b3a3b18594bcea31214fb5aeff0b0cb12015d490393830a6e69a0be2f52c153af7b9394c994762cd7ed9bb1a79507983fe5af6013ea9dd8e7a6e9cd6d261dda28cc354ef339044f7cb03db5ac79164bb9723d6c93aec0ab4606ea2e0f77a854b7007c065019ed6787ba26729328054e28177c12193d0802cfe82bd762152ade0fac82243f647d0c8d74693bbadf6ac4042279f0f5e5294c867d24acdc840c6e36807d9f14de965f7d559cab6735a7247d90f9b6c8cadfa73dff3dcf3c041d3f083bd700c78320707132d65bfe9834fdbec783aa8ea5ee2b3ae51bea8eda89c65b877a1c8ed2b36c1f39b2892be9a61acb3f4d1269bf0d95e8b80316b1a6bf84c35ff169ab07b2b3508d77b9033e60808fed634775958d49645c17148595363dcb2be0adc56b97c14a5cfb88337309a65913d3c8aaff1388f636a1028e60780704aa63dcda7dfd6947e450970980a4ed78da594c35cc477ea9fa545cf77925b61c56304177eb22643b20109eb760a5d55c4f9737424e04752fce801f0821cc1e999dc21193c576afaa6204b2c08bff79390f8018ef63393e8aee4fd9b37b2b506e73c750b22913a884c01eaef26fa3ecfa111e58bf017f07912ab12ffe5b2388b1a063a5235c9e492d42e0c99ae2bc292df45917901877bcfdc4b081ae04a01b0d77e81ba4b14a7e85b15a96dd4e40614373237070d15f5b7187fc13bea8443646d91b2899ab6e50fd7a987bcd575c2ba02a062a3062c7f3ca4d5479a8d1c153acdd73de2e309efb9eca9d6d17c3acb2be25808f1ec9aafc137a98cd99ce8ac81a7e58310973ce9de7d6b20a082935613e9def1f8d80d73af8cb9c425828a01028b3f3b29803705992a554444da74537b779a034d5faf691cedbde3ff178b45451efe360cbb87bdb62cb7f28b40fba0b0349fed5fb319e5e56933072d8dd6627466e5d7451f4b3b5eec7a3fc52cac6e4c2acdf5bff72d559ae6eef2d269ac45aed76186f72ad6906c1b79d445804a94ca02eb37ce22b5f6e31581a42dfc5c0ccd5b018987c0d25053167ff6a6018c9a43d8768dd00cefed0fcaa5d371ae9bd77e2c012384f0730ddb00d33644965cdc2c74090e3f27953ac503b49d480ea976567782bcead50d23826a1a95312dccf7f1a2f8701831d5bd8e0b9b42c48a089083939420e61d235c936c603c3b740e956086891c2f01708b755eaec64b1c7adf9c12f069b27403427c77084a080b9a830fd8cfb6848254dd4b5aabad9da84e411639827659f6dbc40edc96412b3fa1f0d6824b88d60df41721204cd0d892c17beb56726d853f99be543a72b39f27dcbde019fbb924198725daf43249b757780e33af3ee574621d7107abf0da68ecb7021a984ad5bbe772298d542d6a666252243ea623f474259da09d0360bdacede3ffadb56c807fcb54caff48040b3e58b68381805d71a07147683911a584fa7bed5b7890119d23ace0ec108623d32bf6cee7f622ae5b34091c281ee3004e4b73c13c559c08fbbe7250dd0fdd6225758b2f8dcf7024a2cb3cd9ce1893b50927a8801cd7b5da9b3e0c12da75133d9c16cfc772f3024912a6e5f670531ee65b9bc0ef34e23c75a36feef33fe751be92c72410d540d706a2999e620eb9f5218d19c8636a336e427452e4a69d0ba8597fee03ec33a8cc055c1002f7c2848c50ed537bf8e555ba586b3592b3394b1e0e98462938df392f4525396b1f2040304887143baaf375dda27c3523cb2a5eb58fffe1f4220c2118de5791439528463546b8ab52030268ce8383b78e1b7319d01a8e3b83506856939ca1afbb06b3b76987c937dac702ae4f860d68ddc6e25f281477eea6b18c22da1708b7fa3d5d079a5a6963668b98fad16a7c8dea0fff4d90972e4a97808e97572590cc90c2b3e38fd41826f215736645fe04bfab29e988ce7726b7c37ffe48d8e95f8ba109edeb4859723273abe3e70c00884a4c10bb8407bc3e5a353735ac74e960887d0285aa01f6ffc0941c127849572ed46f4bf01a5547f6072268e70dc79f3891764139f96be494e3eca95cca31d8246d908e6d2133429bf9de5b84f856241aef38d53fb0435806a3e0bc48b808d5d9a78e386a7afbedd62f528cb12cf8440c7300f7da06f4f6bb2f93e5088e6c91a455855ab65883162f4b7cddee68db3c18c3513c7fad8c93a9b618414072524cc0bb26d0d1b7f9b33f20bfd90aa1ed350a6f764ece8e4ff28d54a5b8cc247dbfc2f02a23caa124f4b0dbb59aca3f2ed5dea21b9aad02ae5e441c3e872e43f3e7955c215bc1fbf79b0270ed859703b3b79e76071352fb2e436192951ee88e5a660cfc7c8d2a640f2b8568f16b92169557348166642fae8455f7a22b718cc1b560a7d2d94a12531c276c7ae021eb82acec126bbe2d6493cf6e6f9e973f30ace862cd34a440c65d27080b64ab5fac5f03448f1a5410e18c078eee6cd9033dc17df983f9d278cc916ed62f3ab4b5fd1fceab7f68199cf25fac7907ae92ccb02f7f7ca6f1199e03825064d4cf1bc78dc483c8b1b75d57ef42a960799b445233a8c13661ab769a778dac14d9d2fef78a6fc777763bda4721120070c76adba35ed854696a2e3aa0ad741e3fd47186a1d9d4f2c55116955269fff7eda012dec7f398b2a29d5ccd8ea47d1d3c89c76c96edb1d0a5875052e5133b73c0c2ed47e033e689b1106c3cf9627b1fa63218542141c2a5632e0739c994b4be788efbf49a56737111d52e8155b1c035a2a08f22ba08e3f7462d38959d3da227245e6e8063882180b1abcd8597a6230af616230e8588198637fe6e4e823c1eb6994a7f009f46a86f8b8ecb3b1f94f93835e923940ebfa2bade82010c5812ce885e96c346d72e3676ed7fdeb409b7579792702a0779da87bea80e1d4253977f66f558c1686881bf9cb8264235ca791295456a57e6d95a89ccec25aa80b64acae5b2b8ba8f37af8345912f047444c22d0fd6a029e79cd0572c50dc7b2604a7a27ad96f68569f303676a72ae6615baafd1617391ce0cd30cec4db75ee993d3c3110c6e2a208ad193ffea150be31349d0ceeb2f172c64292111b942096bb0b77b27d9d0ae7c12045cf827853482af47ac9b97f443486bec975594fc3e0c93e68601e89cedf1640fe0ccb8ca25e945789353d29a54bf427673be91f27a2d0e892d4767c98ab41f713d28f93346afb68e63b3a4c023bdaa2b5ebff940ce53f5ace195f3fe804a510d0651352b15b5b2eab2ee5f4c986e53269cb2289592e0c18ad86b6073107694826b2ea7bdca26e08b0be77625a041104c784f42bd28a53274670a173a2335b249ad88350e5f8234d47a99104ed7d608c576e2eb50938a166a47e96078532f6a7bc4fc3c341f619298708175f987b3fe463c40f385e883e509e546d9fb27d7f1465f2053686fc8910cae855ea99e199831cd0b764dd3b0562469d8da62dcd26152ae67a75b26b37688f95e2421e91999b054894e38ee89a94f462a75982230c8a478c27e6ac817f7dab859ca8412b75f3f2dea242ecf533a7830cf60016ed2c280df0fcf98b649c4353b27ab884fccc93c9c935adaa6e34802da4a3c93806d6311636fdd4c29e4ae12b03cbffcf0acebdf4c7bb408b46f888c0c253446359fa6d63ea8cce56eec5b24ba87ccc3a4f9ce151acfae8ea1b249a176757c1e16aa367ad271082e70da9e8108eb69aa736420ad745b70551e240361bc00837d834549ec2ce5b9e93cd4258ce4c1116219cbcd12f7ae7c1e09449a098fdfd6010f0e3c1a4008c358a9442a7732399c7e7a946d9ae32ee2ad107a2c3dba09b1ea5291949165271d679417fc78f56743dd00559f66c474756f0d87fef0afa6f51ba6520c9d18bffbfc9f04445820a79d07672e03d491c579dd545bebbaecc5c8f4a59d88f23f18003011e29c0b461bff782dd2fbe4919952d90366013f5c14f8590562d12535c3198f5d552af49d713f80dcec5afb66f76b1c58bcca341498d8aded55bbcbac0545d9f1fae71ce0dfbf880577161a94d09a47127c76896b22515777c46b0b3e1303f43e5841ad551a36a0dcc0d5943accb1d68266868016fce9e9f5c57226ffa986860ad10fb6501c4d1cebd76be69e557b4ccafe5efef7443422d8ad4d38409f6b4645e9cfa6f105057743205bb46982c5ebfddbb992824a74c0b32cde1a22183c4130454ea7d7cb5889c15a560a735178b1f2ab81446255e0970d6bd0636301a994d0a0206e71259f7ccfa59849de0b44e480850d299efaa2c5df587563f4e42ee8a5e567993f4a6f660e3ece55feb665d4e0680706e4217ddb4a8e25aa4b39f4798c7aeefb9e8135e1729f1226af83fc081806a5701f130a61b0a491d2bde56233334f97838edf1deb644c95e9b6d134142c2c7318eb41e02e5bc7f8f52a64685190d7b2b1b016aba1234100089f"}) mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x3, 0x20) 04:51:53 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r1 = dup(0xffffffffffffffff) copy_file_range(r1, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) 04:51:53 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) setuid(r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 04:51:53 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x8990, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:02 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e3f65f2324e78a9"], 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:52:02 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r1) copy_file_range(0xffffffffffffffff, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) 04:52:02 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = accept$unix(r1, &(0x7f0000002840), &(0x7f00000028c0)=0x6e) r3 = pidfd_getfd(r1, r1, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r4) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='#! @\x00file0\n'], 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f0000002c00), 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002c80)=""/47, 0x2f}, {&(0x7f0000002cc0)}, {&(0x7f0000002d00)=""/2, 0x2}, {&(0x7f0000002d40)=""/132, 0x84}], 0x4, &(0x7f0000002e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000002f00), 0x6e, &(0x7f0000004100)=[{&(0x7f0000002f80)=""/187, 0xbb}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/133, 0x85}], 0x3}}, {{&(0x7f0000004140), 0x6e, &(0x7f0000004440)=[{&(0x7f00000041c0)=""/152, 0x98}, {&(0x7f0000004280)=""/48, 0x30}, {&(0x7f00000042c0)=""/251, 0xfb}, {&(0x7f00000043c0)=""/98, 0x62}], 0x4, &(0x7f0000004480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f00000045c0)=""/7, 0x7}, {&(0x7f0000004600)=""/216, 0xd8}, {&(0x7f0000004700)=""/105, 0x69}, {&(0x7f0000004780)=""/4, 0x4}, {&(0x7f00000047c0)=""/59, 0x3b}], 0x5}}], 0x4, 0x40012064, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000004980)={0x0, 0x0}) r11 = getpid() tkill(r11, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000049c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000004ac0)=0xe8) sendmsg$netlink(r0, &(0x7f0000004c00)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc, &(0x7f00000027c0)=[{&(0x7f0000000080)={0x213c, 0x38, 0x20, 0x70bd2d, 0x25dfdbfd, "", [@generic="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", @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@remote}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x9f, 0x47, 0x0, 0x1, [@generic="cb1f0c9957b860da1c1d08730c8895277a7cf512a80f7ff9aaf52d6cc774e3a2a0fb8a4d22b19de72fb1aecf0e08743c022b94b60da7babecd0592162286781db89a6a0cda9487ab605223774d240990f9af5ae181c72c06d35f92e25ee8477b748b7e4e34be1381f3eda108234fe9d5f32f5f5bab892cfb07fec572ee08211c2ecd01aca76fcbbd7bec1bd72c1e4222a0ece1b02b5b79", @typed={0x4, 0x37}]}, @generic="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", @nested={0x54, 0x79, 0x0, 0x1, [@typed={0x4d, 0x4e, 0x0, 0x0, @binary="855544ff4f8738e94a6dbe2b1e6842b10fe79e5c7bca9984bb47e225d0da3defde7dd9d4adc0718a7aa2b9add5e05a5cf68d0de3ee196e1335946e903f0d6dc6692fbe551f941a9991"}]}, @typed={0x8, 0x27, 0x0, 0x0, @u32=0x2b}, @generic="f39acf5b8551c07a2b829c1d94bbf7b0f3"]}, 0x213c}, {&(0x7f00000021c0)={0x3c4, 0x26, 0x4, 0x70bd26, 0x25dfdbfe, "", [@generic="ec97cfe4d1eed003b81f97a48c1b9485d7c1b7ae2bd8398a9962eb003019848b8c90556ca327c2b68d3da4ae51782366be8b4cffeb721a5e28c64cc5ef1424c0c0dcfac162393bf342d6f2d27af8116584c75232dae5ea9cccb4b2025fdc1b9863f69653962cc4fbb32bf6807e195798ad4c5e987195f4b0caf723aee588fe05edd4b1af1a7607501431b7572671568f088436d2b147920eaead66c2a76d48989f5a3a38ac2f2567d4447dd7aa1304fff522228102b3fd56164f3b15dfe2b00b993523af833b6d477b5ed38c647d6066defb8f28c898f005bdbf63fe1e", @nested={0x1f1, 0x36, 0x0, 0x1, [@generic="8e2c2606464ccd0c65e2f561884d2f676c0a", @typed={0x8, 0x35, 0x0, 0x0, @pid}, @generic="7226bfabe86505ef358b6a5a4d5d1827e8f40f0bab32533554f54866df77a5df9ee40fcd9d63cd39cd51839c65bf114bddeba1b7e5446e73cbadcada2b5d8b40a6d37125a038c9a917f7c8c338d3fa740023ecc1c6c53cbabc932e0a8885f6f08ab40fa08101eac17d2e041464bbd3fa32e883ec7c2f9ce68461ac7f95810b47ec1d7d3d8b6dc844", @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@remote}, @generic="6e53329789d5761ddbd55ceb129f72eea1a8a48b49234a85ed67810c315fd59059df323744827f", @typed={0xc, 0x55, 0x0, 0x0, @u64=0x6}, @typed={0x103, 0x45, 0x0, 0x0, @binary="42f4dc8312d72539ca4c091c3909f460bae042f95185a196baf5d09cc88f627bbc07aae0287554adff493fa2a4fbe0a10d2bcf8ecd6875055d153fa19c5ef41db99e79a96f3b8d4850e8f04ca63b27f634cb49ede8ab4ed56d899c0e6368f77a34b6902cd8cfff805d8fdbd6fc7fb718f45b2477c142295957604ea3125d481094b1222cfb264c5f2728baedadb39515164b5d2ddcd2570f3f8e70cea6287b224720fa1e5a9e4aa4f6e9ac7476d13f555e05084e56b931cd43bb1669980492258bd3a53b03870aecc290a95c0389ec958d20280c49a0d00f160920f007f94151d8a7bbbb1ae1184b04540eba1958e41f0bf531990874ff6e074185942c8050"}]}, @typed={0xc, 0x18, 0x0, 0x0, @u64=0xfffffffffffff300}, @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@empty}, @generic="e5f60bb07e789bfcb1e0b62d1c96bccf0cd3d5a4200461bf9c9c539826be6d33c4c1145e3ddb305e809af7a4f8c8ab7e5bde151752ed87f40399ae3e4f71f97e3cd993d6514a0a6592b4917c708bfe680b43669dc232b940a06781e422a9a82f498decb9fe60bb61387da53238a758a0957c1e03548c2a3af5b4306dfb7a3625480ce0f36a0ce78c6e250b9cd540e3b917c196774ea22eca9504d97a74f7f1fb775bb3df2dd1d78c998cf692fdca4c46a77f24d7668c0f", @typed={0xc, 0x1f, 0x0, 0x0, @str='nl80211\x00'}]}, 0x3c4}, {&(0x7f00000025c0)={0x100, 0x27, 0x100, 0x70bd29, 0x25dfdbfc, "", [@nested={0x3a, 0x3, 0x0, 0x1, [@typed={0x14, 0x34, 0x0, 0x0, @ipv6=@local}, @generic="5299f035c65cd4ca520dcc614fad2e5b0d17bb876490b0b0df7e307124dd766c47fd"]}, @typed={0xb3, 0x6f, 0x0, 0x0, @binary="e062a2ed5187db72535d1e097b1e0275b764fa4e20474d42d54692ffc30700000000000000b4c6c66d3c95baf1c539feb24be60a98a2d3c76b70f64f4c98af0545882f8917f37e74ffb126156dc6efa88986c8c43f7b825e063ea119194a4fa3aee51b435c62861c43ff52e36bd4c14049f39893f606ba2325ba7b9abc9d50485bc5ffc53c7647fa95b452ebd92ebbe26c3ebcb8f2b84a2a736e626cd18bfba1252fe445b10a04d9e1494162de4d80"}]}, 0x100}, {&(0x7f00000026c0)={0xe4, 0x2a, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@generic="6785164636e7dde3a92f20395cb9e13dbf9d26a2fac9877c31c57960622575a0bd74cfbbd5b0ca7a99dde57389820fba81b51adf9858bd90fb82a602594fa8f00edd7035ef81e6d241bb1880bdf0172a8c2a31cf1f378b3f4e9fa8edaa7fbdf4d500b077a6246ab151ae9446d188ef060efa617064bf081d0dbacb73c75ae66d654752fe0ff6551fdd18444a879e9d1ab1c77086f7b47cf08a12c88b7d42bb6d8e66c718d0d57bc36f6a3dcd84af915ac5af465a8aa79e9e4464cd99d6487efd26f8d71ae9e4eef09911eac0f08c66c15db53697"]}, 0xe4}], 0x4, &(0x7f0000004b00)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r2, r0, r3]}}, @rights={{0x20, 0x1, 0x1, [r0, r4, r1, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, 0xee01}}}], 0xd0}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 04:52:02 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000000)={[0x7f]}, 0x8, 0x800) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x5, 0x4) 04:52:02 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:52:02 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:02 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x8992, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:02 executing program 6: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x50) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="a065e218ed9dc6f2b69294bbf3b7f69ddc098d18f25f459bd7270582071d78acef0af611d49353493fdba72f9e8b5f5ac9304037d57a97ec05d354b2b08bd1af1d000f532c119d190850ae"], 0xb) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x282380, 0x0) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x30) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r6) write$binfmt_elf64(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/2073], 0x819) r7 = dup(r5) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r8) ioctl$F2FS_IOC_GET_FEATURES(r8, 0x8004f50c, &(0x7f0000000100)) copy_file_range(r7, &(0x7f0000000040), r4, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x7, 0x4}}, './file0\x00'}) accept4$unix(r2, 0x0, &(0x7f00000002c0), 0x100000) r9 = dup(r1) readv(r9, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:52:02 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r1) copy_file_range(0xffffffffffffffff, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) 04:52:02 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:52:02 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:02 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r1) copy_file_range(0xffffffffffffffff, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) 04:52:02 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x8993, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:02 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r2) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$netlink(0xffffffffffffffff, 0xfffffffffffffffd, 0x44) 04:52:02 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:02 executing program 5: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) ustat(0xa, &(0x7f0000000000)) mq_open(&(0x7f00000001c0)='\x04\x00:\xb8\xc7\xa7\b4\xaa\xb2\xae;8\xe4\x97\xeeQ.