x34/0x3b0 [ 688.989474] ? find_held_lock+0x2b/0x80 [ 688.989499] ? lock_release+0xc8/0x290 [ 688.989533] ? __fget_files+0x20d/0x3b0 [ 688.989570] __sys_sendmmsg+0x1f5/0x420 [ 688.989610] ? __pfx___sys_sendmmsg+0x10/0x10 [ 688.989657] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 688.989686] ? __fget_files+0x20d/0x3b0 [ 688.989718] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 688.989745] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 688.989775] ? ksys_write+0x1a3/0x240 [ 688.989801] ? __pfx_ksys_write+0x10/0x10 [ 688.989835] __x64_sys_sendmmsg+0x9d/0x110 [ 688.989866] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 688.989896] do_syscall_64+0xbf/0x390 [ 688.989923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.989947] RIP: 0033:0x7fd3cfdceb19 [ 688.989964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 688.989984] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 688.990005] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 688.990020] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 688.990033] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 688.990046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 688.990059] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 688.990093] [ 688.994351] No source specified [ 689.115517] No source specified 12:17:07 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:07 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000f4ffffff) 12:17:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 19) 12:17:07 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 18) 12:17:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:07 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:17:07 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 689.437344] No source specified [ 689.451123] No source specified 12:17:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 20) 12:17:08 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:18 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 19) 12:17:18 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 21) 12:17:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:18 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000fbffffff) 12:17:18 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:17:18 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:18 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 699.696991] No source specified [ 699.697784] No source specified 12:17:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:18 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 20) [ 699.773519] No source specified [ 699.795054] No source specified 12:17:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:18 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:18 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 22) 12:17:18 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000feffffff) [ 699.931395] No source specified [ 699.937284] No source specified 12:17:18 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, 0x0, 0x0, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 700.034755] FAULT_INJECTION: forcing a failure. [ 700.034755] name failslab, interval 1, probability 0, space 0, times 0 [ 700.036465] CPU: 0 UID: 0 PID: 6997 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 700.036493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 700.036506] Call Trace: [ 700.036513] [ 700.036521] dump_stack_lvl+0xfa/0x120 [ 700.036549] should_fail_ex+0x4d7/0x5e0 [ 700.036577] should_failslab+0xc2/0x120 [ 700.036607] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 700.036645] ? __alloc_skb+0x2ab/0x370 [ 700.036683] ? __alloc_skb+0x2ab/0x370 [ 700.036712] __alloc_skb+0x2ab/0x370 [ 700.036742] ? __pfx___alloc_skb+0x10/0x10 [ 700.036771] ? skb_checksum+0x7df/0x930 [ 700.036820] skb_segment+0x868/0x3a20 [ 700.036881] __udp_gso_segment+0x1406/0x25a0 [ 700.036907] ? __pfx_sock_wfree+0x10/0x10 [ 700.036953] udp4_ufo_fragment+0x51c/0x730 [ 700.036982] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 700.037011] inet_gso_segment+0x4e6/0x1180 [ 700.037052] ipip_gso_segment+0xc2/0xf0 [ 700.037077] ? __pfx_ipip_gso_segment+0x10/0x10 [ 700.037105] inet_gso_segment+0x4e6/0x1180 [ 700.037145] skb_mac_gso_segment+0x291/0x590 [ 700.037181] ? __pfx_inet_gso_segment+0x10/0x10 [ 700.037208] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 700.037253] __skb_gso_segment+0x397/0x740 [ 700.037294] validate_xmit_skb.constprop.0+0x202/0xdc0 [ 700.037321] ? __skb_flow_dissect+0x1487/0x60b0 [ 700.037346] ? netdev_core_pick_tx+0x1b9/0x330 [ 700.037370] ? __dev_queue_xmit+0x207/0x4210 [ 700.037400] __dev_queue_xmit+0x873/0x4210 [ 700.037444] ? __pfx___dev_queue_xmit+0x10/0x10 [ 700.037476] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 700.037505] ? perf_trace_lock+0xb5/0x5d0 [ 700.037541] ? perf_trace_lock+0xb5/0x5d0 [ 700.037575] ? __pfx_perf_trace_lock+0x10/0x10 [ 700.037607] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 700.037639] ? lock_acquire+0x15e/0x2f0 [ 700.037669] ? find_held_lock+0x2b/0x80 [ 700.037691] ? __ip_finish_output.part.0+0x1bb/0x350 [ 700.037728] ip_finish_output2+0xaa0/0x1bc0 [ 700.037763] ? __pfx_ip_finish_output2+0x10/0x10 [ 700.037788] ? skb_gso_transport_seglen+0x1ca/0x360 [ 700.037831] __ip_finish_output.part.0+0x1bb/0x350 [ 700.037862] ip_output+0x380/0xb20 [ 700.037892] ip_local_out+0x396/0x4d0 [ 700.037921] iptunnel_xmit+0x600/0x9c0 [ 700.037961] ip_tunnel_xmit+0x131e/0x3470 [ 700.037992] ? __mutex_add_waiter+0x160/0x210 [ 700.038032] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 700.038053] ? find_held_lock+0x2b/0x80 [ 700.038075] ? get_page_from_freelist+0x501/0x2600 [ 700.038120] ? skb_network_protocol+0x12b/0x680 [ 700.038153] sit_tunnel_xmit+0xc4f/0x2180 [ 700.038186] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 700.038208] ? netif_skb_features+0x3c7/0x1160 [ 700.038242] ? __pfx_netif_skb_features+0x10/0x10 [ 700.038270] ? lock_is_held_type+0x9e/0x120 [ 700.038301] dev_hard_start_xmit+0x15b/0x6e0 [ 700.038336] __dev_queue_xmit+0x2107/0x4210 [ 700.038377] ? crng_make_state+0x222/0x5c0 [ 700.038402] ? __pfx___dev_queue_xmit+0x10/0x10 [ 700.038431] ? perf_trace_lock+0xb5/0x5d0 [ 700.038460] ? __pfx__get_random_bytes.part.0+0x10/0x10 [ 700.038493] ? perf_trace_lock+0xb5/0x5d0 [ 700.038523] ? selinux_current_getlsmprop_subj+0xa2/0x100 [ 700.038553] ? __pfx_perf_trace_lock+0x10/0x10 [ 700.038585] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 700.038616] ? lock_acquire+0x15e/0x2f0 [ 700.038646] ? find_held_lock+0x2b/0x80 [ 700.038667] ? ip_finish_output2+0x6f3/0x1bc0 [ 700.038702] neigh_connected_output+0x335/0x4d0 [ 700.038747] ip_finish_output2+0x6f3/0x1bc0 [ 700.038774] ? lock_is_held_type+0x9e/0x120 [ 700.038800] ? __pfx_ip_finish_output2+0x10/0x10 [ 700.038825] ? skb_gso_transport_seglen+0x1ca/0x360 [ 700.038868] __ip_finish_output.part.0+0x1bb/0x350 [ 700.038899] ip_output+0x380/0xb20 [ 700.038928] ip_send_skb+0x44c/0x5a0 [ 700.038958] udp_send_skb+0x85f/0x1330 [ 700.038991] udp_sendmsg+0x1685/0x22c0 [ 700.039016] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 700.039045] ? __pfx_udp_sendmsg+0x10/0x10 [ 700.039080] ? perf_trace_lock+0xb5/0x5d0 [ 700.039115] ? __pfx_perf_trace_lock+0x10/0x10 [ 700.039143] ? reacquire_held_locks+0xd1/0x200 [ 700.039172] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 700.039208] ? find_held_lock+0x2b/0x80 [ 700.039235] ? __local_bh_enable_ip+0xa1/0x110 [ 700.039258] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 700.039287] ? inet_autobind+0x13f/0x1a0 [ 700.039308] ? __local_bh_enable_ip+0xa1/0x110 [ 700.039332] ? inet_autobind+0x144/0x1a0 [ 700.039356] ? __pfx_udp_sendmsg+0x10/0x10 [ 700.039380] inet_sendmsg+0x109/0x150 [ 700.039409] ____sys_sendmsg+0x947/0xc20 [ 700.039438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.039469] ? _kstrtoull+0x13e/0x200 [ 700.039511] ? __pfx__kstrtoull+0x10/0x10 [ 700.039546] ___sys_sendmsg+0x10f/0x1b0 [ 700.039580] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.039610] ? perf_trace_lock+0xb5/0x5d0 [ 700.039644] ? __pfx_perf_trace_lock+0x10/0x10 [ 700.039680] ? lock_acquire+0x15e/0x2f0 [ 700.039707] ? __fget_files+0x34/0x3b0 [ 700.039732] ? find_held_lock+0x2b/0x80 [ 700.039756] ? lock_release+0xc8/0x290 [ 700.039790] ? __fget_files+0x20d/0x3b0 [ 700.039827] __sys_sendmmsg+0x1f5/0x420 [ 700.039867] ? __pfx___sys_sendmmsg+0x10/0x10 [ 700.039914] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 700.039943] ? __fget_files+0x20d/0x3b0 [ 700.039975] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 700.040002] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 700.040032] ? ksys_write+0x1a3/0x240 [ 700.040058] ? __pfx_ksys_write+0x10/0x10 [ 700.040091] __x64_sys_sendmmsg+0x9d/0x110 [ 700.040122] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 700.040155] do_syscall_64+0xbf/0x390 [ 700.040184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.040206] RIP: 0033:0x7fd3cfdceb19 [ 700.040224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 700.040244] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 700.040266] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 700.040281] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 700.040294] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 700.040306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 700.040319] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 700.040353] 12:17:18 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 21) 12:17:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:28 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:28 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 23) 12:17:28 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000ffffff7f) 12:17:28 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:28 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 22) 12:17:28 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 1) [ 710.399593] No source specified [ 710.404555] No source specified 12:17:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:29 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 23) [ 710.502271] No source specified 12:17:29 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 2) [ 710.506782] No source specified 12:17:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 710.552217] No source specified [ 710.553607] No source specified 12:17:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 710.582412] No source specified [ 710.584043] No source specified 12:17:29 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:29 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000fffffff4) 12:17:29 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 710.680765] No source specified 12:17:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 24) [ 710.687361] No source specified 12:17:29 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 1) 12:17:39 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 3) 12:17:39 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 24) 12:17:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:39 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000fffffffb) 12:17:39 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:39 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 2) 12:17:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 25) 12:17:39 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 720.708111] No source specified [ 720.718092] No source specified 12:17:39 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 25) [ 720.781082] FAULT_INJECTION: forcing a failure. [ 720.781082] name failslab, interval 1, probability 0, space 0, times 0 [ 720.782051] CPU: 1 UID: 0 PID: 7077 Comm: syz-executor.4 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 720.782067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 720.782075] Call Trace: [ 720.782079] [ 720.782084] dump_stack_lvl+0xfa/0x120 [ 720.782106] should_fail_ex+0x4d7/0x5e0 [ 720.782123] should_failslab+0xc2/0x120 [ 720.782141] __kmalloc_noprof+0xcd/0x680 [ 720.782162] ? alloc_pipe_info+0x1e8/0x5a0 [ 720.782185] alloc_pipe_info+0x1e8/0x5a0 [ 720.782204] splice_direct_to_actor+0x78c/0x9d0 [ 720.782219] ? __pfx_direct_splice_actor+0x10/0x10 [ 720.782230] ? lock_acquire+0xd2/0x2f0 [ 720.782250] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 720.782263] ? lock_acquire+0x15e/0x2f0 [ 720.782282] do_splice_direct+0x179/0x250 [ 720.782293] ? __pfx_do_splice_direct+0x10/0x10 [ 720.782305] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 720.782326] ? security_file_permission+0x22/0x90 [ 720.782348] do_sendfile+0xa8e/0xdc0 [ 720.782366] ? __pfx_do_sendfile+0x10/0x10 [ 720.782379] ? __fget_files+0x20d/0x3b0 [ 720.782398] __x64_sys_sendfile64+0x1d3/0x210 [ 720.782416] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 720.782438] do_syscall_64+0xbf/0x390 [ 720.782456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.782468] RIP: 0033:0x7f5976318b19 12:17:39 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 720.782478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 720.782489] RSP: 002b:00007f597386d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 720.782501] RAX: ffffffffffffffda RBX: 00007f597642c020 RCX: 00007f5976318b19 [ 720.782509] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 720.782516] RBP: 00007f597386d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 720.782524] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000001 [ 720.782531] R13: 00007ffea6067c2f R14: 00007f597386d300 R15: 0000000000022000 [ 720.782548] 12:17:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:39 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 3) [ 720.908532] No source specified [ 720.916064] No source specified 12:17:53 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000fffffffe) 12:17:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 26) 12:17:53 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:53 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 4) 12:17:53 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 26) 12:17:53 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 4) 12:17:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x23000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:53 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 735.079034] No source specified [ 735.083777] No source specified 12:17:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x24000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 735.157285] FAULT_INJECTION: forcing a failure. [ 735.157285] name failslab, interval 1, probability 0, space 0, times 0 [ 735.158466] CPU: 1 UID: 0 PID: 7107 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 735.158486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 735.158494] Call Trace: [ 735.158499] [ 735.158505] dump_stack_lvl+0xfa/0x120 [ 735.158526] should_fail_ex+0x4d7/0x5e0 [ 735.158546] should_failslab+0xc2/0x120 [ 735.158567] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 735.158593] ? __alloc_skb+0x2ab/0x370 [ 735.158620] ? __alloc_skb+0x2ab/0x370 [ 735.158639] __alloc_skb+0x2ab/0x370 [ 735.158660] ? __pfx___alloc_skb+0x10/0x10 [ 735.158680] ? skb_checksum+0x7df/0x930 [ 735.158708] skb_segment+0x868/0x3a20 [ 735.158750] __udp_gso_segment+0x1406/0x25a0 [ 735.158769] ? __pfx_sock_wfree+0x10/0x10 [ 735.158801] udp4_ufo_fragment+0x51c/0x730 [ 735.158826] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 735.158846] inet_gso_segment+0x4e6/0x1180 [ 735.158874] ipip_gso_segment+0xc2/0xf0 [ 735.158891] ? __pfx_ipip_gso_segment+0x10/0x10 [ 735.158911] inet_gso_segment+0x4e6/0x1180 [ 735.158939] skb_mac_gso_segment+0x291/0x590 [ 735.158964] ? __pfx_inet_gso_segment+0x10/0x10 [ 735.158982] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 735.159014] __skb_gso_segment+0x397/0x740 [ 735.159041] validate_xmit_skb.constprop.0+0x202/0xdc0 [ 735.159060] ? __skb_flow_dissect+0x1487/0x60b0 [ 735.159078] ? netdev_core_pick_tx+0x1b9/0x330 [ 735.159094] ? __dev_queue_xmit+0x207/0x4210 [ 735.159115] __dev_queue_xmit+0x873/0x4210 [ 735.159145] ? __pfx___dev_queue_xmit+0x10/0x10 [ 735.159167] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 735.159187] ? perf_trace_lock+0xb5/0x5d0 [ 735.159211] ? perf_trace_lock+0xb5/0x5d0 [ 735.159235] ? __pfx_perf_trace_lock+0x10/0x10 [ 735.159258] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 735.159280] ? lock_acquire+0x15e/0x2f0 [ 735.159301] ? find_held_lock+0x2b/0x80 [ 735.159316] ? __ip_finish_output.part.0+0x1bb/0x350 [ 735.159342] ip_finish_output2+0xaa0/0x1bc0 [ 735.159365] ? __pfx_ip_finish_output2+0x10/0x10 [ 735.159383] ? skb_gso_transport_seglen+0x1ca/0x360 [ 735.159412] __ip_finish_output.part.0+0x1bb/0x350 [ 735.159433] ip_output+0x380/0xb20 [ 735.159453] ip_local_out+0x396/0x4d0 [ 735.159473] iptunnel_xmit+0x600/0x9c0 [ 735.159500] ip_tunnel_xmit+0x131e/0x3470 [ 735.159521] ? __mutex_add_waiter+0x160/0x210 [ 735.159547] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 735.159562] ? find_held_lock+0x2b/0x80 [ 735.159577] ? get_page_from_freelist+0x501/0x2600 [ 735.159605] ? skb_network_protocol+0x12b/0x680 [ 735.159628] sit_tunnel_xmit+0xc4f/0x2180 [ 735.159651] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 735.159667] ? netif_skb_features+0x3c7/0x1160 [ 735.159690] ? __pfx_netif_skb_features+0x10/0x10 [ 735.159709] ? lock_is_held_type+0x9e/0x120 [ 735.159731] dev_hard_start_xmit+0x15b/0x6e0 [ 735.159755] __dev_queue_xmit+0x2107/0x4210 [ 735.159781] ? _copy_from_iter+0x24b/0x1660 [ 735.159799] ? __pfx___dev_queue_xmit+0x10/0x10 [ 735.159819] ? perf_trace_lock+0xb5/0x5d0 [ 735.159839] ? lock_release+0x20/0x290 [ 735.159864] ? perf_trace_lock+0xb5/0x5d0 [ 735.159884] ? selinux_current_getlsmprop_subj+0xa2/0x100 [ 735.159905] ? __pfx_perf_trace_lock+0x10/0x10 [ 735.159927] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 735.159958] ? lock_acquire+0x15e/0x2f0 [ 735.159978] ? find_held_lock+0x2b/0x80 [ 735.159993] ? ip_finish_output2+0x6f3/0x1bc0 [ 735.160017] neigh_connected_output+0x335/0x4d0 [ 735.160048] ip_finish_output2+0x6f3/0x1bc0 [ 735.160067] ? lock_is_held_type+0x9e/0x120 [ 735.160084] ? __pfx_ip_finish_output2+0x10/0x10 [ 735.160102] ? skb_gso_transport_seglen+0x1ca/0x360 [ 735.160131] __ip_finish_output.part.0+0x1bb/0x350 [ 735.160152] ip_output+0x380/0xb20 [ 735.160172] ip_send_skb+0x44c/0x5a0 [ 735.160193] udp_send_skb+0x85f/0x1330 [ 735.160215] udp_sendmsg+0x1685/0x22c0 [ 735.160233] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 735.160253] ? __pfx_udp_sendmsg+0x10/0x10 [ 735.160277] ? perf_trace_lock+0xb5/0x5d0 [ 735.160301] ? __pfx_perf_trace_lock+0x10/0x10 [ 735.160320] ? reacquire_held_locks+0xd1/0x200 [ 735.160340] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 735.160364] ? find_held_lock+0x2b/0x80 [ 735.160383] ? __local_bh_enable_ip+0xa1/0x110 [ 735.160399] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 735.160419] ? inet_autobind+0x13f/0x1a0 [ 735.160434] ? __local_bh_enable_ip+0xa1/0x110 [ 735.160450] ? inet_autobind+0x144/0x1a0 [ 735.160466] ? __pfx_udp_sendmsg+0x10/0x10 [ 735.160483] inet_sendmsg+0x109/0x150 [ 735.160502] ____sys_sendmsg+0x947/0xc20 [ 735.160523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.160544] ? _kstrtoull+0x13e/0x200 [ 735.160564] ? __pfx__kstrtoull+0x10/0x10 [ 735.160588] ___sys_sendmsg+0x10f/0x1b0 [ 735.160611] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.160632] ? perf_trace_lock+0xb5/0x5d0 [ 735.160655] ? __pfx_perf_trace_lock+0x10/0x10 [ 735.160680] ? lock_acquire+0x15e/0x2f0 [ 735.160699] ? __fget_files+0x34/0x3b0 [ 735.160717] ? find_held_lock+0x2b/0x80 [ 735.160733] ? lock_release+0xc8/0x290 [ 735.160757] ? __fget_files+0x20d/0x3b0 [ 735.160782] __sys_sendmmsg+0x1f5/0x420 [ 735.160810] ? __pfx___sys_sendmmsg+0x10/0x10 [ 735.160842] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 735.160861] ? __fget_files+0x20d/0x3b0 [ 735.160883] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 735.160902] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 735.160923] ? ksys_write+0x1a3/0x240 [ 735.160941] ? __pfx_ksys_write+0x10/0x10 [ 735.160964] __x64_sys_sendmmsg+0x9d/0x110 [ 735.160986] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 735.161006] do_syscall_64+0xbf/0x390 [ 735.161025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.161041] RIP: 0033:0x7fd3cfdceb19 [ 735.161053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 735.161068] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 735.161082] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 735.161092] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 735.161101] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.161110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 735.161118] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 735.161141] 12:17:53 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:53 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:53 executing program 1: r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x38) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/96, 0x60, 0x8) sendfile(r0, r1, 0x0, 0x4000000000000) 12:17:53 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 27) [ 735.327035] No source specified [ 735.344208] No source specified 12:17:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x370b0000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:17:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 27) 12:17:54 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 28) 12:17:54 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:17:54 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 5) 12:17:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x20000000) 12:17:54 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 5) [ 735.649341] No source specified [ 735.665989] No source specified 12:18:03 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 6) 12:18:03 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:03 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 29) 12:18:03 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 28) 12:18:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x43000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:18:03 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 6) 12:18:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = memfd_secret(0x80000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x8, 0x1}) sendfile(r0, r1, 0x0, 0x4000000000000) [ 744.670693] No source specified [ 744.675110] No source specified 12:18:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x44000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 744.777999] No source specified 12:18:03 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 7) [ 744.784603] No source specified 12:18:03 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:18:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 29) 12:18:03 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000040)={0x0, 0x401, 0x4}) [ 744.879844] No source specified [ 744.880757] No source specified 12:18:12 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 7) 12:18:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 30) 12:18:12 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:12 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 8) 12:18:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:18:12 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 30) 12:18:12 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:12 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) dup3(r0, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="8549fdab", @ANYRES16=r6, @ANYBLOB="05000000000000000000060000004800050002000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000dae969c147d4cf55729470678afa4dbd00", @ANYRES16=r6, @ANYBLOB="00032bbd7000ffdbdf2564000000080001007700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099005304000025000000"], 0x30}}, 0x4004000) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000000)=0x4) [ 753.585529] No source specified [ 753.586718] FAULT_INJECTION: forcing a failure. [ 753.586718] name failslab, interval 1, probability 0, space 0, times 0 [ 753.587647] CPU: 0 UID: 0 PID: 7191 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 753.587663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 753.587670] Call Trace: [ 753.587675] [ 753.587679] dump_stack_lvl+0xfa/0x120 [ 753.587699] should_fail_ex+0x4d7/0x5e0 [ 753.587717] should_failslab+0xc2/0x120 [ 753.587735] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 753.587757] ? __alloc_skb+0x2ab/0x370 [ 753.587780] ? __alloc_skb+0x2ab/0x370 [ 753.587795] __alloc_skb+0x2ab/0x370 [ 753.587815] ? __pfx___alloc_skb+0x10/0x10 [ 753.587831] ? skb_checksum+0x7df/0x930 [ 753.587854] skb_segment+0x868/0x3a20 [ 753.587887] __udp_gso_segment+0x1406/0x25a0 [ 753.587903] ? __pfx_sock_wfree+0x10/0x10 [ 753.587929] udp4_ufo_fragment+0x51c/0x730 [ 753.587945] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 753.587961] inet_gso_segment+0x4e6/0x1180 [ 753.587983] ipip_gso_segment+0xc2/0xf0 [ 753.587997] ? __pfx_ipip_gso_segment+0x10/0x10 [ 753.588012] inet_gso_segment+0x4e6/0x1180 [ 753.588034] skb_mac_gso_segment+0x291/0x590 [ 753.588054] ? __pfx_inet_gso_segment+0x10/0x10 [ 753.588068] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 753.588093] __skb_gso_segment+0x397/0x740 [ 753.588115] validate_xmit_skb.constprop.0+0x202/0xdc0 [ 753.588131] ? __skb_flow_dissect+0x1487/0x60b0 [ 753.588145] ? netdev_core_pick_tx+0x1b9/0x330 [ 753.588158] ? __dev_queue_xmit+0x207/0x4210 [ 753.588186] __dev_queue_xmit+0x873/0x4210 [ 753.588210] ? __pfx___dev_queue_xmit+0x10/0x10 [ 