\xe8*B\x92\xba[\x1a\x81wn@\xdc\xaey\xfb#\x83\x84_\\\xdbu\xf2[}\xe9\xbb\xf9\xf0\t0u\x1b\x16r\xe7\xa4]\xd5\xcd\t\xb7f\xc2[a-R\x9b7\x8b\xf3\xf8qs\xb2\b\x00\x00\x00\x00\x00\x00\x00c\xacg\x0fkV+1\xc4\xa5>\r\xf6\"\x90\x84\x17\xef\xfa\xd9\xdc\xc2\xc8\r\x8d\x97\xb7\xe3\xf8\xf4\xc3\xa5H\xbb>O\x10\x979\xbb\xc6Dx\xe0\x16\xe5\xc4\xb8\xff\xff\x15\xfffbN\xe2\"*\x1dZP{\xd7l\xe0q\xd2!]\xd4^\xec,\x1e<\xa1I\xa5\x1e\xb5Q\t\'\x88\x94wE&\xeb\xd8\xd7t,\x03\xd4\x8a\xed6hlEJ\x99\x9c..\xdf\xcfx\x18\xbd\x8bC\xf9\x86\xcc\xea\vt\x0e\rCN:\x1f\xce\xc5D\t\x00\xc2E\x1c\xab_B\x16\x9b\xd2#\x01O\x12[\xd9\ah,\xb4v\x9d\xe8\x9b\x1c\xa7\xdd\xaf*>G\xd1\xed`|+?\xd7\x80\xcf\xefa>\xbfJt\x10y\xdfp\xd85\x8bS\xd1\x9e\xd8d \x16\xccI\x80P\xc9\xe3]q-\xd2$O\xec\xee\xde\xb31&\xe5Q0(q \xb1\xb4\xe1!\"t\x13\xb6\xd8\xd6\xc8\xf0SF\xa5WS\x8b\x8e\xbe\xbb\x84\xa3\x16\x97;\x7f\x82X\xd1{\x95\xde\x8bl/zr\xdc\xdb\xe4\'\x1c\xe1\x1e\xa8\xebT]}@M\x1d\x9dm\xf2\xafB\x0f1T\xd8\xdas\xbdc\xa24\x1fV\xff8\x8f\xabp\vPv\x92\x93\x8eV\xef\xc90tgq\xdc\x80\xe5#\v\x003\xc1\x06\b\xf1~\xcb\xae\xe4\xe86\x8f\xce\xba^\x9ep\nI', 0x2, 0x146, 0x0) ustat(0x200, &(0x7f0000000040)) 04:52:02 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:52:12 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x8994, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:12 executing program 5: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mq_open(&(0x7f0000000040)='\xe0\xc4qe6\x97\xe5.:@\bZ\xaa4%\xd5\xa76\xd2\xd7\x9c\x93\x18\xc3\xcd\xfb\xdb\xef\xe5\x9aw\x18\xa5\x905\xc3\x13?\'\xa3 phspH\x98\xf3$dL\x86Z\xe3U\xec$cB\xf9\xa3\x1b\xc5Y\b\xb1+\x8e\xbc\x8b\x9c(\x87\xac\xcf\x05\b\xbb\xda\xd2\xb1\xd95\xfbqI\x85=\x84\x9c+\xf7\xc4<\xe0\xf5&>\xbd\xd8\vj\xf5\xc1k[\x16\xb7*\x00\n\xe0:s\r@\xb0\x93u@@\x0e\x12\x16\x9c`E[\xdcw\x18\x11\xd5O\xbe\x03\xa5T\xd6\xc3\x90\xc6%\xb4\x05\xa4\x16,\xd0&\x86\xc6b\xa1W1\xf4\xb1\x96:M\xb3C\x99^Ia\xd5\x1f8\xe2b\x10\x06\xcc\x80\x95\xf9\xe3\xdeS\xbf\xb3\xd5\xf7\x83\xf0\xc9[ \xfd\x13\x98\xa9\a|\x8a\xee\xd0Zt\xec\x90\xcc\xf2\x96)w\x00\xf0+\xc6\x02,y\xddbZ\xfc<\x00!\xb9A\x11\xec\x9de\xc3G\xf4\xb0\x06\xdb\x1a\n,\xaaZ\x1cGs\x17\xeeQ\xed\x00\x97\x03\xeb0t\x97\xbc\x18\x96\xdf\xb5\xc7\x9e\x1c\a\x88\xc5\xe2\xf2VtY$\x9c% \x89z \xd7\xbda\xfd\x11h\xe3)Qe\x90Iu\x01/\xc5\x9a\xb70W\x1e\b\xb8\xce\xfa\xd9\xd2{\xe1|\x00aZ:\x89\x05\xb4\xdcdT\xd5\xc4\xb7\xcf\x11F\xa4\xee\x1dP\x02i\xd4\xc9mr\xfaj\x1d\xe1\x9bsM\xe1\x96\xe4{ij\x92\xb3\x83\xe5\xb9XZ\x8c\xbb\xdes\xa7\xbd\x1e\x01\xf0\xc2\xe1X/\x85\xb4\xd6\xc4\x05f9\xea\xd0\xd3\xe5\x06\xe8\xdf\xb9\xbb\x81\xf6\xfc\xcc\x8bf2\x8e3k\xb04\x8c\x8a\x1f\x9c\xdc\x8b\xc5]\x7f\x0etq\x9a}1\xbe\xda\xc1\xfa\x84\x96\xd5)\x96\xd5\xb7\x81\xdf\x99\xc9\x89\x05?\xdc\xac}B\x142IR\xd7\x9e\n\xc3T\xce\x1avj\xa5iO\x90\xe2\x12\x8a\xe6\xb70\xb4n\xa8\x16\x80a\x1a\v\xd9\x87\xe3\'\xaeN\xc5\xe6\xbd\x02U\xcd\x8d\xf1 4m\xfe\xe9\x99\b\xd6?\xaf\x05\xde\xe9\xb6\\\xf9\xcam\x88\xfd$s\xbc\xea\xe2uT\xb9\x9aw\x7fbpM^\xc1\xdf\x95d\x1b}\x96p)\xb0\xa0\"\xff\xc4\xce1x\xcf\xd1\x9br8}, './file0\x00'}) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000080)=0x401, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) 04:52:12 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r3) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:12 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0', [{}, {0x20, '#! '}, {0x20, '-'}, {}, {}, {}, {0x20, ':'}], 0xa, "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"}, 0x1017) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r3) r4 = accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000240)={0x6, 0x0, &(0x7f0000000200)=[r3, r4, r0, r7]}, 0x4) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:52:13 executing program 5: mbind(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x2, &(0x7f0000000000)=0xa5f, 0x0, 0x2) munmap(&(0x7f0000ff0000/0x4000)=nil, 0x4000) mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) 04:52:13 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x8995, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:13 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0x401, 0x0) 04:52:13 executing program 1: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:13 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:52:22 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getuid() r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001800)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001240)=[{&(0x7f0000000100)=""/177, 0xb1}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/74, 0x4a}], 0x3, &(0x7f0000001280)}}, {{&(0x7f00000012c0), 0x6e, &(0x7f0000001500)=[{&(0x7f0000001340)=""/186, 0xba}, {&(0x7f0000001400)=""/37, 0x25}, {&(0x7f0000001440)=""/141, 0x8d}], 0x3, &(0x7f0000001540)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000015c0), 0x6e, &(0x7f0000001740)=[{&(0x7f0000001640)=""/32, 0x20}, {&(0x7f0000001680)=""/43, 0x2b}, {&(0x7f00000016c0)=""/74, 0x4a}], 0x3, &(0x7f0000001780)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x3, 0x10002, &(0x7f00000018c0)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000001e40)={&(0x7f0000001900)={0x508, 0x12, 0xc, 0x401, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x8}, [@generic="98ec01e929eb3e17ee6b952eb1757d7fa9b690b9c654f2483466b71ac6478b1904cc8edec1f009853b6aa9fb387e22dd031c2d7abd64081ee11196bdcd3167c0afca2b7ed4f9137814d59bf677d74c36b93c0045f77f8b79b2c1201cc8acb8908aa2427db443b21017b2bdb28090426f7772995aa7fc269efd447b68d50490d06097d5f6bfd1578da9aa37261fcb0895fd3d8c1618fcea805c58ceb200983ded1d7a5625890a518db1aac4614dab206935643f35dd2cd5", @generic="bb0240db1fd642f1119673131f0fa6b3953b269b05439ff3bfbb73775a427a3f40f151a6f8d29cf538c307a82430ca79a54cf4bfd2569e1c3e0ae66dd0d833f6997ade841b09a4ae9f6de673b16f1633e636e4d93ce01041046ba7fee9325d2cc9c51138ac022ccbe03bf0c353bf1c16", @nested={0x9b, 0x1f, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @uid=r1}, @typed={0x4, 0x1b}, @generic="65a4553462dd9f092464d1618694652cc7e963ee3a26fb029754779d92058a0576d3f0a5ad028a8051e4dca8f456a0b7d0f31e79fbc069b6a2a068e199a23e0de1dc0a10f60ef9a2ef7a4ebcebefc1f51169837db3c18e2796fa414cd140abf313dabaf47a405585026a50b49386d8b1acde96fd13c04d0540f95cbf0c97d53e9b63", @generic="43ec7d2d76def053c0"]}, @generic="fb1b9e7aa158060ec220c21b1a60a2e87f0cbdb574cb26aa6ae6b715bd287eda443e70256f17d9d87bda0eb78fd0020b9b905c1d", @generic="9b27dcb2833f5acaa6727cc1ca849317663cda7a20a6688af13af0c831ae78dee8edb96d114a4b0b48dcef2c0b5ce65cdd605d0fffa9eea1f9f53df589d510ea99f1881a8cedfad207a9df5d48bfb41d98b579dc9a927e032a36c64000cf2633388d9b8ac5701fce2924cfe08d9d7f5f990dfd7582c966b0ebaa63811880ce1e3ddaac1b52e27d", @typed={0x8, 0x2e, 0x0, 0x0, @fd=r2}, @nested={0x268, 0x29, 0x0, 0x1, [@typed={0x4, 0x33}, @typed={0x8, 0x9, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x6c, 0x0, 0x0, @pid}, @typed={0x8, 0x55, 0x0, 0x0, @u32=0x80a10b9}, @typed={0xc, 0x43, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0xa, 0x0, 0x0, @pid}, @generic="86ee3b5111d5f9c216167b73e7409bf4097feefed197b70ae06caec66165f1310cabef6d46553fa755f2f4624bb108118d30bd63c7ede90c25abac369c403cd37e7a999bd4d0d98f170b68054847d895a93017352b0c00541a39d020c79da10b547f9e0d2afd7237e67281ae295e6d717fcfa3b2af9d28c031f73fcb57580546351804d6d0c9b39af0935605c51ab76b54a5f71b95567cd788d9d7f6195ff2741fee8f8a39cc19871a2d640d8106e7175c1c1d4403ae2601905139fe41f883bf2ad2ebbb78d9f079743d30a480fa4a8d5a9b6d76221e988eb9ba0b8e6c26c44a8701ae7ba060d0c2c0214357045b246fb8e952e38b2aedcdfc11182a", @generic="3e77e2706bac9b0a216743cf30f4cc83f95e3eced0ca01521195dbde80a1db0ffe2433e7b63b9cf411554430a2de7c3931e0b765ced95327965d1910ab4019641becf6e122920b09281311d1f58fa77702ca3e2b39583263b55ca8675611c05247651b4031370e220ed1f204730e416ccb4f8c764444a6d45c24df1546484ea068b9776230dd783679d21a818228f043d63d2e1ae481d2fb50bab92e97606c83f19f2c", @generic="090671d5bdbd4cd46fceaefbe5a98c9d82a13e69ec938423a55935a9a1c29f4213a8b9170efff4f56002bc19307eafbc368bad5c79d075ef1dfd5da3eeb1b16a821a534699df69baf9c5b49dcadf631c500b6f43e6b264e82e8787c7025c2563a5e7a9d8a70570bbd17461866ceedf9c7a52d7e5c53dc5ae3eeb1d7506dc14bff2117448a74c038f5b71ab725a5cc26654dbc0ab48"]}, @typed={0x4, 0x47}]}, 0x508}}, 0x400c080) r4 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) 04:52:22 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:52:22 executing program 1: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:22 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:52:22 executing program 5: r0 = mq_open(&(0x7f0000000140)='.\x00', 0x80, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/6, 0x6, 0x3f, 0x0) 04:52:22 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89b0, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:22 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0x401, 0x0) 04:52:22 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) setfsuid(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:52:22 executing program 1: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:22 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:52:22 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) 04:52:22 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0x401, 0x0) 04:52:22 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89b1, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:22 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) inotify_add_watch(r0, &(0x7f0000000280)='./file1\x00', 0x20000000) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1, 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)="addeb09ca906f021eef3d362b558f3c0e13c71609210edc8354cd1a4597fa2ab29476693092769a03b8027fe7893ec41b7be6a22d14006c8b26512b3d5128821468b803c46f76e236821ad4bbd342db4c9e0f93f6b15e14c95288bde77f25e507f842c73183a9ac5c57ce6091e2ad438f5e3eede3f3b5e1ab669bcafcc4af3f979415be8733743d089ee4a9c2df1", 0x8e, 0x80000001}], 0x0, &(0x7f0000000480)={[{@fat=@check_normal}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@errors_remount}, {@nodots}, {@fat=@debug}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x36, 0x65, 0x36, 0x37, 0x65, 0x61, 0x61], 0x2d, [0x33, 0x36, 0x39, 0x38], 0x2d, [0x39, 0x5d, 0x63], 0x2d, [0x38, 0x66, 0x31, 0x35], 0x2d, [0x0, 0x37, 0x31, 0x30, 0x66, 0x64, 0x65, 0x63]}}}]}) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x14020040) 04:52:22 executing program 5: mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/103, 0x67, 0x1, 0x0) 04:52:22 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) [ 835.969340] loop6: detected capacity change from 0 to 264192 [ 835.979537] msdos: Unknown parameter 'fsuuid' 04:52:23 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:23 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f0, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 836.057588] loop6: detected capacity change from 0 to 264192 [ 836.081488] msdos: Unknown parameter 'fsuuid' 04:52:32 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:52:32 executing program 6: r0 = creat(&(0x7f0000000040)='./file1\x00', 0xb4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='/file0\n'], 0xb) r2 = dup(r1) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)={0x7, 0x1, 0x5, 0x2, 0x5, [{0x1f, 0x7, 0x3f, '\x00', 0x200}, {0x100000001, 0x5, 0x5, '\x00', 0xd00}, {0xebbf, 0x5b9, 0xa21, '\x00', 0x8d}, {0x6, 0x3, 0xffff, '\x00', 0x2805}, {0x7, 0x8000, 0xfffffffffffffffc, '\x00', 0x800}]}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x3) 04:52:32 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:52:32 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) 04:52:32 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f3, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:32 executing program 5: mq_open(&(0x7f0000000280)='\x00\x00', 0x40, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mq_open(&(0x7f0000000200)='+%\x00', 0x2, 0x40, &(0x7f0000000240)={0x8000, 0x0, 0x80, 0x9dda}) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000ab638f8f86f9d190b246b99a90ea1dc41378b5ae2972207b06728253bc108974b947811276eea39f389ad7c948a285e1df5ed80b622643dd50ca5f0d806ba01054b3f56590209ce800cbf3ccc38359abeb785fe04f141d09c28f56b13070759874fb78e75c0df32bcf58300a77"], 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000100)={r1, 0x8, 0x0, 0xfffffffffffffffc}) clock_gettime(0x7, &(0x7f0000000080)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000000)=""/116, 0x74, 0x3957, &(0x7f00000000c0)={r6, r7+10000000}) 04:52:32 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:32 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x41002, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@cachetag={'cachetag', 0x3d, 'nl80211\x00'}}, {@rq={'rq', 0x3d, 0x1}}, {@common=@access_any}], [{@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\\{\x1b[&#}{*,.+@'}}, {@seclabel}, {@uid_lt={'uid<', r1}}]}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x22}) r2 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 04:52:32 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x0, 0x0) 04:52:32 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f4, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:32 executing program 5: llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/152, 0x98) mq_open(&(0x7f0000000000)='\x11P\x04\xd0i\xad\x86\xa4\x7f\x9cp\x18x\x8f', 0x47, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) futimesat(r0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={{}, {0x77359400}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4000) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x400, 0x70bd2c, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x48810) 04:52:32 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:52:32 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:32 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f5, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:32 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x0, 0x0) 04:52:42 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0xb0, 0x401}) r5 = dup(r1) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x8800, &(0x7f00000000c0)={0x0, 0x78, 0x80000, {r0}}, 0x20) readv(r5, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:52:42 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:42 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = fork() r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x396, 0xa, &(0x7f0000000740)=[{&(0x7f00000000c0)="46ee0de2805924763acec922dafef236abdc90b81733927c88cb5c15b0124abe74bd8067607a96b36db360946d60a944b71da0b7319122230f5c7dcd4d", 0x3d, 0x5}, {&(0x7f0000000100)="5e5691fb70dcb96217020194b3879596379261fadbd4403a990e078d1b54675396af721f178be7d2983285dbf240242d51e812d5f7dc928b03463b72aea62e26992198f3226072aef6aa0ff42ae00a584d1e8768fb96c4ce016bdfa9cd65f8d8ffb23440035b8b0f78574a936220e9ad8282a104ae0304ad675a6e373b15c6d281e46527", 0x84, 0x80000001}, {&(0x7f00000001c0)="8ffcfa6ad650ddd98348fdcbed0187986e3d95f70d6c6b2d53aed3a09d6cb9063bfcd4c98dfc14782fd4105b5055d6d0bdd3c854dbd6fe4ffe160f6c3e375997378c4ddb5124d45890a8fb0602c07dff4779129d9ccad878b0d131168627a325468b43565b1045013ee7f746206c132d826adbd16fe70e3eb217bb470afb40db35e4f22d1cd759f830f0240e47570cb4854e5015a4b5b369d71d67f0e4ad049581b6bd8440b7892c6a2f1f5423d479742e28b53842804e363836cabdf40ee55e86a21bf9b1b54256b0546acaa96c20fd29eed5c544d889300e483679d91a93c29d24", 0xe2, 0x7f}, {&(0x7f00000002c0)="ddf30358105321bb8996861cb249acb95c6a50fe548d1e8348abbc2b4e1c2074de97dc68346634cb6b7a7364a56266f97f508ef88fdc7490f5a85f9a018f20543069804e596e328b8f441277e81475091f30d8489805687d8f362a22ab1b3861fe0375309c536e053e451e855bcd62bf54573eada38c325e94aafa36d718347f53742d2635194e4a2e076dc1699b1568", 0x90, 0x4}, {&(0x7f0000000380)="4ca8cf08b1cbe38464197d48422fe818644c52931128c253cb22007e03e9453d6584a7203d7fc5ecce7a3ba221c115e817371bf4253d8cfe9c7ffd678c9714e65a475b668fabb40584fc1cbc2be67e0a00718aac261e0f126c6dcc3d1fa893c02668263fb35d7149e145816635e82af1ba39dbf715bca8af05c262cef699358172a39b6b7ef844d4af0098ddfea483b3b7a5e09fdf8cc0ca161eee8b06493fbf81e9f3e36ffa693167645ffa5c5e88b5", 0xb0, 0x5}, {&(0x7f0000000440)="9e98ab7bfce26f431cb50e3048c07aecc1dd648d67135d5ed8ea62f55d1def5c683985cb7c58c0994dd9dc8e22f709a4ca2ead55dfd61be1222a6b0016288985ecd41dc02e346131ee17d72b1be5f13eac71b88035393bbe7d05277ecd58b0e2f2f1a251d6df79bc36f3b57027eca1d1be59cee37e7d4a6257da014f7f99ed50f60255a1dfc7684d593f7247", 0x8c, 0x3}, {&(0x7f0000000500)="eb10940e01f0b7c92e69a442c26f4c8ef75d9761ca71381d49e4a5560f3421b4c4d9f2a5f6e3d5cb1ddaa88b7bd939c5f385fbb69fe776fbf065237febc7032897dc4225c1ebbab524e9a1b62e0f91a30f7d3b85469ead685a23f690e02b95c08b0f8930371584c5c17c137d42a0aa417ef2bdf982121e4c405caa3f631d7b8bafd40d3690fea54b944cfb0a27a61d47b48cbca07ce221961f20ac390fd147d06233b1bef464b8534ff2c85a6f9d4a7e3c4e6fb3907117d2cb9b17b7a9", 0xbd, 0x9}, {&(0x7f00000005c0)="94bd7d5ceaa204f96648cba190c8cd3fa43c0c3c51a17973e843f1f517817332e7c27438d4f683b9049012b10c90220a7dc0eb85fc8557b222d04a7782c714e1b7978846e009c991798dafa32669fb49bf4d9886d2e03588c62689cad6398d80792ebd8bb15b0c68a9da562232c7c237e25c687dec5b596e77495375681547119fb61f91f016a2b07d884701902373570b1b32151bb39555bcb20bae603b63ba904710", 0xa3}, {&(0x7f0000000680)="9862fdabb81df05d7dab0575da84c724e62ba7b4dae7eb3d4bfa43561953ef69dfde5aa56d42b703a241b6134540ded7a7b625b3313f5433870235ffac6c0326f0365c687cf17e754dab36bfed", 0x4d, 0xd29c}, {&(0x7f0000000700)="b542bb2e", 0x4, 0x3}], 0x10, &(0x7f0000000840)={[{@numtail}, {@nonumtail}, {@nonumtail}, {@numtail}, {@shortname_lower}, {@nonumtail}, {@iocharset={'iocharset', 0x3d, 'cp864'}}], [{@smackfshat={'smackfshat', 0x3d, '%@[+^'}}]}) kcmp(r2, 0x0, 0x4, r5, r6) r7 = getpid() tkill(r7, 0x0) process_vm_readv(r7, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/152, 0x98}, {&(0x7f0000000980)}], 0x2, &(0x7f0000001a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x0) 04:52:42 executing program 5: mq_open(&(0x7f0000000000)='.\x00', 0x802, 0x0, 0x0) 04:52:42 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r1) 04:52:42 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:52:42 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f7, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:42 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x0, 0x0) 04:52:42 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89ff, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:42 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:52:42 executing program 5: mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='\'-^@/Y/\x00', 0x2, 0x5898484205d6da3, &(0x7f0000000040)={0x79, 0x2, 0x1, 0xa9}) 04:52:42 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:42 executing program 7: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:52:42 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) setfsuid(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 04:52:42 executing program 5: r0 = mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mq_timedreceive(r1, &(0x7f0000000180)=""/189, 0xbd, 0xfffffffffffffc01, &(0x7f00000000c0)={0x0, 0x3938700}) mq_open(&(0x7f0000000000)='@\xc1\x00', 0x40, 0x60, &(0x7f0000000040)={0x2, 0x9f, 0x6, 0x815}) 04:52:51 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 04:52:51 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x40049409, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:52:51 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:51 executing program 7: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:52:51 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10002010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48006}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 04:52:51 executing program 5: mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x21a080) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r1) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x0, r0, r1) 04:52:51 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) setfsuid(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) 04:52:51 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1f4) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:52:51 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:52:51 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:52:51 executing program 4: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @isdn={0x22, 0xfb, 0x81, 0x7, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x40, 0xffff}) setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 04:52:51 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) setfsuid(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, r6) accept4$inet6(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x800) 04:53:01 executing program 5: mq_open(&(0x7f0000000000)='\x02\x00', 0x80, 0xa0, 0x0) 04:53:01 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) setfsuid(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, r6) accept4$inet6(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x800) socket$inet_udp(0x2, 0x2, 0x0) 04:53:01 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 04:53:01 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x40086602, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:01 executing program 7: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:53:01 executing program 6: sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000005}, 0x4) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000240)='./file0\x00', 0x102) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xc0, 0x1, 0x2, 0x5, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008004}, 0x95) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:53:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:53:01 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:01 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x40087602, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:01 executing program 5: r0 = mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x80000001]}, 0x8) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000180)=""/4096, 0x1000, 0x1f, &(0x7f0000000080)={r2, r3+10000000}) 04:53:01 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) 04:53:01 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) r3 = fsmount(r2, 0x1, 0x4b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r5, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb4c, 0x14}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x58}}, 0x200400c4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x100, 0x2}}, './file0\x00'}) 04:53:01 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x401c5820, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:01 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:53:01 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) setfsuid(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, r6) accept4$inet6(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x800) 04:53:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:53:01 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0xf796, 0xeb, 0x7fff, 0x2, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x18c00, 0x0) ioctl$KDDISABIO(r2, 0x4b37) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 04:53:01 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:01 executing program 5: mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) kcmp(0x0, r0, 0x5, r1, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x30040801) 04:53:01 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x4020940d, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:11 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x80086601, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:11 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:53:11 executing program 5: mq_open(&(0x7f0000000100)='.\x00', 0x80, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000140)) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x3f, &(0x7f0000000000)={0x77359400}) 04:53:11 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:11 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/88, 0x58}], 0x1, &(0x7f0000000180)=""/4096, 0x1000}, 0x77}, {{&(0x7f0000001180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001200)=""/56, 0x38}], 0x1, &(0x7f0000001280)=""/67, 0x43}, 0x52}, {{&(0x7f0000001300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001380)=""/10, 0xa}, {&(0x7f00000013c0)=""/25, 0x19}, {&(0x7f0000001400)=""/61, 0x3d}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001480)=""/168, 0xa8}, 0x7}], 0x3, 0x3140, &(0x7f0000001600)={0x77359400}) getsockopt$sock_buf(r0, 0x1, 0x28, &(0x7f0000001640)=""/35, &(0x7f0000001680)=0x23) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) setresuid(0x0, 0xffffffffffffffff, 0xee00) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000016c0)) 04:53:11 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '*{)\x81!*)'}], 0xa, "b246de665499a1e4e9637057006b92de62f69e2b317ece149e3bde0a5a42e3bac9a8756e64a8f1bf1b4d7fca35886834befacd09487e48517b0e202e5c47617fd9df3ecb824796000e1fd0b54a1854c3559d4d40e06af2874837644c8121be1ceebc1b2b570d61decdf5b7bdac3ebd36be017a25b832e187771a0860e422e2272d546aa544d936c1b90b1cda3f3a8b108b93b11a8065b64d79290bf900e0c0ec5e69bf75224b8522e96f53815bbdbc810d7b3078418f1a849ec57f845f775214598ddc5bac154510ff"}, 0xdc) r5 = dup(r4) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x0) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) sendfile(r1, r3, &(0x7f0000000100)=0x81, 0x5) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:53:11 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) setfsuid(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, r6) accept4$inet6(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x800) socket$inet_udp(0x2, 0x2, 0x0) 04:53:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:53:11 executing program 4: setresuid(0xee01, 0xee00, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) 04:53:11 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x80087601, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:11 executing program 2: chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:11 executing program 5: mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x80, 0x0) 04:53:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:53:11 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:53:11 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2, {r0}}, 0x58) 04:53:11 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = dup(r3) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000200)={0x1, 0x3, 0x0, 0x3, 0x1, [{0x6, 0xf1, 0x2, '\x00', 0x80}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = dup(r5) copy_file_range(r6, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fdinfo/4\x00') recvmsg$unix(r4, &(0x7f00000017c0)={&(0x7f0000000340), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001540)=""/193, 0xc1}, {&(0x7f0000001640)=""/74, 0x4a}], 0x3, &(0x7f00000016c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x100}, 0x102) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001800)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000001900)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001940)={0x5cc, 0x12, 0x7, 0x301, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x6}, [@nested={0x2dd, 0x95, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @fd=r8}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}, @generic="62af0db3c9a046bb7862ab2da876e962bdbb934ad080836c4e2a9a05d4853741de7a952a7b6f778fe21b3d9346dd0508ea2f55bcf8526320bc6ce7f9f3f4c1b13a8916ddd26aa277ee2dca847e468a671689c70c04c4619ca5bfce1eabeb6871168ffe8d59d8b8abaf6b79cd1b1570e432e9df2f026260b42783422fb5212e8c1a592fc149e10af690933b248287cb26556f5e069173281fe1a023d1c1f2f14aae20cb8caf456205e4ec4527bac2bda0211a9d76aad96de684328642b19133c5e338cc3177d44c867152a2de32ca04016c7095e860b8ac61ac5cf7b9fc0c67f52670ae67e6ffc32d12decdef1477d1e7bbb2", @generic="0889da98bfcc430f8f55ec65e4a98b8e06abd1a86e2324146aba2cfedf1f052a86f419847ab51478b92324a5241e02a0b6babbaa98ded1d19a650f651f4298a981794c075e7f79e2984d48adb8a2e6ebc6c61116cbe9d4930551e69da099c52abe646741d557dc1485ac40", @generic="54cd2ea2feb99d948fae9fc892b01f915deb827854210d8cd3febb5ac6936b", @typed={0x4, 0x51}, @typed={0x8, 0x43, 0x0, 0x0, @fd=r6}, @typed={0xea, 0x12, 0x0, 0x0, @binary="6956a500b2a41535156581f27f0b273c2e3fed89cb7e19a3fef4f64413f9195f1bb1f6ab3ef26e82e4dc4c396025ed8d06250cd319ecf8c87a7a1e81a7ed7e7f326e8ca61af74eddb065233ac8fd8d7530a8dd089ba7f485a6a923f7b215b237569597d6cce0a4a499d3ca24cdc2b24c76e7be82759be06b6d411db2d3ab1588f6d9341d9bfb6317c8ba6fac51d6846e75ca755cc0d6779a4bfbccdbb31ae5571e5f080f24f190f07570ceeb8587caf8b496aa5363657079ddcaec030053fee869fcf6bcefd5519af12953a36814e6e0a60d46490ccc63125a6f5fa1d3b003c445f5e827a483"}, @generic="b70d66c4336769902e6be7a8efad15b9937d38c427100047bf47b3e3ad40d4927711cbdefcf85433598b5dc1e481de4e0d947c0b6e171e1d8b2ddececb813625f93427a57a75e1b7f41ffd6512", @typed={0x8, 0x72, 0x0, 0x0, @uid=r9}]}, @generic, @generic="c939d6afdf130aae66889c049bbe9029a7875ec1c9a76c", @typed={0x6, 0x59, 0x0, 0x0, @str='*/'}, @nested={0x2b5, 0x1b, 0x0, 0x1, [@generic="94f3ffef41f7f794b6b07ee95a89fe5780017bb977238e8e1af95da6900c4589072474037af546c64fdef38e46b019b8eed8836bfe4b71fd98ce136a4a0dedb6961ae0bd5f4d61d3012fbaedd04fe9c504f2ce192a78279a2f5514edeab19c4bd4634016da5e8e1b89b11edc03b1e2f20eb24cc9ee429ed9c350b5425b1e2d1f454fca0c2d06f92dd0e1fc26207cb0488c4f1e19f9774c1e300765ac95951e1de6c353af80481fd353edbd6b9570b9438f2a561cc7e86d84d311d2cd1714cfff1d425fc3a3652a113aa0bbbc2311086126d7ce4425ccd9c5ba9692dbf6c2bb364be0c42e", @typed={0x8, 