753.588227] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 753.588246] ? perf_trace_lock+0xb5/0x5d0 [ 753.588269] ? perf_trace_lock+0xb5/0x5d0 [ 753.588288] ? __pfx_perf_trace_lock+0x10/0x10 [ 753.588305] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 753.588324] ? lock_acquire+0x15e/0x2f0 [ 753.588341] ? find_held_lock+0x2b/0x80 [ 753.588353] ? __ip_finish_output.part.0+0x1bb/0x350 [ 753.588374] ip_finish_output2+0xaa0/0x1bc0 [ 753.588393] ? __pfx_ip_finish_output2+0x10/0x10 [ 753.588406] ? skb_gso_transport_seglen+0x1ca/0x360 [ 753.588429] __ip_finish_output.part.0+0x1bb/0x350 [ 753.588446] ip_output+0x380/0xb20 [ 753.588462] ip_local_out+0x396/0x4d0 [ 753.588478] iptunnel_xmit+0x600/0x9c0 [ 753.588500] ip_tunnel_xmit+0x131e/0x3470 [ 753.588517] ? __mutex_add_waiter+0x160/0x210 [ 753.588538] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 753.588550] ? find_held_lock+0x2b/0x80 [ 753.588561] ? get_page_from_freelist+0x501/0x2600 [ 753.588586] ? skb_network_protocol+0x12b/0x680 [ 753.588604] sit_tunnel_xmit+0xc4f/0x2180 [ 753.588622] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 753.588634] ? netif_skb_features+0x3c7/0x1160 [ 753.588653] ? __pfx_netif_skb_features+0x10/0x10 [ 753.588667] ? lock_is_held_type+0x9e/0x120 [ 753.588687] dev_hard_start_xmit+0x15b/0x6e0 [ 753.588705] __dev_queue_xmit+0x2107/0x4210 [ 753.588726] ? _copy_from_iter+0x24b/0x1660 [ 753.588742] ? __pfx___dev_queue_xmit+0x10/0x10 [ 753.588758] ? perf_trace_lock+0xb5/0x5d0 [ 753.588774] ? lock_release+0x20/0x290 [ 753.588793] ? perf_trace_lock+0xb5/0x5d0 [ 753.588810] ? selinux_current_getlsmprop_subj+0xa2/0x100 [ 753.588826] ? __pfx_perf_trace_lock+0x10/0x10 [ 753.588843] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 753.588860] ? lock_acquire+0x15e/0x2f0 [ 753.588876] ? find_held_lock+0x2b/0x80 [ 753.588888] ? ip_finish_output2+0x6f3/0x1bc0 [ 753.588906] neigh_connected_output+0x335/0x4d0 [ 753.588934] ip_finish_output2+0x6f3/0x1bc0 [ 753.588948] ? lock_is_held_type+0x9e/0x120 [ 753.588963] ? __pfx_ip_finish_output2+0x10/0x10 [ 753.588976] ? skb_gso_transport_seglen+0x1ca/0x360 [ 753.588999] __ip_finish_output.part.0+0x1bb/0x350 [ 753.589016] ip_output+0x380/0xb20 [ 753.589032] ip_send_skb+0x44c/0x5a0 [ 753.589048] udp_send_skb+0x85f/0x1330 [ 753.589066] udp_sendmsg+0x1685/0x22c0 [ 753.589080] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 753.589095] ? __pfx_udp_sendmsg+0x10/0x10 [ 753.589114] ? perf_trace_lock+0xb5/0x5d0 [ 753.589133] ? __pfx_perf_trace_lock+0x10/0x10 [ 753.589148] ? reacquire_held_locks+0xd1/0x200 [ 753.589164] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 753.589183] ? find_held_lock+0x2b/0x80 [ 753.589197] ? __local_bh_enable_ip+0xa1/0x110 [ 753.589212] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 753.589228] ? inet_autobind+0x13f/0x1a0 [ 753.589239] ? __local_bh_enable_ip+0xa1/0x110 [ 753.589252] ? inet_autobind+0x144/0x1a0 [ 753.589265] ? __pfx_udp_sendmsg+0x10/0x10 [ 753.589278] inet_sendmsg+0x109/0x150 [ 753.589294] ____sys_sendmsg+0x947/0xc20 [ 753.589310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 753.589327] ? _kstrtoull+0x13e/0x200 [ 753.589344] ? __pfx__kstrtoull+0x10/0x10 [ 753.589363] ___sys_sendmsg+0x10f/0x1b0 [ 753.589382] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.589398] ? perf_trace_lock+0xb5/0x5d0 [ 753.589417] ? __pfx_perf_trace_lock+0x10/0x10 [ 753.589436] ? lock_acquire+0x15e/0x2f0 [ 753.589451] ? __fget_files+0x34/0x3b0 [ 753.589466] ? find_held_lock+0x2b/0x80 [ 753.589479] ? lock_release+0xc8/0x290 [ 753.589497] ? __fget_files+0x20d/0x3b0 [ 753.589517] __sys_sendmmsg+0x1f5/0x420 [ 753.589539] ? __pfx___sys_sendmmsg+0x10/0x10 [ 753.589564] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 753.589581] ? __fget_files+0x20d/0x3b0 [ 753.589599] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 753.589613] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 753.589629] ? ksys_write+0x1a3/0x240 [ 753.589645] ? __pfx_ksys_write+0x10/0x10 [ 753.589663] __x64_sys_sendmmsg+0x9d/0x110 [ 753.589681] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 753.589697] do_syscall_64+0xbf/0x390 [ 753.589712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.589726] RIP: 0033:0x7fd3cfdceb19 [ 753.589735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.589746] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 753.589758] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 753.589766] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 753.589773] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.589780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 753.589787] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 753.589806] [ 753.644351] No source specified 12:18:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:18:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 31) 12:18:12 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:12 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 31) 12:18:12 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:12 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 8) 12:18:12 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 9) [ 753.877742] No source specified [ 753.885503] No source specified 12:18:21 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 32) 12:18:21 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 10) 12:18:21 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 32) 12:18:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf9fdffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:18:21 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:21 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 9) 12:18:21 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x7a) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) r2 = accept4$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10, 0x80800) close_range(r0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) pwritev2(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)="bce7b4bc5de8bfa9ca36c87f4bc3c858b4928d31daf254b41c9689849f929359c1365346cfd85030c280c8f20a47362d9f3cc8bbe450cab1c35272dd091b081be1436454e786b9acc6a8c37fd6eaecac1ebe1118aeeb8c9fa8a04382961117ea34d24754782c2ecf7cc8e7d7c23f4debe4cb3e536c296b6a47a23e7bc010bd7d9fdfda37f1efebe67440db735cc958f49a268d995b49bd47278ef4b04f1590f9778e9a1ce589789b5e42bcc4a58d27fde5e9dc175655f5a9", 0xb8}, {&(0x7f0000000100)="fdd38247952854b516a243a1729d6df04856b5e507e14c9fb29187c16ffb4f3804dc499e3b830fe4e51d05c19f4aa1207cf708874d60c45d7b1a3ef55f", 0x3d}, {&(0x7f0000000180)="0959472f85070aec4e5371e8f9db86e728d561b3f1029083beb932ec9087592852896fb5c96addd2f3ad8eb7753fb91aea81baf6778ae3", 0x37}, {&(0x7f00000001c0)="ec0cb48d9822dd3652a651854b9c656af61785b8b1db596faacb45f95f738865648422878be37adb67036ed3ce037af0afe957afdd2f9f2252", 0x39}, {&(0x7f0000000200)="d1bb4be7550916178ea4d3f2f12b7aa537629cb42a8935a9158e1e3882d6dab4f90c99942a3182d965270276dc7eb581ba837e492e945c0aacac801a926b877935ee0a927673a22882a44ca9457a7313db3e797672c25c2a9ac037a2e047e3f884f3b521f3b1bb5425ec8debedd80677e6e3a13561cb01675892852420a35183cdd6566aee3e97b0ef01c158883a7f496365522353afbea206a8f3f1a53b63", 0x9f}, {&(0x7f00000002c0)="d5a9a62dc4a444c2c34b2d52db9f46d66c17c26af2de90d944b3c855b633a78afdb861cb50c439d47a0060fed1a0e4f56a29fc362e5d75a32476bfeed602bd2a3839e3efe8583d5d13d56d62882dae1bd170240d4e594f0b2e3ea4bfb70061ffdd6d456306ed3861cf31b6abb0e5f3188b233886cb97e080af1a", 0x7a}, {&(0x7f0000000400)="b76ef346ed7edb4c871cf2973a409eb81d184df41f4ed6f82a9de5fdec62889d7493d33269d6cd3cfd4d2e4391317da05ac1896736c046ef6b1059678cf6315e3e522faaa3e1dd0afe681680475f5ee7c3d2bce5a50dd926fb2f98495644e1722c04803febf2a8f28f5b09e19bb5191be01deabcdfe28a9dda6cb4a64f80862069257abca718fc5788e0047b76393b64b7b4941d194a19ca32958c1879303433283ff867f3d83165421795b68d5204d9c5178ca802790016f1e4b6cc8387ae5e96fe6010a91f5c640e957f", 0xcb}, {&(0x7f0000000500)="44f5e0ef0c7da921dccb6f3f663375895f6419b06cd5035cb594a781a1949ef36d2a95d255ad6c25bba2bf0822e289272d35944812527730ec1363b9beb701c17ba41753d45d3d050494fe637562420686981791a0b259a4705d840d18c165f0d05c6b770ec4e1532d7c192ded519581e11c71150c70bd3fd75d7e0fe34c59b870d695a0eee3d52c16861f8c874e031e3a12e0cf6b500fd78fb38b22320f26d5fa632db083", 0xa5}, {&(0x7f0000000340)="4fb29f3cdc2373063c9350cf277c335385b21f7eb95decc9f39afca79ef12e6a7427f14817a65cbe1c33e8ab6ab510cb066eef1f2278055137ac1a0ce12ec8bfd998bed49cb9d631a388a69c6ef6964111b105f2a50f54be07f7c2fc51846358ddff6bb78871a1a70843735bc5b524d6e681103103b260c765feabef1c83976d", 0x80}], 0x9, 0x9, 0x6, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000140)={0x2, 'veth0_macvtap\x00', {0xcc75}, 0x1}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x4000000000000) 12:18:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 33) [ 762.610385] No source specified 12:18:21 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 762.656121] No source specified 12:18:21 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 10) 12:18:21 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffe000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:18:21 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 33) 12:18:21 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:21 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x80800) sendfile(r1, r2, 0x0, 0x4000000000000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x115900, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000080)=0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) [ 762.789488] No source specified [ 762.796338] No source specified 12:18:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 34) 12:18:30 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='user.incfs.id\x00', &(0x7f0000000040)=""/196, 0xc4) sendfile(r0, r1, 0x0, 0x4000000000000) 12:18:30 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:18:30 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 11) 12:18:30 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 11) 12:18:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdf9, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:18:30 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 34) 12:18:30 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) [ 772.001604] No source specified [ 772.007514] FAULT_INJECTION: forcing a failure. [ 772.007514] name failslab, interval 1, probability 0, space 0, times 0 [ 772.009388] CPU: 1 UID: 0 PID: 7286 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 772.009419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 772.009432] Call Trace: [ 772.009440] [ 772.009449] dump_stack_lvl+0xfa/0x120 [ 772.009477] should_fail_ex+0x4d7/0x5e0 [ 772.009507] should_failslab+0xc2/0x120 [ 772.009539] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 772.009581] ? __alloc_skb+0x2ab/0x370 [ 772.009622] ? __alloc_skb+0x2ab/0x370 [ 772.009652] __alloc_skb+0x2ab/0x370 [ 772.009685] ? __pfx___alloc_skb+0x10/0x10 [ 772.009716] ? skb_checksum+0x7df/0x930 [ 772.009761] skb_segment+0x868/0x3a20 [ 772.009834] __udp_gso_segment+0x1406/0x25a0 [ 772.009863] ? __pfx_sock_wfree+0x10/0x10 [ 772.009912] udp4_ufo_fragment+0x51c/0x730 [ 772.009944] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 772.009975] inet_gso_segment+0x4e6/0x1180 [ 772.010019] ipip_gso_segment+0xc2/0xf0 [ 772.010046] ? __pfx_ipip_gso_segment+0x10/0x10 [ 772.010076] inet_gso_segment+0x4e6/0x1180 [ 772.010120] skb_mac_gso_segment+0x291/0x590 [ 772.010158] ? __pfx_inet_gso_segment+0x10/0x10 [ 772.010187] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 772.010236] __skb_gso_segment+0x397/0x740 [ 772.010280] validate_xmit_skb.constprop.0+0x202/0xdc0 [ 772.010309] ? __skb_flow_dissect+0x1487/0x60b0 [ 772.010336] ? netdev_core_pick_tx+0x1b9/0x330 [ 772.010362] ? __dev_queue_xmit+0x207/0x4210 [ 772.010394] __dev_queue_xmit+0x873/0x4210 [ 772.010442] ? __pfx___dev_queue_xmit+0x10/0x10 [ 772.010476] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 772.010507] ? perf_trace_lock+0xb5/0x5d0 [ 772.010546] ? perf_trace_lock+0xb5/0x5d0 [ 772.010584] ? __pfx_perf_trace_lock+0x10/0x10 [ 772.010618] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 772.010652] ? lock_acquire+0x15e/0x2f0 [ 772.010685] ? find_held_lock+0x2b/0x80 [ 772.010708] ? __ip_finish_output.part.0+0x1bb/0x350 [ 772.010748] ip_finish_output2+0xaa0/0x1bc0 [ 772.010786] ? __pfx_ip_finish_output2+0x10/0x10 [ 772.010813] ? skb_gso_transport_seglen+0x1ca/0x360 [ 772.010859] __ip_finish_output.part.0+0x1bb/0x350 [ 772.010892] ip_output+0x380/0xb20 [ 772.010924] ip_local_out+0x396/0x4d0 [ 772.010956] iptunnel_xmit+0x600/0x9c0 [ 772.010998] ip_tunnel_xmit+0x131e/0x3470 [ 772.011032] ? __mutex_add_waiter+0x160/0x210 [ 772.011075] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 772.011097] ? find_held_lock+0x2b/0x80 [ 772.011121] ? get_page_from_freelist+0x501/0x2600 [ 