0x48, 0x0, 0x0, @u32=0x8d5}, @generic="bc4e05fb", @generic="259d7bc66754d8d57442d03636630862b5b23cb7dfb5162c4b5e55c7cb1b0a53ad90416dfdc3acb6f4c0be59c6b43658fbf872f0bfbb2210b46b2891abe594a2f269c31daa790dbcbfa35abf7ebca11ca1abb513e40c2765952b66ad1ad6c80446cd0294751e571f2b6588dcdaf0ee3c7827f6816bd465967e82", @generic="4293e163508d3338860167d3b21946cb726dfd5c31d0616e63beff4de4ce1029", @generic="cd56de21874d65ef4f189043d5f2af5ed51e8d7c407406ad781b2c7af297929c", @typed={0x8, 0x7f, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x18, 0x0, 0x0, @uid=r10}, @generic="8d99b4556303efa73a0ca197d8da177dd5225a5ce3f31a9757df2abbacbd6e169655c91d2676a16de622ac0d60fa7b66f49d5c5cf95993a06d9105f2b933c09bf0d4855fb051b351e7014e13f722a3659d18a317ead913bd5b9c73f57fe5623b801fb30daae85c05f4a413afa00be2a2aca79abda54fefb464049bd844bebdf190228f17b4c6bc72ce66e1146240f31c3d47bbb25924c43208160e1a174d629bff31d05414d11dbf07fd628c4dbabb7f32346f9379ec1d34b8d52eb9d03af8cf05bbb7a37add3ac92d8fa956f075b07c1c98ca2525897ccc0f6c0049df66ad15c60fc4dc58a29acfc802db55ef24a48d624baaedc655e1"]}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x10}, 0x801) write$binfmt_script(r7, &(0x7f0000000440)={'#! ', './file0', [{0x20, '^W'}, {0x20, '*/'}, {}, {}, {0x20, '['}, {}, {0x20, 'veth0_vlan'}, {}, {0x20, '+'}, {0x20, '\x00'}], 0xa, "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"}, 0x1026) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)={'veth0_vlan', 0x32, 0x33}, 0xd) r11 = dup(r1) readv(r11, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:53:20 executing program 2: chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:53:20 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x80111500, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:20 executing program 5: r0 = mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) mq_timedreceive(r1, &(0x7f0000000040)=""/110, 0x6e, 0x366, &(0x7f00000000c0)={0x0, 0x3938700}) 04:53:20 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:53:20 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x0, 'veth0_virt_wifi\x00', {0x2}, 0xffff}) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:53:20 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2, {r0}}, 0x58) 04:53:20 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001140)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private1}}, &(0x7f0000001240)=0xe8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r3) fstat(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, r6) r7 = getegid() lsetxattr$system_posix_acl(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='system.posix_acl_access\x00', &(0x7f0000001300)={{}, {0x1, 0x2}, [{0x2, 0x2, r1}, {0x2, 0x3, r2}, {0x2, 0x0, r3}, {0x2, 0x1, 0xee01}], {0x4, 0x4}, [{0x8, 0x2, r4}, {0x8, 0x7, r6}, {0x8, 0x2, r7}, {0x8, 0x0, 0xee01}, {0x8, 0x7}], {0x10, 0x1}, {0x20, 0x7}}, 0x6c, 0x0) r8 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) ioctl$INCFS_IOC_FILL_BLOCKS(r8, 0x80106720, &(0x7f0000001080)={0x1, &(0x7f0000000000)=[{0x8, 0x2bb, &(0x7f0000000080)="4cfb38f355a761e52aa04dbc0d1c056caed11628505766f2ac8cd88bace6d2cf784f2f75e42549c31aeb89d5fc1dbb5e4080d249ae62a14a15539734472e9c807c0b649d8525d618daa14e1c5a4179c9cfb14ee0088d9e6642ea2a8950c59f6bb72b1789b463f319ec8df5923fbae334069af11d21b9ba2a90301b2c82f085e572888ece26b716a8bc82d3bfa03842a983c51d0f86e67416fbd73ac75dca77235656b17f7b0787f7fe3dad9b55d9b440346b3a75be9c777626217d3471bd91b4cd0c2d048b6634f09479e7fed088522dce2e33fa3bcb330ec39f8e530a76285c18ba5d4896cf19e05c118c2ea7996b3bc7baaa3a6bd1087209844a37deffae5b7e5a847bff6f13a635bc12d9f55b500c1071df94d07fe95b7760b70decce4b46ddec59f7995689f102e3c6a52f062e48cd5ea0d1e282ecaf8d51a872391ea861e02cd0328fbbde6cd2448449194ccb8de0a4181a550675495739cdc36a69cb77df72ba7890ab02bfe0f374bf3642259c840db5d56b59c07758a97473cf75f06f93008c83c3a4a19f4995fece3e7a0bc62be9483e7e333209cd7c2f98fe51033715d2f8ec2be998c53da0bca8a008986ff780c33567a797066fb3017966233fb63937d57a2482afd5b86b990c1505936621e9c0f13050fa54ffaab69147dbc17c10003b334819db4ff70e76cd15b2014412dfbef1f96d1ca3ed0e18f11e94b6f8180e91496ff1b5499d0a6ee5e9796d1c93851dadadb075816da7402105f80a09bd34261f9f540f6978ca61e604e6e191c75d52e298eb75f8187ae91e8e4f71ff25d3e53d4c10b5e64be9091f378cb7f69fb29751fc531ea65345278ed32b9b188918976ec1b7eb9fe9a4f6dae06fd57a49f59a0ad0f79daf4bb87f21a508119debb38399fab41cda62e17f70908ad431ef654a3be664efb7f2e1ca46fddafa88d19087cd64544c0cab1c9889da781ad3e963b2007ac950dbaf682a0c6d3f74509b0e0a77995bc0839465454034495746502a54f734dfad4006d3981cfc9aeb05efb0b8e6a947f9b7d7d26957ca898444422e0fc11abd2fd62731d6d3978dd5589bc35f39f980651be19aa96dcbd3d4ea64538450e5e668db6b1a3fdfa37b2d3a28c189a813e1a00afa55a510a95826d837f02e62ebd363d208061e6c5d2c43fa4b24a5e9b1b2cbd109a4a990b8fa8a39bacf0e510f5583bf6b9520e81ee5e73650242d97c110f95363651e1dea2337ac8968ac68edaa1262ffa1b1e2a82cb6b266a2ec346159e8a093125daf28d351dffc8b84651ce763a92c0b54b88e39ecb45dc097d9f6c4d0c1fb762ae392c968db2ceaaaddd4d99da34678e002f2a5effa46a3dc43ab7d8830ce2427614f93dbf85e50e475d059d2182d08d815b625b8ea47dcae179cd57ef7d504a2d696086017ef37ee3619db50c733076a67a8cec199173a1a3aabb2826d77e3da76dc30fdcdd85ef8c6e09087d4cfe21410900a890d223acda8d395bc2046042654e536e24f24e9b2baf90e369fb4b1e7edeb6bd536d97224777cc6225be17ed4341e5e7155d909169f56ce56b9e02196c7256ef3a3484b197d42c49f20cada7b0a618c027bbb6dd2da47369267fba3862416f42cf5e1b0884cbdfc138b2d6187b6c889bd7d0fb985851fd651001b7c30ecfe99d376b2e1c9d176d1ceaf92362a8c45462f8c66f512942d156b23072305fd0f2ee1f1f3c4596c94c07887473c52c072c81f38f0e1aeac3a492cd4e94d45cd6a6031c7abe1eadf29ed3335faac7969a08a56a8509118957c8b8d71d8a04a9fb1909032a77605528a66e8fbe4cb9045dfc3a2abfdc93b9504fb8d32d5a2ef47b6508098dbe3d69121a1141b3a15224859e851d9387632018880d5c3f3de2023efd03cd100dccf5c01f3c50e721e08b27770b01765e8343e35ab9d498cb7526cc1f4b60c1838430f1fbbea37538a8f619af95857f6cc9cfe64aa9f0a3b09b91e868fc62a3d4416e6bce8418dbda1b4307c3ccd64e61013731f21cf1c914ccde5e20c8308a2b5a23737eba85ba5c40de8e689d38d46c132d827f9913a45b31e49722d7c7fb0938cd3a42769cf892540ef2046db6a59a02c4616a7237828f91ffbec287a86dbdd15100623eac0e646fc6da0bb402d53304606c78d9760404f6507a38c3eb468e76a0f5a4c4d88e70283dc68196cbc1d5253da2c27092e74c4cd83eacfbde84fd90ce7128d2c5c56fc033edb9248dee9c058a7ebf4ba4224122ad96e12d398b6e78eced70677abc796b4b72c4fe82b09ef12e93752baf815dd86b1803909c7527f23dff0b819152d672e2e9dbec18f6b11ff24a0a690b91a679a1f6c23077a91c4746f9421cae50f625e9f5468dfea14f0ff10f4f388f63ea48fa09b5173a6d60a888f39417cb09b6680ec4353615d11b854f8058da4887d3c8b3256da2c1bd95f3e759cc6195c14c0be80d574a937ed826ed40a368f6573104956e34d3cbc1be1ecea432a3251d9b0afe785aaa68a40606235e75724053d1633fa077432f30f1c01bdd8953d29966adbaa4ed219a5a97b7b9824c57055abedff920a4a0a5f8176bee79aa4ae516bc785404b0a08aec9fd8547303f6115a99cc96d9f0c59f3c0d39f82941f29b5ef9d7cca63c5ba232ace7c0a5a6477504b12356548bd828fa10e419c50204e9ec4a622657422e406908d1428db7deaeeb71daee47f1d579d7341a321c6b5c2cace3db0f408befd40f1c4c6fcf069e4bec430864d709039dfc6e34c0003ba01fb14475606104b69d88e0b48bd3bd78b0967eed342e0fa607a9555c874b4f0c5f7120c9e262caf3223e7755ea31f3cd15565cedf440f9b9fe67c04682bbd4bc44c062740c692b0b122cd2e550b0b1247c49da69592f309b24940e2989a208fb3caca4bff1a84da0279b441f428b66acf83ddb5b44dd7ca52ca39364e20bf8e95fa7aecdd20d9e5b56400aebcd58ebe1cd74b8ac37269c691e38bdf0e8b6a1bff485ca6096a29e039ad2306d966102c7f690454a41f57a279230b94ded657a8ed5f52ceef9e7fb4799fe1f5e96ec4594fc36391290d35320b33e09d7427b507d941ebbb5c8a77c7fc405dcbe98e1580f7e6ddf9161e06dc56b3277f929d036714ac5479e7b29d58bc42ced9cd8453bdb216d89af9d73f1a13bb58b2ea397554ecb970961d7000a28acb8b9479681b44a9e05fac2c0a4a342ac4e75ce4f2c5ea21e0b7c46d34acef86b3d77b145d1e464203f196c8dc180657872d55bd8e4d87c3e22a1d93d9e65566c40295db9d27c5183006567d56f4b0f5dbd8f3b791efd0c6e3449c358ac28102404ca80a59574ef3080ac442c16d15a2d046ec980000c10ff687fb72481c1051d144ed14f5e38f213c5f8fa111df5cd449c925c4b2fc4d5516d4e0fff3f27147229e862c039cc7fd994d5260fae98a13fb15a0dd831273abba8ae8d275173de0d53165e4a566171c83ddb428fb96d0bbbc13fd4e7ead3e36e68359c479e4c1ff8182a48aed027bb85fbf8ade2f6f1fe85e5110761da4a25c77bcfa006dfa2321a3496cdac5b66042a3d61f7b9c8e5840fd0d2fb53f1ede0e781d10a135c947741c88ad59d45ca9a8e6103d12dec4e6cf4d97237c17171f41564a489cd92881dee6937612f965d9902bd1fd6073d446cffc19ca0a8f8dedbd2a3da47caa0526d3dd513797d6cdc1252cb123e0452661677f44b5d3c8a51b9bfa304b8bd5711e386ffe9bf8a3124785ac9d1c8d6652ce5992b4dd8735859659eb885ea925ece1d5888bbe4e7a1ccbd133cb882ed7bd443b8158eda6ec9131c278852a733adf9eee14a9d2756b422f4af6444d5a3b3ba9216bb53ff14fc0655f792ae71f52dcd07edfc3ed635eaa2da73a3b28791b1c5de50a15607be195efdb0a2eae295de3e9bfca533a7f3a77f365c008e60735a006570141bd9390cd90a12e5e32a9f2638a989dc9f6bdcac015c5eb71342fa7111ffa9c9b1a4b5c3c7156fd5ff7f0af3781289d2665a7d0d5ca3619f1441fdcf33b3d36987daf884d529300c1ee6e60165e115b91933326d437cd1cd76aafc6de30eabb39362a5cc0efa1ddf01f578d34ac143efb5813f10ee71e8c90f827a3dbc9a666c4bc2a462bd52ab0ca30f574bbb9935b288f7aaffa9dc75f4105b49ed6e2bdae7c424f3e4ae2af15cf0112f058c08487296346fd3a8539cc3dc7ebe04f826e350041d3752d5126d1f1b696774b8d7b6659c935d4dfe1a2be08ccf9feaeb0194704879f5fac00437b1b3a1b6b8c64808491426318a99388285d8fa812e8f7e4d56a30be91ae22adefa8db5b1f7381db88662663faa7ea147fe3872e40c31f47ac9b17756b09f6fc484535ae136811a07d4026074ed8f4d115873e275fcf20df7aae9c824c723241f314f1b21aff15df86a3734365e990f6691f3c8bfcb9565c1e8a46d25104e2afea2d789f780e524c7368920b860669d5b21a02fe1c7303f9ac6277702a114f3d69d42dd24f24baaf39dcd7b59020bc00fbae2aa4c9ba8bb5ac25321f089db7c80504bdb0bac5a9bf0ee513181dff700e6138b0473851c03fc83dfc2beb19d5806a17c89d5dff88f26dd0f9e5e5bdb2fec3ee7f1ce845a41f3043e1febb6b38cd2a1db2f1e5e08339a4065302bc2b7d330f044912d9afc7e5d871382ff4496b0b0e52d0c988b0d60b8da7e09c00c1f818f23d031696c995ed90c85875235f07633f6702da0b1141fe0b9afe761f99b1313771bf51ca704e1cb6ddbb079d3eb3ffffc4b09c0a498eea33b42dd7fa3fd8f24ad91b27522057162043370310f68bbe549cc92fef8652f3261547119267c9ce211f5c20b09809eee88db4ef48f85c6635aa0ab2359d9ca11f11094845f548682fadf409c68b61f048b78b6003e2b3bcc2ea1c8bba28cbe6463f5958f3406ad39f6fb4848eebb064f8451070d90ca14dff80903d7ce566fe3a2150ee39d3376211623e6b7926a6eeb72afa4011bbe763c9f4e3f3d8a1d80047c0be91f85833980e30d250c8c79d32b6e656914d9edb92031117396a99344f0e3cb836697a833748d63eb0190b1e0b0ccf7b56c952e7ca0aa9d37a612345fc475afe2d540502c66c0b600188bb2a8902933a5e221fdc2c4c728d2ade2ef0d2adf940d3b130c7db5c8e6dc284012d63556372bf851cedc89b25353b9bd4fcdf7d46a631abfb0b0ba1dcca09f20ecefe8f3e8ab31b8963121457cd7089c239862f0e9502c73dc972ee73d16a81567d1650bc9456bb77363b7c215f0f09db6ae794bbfaf14a93d81ddcfe7518451085ea708d12aa5dd6f05501180e2c93e13723cd8b50977642e25368027fadb180df1260b2927b008811a1363e358e9033d6e0ca8edf8a61cdbce311f498adae635685267adfc72eaf20389dcce18d157186ac17caff7391bdad3ccbb458508b2ad9fc8d0b68a44f3ffaed4f11739bb0a1fd8cdc06b560137c50abb88ac6bbc00643753f2859b9988dd22ce41efd45e10cf5cf8f5695f68aa053ec31968567daa614c944e628351d1c3bd52e2c58f6735b0dbb0b350073817d35e0059e3ccc0530c28da8d5bcca91b35e4b72a4b6d51a330cd9998db4aa4cccbb9b84d3a897e1d7def064eb1633407b3cc8379e0fdbb31040b0cb7e938e96936a81159848b22f60f18a2bcbbf0be8d5522db9a52d649f9704ab00b89ea51227a511745e38bfc59cd020b0817b988fd3a817fd73b4b54a4d21fe246afad77048f1404e2b47fb19f1241e9755efe36d148a7ece2e8052d57a499dc57fd3d3079983c0a851516f78c5d67ff2", 0xe1737e3a8ae70795}]}) 04:53:20 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x801c581f, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:20 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080), &(0x7f0000000180)={0x0, 0xfb, 0x1015, 0x0, 0x1, "bfc2b4b34d00a3de1124ffa9ebefbad1", "4988547cd5f5cfe8615a3f90348ec2a115063063fe140fb90256a7495ca269e730175fb128ab5798df45e97dddf21610a6afd2bcde9f4d0eb06b3c528dbf36742aa862ef6f8208e2c00f3eb569410eea68446e737e605d558d6ef031baa07026bd4332adc9031cae3f83427fa7b34d44cb67637f4d268710963a8663ce82c899a273bbbef5f5e34ebf072d5649a05dbccf9a6753ca2b691e9fc9704781d7065d1cf8ace109a25891799c878dcb92cdfff31889045cd4b5349501726c13327d776434fb9464f9280e7d177dcd18ca934f007526658123a12ec0f53c70f3c9becaa42b9ee594983636b0711338f2522df63a6b7adf353cdce425a731240e4d54e9ac21e12f30b07fe481530491709f2b4612443c0d0bfa2093a142b7d3ff8290ba1ad12ce13f4888764bb15efe56d74a27715fec2279c81a86ab499b8f7a38152d5169621d9adb825132a831705e7eab21f8e8ddd0e84a59bb78671d33e95b2f8f1fdf27a98d3b8eb79d95baac25cc51d67257dcba8b10268ae5b3e4d47108b2b5b2476cd5738b8776581f7a3a7b193737a794d48a6c9a9f627a1d0eba7f01aa78a6a3a8b97d27b3ddf709b2978ff41714a36149e62573977221cb90cc09b94e8dfe30585f61c3136229f210704f7c2d6eedfd9b22e358aa1b845e2051966b044d00b0feb5b68a0d61982c35e11c32b3d28322c61de090e20e2d161691425fccb82bcf9c165b908dbc9291039411558f20021417ed31de02bb08168ea418a185cd6a5f10511be35c8c9cc8210643167b827783fa02b0f419ebdc93fee9d7ea696e3588f183167f767c90297396153afacae19f6905fcac0081fb1e98ec41a3e7f5a94d65b3c6b833bb16b8f751c2abfc4596504326bd9cf4910d44df174f8fb481eed2090465e3a905cfcf30c1c68819586485034b75c09938e1947107f9b28d61e00a83440c747c5f71b8d278fc8deb12bd1516261ada7c404be83b6c37ff1bd457d60e13ea4122d7f5644a387f57fd1af561afa586e9d4aa9db055def31715cfe1a8bb9118c6a66922b2b56af1f427d3e76804c8e01fa9ac2a0873b7b92290d0ca2f03cfc038225baab4a4e123105ebfd0b4d3f9eb10c523bd04fe16c78fcdf454fda87be759ed7fd385e4a76facf0864391c59174bc121c81d83815cf01e01fad15688e9be72aca5cf0cbf03b05e1a4d9b06827c0f2649c23c14e82e46a23a7ebc2ce9ab67b9182d500b0088c6de9f939e55a70aee64cd5fecd8bf7d453661716c231826e451340426c4335ee99b725e0daf482cd806a544f6b5eabfadcb56bc1c6a39e26f711cce11304d086a5d4864abeda6c8f6630f5c68fecbcd32c1c0bf2e4bea362a9921ad60594613989d58e2c3490992310cb078bd939bc40320cb062613723310d5f2cc917ebd1f72a4fbd64b632282bb7292187306d356c9b6dce77902281f094fca0b6dca003abd13633311416284358aa44273b80ae9b729e5cef291435bdfe73ee15cd744d92f4fdbaf1f0208bd3917472def4d67b1273f9f13641467b1c811eaa48b7ba554883d464417333491f7ef557e072810e4f07bd0d7376c6c3b74eaff62e275660d7748a25bb02b0ff78b837999963a4c8aa113b5459493675540a73e89d20d4ce0d4fd5dd9a10c4e1768831f0d440551a1f5808edaed25e0a0244fcfa7ec30173e5f4a6960a2bcc9f4b27790dea790046736d9a7dd4af72a124c22246adbee1af68d071b25b350b7c40573aa05eb61ce4f1ed0ac3603539f67ccd169bd6bc9b0044598a713666adace3cb4641c13b1fe484858b30c7e7fa3f9da8179ada5aa86ac258ae2ae38eb63c5c6dd54788f249d803c7a58e0a3f27006a662fa0a872730005998d93be9fcf9a1f91a9109f6bac6765a8c4df63ad8238527afb9724945fc76f3a47e15a3a0a279ac52e49b2bc6e7478d8539f944543f38141d9a00c8554a51eaec68ec1476fb1d47c716cfb2c3d1defa468df23647d975966380b1e7d0a14759a977ee51edbab326626f4c1d635a4d0ee6e83f3039f60c8a1528de09f31901f01fce19d16f91efd66e020bccc46e6de099c9158d8c5831bdca94e0d9a828cb45c67d4632e1f20887098201439b6b503cee888758db77ac253977c0ca1eb0b7ea913eb9e54b80676e6226606356795dcf9c44c38d904d3a4f5982755c60ba68a580cd5eea25389a5cd9dde2ac7167c96df63a00fa13218e5ef87ac4c1d548361d855d1c39ad94b11366dbb7ae22eb4321249eff5f5c301a87ebe72288a3ca492b466289595d6adf07b9b82c792c9cb63dd08be717cbcfbbc9766e52653c01a45ae0c85b3aa6e874b2b8501db8c33f017bc0ab6b8d67d2cb0476b873a6f79cf12ec5f5acf44f05129ced817fff4f81d876e8ccec02c99f72d51106fab7b2b7d27a452b0f6264cbedebef8330061ae8198dc0e705764dab16cac5d0e47122c1d5a692f589409d83e3b527542b2b2632c9eefb0c01e9aa4742afb583540e808c304d9ab8299396f2e02f3436cbd62bb0b638696c1befc5eba4b72e1a02908a94c8a8290ce7804784ffa1d0282a1550d7f1425d5e0846044784cc7144b9d0b767e4d0892bfd51a1e72701f8fe562690246716c9cb607fc90561927d1447715e2730dbd838055a2a2a6ccefc07fae476fc02a1de42d108fd57456071675dd70fc8c231107ec4c27b9196891dfeed8702bc3e1ea3d16c5dbaad8ed7bcc2e734f8d3889a550c95588719cbd59580bf2e7d7de77d7cbc207517c42cb2465fcac5fbc6858cf50e608cb5434bc5c9ac32c19efa3567b44e7f53a19cdffb85e04b85406cc2f5e6bd0b8c616ae2ede19583b85301cc2c24853bc12a031a4745e93bfbdc6d8c7366e96dffa45d7db50f0190c768dd8b2735c9e86389a38d05580230beff2db0c5f6734d8b71b5b212b939d6d6fee87562614e9a73e87932ca46c101d23e2c1db7bfa380fa481cce8e5e7288453c07a4d3591074d8d95e0c6089c9c874d7480ef84583a0abf03063d3b8ed87adeaabe6dd20abb595a76469c64161545baeef91936f3d3d064197a41f4e6403cf3ec926c87b2178d7e409e08ef3d2c0c2cf38d9c37bc00b09e26bb0e5b364610a104c04ad39445be19891a1b7bcc80952f8b6a93dd006058deff6cbd67a72d8f752a1f45608dc163c4c610cc2242c116ec3435526200f79163c164f985b93a91ec441e893a1523a635f3c6f6996553c8b4544209221c1797ac64ca007c8c5d88b7db4e4754042fc279f17328ebc09c9537f3b57d042353c5d3f778f6c8898085ba708bb71bd0bf99b26888087f3adbb09a8d49f0857fa8f27f7cc3e6a1e61ec2815080b18c3c18d2b319abc7411a28118d16c453f9b82a41bdbc98d3097459fe4359d80786451637697a4e791fdcb7e1232b3540fda182c0d2aa71639fe7b76a5339021fee16783414dc6542563f834bb372399bfe468831acf1b1be98d5a0950e7364f938edc3fd41f53fe3e0a0ad5bf215117dce53eae860c05609dcfb7ac804f0b587780b10f02d525674d4dc859d8b024e314d4cdae91cde2ea2ab111a3142b0151f9078c5d23c3cafdfc6b42c8a1f24cdc3da036bab18d1b0204ea5583ba093cc1ad5e4246913ef30ef667938bd4420331d973b0dfa16adaecfc2afecb685db4a30c1ec198ddea1f73055cd42d58c87a0ea23eb8886af61966721d87560e0b7500b39d83bbb92b121384435a6dc885a17b720221b13188bf4fcb85b279e9f65c838b0983e63dbf58cee542d8048f11e66386fbb1ecd53c59c7a0dbc4a27d0aa815c55e648c04865d615cfaf05db4d14157d1927261cb5e1c44a2a7fc4d60c2ebf6f2c069416c78cb7b95a345ced0a8f62e95173f8820047337a72b91a8b06b182e4878aad445ea65cbb1ff14135b6fe09ec7b4cdc7409a7944a5a1519788a1e6ed6e464da592abbe71ee0d71e4725cf4c4ddc912964f9f84a0a150cc4ce8edf6fa1581fc2843532ed2cecce3a87c70a27a91a363c026980ac97979309aee8646594ab589ed2c1267ad11284c6d8eaba2eac31b97d7d4f429b7ce98f5f2e19ab10dbff4792bd79765730cc75a02ab523c07228516fe81f5db19ec4a2be5eb7d6a16bbc4fe595048cb3dfbc54f05f9254e3cd5b035d125a53ec5577d4b23ab97cd681082e54d036dccd1bb4e86ce4b5199b06dbfed8c83d0c4b78fcee71862bcdc6a2ba32fada3661a90665529051edd081b927574751d35f60c12db432a047e397e92f67ab62fd4fc152572a9b3db73bf180850a4b7fefcf0afca2d75c946eb81df802f380f1516feaea89dd60cdebc4b96d1c6c96864adb7a7ff3806d2dba8ac8843a9f8e6a5a38dc2babc368b7e39f5c3ef4420823448b3bc92767963f787c92a0b52a266a54bff481741c3194b03696b2e08542bbb0efc925e32cb50888ffdabf24f78bbab9fe22613116197e53e76febdf6af3ab8f2996a6d525b041be813d95564cba83d7504c1718fc5f037eebf339a7c94afb42b35c768fa80a753adc84a5b974913bb352844123baaa3ec15966fa6d90b40332cd43eef32a494d9b0525d5df16b96b7a5e4590aea2cbfae04384e6c5d64513652a5d61618cf12fb7b608315166ba22475f4db4eeaefc24bead1b06a44d35fe2799c9ce0ea1516be838984766ceca93e5c6e4daaba8b3a9a98436371f291035d216ba14694eb46dfbab33e573b1835d130294d4b44f6e77bd1d731af833228fb28db34ee4c54f6e686584e4c8a28766caa1475bbb689d4c3e81690eec919f3012e8094f968e95bcb21f0c7a16bbdf6c76970da9fc0174dad8d54cb6504e5c85b20409386df5e4a75ec388c70ba1ef28dd7d56837410ad774ce52b58cb934e240484e7e3ab21ab4767e37f9e92459b0b22bc846efa5581f4306988b65e37f1e07e4ecf6dd083e9c3ead2356641004e2d798afe10639454fe715c784d264efed9c82bfc09326c0083d082af4135aa6b4a9f180a1ab552ec83849a846435ae78157633b5c589a0e8b5a0952f2434f81e6cdaf4b47db67b860785843f73453f9708a0313ee0c91d2fdf776f26f0691a0346967b1c2066fa9fa13d7d645b3cba0256bd74c3c288e6f0b55a5407a281a39520de73df0a787f0306aa5ae50aef13217735d59dea3218fd0b055b7a6c016c82f1a0fcd2932cf75b80816c8d29e7ac422a48f01600296a2f2e65a0598756dfb8b6bd8e2fb4fbd6adc747ba017d0a13c533b419467dea0b4f25f4df85e082f2fda3e3f8055cffddb55b7efe966024d4014cfbebe2689ab05e0af30a29adadeaf1abdfa1af0084ea023cab59bd14d134abde571030d43513d61280aef1cf9ae1d2d6291443150691707f6ec4bb560a80a5aefdfb8e99c2bfc72660083f3ed9c6e92b67fa75d97f33dfa90f078f9cb5e9fc50391de2a8a700c9220daa591e8affaa1166e5c1ed8394170f22fc55ebc7af2d6870f4dc7ead572a565746aeb5c1f7dd49b60a28b170850aae63765aabefb7a1bdb9a841eeaccaebeb3e43a14cd8baa7063d1aaf4992e5c1a6903b939a9512a254075b103ce1e164562cb55100da6a0a562cddc5ca5097e1ec4cd8bb51bb796f6b4371dd147a4b45152dcb9fc91f92798fd4fb7401e687588da75ded717222220f8bed489cea9499687b8b78ad1c034177e30994df6a0e8b36df40c179fc0a6fa4afe9d91df5689160003420c8b6c05d885bad93a5e4e28b23f7ab06bd62e905d65a11f8ef36b1d9d863ee634e9ca58bc76b826989ef44b3f790e9bf9e75cba7687a3768465c69f7c97c446ed09d0317"}, 0x1015, 0x3) mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='.\x00', 0x40, 0x8, &(0x7f0000000040)={0xb9c, 0xffffffff, 0x4}) 04:53:20 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2, {r0}}, 0x58) 04:53:20 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x80811501, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:20 executing program 2: chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(0x0, 0xee00, 0x0) 04:53:20 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:53:20 executing program 4: setresuid(0xee01, 0xee00, 0x0) ioprio_set$uid(0x0, 0xffffffffffffffff, 0x2007) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 04:53:20 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:53:20 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0xc0045878, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:30 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(0x0, 0xee00, 0x0) 04:53:30 executing program 5: r0 = mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/219, 0xdb, 0x5, &(0x7f0000000100)={0x77359400}) 04:53:30 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202eafe0696c65300a"], 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x20, 0x70bd23, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x78, 0x40}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x198}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) setresuid(0xee01, 0xee00, 0x0) setuid(0x0) setfsuid(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = epoll_create(0x3ff) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r6) fchown(r5, r6, 0xffffffffffffffff) r7 = fcntl$dupfd(r4, 0x0, r4) accept4$inet(r7, &(0x7f0000000440), &(0x7f0000000180)=0x10, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x0, &(0x7f0000000340), 0x8, &(0x7f00000000c0)={[{@nombcache}], [{@euid_eq={'euid', 0x3d, r8}}, {@hash}, {@appraise}, {@obj_role={'obj_role', 0x3d, 'nombcache'}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) 04:53:30 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0xc0045878, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:30 executing program 6: creat(&(0x7f0000000080)='./file1\x00', 0x1d4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2d2) r1 = dup(r0) readv(r1, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:53:30 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:30 executing program 0: clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:53:30 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:53:30 executing program 5: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="680400db2ba2347a982511f0835f114532bb4900ae1e96c8a2fdfc3a07591a4d2ce29abc24adb4300460940391fd5e592a0c90fc083ab9c1bd740a966d6664ddb680bd4d9db151bcde1c6ff53505f67848405035d393d1e90840aae64304977e88a579a5231ad12f7707f7df0ff68547033ea4994c32fd4632cc99937440f15b5c8ce17ac798ade2d2978354815a52654c57b7c180d56358c04e882c6140fa582bec517184abcee6bf0d0c88b72cee77dcfcae8a412ce0ca202256303f6e58979139c90ae94133f656aaa364908c7d74c8f0c896fa1b60ff9ec72cd58120d8780226e967750bf5057e39336dbc2cd583d00b93a306edbbb8c406032fc3ff4fdaf7141347654f4d057addead2f55301d5acb9b0d8f8281283c84ff35eef1ffa118f13546fa8a0137b849e203d88bd50f9ea21e6cde23fbd", @ANYRES16=0x0, @ANYBLOB="04002dbd7000ffdbdf250d000000980002803c00038008000100040000000800020081470000080002000203000008000200020000000800020000000100080001000900000008000200080000000400040008000200010000803c000380080002000001000008000100000000000800010005000000080001001f0000000800020004000000080001000180000008000100560e000004000400040004000800020001000080b400018008000300f7000000080003000000000008000300030000000d0001007564703a73797a30000000001c0002800800010008000000080003000100000008000100200000002c0002800800020001040000080001000b00000008000400b609000008000400a3020000080001001d000000170001006574683a6261746164765f736c6176655f3100000d0001007564703a73797a32000000000d0001007564703a73797a310000000008000300d8ef0000300007800c00030040010000000000000c000400ff0300000000000008000200050000000c000300c300000000000000340003800800030080ffffff08000300070000000800020000010000080002000500000008000200070000000800010027ed0000c400048014000780080001001a000000080002007804000054000780080003000600000008000400810000000800040000080000080003007a940000080001000e000000080003000200000008000300000000000800040050000000080003000018000008000400ffffff7f2c00078008000400fe0a0000080003000300000008000300080000000800030006000000080003005b0000000900010073797a30000000000900010073797a31000000001300010062726f6164636173742d6c696e6b00001c000380080002000800000008000200090000000800020000080000b80106803f00040067636d28616573290000000000000000000000000000000000000000000000001700000051b45c68b1db8d4838243e050fb93bd0849bd9a78a6fdd004b00040067636d286165732900000000000000000000000000000000000000000000000023000000254f653884b779dc170850e41982783c9bb5b57960c399be63df1eb69a6235d25165ac000800010001000000040002000400020004000200bd000300a7aa4728c2323f0613708f07ad15b2e3ba0272079c7591580e8f0a83e7c5fbd01912f87007399727f28b266d5a1b05719ca343d774ae54d6ea10afb0d20ca2aa29df22a034fa782d439ba10a3a4a0a7cbb2551f723e7c6e0c36231b9b384f319b13a5d9401fe72eb1651338b521962dcaec317e37c0d1e39438707ff035b39cf2a922d5b0fcc83f56c4b997fbc01288d05e04e3edbb39911b8e3883ce2504f9b2678657e1453ac95f45aa173db7deef3356c56683cc24ff82700000004000200040002004c00040067636d28616573290000000000000000000000000000000000000000000000002400000073b626ae882127fb15da04a2f03f97c8072e252278b5aefdc7b74897d69495563e505b4f0c000980080001009b2f0000"], 0x468}, 0x1, 0x0, 0x0, 0x20040000}, 0x50) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x800, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x3, 0x6, 0x300, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8d0) mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) 04:53:30 executing program 0: clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:53:30 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x44) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x4880, 0xc1) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:53:30 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0xc0189436, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:30 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:30 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000280)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="92446f81219c9c3d7c1c331c5629f7e0024249999dd26b7c8872a0d53f0b28daa6f56d44f4631d105952263ec84e83d48426676f61b0aa49930eb8f41b6ec21fcdb628c665934f6cc614254e989d54d8d9c2fc919e0c0762e931882af0dcdcdae4892915975cb89051a5bb54bfb88095623e1ddd300e44a5d8949a048a3288ee889e5e5dec239642db44ca8bd22752633ca46ecceaf3ff7353bcce27cd5ae8532d8bdf65863590673414466b41839f1aaec50b3caef5ff1e077e2d", 0xbb}], 0x1, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x60}, 0x4040000) mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) 04:53:30 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(0x0, 0xee00, 0x0) 04:53:39 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:53:39 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)="61e5c89765ffea882e42d41dedd129780446181b0de12a55ca985c599a", 0x1d, 0x1}], 0x910000, &(0x7f0000000240)=ANY=[@ANYBLOB='nodots,k=relaxed,\x00\x00\x00\x00\x00']) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r1) r2 = accept4$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, &(0x7f00000003c0)=0x1c, 0x80000) recvfrom$inet6(r2, &(0x7f00000004c0)=""/9, 0x9, 0x10020, &(0x7f0000000500)={0xa, 0x4e21, 0x58eec0d8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}, 0x1c) openat(r0, &(0x7f0000000340)='./file0\x00', 0x1c9282, 0x3) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x10410, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}, {@access_user}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@nodevmap}, {@cache_loose}], [{@measure}, {@measure}]}}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="144626764e5817ad65300a58e7800000000000000078e3df31bd3dfeccd5bd42bd"], 0xb) r6 = dup(r5) readv(r6, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:53:39 executing program 5: mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) mq_open(&(0x7f0000000080)='!