772.011165] ? skb_network_protocol+0x12b/0x680 [ 772.011201] sit_tunnel_xmit+0xc4f/0x2180 [ 772.011236] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 772.011260] ? netif_skb_features+0x3c7/0x1160 [ 772.011297] ? __pfx_netif_skb_features+0x10/0x10 [ 772.011327] ? lock_is_held_type+0x9e/0x120 [ 772.011360] dev_hard_start_xmit+0x15b/0x6e0 [ 772.011398] __dev_queue_xmit+0x2107/0x4210 [ 772.011440] ? _copy_from_iter+0x24b/0x1660 [ 772.011468] ? __pfx___dev_queue_xmit+0x10/0x10 [ 772.011499] ? perf_trace_lock+0xb5/0x5d0 [ 772.011531] ? lock_release+0x20/0x290 [ 772.011570] ? perf_trace_lock+0xb5/0x5d0 [ 772.011603] ? selinux_current_getlsmprop_subj+0xa2/0x100 [ 772.011635] ? __pfx_perf_trace_lock+0x10/0x10 [ 772.011670] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 772.011703] ? lock_acquire+0x15e/0x2f0 [ 772.011735] ? find_held_lock+0x2b/0x80 [ 772.011760] ? ip_finish_output2+0x6f3/0x1bc0 [ 772.011798] neigh_connected_output+0x335/0x4d0 [ 772.011847] ip_finish_output2+0x6f3/0x1bc0 [ 772.011876] ? lock_is_held_type+0x9e/0x120 [ 772.011904] ? __pfx_ip_finish_output2+0x10/0x10 [ 772.011931] ? skb_gso_transport_seglen+0x1ca/0x360 [ 772.011978] __ip_finish_output.part.0+0x1bb/0x350 [ 772.012011] ip_output+0x380/0xb20 [ 772.012042] ip_send_skb+0x44c/0x5a0 [ 772.012075] udp_send_skb+0x85f/0x1330 [ 772.012111] udp_sendmsg+0x1685/0x22c0 [ 772.012138] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 772.012169] ? __pfx_udp_sendmsg+0x10/0x10 [ 772.012207] ? perf_trace_lock+0xb5/0x5d0 [ 772.012245] ? __pfx_perf_trace_lock+0x10/0x10 [ 772.012274] ? reacquire_held_locks+0xd1/0x200 [ 772.012306] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 772.012345] ? find_held_lock+0x2b/0x80 [ 772.012373] ? __local_bh_enable_ip+0xa1/0x110 [ 772.012398] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 772.012444] ? inet_autobind+0x13f/0x1a0 [ 772.012467] ? __local_bh_enable_ip+0xa1/0x110 [ 772.012493] ? inet_autobind+0x144/0x1a0 [ 772.012519] ? __pfx_udp_sendmsg+0x10/0x10 [ 772.012545] inet_sendmsg+0x109/0x150 [ 772.012576] ____sys_sendmsg+0x947/0xc20 [ 772.012608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 772.012641] ? _kstrtoull+0x13e/0x200 12:18:30 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) [ 772.012671] ? __pfx__kstrtoull+0x10/0x10 [ 772.012709] ___sys_sendmsg+0x10f/0x1b0 [ 772.012746] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.012778] ? perf_trace_lock+0xb5/0x5d0 [ 772.012815] ? __pfx_perf_trace_lock+0x10/0x10 [ 772.012854] ? lock_acquire+0x15e/0x2f0 [ 772.012884] ? __fget_files+0x34/0x3b0 [ 772.012910] ? find_held_lock+0x2b/0x80 [ 772.012936] ? lock_release+0xc8/0x290 [ 772.012973] ? __fget_files+0x20d/0x3b0 [ 772.013013] __sys_sendmmsg+0x1f5/0x420 12:18:30 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 12) 12:18:30 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 35) [ 772.013056] ? __pfx___sys_sendmmsg+0x10/0x10 [ 772.013106] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 772.013137] ? __fget_files+0x20d/0x3b0 [ 772.013172] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 772.013201] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 772.013234] ? ksys_write+0x1a3/0x240 [ 772.013262] ? __pfx_ksys_write+0x10/0x10 [ 772.013298] __x64_sys_sendmmsg+0x9d/0x110 [ 772.013332] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 772.013364] do_syscall_64+0xbf/0x390 [ 772.013394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.013419] RIP: 0033:0x7fd3cfdceb19 [ 772.013437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 772.013460] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 772.013483] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 772.013498] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 772.013512] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.013526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 772.013540] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 772.013576] [ 772.051381] No source specified 12:18:30 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:30 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) 12:18:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 35) 12:18:39 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:39 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:18:39 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) signalfd(r1, &(0x7f0000000000)={[0x800]}, 0x8) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r5, 0x983b, 0x100, 0x135}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2c5c2, 0x0) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, 0x0) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x12, r6, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, 0x0) dup2(r8, r8) sendfile(r0, r1, 0x0, 0x4000000000000) 12:18:39 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 36) 12:18:39 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 12) 12:18:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:18:39 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 13) 12:18:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 36) 12:18:39 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) [ 780.861236] No source specified [ 780.886885] No source specified 12:18:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 37) 12:18:39 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:18:39 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 14) 12:18:39 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 37) [ 781.098511] No source specified [ 781.104841] No source specified 12:18:47 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 38) 12:18:47 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 15) 12:18:47 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r2 = accept4$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x800) r3 = syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x5, 0x8, &(0x7f00000016c0)=[{&(0x7f00000002c0)="4d0dafdab368789463981e78d190ea8fb372e25b987795e17be1", 0x1a, 0x87}, {&(0x7f0000000300)="994224b258d93cab9846ed679a07984f540129d72caab029002975ec6bb3e8984eafc60ec5ecb687936ff5dea9956e9738b28ae65c6e13c416a32298c2ca3dc66fca00b2ac6b38a875357557016dfb1aed52103343bc03fc50d24b80625a46744e1639ee73a4d0752d1fb941f7c3c094ba9c5b23a2cd6ec9469c240d8589587457", 0x81, 0x20c2}, {&(0x7f0000000400)="701b8bac14c76da9744c1f62704e406d3a1b9b78898d5b1e589fd98469fa965da1e6bb7aeaebeebf838348452f556aba8c1a15d197708fff67ffeab0c9f90b8600239e77a8005fd3ebe00bc41533139e702ff7cb5dfc7ccf19ce8bdc59bd0ab1f53868dbc93c91b1d73eb9868bf57bb9360105f451466813c6e20dd11e5c2a28e20fcd19729f13fc0509b262787bd49289cbdcded973cd6d718e", 0x9a, 0x10000}, {&(0x7f00000004c0)="fbe819ea2e885e6782a5991aea542efc082a81758986897d49ebf684e7d451544e520a4c5dc6ff804586e8dd9f5db69e3b74b80de2416386c09a392b2f88978a0b541350e2cf1db5c42fc3836f7d46c150058d19deb9e3df2f838740816f878c3375cb60e4f277d868080bb945df8d6d", 0x70, 0xd9}, {&(0x7f0000000540)="1d0a2b455df86d673b58e146984562b05aa50bb0cb1fb9c41264e4b148ee2b75d4f0e658ec17112af834b1acbadd3f1b1a51569d445139ae8a82cf0139", 0x3d, 0xffff}, {&(0x7f0000000580)="70cd4e2cd52eaa77e0f6e9734c31a3cac0facdd6c95cb5560421de1fa4076ca02992a6db35003a6313c697820bb2e420ce44d04ba9b95440fb7dff29962bd8fb0dd92de3a2818e352cd0e6efad2b297d794baf50927e91217ddf533583a99ec61058a0a216570567f025513b9c72ab", 0x6f, 0x4}, {&(0x7f0000000600)="3703ab198c745078a7f606f33d9d903a8df18c86ea102597e2702fd8ba1b2116ce86a5483324a22d05ebddf9038f73764ccca8f6d3a520024bad4efcfe767e0c502a204e9d7d63bbb2daa75ae2938fdb84701ce30f698b8ea0a36dbb7e744654ea69ba90d013e703738bb473616d87877eb7b77112f9fe6be1458b698bfff22b44c4feac1fd9ebc7b8d0fd4d76f82b444e595f0204aef2899525e7fa5aaa4b2ecd83fc4af0", 0xa5, 0x8}, {&(0x7f00000006c0)="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", 0x1000}], 0x0, &(0x7f0000002f00)=ANY=[@ANYBLOB='mode=00000000000000000010600,huge=advise,huge=always,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6769647b858265dae6ec6ccb21adb13d0000003f2d5e7b5a147171cc77d9b0e4e79189233f325aa146811cd7b8096d00102a8181fb43d23ff1e109268c56769cfb84944101e0070ec1eac3e58c7700a366d8a6a221717c4c7834dae0949e37df2631aa4129d8e93b9d47c016bcaa921aad11a199889a39f3919be7a665ec17337eba251d2abbdafbb4097190c9f397ce31e50a643d701b2f7a3033e3e7d6f4794435c695c6a780db8338c82ac8309aac5b152205b488bc92c4c98f5a14c10d6770f9e8940f708f89bd", @ANYRESHEX, @ANYBLOB="2c687567653d616c776179732c6e725f696e6f6465733d2d0c2c6d706f6c3d64656661756c743a8b38343336371d2c736d61636b66736465663d2f70726f632f74696d65725f6c697374002c61707072616973655f747970653d696d617369672c6673636f6e746578743d757365725f752c61707072616973652c736d61636b6673666c6f6f723d235b7b2e40292c00"]) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002bc0), 0x80000, 0x0) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, 0x0) io_submit(r1, 0x9, &(0x7f0000002e80)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000180)="64b63c4efe9070d37d82954112c0ba41a35c610202da0174ffdd34fe405fe79fb685451c5104d647d059c3aa451dbb99dd05f0be52ccc2ce54ea79ecc3d7d53b11196e7dd3099779f8c3886ba72d8ec190ed328af715269c411cbb7540306a875d91bd50151013dacfa26512b0aaa96f1b66ebfe41d682ced9b1da5e116b0d198f26f2d48791f10d8dca047fc6685794af8bb26928", 0x95, 0x1, 0x0, 0x2}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x1, 0xffff, r3, &(0x7f0000001880)="266a4f53f7342d1d725e28b1d54337bec63e77fa9cd5b06ebc7ece789f136b3768f4fffca133dd888e2fe1591a8c356b3588ecf24d95872da4cbef2715987c", 0x3f, 0x965, 0x0, 0x1, r4}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x8, 0xb8e, r0, &(0x7f0000001940)="d2f85e0a71857b9603d3d6b4cb196e8553873769ba9ec00d64b15baf01d64fdb0036c1f124b4236ef9329be94eb1c901a188c60202556c8db1e338765b2cb0e380ed2d06811db5eab49aca615a47c1dda7c76c6121112b0d09cbec05e4349cb77d519b4ff7535eee4d15c735eeead3e4d662b1535eac520aa0112413a93ddd28f1c561f6005db11d618bd4005bf4858e35762e5d390eb0efce7b0c4759821bf72a6358671f5cb0802e7530337d307cfb05871a13fd000542e0d7586aa96caa41843ac37fa65bd7b52bad3d", 0xcb, 0x8, 0x0, 0x2, r0}, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000001a80)="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", 0x1000, 0x3, 0x0, 0x1, r0}, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x8, 0x87, r5, &(0x7f0000002ac0)="5a40f822349fa010ce4a05dbbb96a762cfe0d501d40f8210f482e3ca3511c99fc125f3233898543d81dc5d950809c6049e5e29a6c0c1826f42130cd8a9d1f8ee9fc7109e3a5946f85befc7f226b6ec4cc13142bc0ef3c504", 0x58, 0x8}, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x3, 0x2, r6, &(0x7f0000002b80)="9d4d4c09965f0d648209cde0dac507ac67835509abef2a3b432f34b66eadd942fa4c912e8d582e", 0x27, 0x6, 0x0, 0x2, r7}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x8ae0, r0, &(0x7f0000002c40)="558114b10e881fa984f77da8a1fc8d0ad7332595cbe702a0e1dc36c2c0a14523b2e34d3b8915801a53c19c8f86", 0x2d, 0x9a, 0x0, 0x2}, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000002cc0)="4e2e9c6ec887d6ac8ba57e9314e181a608f44c5887e785995b92b67a696efd4d4a0bd9e8d26f4ed7cd8d8c69a13bf6fd3baa53fa52e6f068c3ad174b37dade38cf4d587f0f085b5dea51b5b056180879918e60954d1c5a8e692602ce3919ba9c66b3dc8b36743e81504f2d978cadc955a2a521bfbcc361e452826081167e0980f4901e76e404693d690dfa2d89817969a63c0f89930a71bac5bf905c6d71", 0x9e, 0x8, 0x0, 0x0, r0}, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, &(0x7f0000002dc0)="b09578256a61af5d8f0603687e8655580b87cf5413a931f977e958a631a410351cca03eeadd99719783886bff0c6edfedbedb7c3ccbfe34ebe4d8fd7e8dd735de8b57d3890e2de3f5d770cb86a02db2cc459ff1e798fad1bee75e761af2eec6430871251e46d95d2d4aeca6c9f38e15e51b0cfa645f9", 0x76, 0x3025, 0x0, 0x0, r8}]) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r9, 0x0, 0x4000000000000) 12:18:47 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) 12:18:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 38) 12:18:47 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 13) 12:18:47 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:18:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 789.021373] loop1: detected capacity change from 0 to 256 [ 789.025270] tmpfs: Unsupported parameter 'huge' [ 789.049564] No source specified 12:18:47 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:18:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 39) [ 789.064273] No source specified 12:18:47 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 14) 12:18:47 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 16) [ 789.150054] loop1: detected capacity change from 0 to 256 12:18:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 789.172465] tmpfs: Unsupported parameter 'huge' 12:18:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 40) 12:18:47 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 15) 12:18:47 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 39) 12:18:47 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) [ 789.329032] No source specified 12:18:47 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:18:47 