\xcf\x00', 0x1, 0x19b, &(0x7f00000000c0)={0xffffffffffff0001, 0xe0fc, 0x10001, 0x5}) mq_open(&(0x7f0000000000)='/[\x00', 0x2, 0xa0, &(0x7f0000000040)={0x40, 0x80000001, 0x81, 0x400}) 04:53:39 executing program 0: clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:53:39 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0xc020660b, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:39 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:39 executing program 4: setresuid(0xee01, 0xee01, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2100c0, 0x0) connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0xa, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000180)={0x9ec, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff0000, 0x3e}}}}, [@NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x1, 0x1, 0x9, 0x20, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x3, 0x16, 0x16, 0x2, 0x36, 0x1, 0x0, 0x30, 0x30, 0x36, 0x6, 0x24, 0x6c, 0x16, 0x1, 0x1b, 0x0, 0x6c, 0x1b, 0x1b, 0x6, 0x1b, 0x0, 0x24, 0x24, 0x4, 0x36, 0x16, 0x36, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x4, 0xd0a, 0x800, 0x0, 0x9]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x19, 0x18, 0x2, 0x12, 0x16, 0xc, 0x60, 0x94333633b36ec449, 0x6, 0x3, 0x5, 0x4, 0xb, 0x12, 0x6c, 0x1, 0x13, 0x1b, 0x1, 0x1]}]}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x4}, {0x4, 0x5}, {0x3, 0x5}, {0x0, 0x1}, {0x2, 0x9}, {0x3, 0x4}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x5}, {0x4, 0x8}, {0x5, 0x8}, {0x5, 0x6}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x3}, {0x4, 0x8}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x6}, {0x1, 0x8}, {0x0, 0x5}, {0x4, 0x6}, {0x7, 0x9}, {0x5, 0x3}, {0x7, 0x8}, {0x1, 0x7}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0xc, 0xc, 0x18, 0x12, 0x18, 0x6, 0x18, 0x16, 0xc, 0x63, 0x12, 0x6, 0x62, 0x0, 0x1b, 0x1, 0x9, 0x6, 0x16, 0x36, 0x9, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x7, 0x2, 0x6, 0xf613, 0xfff9, 0x6, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x681d, 0xe26, 0x101, 0x4, 0x12, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x7e64f481dca34d8, 0x1b, 0x12, 0x6, 0x48, 0x6c, 0x9, 0x12, 0x48, 0x36, 0x48, 0x5, 0x5, 0xc, 0x36, 0x12, 0x12, 0x18, 0x36, 0x4, 0x16, 0x0, 0x2, 0x2, 0x12, 0x6, 0x1, 0x2, 0x18, 0x4, 0x6c, 0x18]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0x2}, {0x4, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {}, {0x2, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x6}, {0x4, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x4, 0x2}, {0x6, 0x5}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x8}, {0x4, 0x1}, {0x2, 0x3}, {0x4, 0x9}, {0x4, 0x3}, {0x1}, {0x7, 0x3}, {0x7, 0x2}, {0x1}, {0x2, 0x8}, {0x1, 0x7}, {0x4, 0x8}, {0x6, 0x8}, {0x2, 0x2}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0xa}, {0x3}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x3, 0x4}, {0x1, 0x9}, {0x5, 0x9}, {0x0, 0x8}, {0x2, 0x2}, {0x3, 0x8}, {0x6, 0x8}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x8}, {0x3, 0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x2, 0x5}, {0x0, 0x1}, {0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x8}, {0x3, 0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x3, 0x5}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf000, 0x7, 0x1, 0x7f, 0x9, 0xff, 0xb9, 0xd14]}}]}, @NL80211_BAND_5GHZ={0x138, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x30, 0x16, 0x5, 0x4, 0x35, 0x4a, 0x5, 0x2, 0x18, 0x5, 0x16, 0x1, 0x6, 0x5]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x2}, {0x6, 0xa}, {0x3, 0xa}, {0x0, 0x1}, {0x7, 0x6}, {0x0, 0x8}, {}, {0x1, 0x4}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x2}, {0x0, 0x3}, {0x5}, {0x4, 0x5}, {0x7, 0x5}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x8}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x7}, {0x4, 0x8}, {0x3, 0x8}, {0x5, 0x6}, {0x7, 0x7}, {0x4}, {0x0, 0x3}, {0x2, 0x3}, {0x2, 0x7}, {0x4, 0x3}, {0x1, 0x2}, {0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0x7}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x7}, {0x5}, {0x5, 0x1}, {0x1, 0x6}, {0x2, 0x7}, {0x6, 0xa}, {0x1, 0x4}, {0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x6, 0x8b, 0x12, 0x1, 0x30, 0x4d, 0xb, 0x30, 0x30, 0x60, 0x6c, 0x36, 0x12, 0x24, 0x1, 0x30, 0xc, 0x4, 0x12, 0xc, 0x3, 0x48, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x9}, {0x4, 0xa}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x5}, {0x3}, {0x7, 0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x3, 0x7}, {0x2, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x1}, {0x3, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x5}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x7}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0x2}, {0x1}, {0x1, 0x3}, {0x5, 0x5}, {0x4, 0x3}, {0x3, 0x9}, {0x1}, {0x4, 0x3}, {0x2, 0x4}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x4}, {0x5, 0x5}, {0x3, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0x7}, {0x6, 0x7}, {0x6, 0x3}, {0x6, 0x4}, {0x6, 0x4}, {0x3, 0x3}, {0x2, 0x6}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0x12, 0x0, 0x0, 0x40, 0x2, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x7}, {0x5, 0x5}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x4, 0x9}, {}, {0x7, 0x5}, {0x2, 0x2}, {0x6, 0x6}, {0x0, 0xa}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0xa}, {0x6, 0x4}, {0x5}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0x6}, {0x3, 0x7}, {0x5, 0x6}, {0x6, 0x2}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0x1}, {0x3, 0x9}, {0x3, 0x6}, {0x1, 0x4}, {0x6, 0x8}, {0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x7}, {0x5, 0x3}, {0x4, 0x3}, {0x5, 0x4}, {0x7, 0x5}, {0x3, 0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x3, 0x8}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x7}, {0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0xa}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x6}, {0x3, 0x5}, {0x6, 0x1}, {0x1, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x16, 0x9, 0x4, 0x16, 0x0, 0x1b, 0x24, 0x36, 0x12, 0xc2544d8e690adfef, 0x1b, 0x3]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x3, 0x60, 0xc, 0x60, 0x1b, 0x9, 0x1, 0x30, 0x30, 0x0, 0x36, 0x2, 0x60, 0x48, 0x12, 0x30, 0x48, 0x6c, 0x48, 0x4, 0x1, 0x2, 0x24, 0xc, 0x1b, 0x78, 0x0, 0x5]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x8000, 0x8, 0xf5b0, 0xe619, 0x3, 0x4, 0x9]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x9}, {0x5, 0x2}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x6}, {0x5, 0x8}, {0x7, 0x3}, {0x4, 0x4}, {0x7, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0xa}, {0x7, 0x9}, {0x3, 0x3}, {0x7, 0x8}, {0x7, 0x6}, {0x4, 0x1}, {0x2, 0x8}, {0x6, 0x3}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x4}, {0x6, 0x5}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x5}, {0x0, 0x4}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x3, 0x17}, {0x5, 0x7}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0xa}, {0x5, 0x6}, {0x2}, {0x6, 0x5}, {0x0, 0x9}, {0x5, 0x4}, {0x1, 0x2}, {0x2}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x5}, {0x2, 0x5}, {0x1, 0x7}, {}, {0x1, 0xa}, {0x2, 0x9}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xff, 0x0, 0x197, 0x8000, 0x3, 0x8, 0x3]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x36, 0x6c, 0x12, 0x1, 0x18, 0x1, 0x12, 0x24, 0x30, 0x24, 0x48]}, @NL80211_TXRATE_HT={0x42, 0x2, [{}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x8}, {0x4, 0x2}, {0x0, 0x6}, {0x5, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x1}, {0x4, 0x8}, {0x7, 0x4}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x9}, {0x2}, {0x0, 0x4}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x6}, {0x7}, {0x6, 0x9}, {0x0, 0x5}, {0x1, 0x7}, {}, {0x6, 0x8}, {}, {0x4, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x5}, {0x7, 0xa}, {0x0, 0x1}, {0x3, 0x5}, {0x4, 0x4}, {0x2, 0x1}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x9}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x3}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x2}, {0x5, 0x2}, {0x2, 0x8}, {0x2, 0x3}, {0x4, 0x9}, {0x0, 0x6}, {0x5}, {0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x9, 0x30, 0x5, 0x6c, 0x24, 0x3, 0x60]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x4, 0xc, 0x76, 0x55, 0xc, 0x30, 0x6, 0x36, 0x48, 0x60, 0xc, 0x16]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0x3, 0x24, 0xc, 0x6, 0xc, 0xb, 0x10, 0xb, 0x30, 0x1, 0x60, 0x9, 0x12, 0x1c, 0x48, 0x60, 0x3, 0x14, 0x1b, 0x5, 0x36, 0x6, 0xb, 0x18, 0x6, 0x6, 0x60, 0x12, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5e, 0x8001, 0x3, 0x6, 0x4, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x5, 0x16, 0x0, 0xc, 0x30, 0x3, 0x12, 0x2, 0x16, 0x6, 0x24, 0x3, 0x1b, 0x48, 0x6c, 0x3, 0x36, 0x48, 0xb, 0x60, 0x2, 0x76, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x7}, {0x5, 0x8}, {0x0, 0x8}, {0x7, 0x3}, {0x7, 0x6}, {0x3, 0x5}, {0x3, 0x3}, {0x0, 0x9}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x7, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x5, 0x5}, {0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x68, 0x4, 0x0, 0x9, 0x4, 0x24, 0xc, 0x4e, 0x5, 0x10, 0x30, 0xc, 0x1b, 0x16, 0x3, 0x1b]}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x2}, {0x6, 0x9}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x0, 0x6, 0x30, 0x4, 0x3, 0x77, 0x16, 0x48, 0x2, 0x9, 0x1c, 0x36, 0x24]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x16, 0x16]}, @NL80211_TXRATE_HT={0x48, 0x2, [{}, {0x6, 0x1}, {0x1}, {0x4, 0x6}, {0x3, 0x5}, {0x1, 0x4}, {0x6, 0x1}, {0x4}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x2}, {0x5, 0x3}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x1}, {0x2}, {0x0, 0x8}, {0x4}, {0x6, 0xa}, {0x3, 0x8}, {0x5, 0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x7, 0x6}, {0x1, 0x4}, {0x4, 0x5}, {0x4, 0xa}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x5}, {0x3, 0x4}, {0x2, 0xa}, {0x2}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x2}, {0x5, 0x9}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x7, 0x9}, {0x7, 0x4}, {0x7, 0x9}, {0x6, 0x8}, {0x0, 0x5}, {0x2, 0xa}, {0x3}, {0x5, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0xa}, {}, {0x0, 0x8}, {}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x8}, {0x0, 0x2}, {0x4, 0x3}, {0x5, 0x9}, {0x7, 0xa}, {0x4, 0x6}, {0x7, 0x4}, {0x7, 0x7}, {0x5, 0x2}, {0x7, 0x3}, {0x2, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x6, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x96fc, 0x4, 0x4, 0xff, 0xfff9, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6, 0x16, 0x16, 0xb, 0x1, 0x16, 0x0, 0x36, 0x5, 0x16, 0xc, 0x6c, 0x6c, 0x9, 0x16, 0x1b, 0x30, 0x4, 0x30, 0x18, 0x18, 0x16, 0xa, 0x6c, 0x6, 0x1b, 0x6c, 0x30, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x6, 0x8, 0x36, 0x36, 0xc, 0x3, 0x1b, 0x60, 0x60, 0x3, 0x48, 0x24, 0xc, 0x5d, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x6}, {0x1, 0x7}, {0x0, 0x6}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x520f, 0x5, 0x4, 0x3, 0x6, 0x4, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xc2, 0x4, 0x0, 0x800, 0x95, 0x20, 0x80]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x9}, {0x7}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x5, 0x6}, {0x0, 0x9}, {0x2, 0x1}, {0x2, 0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x7, 0x4}, {0x3, 0x7}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0x8}, {0x5, 0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x6}, {0x5, 0x6}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x8}, {0x5, 0xa}, {0x6, 0xa}, {0x6, 0x2}, {0x4, 0x2}, {0x4, 0x6}, {0x3, 0x3}, {0x4, 0x7}, {0x7, 0x8}, {0x4, 0x6}, {0x4}, {0x1, 0x5}, {0x5, 0x4}, {0x6}, {0x5, 0x2}, {0x4, 0x9}, {0x2}, {0x4, 0xa}, {0x1, 0x4}, {0x4, 0x4}, {0x2, 0x9}, {0x7, 0x9}, {0x5, 0x2}, {0x1, 0x1}, {0x2, 0x8}, {0x3, 0x4}, {0x4}, {0x1, 0x6}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x3a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x6}, {0x0, 0x4}, {0x2, 0x3}, {0x7, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x6, 0x9}, {0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x3, 0x47f, 0x7fff, 0x8000, 0x0, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x0, 0x4, 0x60, 0x9, 0x12, 0x48, 0x6c, 0x16, 0x1b, 0x4, 0xb, 0x12, 0x2, 0x3, 0x2, 0x2, 0x4, 0x6c, 0x5, 0x24, 0x5, 0x1b, 0x6]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x5}, {0x7, 0x2}, {0x2, 0x6}, {0x5, 0x2}, {0x5, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0xa}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x5}, {0x2, 0x9}, {0x4, 0x7}, {0x2, 0xa}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x1}, {0x7, 0x4}, {0x0, 0x6}, {0x1}, {0x5, 0x6}, {0x5, 0x7}, {0x4, 0x6}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x6}, {0x5}, {0x3}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0xa}, {0x5, 0x4}, {0x0, 0x8}, {0x2, 0x5}, {0x2, 0x6}, {0x0, 0x4}, {0x3}, {0x2, 0x3}, {0x3, 0x3}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0x9}, {0x4}, {0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x6, 0x2}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x5, 0xa}, {0x5, 0x1}, {0x1, 0x6}, {0x2}, {0x5, 0xa}, {0x1, 0x9}, {0x6, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x7, 0x6}, {0x5, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x6, 0x2}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0x9}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x5}, {}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x5}, {0x2, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x3}, {0x6}, {0x5, 0x5}]}]}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x9, 0x18, 0x9, 0x18, 0x6c, 0xa, 0x48, 0xc, 0xc, 0xb, 0xc, 0x1b, 0xc, 0x1b, 0x16, 0x2, 0x6c, 0x18, 0x2]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x4}, {0x6, 0x8}, {0x3, 0x6}, {0x4, 0x2}, {0x2, 0x9}, {0x2, 0x8}, {0x5, 0x1}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x6, 0x2}, {0x1, 0x5}, {0x7, 0x9}, {0x6, 0x8}, {0x7, 0x9}, {0x3, 0x6}, {0x0, 0x4}, {0x2, 0x9}, {0x4, 0x5}, {0x4, 0x4}, {0x2, 0x3}, {0x3, 0x4}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x7, 0x5}, {0x3, 0x1}, {0x2, 0x6}, {0x5, 0x7}, {0x7, 0x2}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x2, 0x2}, {0x1}, {0x6}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x7}, {0x0, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x1}, {0x2, 0x3}, {0x5, 0x1}, {0x4}, {0x7, 0x1}, {0x1, 0x9}, {}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x3, 0x1b, 0x12, 0x18, 0x16, 0x24, 0x12, 0x48, 0x24, 0xc, 0x48, 0x1, 0x16, 0x1, 0x36, 0x16, 0x3, 0x1b, 0x5, 0x2e, 0xb, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7ff, 0x8000, 0x2, 0x6, 0x3ff, 0x7, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x13, 0x17, 0x30, 0x1b, 0x36, 0x36, 0x2, 0x6c, 0x1b, 0xc, 0x6, 0x3, 0x30, 0x1, 0x6, 0x2, 0x24, 0x6c, 0x0, 0x12, 0x6c, 0x6, 0x60, 0x5, 0x6c, 0x3, 0x30, 0x36, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x1b, 0x30, 0x16, 0x18, 0xb, 0x48, 0x1, 0xc, 0x2, 0x1b, 0x48, 0x3, 0x1, 0x2, 0x30, 0x36, 0x4, 0xc, 0x16, 0x24, 0x36]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x1b, 0x18, 0x6c, 0x6, 0x24, 0x1b, 0x60, 0x1b, 0x66, 0x1b, 0x6c, 0x1b, 0x24, 0x48, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x41, 0x5, 0x9, 0xfffb, 0xcb1f, 0x2000, 0xaf31]}}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7, 0x1, 0x5, 0x0, 0x100, 0x6, 0x1]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0xa}, {0x4, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x4}, {0x1, 0x7}, {0x7, 0x7}, {0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x9}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x1}, {0x4, 0x3}, {0x0, 0xa}, {}, {0x0, 0x2}, {0x3, 0x2}, {0x7, 0xa}, {0x5, 0x5}, {0x6}, {0x7, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x5}, {0x1}, {0x1}, {0x3, 0x7}, {0x6, 0x2}, {0x0, 0x4}, {0x3, 0x2}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x4, 0x6}, {0x4, 0x9}, {0x3, 0x5}, {0x6, 0x5}, {0x7, 0x5}, {0x6, 0x4}, {0x2, 0x1}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0x3}, {0x1, 0x6}, {0x3, 0x6}, {0x6, 0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x5}, {}, {0x3, 0x8}, {0x3, 0x6}, {0x3, 0x9}, {0x4, 0x2}, {0x0, 0x3}, {0x4, 0x5}, {0x4, 0x1}, {0x3, 0x7}, {0x5, 0x8}, {0x3, 0xa}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x2, 0x3}, {0x1, 0x2}]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0xc, 0x9, 0x60, 0x6c, 0x6, 0xb, 0x6, 0x1b, 0xc, 0xc, 0x12, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x176, 0x6, 0x6, 0x9, 0x6c7, 0xe0]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2c, 0x1, 0x6c, 0x6, 0x6c, 0x12, 0x4, 0x36, 0x5, 0x30, 0x3, 0x9, 0x3, 0x9, 0x6, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x24, 0x6, 0x9, 0x6, 0xb, 0x12, 0x12, 0x2f, 0x6c, 0x16, 0x3, 0x24, 0x1b, 0x6, 0x24, 0x48, 0x30, 0x48, 0x4, 0x1b, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x9}, {0x1, 0x9}, {0x4}, {0x2, 0x5}, {0x7, 0x4}, {0x5, 0x7}, {0x0, 0x1}, {}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x1}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x6}, {0x7, 