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 17) [ 789.334373] No source specified 12:18:57 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:18:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff00000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:18:57 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 18) 12:18:57 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 40) 12:18:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 41) 12:18:57 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 16) 12:18:57 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 12:18:57 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000100)={[0x1]}, 0x3) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r3, r4) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r5, r6) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000000c0)=""/27) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r8 = inotify_init() r9 = inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r8, r9) inotify_rm_watch(r7, r9) [ 798.656435] audit: type=1400 audit(1761653937.226:14): avc: denied { watch_reads } for pid=7415 comm="syz-executor.1" path="/syzkaller-testdir236599061/syzkaller.enOeDk/138/file0" dev="sda" ino=16030 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 [ 798.679575] No source specified 12:18:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 42) [ 798.698510] No source specified 12:18:57 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 41) 12:18:57 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) [ 798.754647] FAULT_INJECTION: forcing a failure. [ 798.754647] name failslab, interval 1, probability 0, space 0, times 0 [ 798.755604] CPU: 1 UID: 0 PID: 7432 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 798.755621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 798.755629] Call Trace: [ 798.755633] [ 798.755638] dump_stack_lvl+0xfa/0x120 [ 798.755657] should_fail_ex+0x4d7/0x5e0 [ 798.755675] should_failslab+0xc2/0x120 [ 798.755693] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 798.755715] ? __alloc_skb+0x2ab/0x370 [ 798.755737] ? __alloc_skb+0x2ab/0x370 [ 798.755752] __alloc_skb+0x2ab/0x370 [ 798.755769] ? __pfx___alloc_skb+0x10/0x10 [ 798.755785] ? skb_checksum+0x7df/0x930 [ 798.755813] skb_segment+0x868/0x3a20 [ 798.755847] __udp_gso_segment+0x1406/0x25a0 [ 798.755864] ? __pfx_sock_wfree+0x10/0x10 [ 798.755889] udp4_ufo_fragment+0x51c/0x730 [ 798.755905] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 798.755921] inet_gso_segment+0x4e6/0x1180 [ 798.755944] ipip_gso_segment+0xc2/0xf0 [ 798.755957] ? __pfx_ipip_gso_segment+0x10/0x10 [ 798.755973] inet_gso_segment+0x4e6/0x1180 [ 798.755994] skb_mac_gso_segment+0x291/0x590 [ 798.756019] ? __pfx_inet_gso_segment+0x10/0x10 [ 798.756034] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 798.756059] __skb_gso_segment+0x397/0x740 [ 798.756081] validate_xmit_skb.constprop.0+0x202/0xdc0 [ 798.756097] ? __skb_flow_dissect+0x1487/0x60b0 [ 798.756111] ? netdev_core_pick_tx+0x1b9/0x330 [ 798.756124] ? __dev_queue_xmit+0x207/0x4210 [ 798.756140] __dev_queue_xmit+0x873/0x4210 [ 798.756164] ? __pfx___dev_queue_xmit+0x10/0x10 [ 798.756181] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 798.756201] ? perf_trace_lock+0xb5/0x5d0 [ 798.756223] ? perf_trace_lock+0xb5/0x5d0 [ 798.756242] ? __pfx_perf_trace_lock+0x10/0x10 [ 798.756259] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 798.756279] ? lock_acquire+0x15e/0x2f0 [ 798.756295] ? find_held_lock+0x2b/0x80 [ 798.756308] ? __ip_finish_output.part.0+0x1bb/0x350 [ 798.756328] ip_finish_output2+0xaa0/0x1bc0 [ 798.756347] ? __pfx_ip_finish_output2+0x10/0x10 [ 798.756361] ? skb_gso_transport_seglen+0x1ca/0x360 [ 798.756384] __ip_finish_output.part.0+0x1bb/0x350 [ 798.756400] ip_output+0x380/0xb20 [ 798.756416] ip_local_out+0x396/0x4d0 [ 798.756432] iptunnel_xmit+0x600/0x9c0 [ 798.756455] ip_tunnel_xmit+0x131e/0x3470 [ 798.756472] ? __mutex_add_waiter+0x160/0x210 [ 798.756494] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 798.756505] ? find_held_lock+0x2b/0x80 [ 798.756517] ? get_page_from_freelist+0x501/0x2600 [ 798.756542] ? skb_network_protocol+0x12b/0x680 [ 798.756560] sit_tunnel_xmit+0xc4f/0x2180 [ 798.756579] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 798.756591] ? netif_skb_features+0x3c7/0x1160 [ 798.756610] ? __pfx_netif_skb_features+0x10/0x10 [ 798.756625] ? lock_is_held_type+0x9e/0x120 [ 798.756643] dev_hard_start_xmit+0x15b/0x6e0 [ 798.756662] __dev_queue_xmit+0x2107/0x4210 [ 798.756683] ? _copy_from_iter+0x24b/0x1660 [ 798.756699] ? __pfx___dev_queue_xmit+0x10/0x10 [ 798.756715] ? perf_trace_lock+0xb5/0x5d0 [ 798.756730] ? lock_release+0x20/0x290 [ 798.756760] ? perf_trace_lock+0xb5/0x5d0 [ 798.756776] ? selinux_current_getlsmprop_subj+0xa2/0x100 [ 798.756792] ? __pfx_perf_trace_lock+0x10/0x10 [ 798.756810] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 798.756826] ? lock_acquire+0x15e/0x2f0 [ 798.756842] ? find_held_lock+0x2b/0x80 [ 798.756854] ? ip_finish_output2+0x6f3/0x1bc0 [ 798.756873] neigh_connected_output+0x335/0x4d0 [ 798.756898] ip_finish_output2+0x6f3/0x1bc0 [ 798.756913] ? lock_is_held_type+0x9e/0x120 [ 798.756927] ? __pfx_ip_finish_output2+0x10/0x10 [ 798.756941] ? skb_gso_transport_seglen+0x1ca/0x360 [ 798.756964] __ip_finish_output.part.0+0x1bb/0x350 [ 798.756980] ip_output+0x380/0xb20 [ 798.756996] ip_send_skb+0x44c/0x5a0 [ 798.757012] udp_send_skb+0x85f/0x1330 [ 798.757031] udp_sendmsg+0x1685/0x22c0 [ 798.757044] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 798.757060] ? __pfx_udp_sendmsg+0x10/0x10 [ 798.757079] ? perf_trace_lock+0xb5/0x5d0 [ 798.757098] ? __pfx_perf_trace_lock+0x10/0x10 [ 798.757113] ? reacquire_held_locks+0xd1/0x200 [ 798.757129] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 798.757148] ? find_held_lock+0x2b/0x80 [ 798.757163] ? __local_bh_enable_ip+0xa1/0x110 [ 798.757177] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 798.757193] ? inet_autobind+0x13f/0x1a0 [ 798.757205] ? __local_bh_enable_ip+0xa1/0x110 [ 798.757217] ? inet_autobind+0x144/0x1a0 [ 798.757230] ? __pfx_udp_sendmsg+0x10/0x10 [ 798.757244] inet_sendmsg+0x109/0x150 [ 798.757259] ____sys_sendmsg+0x947/0xc20 [ 798.757276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.757293] ? _kstrtoull+0x13e/0x200 [ 798.757309] ? __pfx__kstrtoull+0x10/0x10 [ 798.757328] ___sys_sendmsg+0x10f/0x1b0 [ 798.757347] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.757363] ? perf_trace_lock+0xb5/0x5d0 [ 798.757382] ? __pfx_perf_trace_lock+0x10/0x10 [ 798.757401] ? lock_acquire+0x15e/0x2f0 [ 798.757416] ? __fget_files+0x34/0x3b0 [ 798.757431] ? find_held_lock+0x2b/0x80 [ 798.757445] ? lock_release+0xc8/0x290 [ 798.757463] ? __fget_files+0x20d/0x3b0 [ 798.757483] __sys_sendmmsg+0x1f5/0x420 [ 798.757505] ? __pfx___sys_sendmmsg+0x10/0x10 [ 798.757530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 798.757547] ? __fget_files+0x20d/0x3b0 [ 798.757564] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 798.757579] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 798.757595] ? ksys_write+0x1a3/0x240 [ 798.757610] ? __pfx_ksys_write+0x10/0x10 [ 798.757628] __x64_sys_sendmmsg+0x9d/0x110 [ 798.757645] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 798.757661] do_syscall_64+0xbf/0x390 [ 798.757677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.757690] RIP: 0033:0x7fd3cfdceb19 [ 798.757700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.757712] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 798.757724] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 798.757732] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 798.757739] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.757746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.757753] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 798.757771] 12:18:57 executing program 6: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:18:57 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000000) 12:18:57 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 19) 12:18:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:18:57 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 17) 12:18:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 43) [ 799.115402] No source specified [ 799.120548] No source specified 12:19:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 44) 12:19:06 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 42) 12:19:06 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 20) 12:19:06 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:19:06 executing program 6: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) 12:19:06 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0xd1, 0x40, 0x8001, 0x2e, @mcast1, @remote, 0x700, 0x20, 0x6, 0x5}}) sendfile(r0, r1, 0x0, 0x4000000000000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:19:06 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 18) 12:19:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 808.282648] No source specified [ 808.286546] No source specified 12:19:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 45) 12:19:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:19:06 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 43) [ 808.384080] No source specified [ 808.387681] No source specified 12:19:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:19:07 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:19:07 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x105) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000000) [ 808.520189] No source specified [ 808.521889] No source specified 12:19:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 46) 12:19:15 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:19:15 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 19) 12:19:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:19:15 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 21) 12:19:15 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 44) 12:19:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x20000000) sendfile(r0, r1, 0x0, 0x4000000000000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = fsmount(r1, 0x1, 0x1) ppoll(&(0x7f0000000100)=[{r4, 0xc1c0}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x3]}, 0x8) futimesat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r2, r3/1000+10000}}) 12:19:15 executing program 6: creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(0xffffffffffffffff, r0, 0x0, 0xfdef) [ 816.532649] No source specified [ 816.543445] No source specified 12:19:15 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 20) 12:19:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:19:15 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x7, 0x10, 0x4, {0x2, 0x8002}, 0x3}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(r3, r1, 0x0, 0x3fd) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) 12:19:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 47) [ 816.721599] No source specified 12:19:15 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:19:15 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 22) [ 816.740321] No source specified 12:19:15 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 45) 12:19:15 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:19:15 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 21) 12:19:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) [ 816.895229] No source specified [ 816.897214] No source specified 12:19:24 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x192) acct(&(0x7f0000000080)='./file0\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000008000) r2 = socket$unix(0x1, 0x5, 0x0) fcntl$setflags(r2, 0x2, 0x1) 12:19:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:19:24 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 46) 12:19:24 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 22) 12:19:24 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 1) 12:19:24 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 23) 12:19:24 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:19:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 48) [ 825.975762] No source specified [ 825.989551] No source specified 12:19:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 49) [ 826.057212] Process accounting resumed 12:19:24 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 2) [ 826.161032] Process accounting resumed 12:19:33 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 3) 12:19:33 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 24) 12:19:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 50) 12:19:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:19:33 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 23) 12:19:33 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfdef) 