0x1}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x4, 0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x6, 0x5}, {0x7}, {0x0, 0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x9}, {0x1, 0x1}, {0x6}, {0x6, 0x8}, {0x2, 0x2}, {0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x0, 0x1}, {0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0xa}, {0x7, 0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0x2}, {0x7}, {0x6, 0x4}, {0x4, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x2}, {0x1, 0x2}, {0x3, 0x3}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x1}, {0x6, 0x2}, {0x4, 0x3}, {0x7, 0x9}, {0x3, 0x9}, {0x6, 0x4}, {0x4, 0x3}, {0x1, 0x8}, {0x4, 0x8}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x2}, {0x2, 0x9}, {0x4, 0x8}, {0x7, 0x1}, {0x3, 0x4}, {0x1, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x12, 0x24, 0x2, 0xc, 0x12, 0x18, 0x14, 0x1b, 0x6c, 0x3, 0x48347123de33fb90, 0x6, 0xb, 0x36, 0x6, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x1, 0x6c, 0x36, 0x60, 0x36, 0x60, 0x2, 0x3, 0x0, 0x6, 0x6, 0x2, 0x30, 0x2]}]}]}]}, 0x9ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x44891) 04:53:39 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202eafe0696c65300a"], 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x20, 0x70bd23, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x78, 0x40}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x198}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) setresuid(0xee01, 0xee00, 0x0) setuid(0x0) setfsuid(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = epoll_create(0x3ff) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r6) fchown(r5, r6, 0xffffffffffffffff) r7 = fcntl$dupfd(r4, 0x0, r4) accept4$inet(r7, &(0x7f0000000440), &(0x7f0000000180)=0x10, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x0, &(0x7f0000000340), 0x8, &(0x7f00000000c0)={[{@nombcache}], [{@euid_eq={'euid', 0x3d, r8}}, {@hash}, {@appraise}, {@obj_role={'obj_role', 0x3d, 'nombcache'}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) 04:53:39 executing program 5: mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='+%\x00', 0x40, 0x100, &(0x7f0000000040)={0x4, 0x401, 0x6, 0x8}) mq_open(&(0x7f0000000080)='\x00', 0x2, 0x20, &(0x7f00000000c0)={0x8, 0x645, 0x10001, 0x7}) 04:53:39 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:53:39 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:39 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) fcntl$setflags(r1, 0x2, 0x1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)) 04:53:39 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:53:39 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="99000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf255d0000007000a6800a00060008021100000000000a00060008021100000100000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000000000a00060008021100000100000a000600ffffffffffff0000"], 0x84}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) readv(r3, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:53:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:53:51 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:51 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) setfsuid(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, r6) accept4$inet6(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x800) socket$inet_udp(0x2, 0x2, 0x0) mq_open(&(0x7f0000000200)='#&(@\\.#^[\\\x00', 0x80, 0x6, &(0x7f0000000240)={0x10001, 0x200, 0xfffffffffffff000}) 04:53:51 executing program 5: r0 = mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/15, 0xf, 0x9, &(0x7f0000000040)={0x77359400}) 04:53:51 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:53:51 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:53:51 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:53:51 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x0, 0x7, 0x2, @local, @private2, 0x7, 0x1, 0x5}}) 04:53:51 executing program 4: sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000080)) setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 04:53:51 executing program 5: mq_open(&(0x7f0000000140)='.\x00', 0x40, 0x0, 0x0) 04:53:51 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:53:51 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:53:51 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:53:51 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="23a897adb9c74de7d53a39923221202e2f66696c65300a092a13cb4bc843ce"], 0xb) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="2300000000030000000000"], 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) write(r2, &(0x7f0000000200)="92c1625018db9cffe3cc49050fe03a5cd7a53fdaaf908e98128bbf09e43274b1ed61524349dfe3b6f9574d59e367176d85ef269b0a706807b708d8d23a0e25222de332a9ffd30e128c02553ef1b4f535f86a93569fd9f501579fa296f050203d6a38076fb4133450c686df4e8eabecbc8abfd38c6a33ce95b5c14db2727be142dbd54c21c8443dc184ebf9adcdd320fca41a", 0x92) r5 = dup(r1) readv(r5, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:53:51 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\xff\x03\x00\x00') r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) setfsuid(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, r6) accept4$inet6(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x1c, 0x800) socket$inet_udp(0x2, 0x2, 0x0) mq_open(&(0x7f0000000200)='#&(@\\.#^[\\\x00', 0x80, 0x6, &(0x7f0000000240)={0x10001, 0x200, 0xfffffffffffff000}) 04:53:51 executing program 4: mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80, 0x0) mount$bind(&(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)='./file1\x00', &(0x7f0000002a00), 0x804014, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) setresuid(0xee01, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x2800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x16}) recvmsg$unix(r3, &(0x7f0000002940)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000000180)=""/234, 0xea}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/253, 0xfd}, {&(0x7f0000001380)=""/248, 0xf8}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/94, 0x5e}, {&(0x7f0000002500)=""/64, 0x40}, {&(0x7f0000002540)=""/193, 0xc1}, {&(0x7f0000002640)=""/84, 0x54}, {&(0x7f00000026c0)=""/238, 0xee}], 0xa, &(0x7f0000002880)=ANY=[@ANYBLOB="38000000000000008000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="3980be5d"], 0x88}, 0x40000000) close(r4) 04:53:51 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_macvtap\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="35000000000000000c000000ac1e0101e00000014e204e233f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000002ac1e0001fffffffb0600000000000000000000000000000000000000000000f30000000000000000000000000000000000000000000000000000000000000000000000008100448120000000000000000000000000000000ffffffff00000000"]}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:53:51 executing program 5: r0 = mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x0) kcmp(0xffffffffffffffff, r1, 0x3, r0, r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)=ANY=[@ANYBLOB="098c12ae1f15", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r3) preadv2(r3, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000540)=""/143, 0x8f}], 0x7, 0x0, 0x7ff, 0x3) mq_timedreceive(r2, &(0x7f0000000040)=""/230, 0xe6, 0x8, &(0x7f0000000180)={0x0, 0x989680}) 04:53:51 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:54:00 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x482000) r2 = fcntl$dupfd(r0, 0x406, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 04:54:00 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:54:00 executing program 5: r0 = mq_open(&(0x7f0000000140)='.\x00', 0x1, 0x1d4, 0x0) r1 = socket$inet6(0xa, 0x6, 0xb8e) clock_gettime(0x0, &(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(0xffffffffffffffff) copy_file_range(r3, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r4) ppoll(&(0x7f0000000100)=[{r0, 0x33c0}, {r1, 0x4152}, {r4, 0x8043}, {r1, 0x88}, {r2, 0x25c0}], 0x5, &(0x7f0000000180)={0x77359400}, &(0x7f00000000c0)={[0x4]}, 0x8) 04:54:00 executing program 3: setresuid(0xee01, 0xee00, 0x0) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2004) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:54:00 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r2) fsync(r2) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r1) readv(r3, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:54:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:54:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2, {r0}}, 0x58) 04:54:00 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:54:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 04:54:00 executing program 5: mq_open(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) mq_timedreceive(r1, &(0x7f0000000100)=""/109, 0x6d, 0x316, &(0x7f0000000180)) unlink(&(0x7f00000001c0)='./file0\x00') dup(r0) pread64(r0, &(0x7f0000000040)=""/107, 0x6b, 0xffffffff) 04:54:00 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:54:00 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:54:00 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:54:00 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x81) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:54:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2, {r0}}, 0x58) 04:54:09 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) (fail_nth: 1) 04:54:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2, {r0}}, 0x58) 04:54:09 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000780)={0x6, 0x40}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x440041, 0x0) sendmmsg$unix(r3, &(0x7f0000000e00)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)="9e4c86035426a2365c621bf63c5618cdd9a8cd6bb5422cd4cb9cc898e8fe5e03bd8a73f3a3b885487b4d6ab9c58d9779c593d985b3cad76ce6ebec38a960b8f250c27fb9815454f25ffcf20d362a584d83cf865a8ca7c96250bd23086afe1c751740c74fcbcb14542e799dee1afc84d3a878e41cfd4ce5329f2d8d8344bc6126cfd050ebeafb5a730391e8948a65e14a36d2998ef40a473063ab9ef23ac2a0b4e29180046d3fb1a06a7a02e5c4670b0c274bab75f3014293f573e300567b038c5bd3e075e2d407f83a44357ba312727781e0614a387ba815ec6ca33d10c0581242ffa1b2298b197dcc4a108f7d8d", 0xee}, {&(0x7f0000000300)="5d9e5fcd4951d4d551369400dffce65755864fa8fc34761572bba9711a08e1164bf8641e99563ce01b3bc527ac0c50ce7afee0ef96a7fa14d78925743ba3a155e860d8", 0x43}, {&(0x7f0000000440)="4dcaf91a2088ef38f3af42145ce5c1fd15d5ef2c6baf6a02984d420049923611edc481eb09f5d41e9a8599f3deec2b185770c9355611360a32e0c62f878f79a7051e6a46531b0510c9742c7cc953b586b660a47f5a0db1aae139f08a239c54fb0dc362ea802797960424d170fc32cef30556c0c37abe522de10b430f9f430e750a833cf1a2f9c261f59e8c0329c761d4570d084f8446853cf4e443df1a07", 0x9e}, {&(0x7f0000000380)="a9b1e6cbde", 0x5}, {&(0x7f0000000500)="7b4c7926135a89d20741548d1bb27d065032508385efa432bde6d14864ce39c9253ddc28f991951b1bd79ed996affbdb26251ea4dd5a3e111ba09d03250485b980259b46f7463c43998cc7fd91f3cdcebc1b45f5e320a1e5be258474cd593f4d578c9d9fcc41decb796e1a43cc208ec9cd00e3cd37c255257542b11f", 0x7c}, {&(0x7f0000000580)="a1e5d345556f346d6e50df7727600ea1f8425305a8211800e4f339611d556f3ac7bd54b9d23f14c2225288240ce0b27fd55c4db130942a216ca24cdd28bbc6a3faa3b8a90c77f0465a09b67020aa7fe419d4ab2cfca3fb3044", 0x59}, {&(0x7f0000000600)="2d79dac74522d292da6b5762a383202b0b9e7d950a6e83a90176ac9474859a8c9340a8ac0cc5342eca166144f29691467130c03dcd4f14da6e305a8bed7da6338f50bb676097d037bdc3368f0facbfcb95af70db6114d1b2cf2a3c258b8ffed7f454993b57ae079a0078e4537956511c4016987c069ae170d3c2a05b29af3ccad8beea060fcd5dcd6f80fc9d6d30ceb501011e3c83aaf5ec6be81d16b41cb0031b23c807e51f53508cc96c386b9830eb23390f846fedde3864efc5714d898ba49ed46c5e70724133", 0xc8}], 0x7, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r0, r2, r1]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r4]}}], 0x60, 0x20004014}}, {{&(0x7f0000000800)=@abs={0xe9c042d0b69c7573, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d00)=[{&(0x7f00000003c0)="ca744611af470936eb4cfcb6fc63", 0xe}, {&(0x7f0000000880)="f49944eb", 0x4}, {&(0x7f00000008c0)="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", 0xfc}, {&(0x7f00000009c0)="57e81be127d8680541f62cb060e8e52d9ea55ccfbc656c78bdc5a1bcecede1990ccbbcb3096d68235b766f9acbaac2bf453582dbd22fdbc53376a90043ed1bd4fd98197026c57319cc1f72c3c6269d5354c959380315597f8d71ae4dbb717a630c2d8237deb83af0099d941aa1f29c882779dba48aed34db1a2097c68aac9dfd33725748222309c82f63afde3206755334a53f70113982d4a528764aa9a4c563e6055b", 0xa3}, {&(0x7f0000000a80)="54b947a429", 0x5}, {&(0x7f0000000ac0)="b107785927b613b24edfa0f043f44b6c1bf15d09b9a5163c6cc68bfe51d33ed46f02c78087074d91b24fe6243127cfb55b4b22fee6e838e1fe80bb8ef2f18cd207349df0acaf74443e5cc53a456e1f5a2efae729abfd7897a4511bb3e0d26da0c19c13017f0d7367cfc4d4fa84bf6dbfd922d2a1e0a0579a70486d7d2b96860658946196e3e5705c0f751b2c51d41dd852ce119f57d7ed2fb0", 0x99}, {&(0x7f0000000b80)="bdbbaf8af652c04994d06d8aba8c1dc1b9b7ae500c99a3ac95784a711dae009fdeb71580d219231c3bbf5b3e9ae7312a8f76983f653f3097f3a7dccb007f797ce5efd8f0268b152dec8847b6569ca7b282296fc02611e2564711d7fa36ad12c223aaf7be9b1877ee8989334269bebe118ab58310eff42559ad85db420da2e0b70a132f34cedc787befb723506ef88115981cf2e3017a41bfad6e10cce6be851b3559e698baf0d4", 0xa7}, {&(0x7f0000000c40)="1441ecd9d144c38593c7ed93ecd407c1902215799db766760666c24b48a422d2b622729f88cc29ad5b4f14f19752e3d8542a1c08d2c3b9b5abcc049ea5cb1351504eca5a9c8a9d9f2d4863154cd142140e10a3eae431529a7268a34f9434398dee23debb1d65fcb64c342d4e3adb2bbca8d690fb834a71199f947eab3e007b51ddb7eadb74a25bcba5f61adfe5dfd0442c", 0x91}], 0x8, &(0x7f0000000dc0)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18, 0x4048010}}], 0x2, 0x0) 04:54:09 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r6 = fork() r7 = fork() r8 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x13c, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 04:54:09 executing program 5: mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001680)=ANY=[@ANYBLOB="4500000000000000000000bbd22570d46169fbb067e07ced22ea385a6c925b2f1f46be0535bcb1214b4f"], 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x8000000401, 0x401, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001500)=ANY=[@ANYBLOB="232120302f66696c65300a879b375d3d0aff66978d17c19ee02e4993bb8cd8a3ffe037964dbe6a86c0d99dd7deb5837b83b5bb"], 0xb) r3 = dup(0xffffffffffffffff) copy_file_range(r3, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0x401, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001440), 0x40c000, 0x0) getresuid(&(0x7f0000001480)=0x0, &(0x7f0000000100), &(0x7f00000014c0)) statx(r2, &(0x7f0000001540)='./file0\x00', 0x800, 0x1, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fcntl$getown(r2, 0x9) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, r10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000200)="ea3554b5b4a5354d33af0d204b9b5046e706f0aed87ef8dc9b9ef29f9b81c39fed1db9578dd985e5ddfb7e4afdfbde635163c6b1a6c037f64a8ce626761226d06c8550881088f51a22223115a4d1bbbe8f78a4e7e1fb47a55253641f623b7ae43909afc66e4664d3a34bfeb1f50d1a4a7b17518d0df110a49e112a54b9a3b0aa4cf84dcb2d5e5809edb2a7629b35dd9c9cb46fbadc0715372701df0288657ed2d52ded85ef670e", 