12:19:33 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 47) 12:19:33 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0x25}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x54) sendfile(r0, r1, 0x0, 0x4000000000000) [ 834.637853] FAULT_INJECTION: forcing a failure. [ 834.637853] name failslab, interval 1, probability 0, space 0, times 0 [ 834.638790] CPU: 0 UID: 0 PID: 7593 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 834.638809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 834.638816] Call Trace: [ 834.638821] [ 834.638826] dump_stack_lvl+0xfa/0x120 [ 834.638842] should_fail_ex+0x4d7/0x5e0 [ 834.638859] should_failslab+0xc2/0x120 [ 834.638879] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 834.638901] ? __alloc_skb+0x2ab/0x370 [ 834.638923] ? __alloc_skb+0x2ab/0x370 [ 834.638939] __alloc_skb+0x2ab/0x370 [ 834.638955] ? __pfx___alloc_skb+0x10/0x10 [ 834.638971] ? skb_checksum+0x7df/0x930 [ 834.638994] skb_segment+0x868/0x3a20 [ 834.639027] __udp_gso_segment+0x1406/0x25a0 [ 834.639044] ? __pfx_sock_wfree+0x10/0x10 [ 834.639070] udp4_ufo_fragment+0x51c/0x730 [ 834.639085] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 834.639101] inet_gso_segment+0x4e6/0x1180 [ 834.639124] ipip_gso_segment+0xc2/0xf0 [ 834.639138] ? __pfx_ipip_gso_segment+0x10/0x10 [ 834.639153] inet_gso_segment+0x4e6/0x1180 [ 834.639174] skb_mac_gso_segment+0x291/0x590 [ 834.639199] ? __pfx_inet_gso_segment+0x10/0x10 [ 834.639214] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 834.639238] __skb_gso_segment+0x397/0x740 [ 834.639260] validate_xmit_skb.constprop.0+0x202/0xdc0 [ 834.639276] ? __skb_flow_dissect+0x1487/0x60b0 [ 834.639290] ? netdev_core_pick_tx+0x1b9/0x330 [ 834.639303] ? __dev_queue_xmit+0x207/0x4210 [ 834.639319] __dev_queue_xmit+0x873/0x4210 [ 834.639343] ? __pfx___dev_queue_xmit+0x10/0x10 [ 834.639360] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 834.639376] ? perf_trace_lock+0xb5/0x5d0 [ 834.639398] ? perf_trace_lock+0xb5/0x5d0 [ 834.639417] ? __pfx_perf_trace_lock+0x10/0x10 [ 834.639434] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 834.639452] ? lock_acquire+0x15e/0x2f0 [ 834.639469] ? find_held_lock+0x2b/0x80 [ 834.639481] ? __ip_finish_output.part.0+0x1bb/0x350 [ 834.639501] ip_finish_output2+0xaa0/0x1bc0 [ 834.639520] ? __pfx_ip_finish_output2+0x10/0x10 [ 834.639534] ? skb_gso_transport_seglen+0x1ca/0x360 [ 834.639557] __ip_finish_output.part.0+0x1bb/0x350 [ 834.639573] ip_output+0x380/0xb20 [ 834.639589] ip_local_out+0x396/0x4d0 [ 834.639605] iptunnel_xmit+0x600/0x9c0 [ 834.639627] ip_tunnel_xmit+0x131e/0x3470 [ 834.639645] ? __mutex_add_waiter+0x160/0x210 [ 834.639666] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 834.639678] ? find_held_lock+0x2b/0x80 [ 834.639689] ? get_page_from_freelist+0x501/0x2600 [ 834.639714] ? skb_network_protocol+0x12b/0x680 [ 834.639732] sit_tunnel_xmit+0xc4f/0x2180 [ 834.639751] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 834.639763] ? netif_skb_features+0x3c7/0x1160 [ 834.639782] ? __pfx_netif_skb_features+0x10/0x10 [ 834.639797] ? lock_is_held_type+0x9e/0x120 [ 834.639816] dev_hard_start_xmit+0x15b/0x6e0 [ 834.639834] __dev_queue_xmit+0x2107/0x4210 [ 834.639855] ? _copy_from_iter+0x24b/0x1660 [ 834.639870] ? __pfx___dev_queue_xmit+0x10/0x10 [ 834.639886] ? perf_trace_lock+0xb5/0x5d0 [ 834.639901] ? lock_release+0x20/0x290 [ 834.639922] ? perf_trace_lock+0xb5/0x5d0 [ 834.639938] ? selinux_current_getlsmprop_subj+0xa2/0x100 [ 834.639954] ? __pfx_perf_trace_lock+0x10/0x10 [ 834.639971] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 834.639988] ? lock_acquire+0x15e/0x2f0 [ 834.640004] ? find_held_lock+0x2b/0x80 [ 834.640015] ? ip_finish_output2+0x6f3/0x1bc0 [ 834.640034] neigh_connected_output+0x335/0x4d0 [ 834.640059] ip_finish_output2+0x6f3/0x1bc0 [ 834.640074] ? lock_is_held_type+0x9e/0x120 [ 834.640088] ? __pfx_ip_finish_output2+0x10/0x10 [ 834.640102] ? skb_gso_transport_seglen+0x1ca/0x360 [ 834.640125] __ip_finish_output.part.0+0x1bb/0x350 [ 834.640141] ip_output+0x380/0xb20 [ 834.640157] ip_send_skb+0x44c/0x5a0 [ 834.640173] udp_send_skb+0x85f/0x1330 [ 834.640191] udp_sendmsg+0x1685/0x22c0 [ 834.640205] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 834.640220] ? __pfx_udp_sendmsg+0x10/0x10 [ 834.640239] ? perf_trace_lock+0xb5/0x5d0 [ 834.640258] ? __pfx_perf_trace_lock+0x10/0x10 [ 834.640273] ? reacquire_held_locks+0xd1/0x200 [ 834.640289] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 834.640309] ? find_held_lock+0x2b/0x80 [ 834.640323] ? __local_bh_enable_ip+0xa1/0x110 [ 834.640337] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 834.640353] ? inet_autobind+0x13f/0x1a0 [ 834.640365] ? __local_bh_enable_ip+0xa1/0x110 [ 834.640378] ? inet_autobind+0x144/0x1a0 [ 834.640391] ? __pfx_udp_sendmsg+0x10/0x10 [ 834.640404] inet_sendmsg+0x109/0x150 [ 834.640419] ____sys_sendmsg+0x947/0xc20 [ 834.640436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.640453] ? _kstrtoull+0x13e/0x200 [ 834.640469] ? __pfx__kstrtoull+0x10/0x10 [ 834.640488] ___sys_sendmsg+0x10f/0x1b0 [ 834.640507] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.640523] ? perf_trace_lock+0xb5/0x5d0 [ 834.640542] ? __pfx_perf_trace_lock+0x10/0x10 [ 834.640561] ? lock_acquire+0x15e/0x2f0 [ 834.640576] ? __fget_files+0x34/0x3b0 [ 834.640590] ? find_held_lock+0x2b/0x80 [ 834.640603] ? lock_release+0xc8/0x290 [ 834.640622] ? __fget_files+0x20d/0x3b0 [ 834.640641] __sys_sendmmsg+0x1f5/0x420 [ 834.640663] ? __pfx___sys_sendmmsg+0x10/0x10 [ 834.640688] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 834.640705] ? __fget_files+0x20d/0x3b0 [ 834.640722] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 834.640737] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 834.640753] ? ksys_write+0x1a3/0x240 [ 834.640768] ? __pfx_ksys_write+0x10/0x10 [ 834.640785] __x64_sys_sendmmsg+0x9d/0x110 [ 834.640803] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 834.640819] do_syscall_64+0xbf/0x390 [ 834.640835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.640848] RIP: 0033:0x7fd3cfdceb19 [ 834.640858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 834.640869] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 834.640881] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 834.640889] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 834.640896] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 834.640903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 834.640910] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 834.640928] [ 834.661595] No source specified [ 834.713766] FAULT_INJECTION: forcing a failure. [ 834.713766] name failslab, interval 1, probability 0, space 0, times 0 [ 834.714783] CPU: 0 UID: 0 PID: 7603 Comm: syz-executor.3 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 834.714799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 12:19:33 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 48) [ 834.714810] Call Trace: [ 834.714814] [ 834.714818] dump_stack_lvl+0xfa/0x120 [ 834.714836] should_fail_ex+0x4d7/0x5e0 [ 834.714852] should_failslab+0xc2/0x120 [ 834.714869] __kmalloc_noprof+0xcd/0x680 [ 834.714888] ? alloc_pipe_info+0x1e8/0x5a0 [ 834.714908] alloc_pipe_info+0x1e8/0x5a0 [ 834.714925] splice_direct_to_actor+0x78c/0x9d0 [ 834.714939] ? __pfx_direct_splice_actor+0x10/0x10 [ 834.714950] ? lock_acquire+0xd2/0x2f0 [ 834.714970] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 834.714983] ? lock_acquire+0x15e/0x2f0 [ 834.715001] do_splice_direct+0x179/0x250 [ 834.715012] ? __pfx_do_splice_direct+0x10/0x10 [ 834.715024] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 834.715047] ? security_file_permission+0x22/0x90 [ 834.715067] do_sendfile+0xa8e/0xdc0 [ 834.715085] ? __pfx_do_sendfile+0x10/0x10 [ 834.715098] ? __fget_files+0x20d/0x3b0 [ 834.715118] __x64_sys_sendfile64+0x1d3/0x210 [ 834.715135] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 834.715158] do_syscall_64+0xbf/0x390 [ 834.715174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.715185] RIP: 0033:0x7fcb312acb19 [ 834.715195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 834.715206] RSP: 002b:00007fcb2e801188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 834.715217] RAX: ffffffffffffffda RBX: 00007fcb313c0020 RCX: 00007fcb312acb19 [ 834.715225] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 834.715231] RBP: 00007fcb2e8011d0 R08: 0000000000000000 R09: 0000000000000000 [ 834.715239] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000001 [ 834.715246] R13: 00007fff797b84bf R14: 00007fcb2e801300 R15: 0000000000022000 [ 834.715262] [ 834.718464] No source specified 12:19:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 51) 12:19:33 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 24) 12:19:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:19:33 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 4) 12:19:33 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8300, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="7f53329e75b0eac7e6e13098087463afb68b06c8cede3f4774fdc45414c1f2fcd0247366d37c5905ab4dd1b8709297c36b03f3422017e1aa7d6a5ad0a502c39ddcc4e045f63028716aee16f2436daad64dc745bfae4ef79ec9ec4a281b2c0e2ae5a8e5aaeebeec5ad27eed9b088f0fdb8af930de452d5db10638d361286651a6ab182ba90807d7711505c9b9020552936ea4577f5ff8148a5ffe79a8133788253ef8dce8106bfe38183eb6d45131294f8e583fdae8eb1bbb832422ad42b68d800369d0e95fb735faa675e34956a928cb3df29c25510b79b4f40da559dfdcecaf1f6278bd371731fcd90eba6b813c31ef21df019858", 0xf5}, {&(0x7f0000000080)="8287dbb5458ee7c980ee553ab7cbf43eaf98fdcc6472a48cd96094a56ca10f8d77a3a46d206b390c4bd7a4408021c174b569d99102b5a4a517242ea8a19ac54d39e687b19da2197627bdacbfb5cfa7dbb23cdb10c2f260", 0x57}, {&(0x7f0000000280)="442d16948bfd16b39a467cc42a904956ec2af8cd082d7e5f11d8e24c85a79ca20f783f8992bb7422d831fb1078bfeb7e7e0b15cc77f2f2d05c6c7f33e13a9ab774fd728406d4287780277821a7aa131edcf277b44f71b312983cfd862f50597293e105038bbc9a8980ee3aef8ebddedf", 0x70}], 0x3, 0x7, 0x929, 0xe) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000000000) 12:19:33 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:19:33 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 25) [ 834.979417] No source specified [ 834.988146] No source specified 12:19:33 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 49) 12:19:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:19:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 52) 12:19:33 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 25) 12:19:33 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 26) [ 835.184528] No source specified [ 835.193742] No source specified 12:19:42 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 50) 12:19:42 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) 12:19:42 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 26) 12:19:42 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 5) 12:19:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 53) 12:19:42 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 27) 12:19:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:19:42 executing program 1: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x103941, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r2 = geteuid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r3, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r5, 0x0) statx(r0, &(0x7f0000000280)='./file1\x00', 0x400, 0x400, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r7}) r8 = fork() kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)=[{&(0x7f00000000c0)={0xcc, 0x1b, 0x1, 0x70bd28, 0x25dfdbfb, "", [@generic="df3ecd3f86bf92b4463cca01b4ab92a8380302fa47a2990128c110cee11b11823560cda89e36246962da2435d50696ca94a4dc18e394fb59c381596ff7f2589380f69be496d532cbfaba69a0cfe07c654df85e8555a7a95473b70ee8f05e66637d2b1312cb8eab108eaef5f3cfa7eb5d1f87054e1ad50915b5264c6b0620c56bdf6b35a2460a71ad38d29aade2e46f72e82056a73361ec4fa3c463d138b94d816b59235f4438b5cfc97958416cd2bfdb330a68cc904dde0784438c48"]}, 0xcc}, {&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001300100006000000fddbdf2516005880359069c3b3d0a349df9d055f7f718fc389050001"], 0x28}, {&(0x7f0000001040)={0x1088, 0x26, 0x200, 0x70bd28, 0x25dfdbfc, "", [@nested={0x1078, 0x45, 0x0, 0x1, [@typed={0x6, 0x78, 0x0, 0x0, @str='.\x00'}, @typed={0xc, 0x4f, 0x0, 0x0, @u64=0xeb57}, @generic="6ad98ca0191cc82889d83c5bbc970eab3b81999e144e9fb0a317bb22fbc34e53cc8c30256d0004b0c549aadf589d965145b653c5d62880119a93723b30c6d13b9bcdb674e002e3f4b3caa57f8db8bc9f", @typed={0x1004, 0x80, 0x0, 0x0, @binary="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"}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x1}]}]}, 0x1088}], 0x3, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}], 0x20, 0x20008011}, 0xc841) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000480)={0x1518, 0x1d, 0x8, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x6f, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x90, 0x0, 0x0, @uid}, @typed={0x57, 0x8b, 0x0, 0x0, @binary="05af0e063b313e39b6476aabbaac1c4284231ca6d70b527d357f37319b9b3a6b578143f8233d94f6985ee7748b97e95e85208e4f8043917e3391102ccb6aa451668e6ee50910ddda5cb8202f103b632ffee3be"}, @nested={0x103d, 0x60, 0x0, 0x1, [@generic="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", @typed={0x8, 0x43, 0x0, 0x0, @fd}, @generic="701e515bda9c3f23bea62b511179771720f1cc6468d9a43de644d8c19d611efa87e7f65c004a5fd2fd2a158385fae624ef"]}, @nested={0x1ac, 0x55, 0x0, 0x1, [@generic="9f0b4f65d8c0fecf8819a48c07ecb166c1fa1ef427a117a9462e2c8df84987abf1d0595b7ced2585768f11460dca372c9d2bb6696f38b327b246690c46bbf41ead35ff7c2eb2f254592775c2b9bc5703bee474f7d1b93f3512b061ed799913e900452f411f9655c60517c6cd1bc7844327b49ca67a38aa0b5a692e875e99bcc078c83211f77b34b65d24c4099c7dc4fc001d449f276b6e139fc7e1ee4354955c3755a9e4eda8292eaf092654e50a8868ce858079d5c60493c6502656", @generic="3f48503089064ddb77f7d5796a67a717092c4d1ed2abc27377fa248a240783c9d7270a9ffe9f10a2fc0ab50560d6865c2d675691a5ed1bc63cfe6af334350740c40cd1802d9c6836fbeccb79beb6d89e7aec7714eeb66a94fee94506d9696262307b467f050ce9ee87ab8b734045f66001483e0d32b6a0787401021dc0d44b2689a8bd878b2b5b066527ec53edea2302e1fa41325291632f43e0d7786cdd76d479999fe99db838bc35b899121f0826a118b2b41fa7a1824e422817a834c2e1d7e5327a0370f76fca4da3f7bd8792aad3cd69bd5632fef77dc5236d0c8f8478858c4bc849d6c136a9a05d612c"]}, @generic="5428b08a1e4a9f23ae0f8ec9d27a2149d56ae96b2ae27a0aca71b63bdd83332bee2b13308e9a36f1723c2553691632c41680446123331fd88464ff49c202b2721a396e96f69891dbe1c8c434aa5a75b4bab366fecb6966d1ef0067678c43fe4f90", @nested={0x153, 0x3c, 0x0, 0x1, [@generic="4852b02eda283b293a578051818353fde0ae58a94ad0335f6d29d55e407d47f8a53e5892899da38a858717a7f83a8c5235cb5ff2672a4b24ea002fb4dbe0a2ec4aa70b139033b75d85637f598fdd9674b894103fcfe10264e4270a698fd192e90c109c94c608c5d1395eb5fef90e7410e9e472a9ab977c940d04044387c98002693984e5f04cd6ed982fc54bdb7b4470bfbf1a8f006bbc50be4fa6177fb502ca91964847e0e450b7ea7b2b564e16a1d6e67ce42116353ce33951d050f89efbfc5e00228f6444f75ab67cd8a3", @typed={0x8, 0x2d, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x95, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xd, 0x94, 0x0, 0x0, @str='/dev/sr0\x00'}, @generic="7f193402e88c3870f75a668113f2740aea1afd73a151225fb45e5f031a58aa5e9dde4e694c46dbe864ceff5bba6de49e894a2b7358c69c0d7eb9bc1ee8bc465ed36267c7286316169ea9b6075355cc", @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x8, 0x57, 0x0, 0x0, @uid=r3}, @generic="d9bd0868ce9b9777ce7030ed12bda1a3facb548105ff22119423084edb2e87ac46a11f794fb7afab5c21d1d14a90835b1cb9cf5d926bb1e1bbb1aa31eba2e7db275a1f6d94bba177b0c9ae0bfd6a2ff0d089ddec9fba5649f3fd00d84607e95ed9105b7e120aded92ad1c1a021463b5594217539841610b4db8995988594", @generic="93b740a430bc6ea1b8f22f0cad46dddc82daeebd366af26a3dbc2f7ff792d84f61e63ef0e05a6ce2f7e50222bee304da1a249ba501e4fe0394c3ef10dcc417b58fed9b467eac17a90058fc61fa5e15e3c10436a9e49712876f1747c9628ff9dda6a69857e69a6ab4960af91cda55943fd2c30e1c92e7ac64"]}, 0x1518}, {&(0x7f00000019c0)={0x494, 0x12, 0x2, 0x70bd26, 0x25dfdbfd, "", [@generic="9b1e325f454e9db8438d40eeabaa1255e9664b3b987d00d5fbe96d47efb73e4c5cb3aa3401020c70aee618d3eb63b3337c5a6cc8a8945d029bc92480aa4b496ea635d491775cd2b0122bb57acd9a9de44d3a", @generic="0057fd8f1f2d151fd875f073ae786414b42f3f8984e1fb7e0cdcff31557b7bf44b83e41b5807a71028227f92663303fa961623a02fb44f77e544c39d72a445f37f2911a0fdae77159218ef6850266db07e36a68848435700193fde87c64bb96542b8b80069165dded7383280d5be309bb5aea0b8593facb9e4184bc32a5daebf3915dbc3c2ef389e31747928c0ab4457dcf7b023d40472735f7b522085534cfe94f69d9bd90fc0c3926e881bc22a75126bddefc9", @typed={0x8, 0x3a, 0x0, 0x0, @uid=0xee00}, @nested={0x93, 0x5d, 0x0, 0x1, [@generic='Z', @typed={0x15, 0xe, 0x0, 0x0, @str='/proc/timer_list\x00'}, @generic="dbdd1a64b3caee79260282eba2669dc5d137619b4f1a7c378164d7788b43b154", @generic="c60ff0a3ecc07bc25a835620d14c46cfd97141a9473a0431d480cd838dd2f436c3b72fb70dead33c56a34f6af179d6fa7f57d9d72d7dfc9523d4837302c35a85fd4275e51d09a55c021e04daa823", @typed={0x8, 0x3d, 0x0, 0x0, @fd=r4}]}, @generic="641b8ed032f9f9f95c312685ff97ca673e2d1c9b0d1d909d5eefc43117f6a147cbbabc36fd201f54cba41c5c1b9517779ce6a4af1f7100925525b8037608236b63fd4a6a018d8292e31986276ac3eb6aea15214058d4701498aea0b06341ba62ef68de0a451470b256f4c4cb28230ad828713599ec87531077bb3352b0ef3f4801ac523d02b85d24416e98fdf8a298eab18b0130cc9b9702700878f5af266d1756b3c41dc728fbf4e1f600f97121458c520bb75bd8842b1bbab98ebf91af8d06fae53933d78d3e3174ebc822266a633368579ce4eb005106", @generic="a4cba1487e63518e0c80a634862e78d55298e0593357b7e21002760169c751c1fb6017d6c8678913a02f31117df40b9ad8040f8adf2ddf97821bb6dd145163d836ae21165ccd71311632234130cc123e3b175bba3eba70", @nested={0x1b0, 0x3c, 0x0, 0x1, [@typed={0xc, 0x68, 0x0, 0x0, @u64=0x7fff}, @generic="31aeb6afadba4582fcfa7765fea2f66b3fa946bdf50774286ed85a5a947c8c7d8c4d169d435bef3475462c62fd9d9c3298d3b58d75e33776e57c2ea7b22c4260ce54f850d2f955f8fe502f5c90662bb3acdc01149ca98b600b0ee54a98c94c7267671b31e7e127091d426a8df84f2cdc6d57b86ceadadf54675f05cc296ff492dbda2656ecc0ad190f8e4f7bec14e38a36ea433f4a88c6223d1c39a6bf47d9c9e33bca194f31faea987c3f", @generic="cd19af1912666623474db0972a333d095f11cc985e946db3bee3722bce5208bb1d75b369363bd286a756eb4ce3300f854f94596295059aa625048b51", @generic="fc78c3e316721eb38fce566c2d02be1844ec962e533e552622c542283591b043cb8e4bc7bf7fe9a8a7b3a2b3227f76fcc80934985c4453da86a5d3173209715135c45838488313be63afbad991a247f7141439193c83d4ff75758d9c9e7fa5afd598a55d18bffadd548b3912857799207bd015c9ce1c5ae80cbd240facbe498b532b3cda4572614658947dfee20e92b00327544ea3f0a4f33dea56109bb2b6bb68b7f53e2d18290e49e5ee88a88c471d84", @typed={0x8, 0xe, 0x0, 0x0, @uid}]}]}, 0x494}, {&(0x7f0000000080)={0xb0, 0x29, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@generic="ace532ce3a4df5bc6bef86cd4f4e223c248d62f442f0aed25803b2e6e76f16abcf", @generic="61a3a9620a30cf7bc6267595b5f996a82e2962d5ef0c532041f36e87379fba4dc30e96c0ceabbc2a5e429b9f86bc05058c582d981325d7a6c97377761cb771e6566d21cc0b747ec838f8383af1240135f5c4927b7d94dcfb6d91b12a17ff512718579c5b9680c95414c86cb523d7883389ea763c16e610be0f8b12625d"]}, 0xb0}, {&(0x7f0000000180)={0x2c, 0x35, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x15, 0x71, 0x0, 0x0, @str='/proc/timer_list\x00'}, @typed={0x4, 0x88}]}, 0x2c}, {&(0x7f00000001c0)={0x1c, 0x34, 0x4, 0x70bd27, 0x25dfdbfe, "", [@typed={0xc, 0x5e, 0x0, 0x0, @u64=0x101}]}, 0x1c}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r10}}}], 0x40, 0x4000}, 0x4048810) sendfile(r0, r1, 0x0, 0x7ffffffc) [ 843.965056] No source specified [ 843.968690] No source specified 12:19:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 54) 12:19:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1400000000000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@journal_checksum}, {@nobarrier}, {@data_ordered}]}) 12:19:42 executing program 7: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 51) 12:19:42 executing program 4: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 28) 12:19:42 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0xfdef) (fail_nth: 27) 12:19:42 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x8001, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6002, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r3, r4, 0x0, 0xa0103) sendfile(r0, r1, 0x0, 0x0) [ 844.133016] FAULT_INJECTION: forcing a failure. [ 844.133016] name failslab, interval 1, probability 0, space 0, times 0 [ 844.134004] CPU: 0 UID: 0 PID: 7677 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 844.134021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 844.134029] Call Trace: [ 844.134033] [ 844.134038] dump_stack_lvl+0xfa/0x120 [ 844.134058] should_fail_ex+0x4d7/0x5e0 [ 844.134075] should_failslab+0xc2/0x120 [ 844.134093] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 844.134115] ? __alloc_skb+0x2ab/0x370 [ 844.134138] ? __alloc_skb+0x2ab/0x370 [ 844.134153] __alloc_skb+0x2ab/0x370 [ 844.134170] ? __pfx___alloc_skb+0x10/0x10 [ 844.134185] ? skb_checksum+0x7df/0x930 [ 844.134208] skb_segment+0x868/0x3a20 [ 844.134242] __udp_gso_segment+0x1406/0x25a0 [ 844.134259] ? __pfx_sock_wfree+0x10/0x10 [ 844.134286] udp4_ufo_fragment+0x51c/0x730 [ 844.134302] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 844.134318] inet_gso_segment+0x4e6/0x1180 [ 844.134341] ipip_gso_segment+0xc2/0xf0 [ 844.134354] ? __pfx_ipip_gso_segment+0x10/0x10 [ 844.134369] inet_gso_segment+0x4e6/0x1180 [ 844.134392] skb_mac_gso_segment+0x291/0x590 [ 844.134415] ? __pfx_inet_gso_segment+0x10/0x10 [ 844.134429] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 844.134454] __skb_gso_segment+0x397/0x740 [ 844.134476] validate_xmit_skb.constprop.0+0x202/0xdc0 [ 844.134492] ? __skb_flow_dissect+0x1487/0x60b0 [ 844.134506] ? netdev_core_pick_tx+0x1b9/0x330 [ 844.134519] ? __dev_queue_xmit+0x207/0x4210 [ 844.134535] __dev_queue_xmit+0x873/0x4210 [ 844.134559] ? __pfx___dev_queue_xmit+0x10/0x10 [ 844.134577] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 844.134596] ? perf_trace_lock+0xb5/0x5d0 [ 844.134618] ? perf_trace_lock+0xb5/0x5d0 [ 844.134637] ? __pfx_perf_trace_lock+0x10/0x10 [ 844.134654] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 844.134673] ? lock_acquire+0x15e/0x2f0 [ 844.134689] ? find_held_lock+0x2b/0x80 [ 844.134701] ? __ip_finish_output.part.0+0x1bb/0x350 [ 844.134723] ip_finish_output2+0xaa0/0x1bc0 [ 844.134742] ? __pfx_ip_finish_output2+0x10/0x10 [ 844.134755] ? skb_gso_transport_seglen+0x1ca/0x360 [ 844.134779] __ip_finish_output.part.0+0x1bb/0x350 [ 844.134795] ip_output+0x380/0xb20 [ 844.134816] ip_local_out+0x396/0x4d0 [ 844.134832] iptunnel_xmit+0x600/0x9c0 [ 844.134854] ip_tunnel_xmit+0x131e/0x3470 [ 844.134871] ? __mutex_add_waiter+0x160/0x210 [ 844.134893] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 844.134904] ? find_held_lock+0x2b/0x80 [ 844.134916] ? get_page_from_freelist+0x501/0x2600 [ 844.134941] ? skb_network_protocol+0x12b/0x680 [ 844.134959] sit_tunnel_xmit+0xc4f/0x2180 [ 844.134977] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 844.134989] ? netif_skb_features+0x3c7/0x1160 [ 844.135008] ? __pfx_netif_skb_features+0x10/0x10 [ 844.135023] ? lock_is_held_type+0x9e/0x120 [ 844.135041] dev_hard_start_xmit+0x15b/0x6e0 [ 844.135059] __dev_queue_xmit+0x2107/0x4210 [ 844.135080] ? _copy_from_iter+0x24b/0x1660 [ 844.135096] ? __pfx___dev_queue_xmit+0x10/0x10 [ 844.135112] ? perf_trace_lock+0xb5/0x5d0 [ 844.135128] ? lock_release+0x20/0x290 [ 844.135148] ? perf_trace_lock+0xb5/0x5d0 [ 844.135164] ? selinux_current_getlsmprop_subj+0xa2/0x100 [ 844.135180] ? __pfx_perf_trace_lock+0x10/0x10 [ 844.135198] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 844.135215] ? lock_acquire+0x15e/0x2f0 [ 844.135230] ? find_held_lock+0x2b/0x80 [ 844.135242] ? ip_finish_output2+0x6f3/0x1bc0 [ 844.135261] neigh_connected_output+0x335/0x4d0 [ 844.135286] ip_finish_output2+0x6f3/0x1bc0 [ 844.135301] ? lock_is_held_type+0x9e/0x120 [ 844.135315] ? __pfx_ip_finish_output2+0x10/0x10 [ 844.135329] ? skb_gso_transport_seglen+0x1ca/0x360 [ 844.135352] __ip_finish_output.part.0+0x1bb/0x350 [ 844.135369] ip_output+0x380/0xb20 [ 844.135385] ip_send_skb+0x44c/0x5a0 [ 844.135401] udp_send_skb+0x85f/0x1330 [ 844.135419] udp_sendmsg+0x1685/0x22c0 [ 844.135433] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 844.135449] ? __pfx_udp_sendmsg+0x10/0x10 [ 844.135468] ? perf_trace_lock+0xb5/0x5d0 [ 844.135487] ? __pfx_perf_trace_lock+0x10/0x10 [ 844.135502] ? reacquire_held_locks+0xd1/0x200 [ 844.135518] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 844.135537] ? find_held_lock+0x2b/0x80 [ 844.135551] ? __local_bh_enable_ip+0xa1/0x110 [ 844.135566] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 844.135581] ? inet_autobind+0x13f/0x1a0 [ 844.135593] ? __local_bh_enable_ip+0xa1/0x110 [ 844.135606] ? inet_autobind+0x144/0x1a0 [ 844.135619] ? __pfx_udp_sendmsg+0x10/0x10 [ 844.135632] inet_sendmsg+0x109/0x150 [ 844.135648] ____sys_sendmsg+0x947/0xc20 [ 844.135665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.135683] ? _kstrtoull+0x13e/0x200 [ 844.135700] ? __pfx__kstrtoull+0x10/0x10 [ 844.135719] ___sys_sendmsg+0x10f/0x1b0 [ 844.135738] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.135754] ? perf_trace_lock+0xb5/0x5d0 ** 1 printk messages dropped ** [ 844.135792] ? lock_acquire+0x15e/0x2f0 [ 844.135807] ? __fget_files+0x34/0x3b0 [ 844.135822] ? find_held_lock+0x2b/0x80 [ 844.135836] ? lock_release+0xc8/0x290 [ 844.135854] ? __fget_files+0x20d/0x3b0 [ 844.135875] __sys_sendmmsg+0x1f5/0x420 [ 844.135896] ? __pfx___sys_sendmmsg+0x10/0x10 [ 844.135922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 844.135940] ? __fget_files+0x20d/0x3b0 [ 844.135958] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 844.135973] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 844.135989] ? ksys_write+0x1a3/0x240 [ 844.136005] ? __pfx_ksys_write+0x10/0x10 [ 844.136023] __x64_sys_sendmmsg+0x9d/0x110 [ 844.136040] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 844.136056] do_syscall_64+0xbf/0x390 [ 844.136073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.136086] RIP: 0033:0x7fd3cfdceb19 [ 844.136096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 844.136108] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 844.136120] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 844.136128] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 844.136136] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 844.136143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 844.136151] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 844.136169] [ 844.175159] ------------[ cut here ]------------ [ 844.175202] WARNING: kernel/printk/printk_ringbuffer.c:1278 at get_data+0x364/0x400, CPU#0: syz-executor.0/7677 [ 844.175230] Modules linked in: [ 844.175249] CPU: 0 UID: 0 PID: 7677 Comm: syz-executor.0 Not tainted 6.18.0-rc3-next-20251028 #1 PREEMPT(voluntary) [ 844.175264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 844.175270] RIP: 0010:get_data+0x364/0x400 [ 844.175286] Code: e8 83 e0 07 83 c0 03 38 d0 0f 8c be fe ff ff 84 d2 0f 84 b6 fe ff ff 48 89 ef e8 47 95 5b 00 e9 a9 fe ff ff e8 3d bb 1e 00 90 <0f> 0b 90 45 31 e4 e9 3b ff ff ff e8 2c bb 1e 00 90 0f 0b 90 45 31 [ 844.175297] RSP: 0018:ffff88806ce08720 EFLAGS: 00010046 [ 844.175307] RAX: 0000000000010400 RBX: ffff88806ce08838 RCX: ffffffff81555756 [ 844.175315] RDX: ffff8880177ad280 RSI: ffffffff81555923 RDI: 0000000000000006 [ 844.175323] RBP: ffff88806ce08800 R08: 000000000000126c R09: 000000c48a69b413 [ 844.175330] R10: 0000000000000000 R11: 00001dfd82000022 R12: ffffffff85d30650 [ 844.175338] R13: 00003fffffffffff R14: 0000000000000000 R15: 0000000000000000 [ 844.175347] FS: 00007fd3cd344700(0000) GS:ffff8880e53f4000(0000) knlGS:0000000000000000 [ 844.175359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 844.175366] CR2: 00007fd3cd343f78 CR3: 000000001bb54000 CR4: 0000000000350ef0 [ 844.175374] Call Trace: [ 844.175378] [ 844.175386] _prb_read_valid+0x2f3/0x830 [ 844.175409] ? __pfx__prb_read_valid+0x10/0x10 [ 844.175428] ? __asan_memcpy+0x3d/0x60 [ 844.175445] ? perf_trace_lock+0xb5/0x5d0 [ 844.175464] prb_read_valid+0x78/0xa0 [ 844.175481] ? __pfx_prb_read_valid+0x10/0x10 [ 844.175498] ? io_serial_in+0x10/0x80 [ 844.175514] printk_get_next_message+0x10b/0x570 [ 844.175529] ? __pfx_printk_get_next_message+0x10/0x10 [ 844.175542] ? __lock_acquire+0x694/0x1b70 [ 844.175565] ? lock_acquire+0x15e/0x2f0 [ 844.175579] ? console_flush_one_record+0x100/0xb20 [ 844.175595] ? lock_is_held_type+0x9e/0x120 [ 844.175609] console_flush_one_record+0x64f/0xb20 [ 844.175625] ? __pfx_console_flush_one_record+0x10/0x10 [ 844.175640] ? __lock_acquire+0x694/0x1b70 [ 844.175659] ? do_raw_spin_lock+0x123/0x260 [ 844.175680] __console_flush_and_unlock+0xb1/0x1d0 [ 844.175692] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 844.175705] ? do_raw_spin_unlock+0x53/0x220 [ 844.175717] ? is_printk_cpu_sync_owner+0x32/0x40 [ 844.175731] ? is_printk_legacy_deferred+0x67/0x80 [ 844.175747] wake_up_klogd_work_func+0x17c/0x1e0 [ 844.175759] ? __pfx_wake_up_klogd_work_func+0x10/0x10 [ 844.175773] ? lock_is_held_type+0x9e/0x120 [ 844.175788] irq_work_single+0x128/0x260 [ 844.175808] irq_work_run_list+0x91/0xc0 [ 844.175819] update_process_times+0x12f/0x210 [ 844.175835] tick_nohz_handler+0x414/0x6d0 [ 844.175850] ? do_raw_spin_unlock+0x53/0x220 [ 844.175860] ? __pfx_tick_nohz_handler+0x10/0x10 [ 844.175876] __hrtimer_run_queues+0x60f/0xac0 [ 844.175897] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 844.175909] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 844.175933] hrtimer_interrupt+0x369/0x830 [ 844.175954] __sysvec_apic_timer_interrupt+0xbb/0x330 [ 844.175972] sysvec_apic_timer_interrupt+0x6b/0x80 [ 844.175990] [ 844.175994] [ 844.175999] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 844.176011] RIP: 0010:dump_stack_lvl+0x115/0x120 [ 844.176022] Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 86 87 72 fc e8 91 80 9c fc 48 89 ee 31 ff e8 c7 51 bc fc e8 62 56 bc fc e8 0d b3 c4 fc fb 5b <5d> 41 5c e9 53 56 bc fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 844.176033] RSP: 0018:ffff8880141b6320 EFLAGS: 00000202 [ 844.176042] RAX: 00000000000001f8 RBX: ffffffff85f03720 RCX: ffffffff817c7026 [ 844.176050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84b7be03 [ 844.176057] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 [ 844.176064] R10: ffffffff86646857 R11: 0000000000000001 R12: ffffffff855192e0 [ 844.176072] R13: ffffffff85f03730 R14: 0000000000000000 R15: 0000000000000000 [ 844.176084] ? trace_irq_enable.constprop.0+0x26/0x100 [ 844.176100] ? dump_stack_lvl+0x113/0x120 [ 844.176114] should_fail_ex+0x4d7/0x5e0 [ 844.176127] should_failslab+0xc2/0x120 [ 844.176142] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 844.176161] ? __alloc_skb+0x2ab/0x370 [ 844.176180] ? __alloc_skb+0x2ab/0x370 [ 844.176195] __alloc_skb+0x2ab/0x370 [ 844.176211] ? __pfx___alloc_skb+0x10/0x10 [ 844.176226] ? skb_checksum+0x7df/0x930 [ 844.176248] skb_segment+0x868/0x3a20 [ 844.176278] __udp_gso_segment+0x1406/0x25a0 [ 844.176291] ? __pfx_sock_wfree+0x10/0x10 [ 844.176314] udp4_ufo_fragment+0x51c/0x730 [ 844.176330] ? __pfx_udp4_ufo_fragment+0x10/0x10 [ 844.176345] inet_gso_segment+0x4e6/0x1180 [ 844.176366] ipip_gso_segment+0xc2/0xf0 [ 844.176379] ? __pfx_ipip_gso_segment+0x10/0x10 [ 844.176394] inet_gso_segment+0x4e6/0x1180 [ 844.176414] skb_mac_gso_segment+0x291/0x590 [ 844.176432] ? __pfx_inet_gso_segment+0x10/0x10 [ 844.176447] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 844.176470] __skb_gso_segment+0x397/0x740 [ 844.176491] validate_xmit_skb.constprop.0+0x202/0xdc0 [ 844.176505] ? __skb_flow_dissect+0x1487/0x60b0 [ 844.176518] ? netdev_core_pick_tx+0x1b9/0x330 [ 844.176531] ? __dev_queue_xmit+0x207/0x4210 [ 844.176547] __dev_queue_xmit+0x873/0x4210 [ 844.176569] ? __pfx___dev_queue_xmit+0x10/0x10 [ 844.176586] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 844.176601] ? perf_trace_lock+0xb5/0x5d0 [ 844.176619] ? perf_trace_lock+0xb5/0x5d0 [ 844.176637] ? __pfx_perf_trace_lock+0x10/0x10 [ 844.176653] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 844.176670] ? lock_acquire+0x15e/0x2f0 [ 844.176686] ? find_held_lock+0x2b/0x80 [ 844.176697] ? __ip_finish_output.part.0+0x1bb/0x350 [ 844.176716] ip_finish_output2+0xaa0/0x1bc0 [ 844.176734] ? __pfx_ip_finish_output2+0x10/0x10 [ 844.176748] ? skb_gso_transport_seglen+0x1ca/0x360 [ 844.176769] __ip_finish_output.part.0+0x1bb/0x350 [ 844.176785] ip_output+0x380/0xb20 [ 844.176801] ip_local_out+0x396/0x4d0 [ 844.176817] iptunnel_xmit+0x600/0x9c0 [ 844.176836] ip_tunnel_xmit+0x131e/0x3470 [ 844.176853] ? __mutex_add_waiter+0x160/0x210 [ 844.176873] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 844.176885] ? find_held_lock+0x2b/0x80 [ 844.176896] ? get_page_from_freelist+0x501/0x2600 [ 844.176918] ? skb_network_protocol+0x12b/0x680 [ 844.176935] sit_tunnel_xmit+0xc4f/0x2180 [ 844.176951] ? __pfx_sit_tunnel_xmit+0x10/0x10 [ 844.176963] ? netif_skb_features+0x3c7/0x1160 [ 844.176981] ? __pfx_netif_skb_features+0x10/0x10 [ 844.176995] ? lock_is_held_type+0x9e/0x120 [ 844.177011] dev_hard_start_xmit+0x15b/0x6e0 [ 844.177029] __dev_queue_xmit+0x2107/0x4210 [ 844.177048] ? _copy_from_iter+0x24b/0x1660 [ 844.177062] ? __pfx___dev_queue_xmit+0x10/0x10 [ 844.177077] ? perf_trace_lock+0xb5/0x5d0 [ 844.177093] ? lock_release+0x20/0x290 [ 844.177112] ? perf_trace_lock+0xb5/0x5d0 [ 844.177128] ? selinux_current_getlsmprop_subj+0xa2/0x100 [ 844.177144] ? __pfx_perf_trace_lock+0x10/0x10 [ 844.177160] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 844.177177] ? lock_acquire+0x15e/0x2f0 [ 844.177193] ? find_held_lock+0x2b/0x80 [ 844.177204] ? ip_finish_output2+0x6f3/0x1bc0 [ 844.177222] neigh_connected_output+0x335/0x4d0 [ 844.177245] ip_finish_output2+0x6f3/0x1bc0 [ 844.177260] ? lock_is_held_type+0x9e/0x120 [ 844.177273] ? __pfx_ip_finish_output2+0x10/0x10 [ 844.177287] ? skb_gso_transport_seglen+0x1ca/0x360 [ 844.177317] __ip_finish_output.part.0+0x1bb/0x350 [ 844.177333] ip_output+0x380/0xb20 [ 844.177349] ip_send_skb+0x44c/0x5a0 [ 844.177365] udp_send_skb+0x85f/0x1330 [ 844.177381] udp_sendmsg+0x1685/0x22c0 [ 844.177395] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 844.177410] ? __pfx_udp_sendmsg+0x10/0x10 [ 844.177428] ? perf_trace_lock+0xb5/0x5d0 [ 844.177447] ? __pfx_perf_trace_lock+0x10/0x10 [ 844.177461] ? reacquire_held_locks+0xd1/0x200 [ 844.177477] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 844.177496] ? find_held_lock+0x2b/0x80 [ 844.177510] ? __local_bh_enable_ip+0xa1/0x110 [ 844.177522] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 844.177537] ? inet_autobind+0x13f/0x1a0 [ 844.177549] ? __local_bh_enable_ip+0xa1/0x110 [ 844.177561] ? inet_autobind+0x144/0x1a0 [ 844.177575] ? __pfx_udp_sendmsg+0x10/0x10 [ 844.177587] inet_sendmsg+0x109/0x150 [ 844.177603] ____sys_sendmsg+0x947/0xc20 [ 844.177618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 844.177634] ? _kstrtoull+0x13e/0x200 [ 844.177649] ? __pfx__kstrtoull+0x10/0x10 [ 844.177667] ___sys_sendmsg+0x10f/0x1b0 [ 844.177684] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.177700] ? perf_trace_lock+0xb5/0x5d0 [ 844.177719] ? __pfx_perf_trace_lock+0x10/0x10 [ 844.177737] ? lock_acquire+0x15e/0x2f0 [ 844.177752] ? __fget_files+0x34/0x3b0 [ 844.177764] ? find_held_lock+0x2b/0x80 [ 844.177777] ? lock_release+0xc8/0x290 [ 844.177795] ? __fget_files+0x20d/0x3b0 [ 844.177814] __sys_sendmmsg+0x1f5/0x420 [ 844.177837] ? __pfx___sys_sendmmsg+0x10/0x10 [ 844.177864] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 844.177879] ? __fget_files+0x20d/0x3b0 [ 844.177896] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 844.177910] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 844.177926] ? ksys_write+0x1a3/0x240 [ 844.177940] ? __pfx_ksys_write+0x10/0x10 [ 844.177957] __x64_sys_sendmmsg+0x9d/0x110 [ 844.177974] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 844.177989] do_syscall_64+0xbf/0x390 [ 844.178004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.178015] RIP: 0033:0x7fd3cfdceb19 [ 844.178023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 844.178034] RSP: 002b:00007fd3cd344188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 844.178045] RAX: ffffffffffffffda RBX: 00007fd3cfee1f60 RCX: 00007fd3cfdceb19 [ 844.178053] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 844.178061] RBP: 00007fd3cd3441d0 R08: 0000000000000000 R09: 0000000000000000 [ 844.178068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 844.178075] R13: 00007ffeb236d4bf R14: 00007fd3cd344300 R15: 0000000000022000 [ 844.178092] [ 844.178097] irq event stamp: 505 [ 844.178101] hardirqs last enabled at (504): [] dump_stack_lvl+0x113/0x120 [ 844.178114] hardirqs last disabled at (505): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 844.178134] softirqs last enabled at (376): [] inet_autobind+0x13f/0x1a0 [ 844.178148] softirqs last disabled at (394): [] __dev_queue_xmit+0x207/0x4210 [ 844.178164] ---[ end trace 0000000000000000 ]--- [ 844.281769] No source specified [ 844.283356] No source specified 12:19:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xac1414bb}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000100)="6930a1e02954b40244bb", 0x480}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private}}}], 0x20}}], 0x1, 0x0) (fail_nth: 55) VM DIAGNOSIS: 12:19:42 Registers: info registers vcpu 0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82905aa5 RDI=ffffffff8890d640 RBP=ffffffff8890d600 RSP=ffff88806ce089a0 R8 =0000000000000000 R9 =ffffed1001d31046 R10=000000000000002e R11=0000000000000001 R12=000000000000002e R13=0000000000000010 R14=ffffffff8890d600 R15=ffffffff82905a90 RIP=ffffffff82905afd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd3cd344700 00000000 00000000 GS =0000 ffff8880e53f4000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd3cd343f78 CR3=000000001bb54000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3e520 RCX=ffffffff8168ae2c RDX=ffff8880161e1b80 RSI=ffffffff8168ae06 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88804811f6f8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=1ffff1100d9e6bb1 R12=ffffed100d9c7ca5 R13=ffff88806ce3e528 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8168ae08 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e54f4000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc352584542 CR3=000000001de97000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000