0xa7}, {&(0x7f00000002c0)="7cca8cee4be7c92cac63254dc4c0d255a2ea83222039283e838e879592c9d1d97d5c19f06e2ff50178c97d62dd23f629b6f63eea007e0350234c86758145930840759e9738fd3af1234e2e52fec6049f642798b654f0d2b60c706cbc414d4c8f41c0d36e167146d14abdb09611b76443e2c69245d5cd843f5d0855717b24fd5b748ea7040fda77c19e92219e877391f5dc314ed90bbaa7ba45b62b3cbd65945b1265d987e8ffed84aa34a20c26108b9477dca43a5dd32ec0c1d9e67c78bd74eb00700124ace560942f1868c02256a0f41369d04e65cc6e15101abe63f0d71c3fc804", 0xe2}], 0x3, &(0x7f0000001800)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c00000d000000000100000002000000de6537c89fbb12f06f8df67ea4fe7021159edf4a58f36dc89672ea66898a62f6994bc5e4f6fa1feaab0e4ab3a45d0bb78dc8b5d98054dd19bdb34b9994471f04de40ba5a90b8834b9c304311f9b0a90e5d6bef5706673c94be2e0f607352ae83299c8a402ff1b94649d9d9d718b7047d6f31ea6577e528fec668cda3732bb5bcbabc7346ed49d89521211b47ac8b6061f5f8069a7ac95ee1a63b2b29f4585055c54dc5984ed7cce2a6cbd725153af65ad96ee4841e45410726fb2b4aa595d03f3aed00691053c41f4d2d6bcd28e6d6a1d8bafa6d0e6e4975fdd2676c16d83abb94e88d3d01de19879b04e4538de93d2f9acd3a15a10c17ba5cbe654b909f", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x810}, 0x40004) mq_timedreceive(r2, &(0x7f0000000000)=""/15, 0xf, 0x1, &(0x7f0000000040)={0x77359400}) 04:54:09 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:54:09 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:54:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:54:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) [ 942.417513] FAULT_INJECTION: forcing a failure. [ 942.417513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.418526] CPU: 1 UID: 0 PID: 9776 Comm: syz-executor.7 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 942.418543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 942.418552] Call Trace: [ 942.418556] [ 942.418562] dump_stack_lvl+0xfa/0x120 [ 942.418588] should_fail_ex+0x4d7/0x5e0 [ 942.418611] _copy_to_user+0x32/0xd0 [ 942.418627] simple_read_from_buffer+0xe0/0x180 [ 942.418647] proc_fail_nth_read+0x189/0x270 [ 942.418666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 942.418685] ? security_file_permission+0x22/0x90 [ 942.418700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 942.418718] vfs_read+0x1eb/0xbe0 [ 942.418740] ? __pfx_vfs_read+0x10/0x10 [ 942.418759] ? lock_release+0xc8/0x290 [ 942.418776] ? __fget_files+0x20d/0x3b0 [ 942.418799] ksys_read+0x121/0x240 [ 942.418818] ? __pfx_ksys_read+0x10/0x10 [ 942.418841] do_syscall_64+0xbf/0x360 [ 942.418855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.418868] RIP: 0033:0x7fe4b00da69c [ 942.418878] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 942.418890] RSP: 002b:00007fe4ad69d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 942.418903] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe4b00da69c [ 942.418911] RDX: 000000000000000f RSI: 00007fe4ad69d1e0 RDI: 0000000000000005 [ 942.418919] RBP: 00007fe4ad69d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 942.418926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.418934] R13: 00007ffec19dd5df R14: 00007fe4ad69d300 R15: 0000000000022000 [ 942.418950] 04:54:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:54:19 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:54:19 executing program 4: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, 0xee00, r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 04:54:19 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:54:19 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000000000000000003d3ac0d35daa93788b9828622151118ad3e46ac18664fe97760d3b662fbc563a0028d98b657e45b0a21449367b7ad80c7096f66ac14e03670050e274817c4d931a2704928434d21651bda9d775cfb66a2e0a811528eda2970bfaf5ce1276fe915282fa"], 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) r6 = dup(r1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000001c0), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/153, 0x99}, {&(0x7f0000001380)=""/87, 0x57}, {&(0x7f0000001400)=""/100, 0x64}], 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="20063a8a2f9f5dfc55040bca190e0100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78}, 0x2000) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000040)={0x0, 0x1f, [0xc7, 0x0, 0x1, 0x2, 0x7fffffff, 0x800]}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:54:19 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, 'gY;'}, 0xe) r2 = dup(r1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r9 = dup(r8) copy_file_range(r9, &(0x7f0000000040), r7, &(0x7f00000000c0)=0x401, 0x401, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f0000000240)=0xbd5, 0x9) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000200)=0xf14eba24dce32b4a) readv(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/10, 0xa}], 0x1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) write$binfmt_script(r1, &(0x7f0000001540)=ANY=[@ANYBLOB="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"/4126], 0x1013) 04:54:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) (fail_nth: 1) 04:54:19 executing program 5: mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='(\x00', 0x1, 0x15, &(0x7f0000000040)={0xffffffff00000000, 0x2, 0x7, 0x8}) 04:54:19 executing program 5: copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x2, 0x0) mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) [ 952.099771] FAULT_INJECTION: forcing a failure. [ 952.099771] name failslab, interval 1, probability 0, space 0, times 0 [ 952.101490] CPU: 1 UID: 0 PID: 9806 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 952.101520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.101532] Call Trace: [ 952.101540] [ 952.101548] dump_stack_lvl+0xfa/0x120 [ 952.101590] should_fail_ex+0x4d7/0x5e0 [ 952.101626] ? getname_flags.part.0+0x48/0x540 [ 952.101652] should_failslab+0xc2/0x120 [ 952.101674] kmem_cache_alloc_noprof+0x5f/0x470 [ 952.101705] ? __mutex_unlock_slowpath+0x157/0x650 [ 952.101739] ? kernel_write+0x653/0x660 [ 952.101774] getname_flags.part.0+0x48/0x540 [ 952.101803] getname_flags+0x95/0xe0 [ 952.101850] user_path_at+0x27/0x90 [ 952.101882] do_fchownat+0xe0/0x1e0 [ 952.101906] ? __pfx_do_fchownat+0x10/0x10 [ 952.101927] ? ksys_write+0x1a3/0x240 [ 952.101957] ? __pfx_ksys_write+0x10/0x10 [ 952.101995] __x64_sys_chown+0x7b/0xc0 [ 952.102018] do_syscall_64+0xbf/0x360 [ 952.102042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.102064] RIP: 0033:0x7f6f889beb19 [ 952.102081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.102101] RSP: 002b:00007f6f85f34188 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 952.102123] RAX: ffffffffffffffda RBX: 00007f6f88ad1f60 RCX: 00007f6f889beb19 [ 952.102137] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000020000040 [ 952.102150] RBP: 00007f6f85f341d0 R08: 0000000000000000 R09: 0000000000000000 [ 952.102163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.102176] R13: 00007ffe03d1c84f R14: 00007f6f85f34300 R15: 0000000000022000 [ 952.102204] 04:54:19 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:54:19 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) r4 = openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) fchown(r4, r2, r3) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x84) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setfsuid(0xee00) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) fstat(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r7) r8 = dup(r6) copy_file_range(r8, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$SG_GET_SCSI_ID(r8, 0x2276, &(0x7f0000000000)) setfsuid(r2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:54:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) (fail_nth: 2) 04:54:19 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xeffd) 04:54:19 executing program 6: ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000080)=""/13) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000200)='cpu.max.burst\x00', 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file1', [{0x20, '#! '}, {0x20, '^}'}, {}, {0x20, '['}], 0xa, "579fa9fe32c7cdcbfc6a5b241b438396bc6364ea7d372ff9664345acc4d85b040762df7dfd7970806ca99241851a10fd4a2e1906956c103a5b979918074844251abad39a4d9040e3c87a4d47f3604819ba3a12d5228e8a48155562864575423279bc19c2081aaee0c48d84329796919c9746d770a686659ee7123d9a0ce4e25f2931f64073a99f744cf88cf2a574f2bfb3e78580ce013d4d8f9e764b2c5518f0e4d513284c6ec9bd42d64efd330b1c47aee1ce353c"}, 0xca) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xb) write$binfmt_script(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xb1) dup(r1) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/161, 0xa1}, {&(0x7f0000000300)=""/247, 0xf7}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000500)=""/123, 0x7b}], 0x4) 04:54:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:54:19 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x5914c1, 0x5) write$bt_hci(r2, &(0x7f0000000140)={0x1, @le_write_def_data_len={{0x2024, 0x4}, {0x2, 0x5}}}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="03000000000000ef2d2f66696c653000"]) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) setreuid(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0xd4, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a190897f3fb21f5577d6672b79b1a7e5217e184d50aa5f8c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8d91af92639cb6a35174ea81d1c883e8fc415d20e2529629"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "021ea37eff900ee612201be6575e83d599486c7aecab9a2c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53bd57cee63509f129a391ea4bbd998a731ea0cb5eaa5d24"}]]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022b00001e59e459886ec845d1a09b07e55c06966f7b8b71e007c74c271907062f8aa6f2fa94a046539828b8040d4db31865e0a2d0ef3dc83c0c6fb29ee9a5a313a1816a1f5de15a638439326a9b5cf8e56c5e0847baced264e946a33db9c2c3add307160271c565b40000000000007b3db4c76744abd8000000000000000000d9dfd3e82eceaa4fbe9427144e58ff7f00000000000097035303921d66df1b6bbb93089eb5a679e5394802aa34eefe7cdf28ca47dbd439c7536c69f5f82d6a93ec72484fdbc5b4e675f9f505a901666d78f63baac416de3e13a6078cacf5d01d0df7ef64fd57189a36e0ab2f615c00"/255, @ANYRES32=0x0, @ANYBLOB="08006b007c0f00000400080108000d00f7ffffff08000d0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x64, r9, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}}, 0x4000) 04:54:19 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8, 0x1f}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:54:19 executing program 5: ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'bridge0\x00', {0x1}, 0x3}) mq_open(&(0x7f0000000000)='\t\x04', 0x800, 0x80, 0x0) 04:54:19 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:54:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) (fail_nth: 3) 04:54:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 04:54:29 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) (fail_nth: 4) 04:54:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 04:54:29 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xfdef) 04:54:29 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) r4 = fcntl$dupfd(r3, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) 04:54:29 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/127, 0x7f}, {&(0x7f0000000200)=""/72, 0x48}], 0x2, 0x0, 0x5) 04:54:29 executing program 3: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100004f7d831a95c20018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000000000002e2f66696c653000"]) fchdir(r0) setresuid(0xee01, 0xee00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) r4 = geteuid() chown(&(0x7f0000000300)='./file0\x00', r4, r3) setfsuid(r2) setresuid(0x0, 0x0, r2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000010000007d2b7c00", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00.\x00']) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x20, 0x3, "3a38f0"}}) r7 = creat(&(0x7f0000000200)='./file0\x00', 0x108) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="06070000000000002e2f66696c6530000280991a0d0c3bfb88b631d54101c7deb396289aa6b602de20c49fb85796c1e908250ea5f1e33f7e4fa5da1514bf632c26d4df4d111ed4ebcdbf1bc84e0459dfa6e4f3c9f2ce51c2233a22e42cff31d5184dae0681064e713bc04da94faece35b9e0b5e7772c807b340908455a95c705c230021e5f37fb8b1e48361c54d7cd1794ae020935523b9a958ffd6fb02c720d13fcb51c8c4483b434"]) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) r8 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 04:54:29 executing program 5: sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x298, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "65e1fcac"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x75, 0x5, "10b29bca74c06d82a7b889209c282a31f0d7e5d86b98337e9c62a7a31019324e3f0b8b05017aa45991ac380bfd7753d88703ebcb69adb1f56a421667ce91a2ad02a60d0a3f106443aa2606e7cfecce9ed32131f30c661839686329a3d1088054f6a116f865b2318d44994b14ada2a4202e"}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$&g!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/@\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xc9, 0x5, "7f86b2beb285d07fd3cd375893078826e0edab94581e59e20c13be830213cb637a4fc7fb37c29bf8e615ff93f3dd23e82839f1ff9c324a2a9f17557b71d460ecd2cd4965133ffcc1868efa78b83b59dd3fec1e750889aad64c60ca07c4b1461624d3beca2abe5a0c15269484d3f8f8332967fba1a35311f354d2f4e36a88ded3ff9c6c805ae3b7890c6254df42a638113721da30b67b91e91e8278bd8130f909a0eb1693b840106ec0e4a415b2f87d3de656a688782b8d04382fea6c698c7297563abd074e"}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "4b9ad825c6f305c32f20d1dd2c07107c97cad4f6298d0bbc9ff4e8c8e6e285d91560d3a583f0f4aec19ccbbb687595dc006bf9db079649c7fb417cc9583500e4d7c2130db1baa3f2df845b4f7a42a800eeae897a190de33cb64583d26c47cd3a53eca1951c5e5eb842a3d606d0ae860e78a8f84204e4d43e5bdc84317864f6bf008d6918d2fd846813d9d4ad7e683f181a15e0668ace17d2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mq_open(&(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0) 04:54:29 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) [ 962.388091] FAULT_INJECTION: forcing a failure. [ 962.388091] name failslab, interval 1, probability 0, space 0, times 0 [ 962.390511] CPU: 0 UID: 0 PID: 9861 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 962.390546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 04:54:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xeffd) [ 962.390561] Call Trace: [ 962.390569] [ 962.390579] dump_stack_lvl+0xfa/0x120 [ 962.390628] should_fail_ex+0x4d7/0x5e0 [ 962.390671] ? jbd2__journal_start+0x193/0x6b0 [ 962.390698] should_failslab+0xc2/0x120 [ 962.390724] kmem_cache_alloc_noprof+0x5f/0x470 [ 962.390761] ? lock_is_held_type+0x9e/0x120 [ 962.390807] jbd2__journal_start+0x193/0x6b0 [ 962.390840] __ext4_journal_start_sb+0x325/0x5d0 [ 962.390879] ? ext4_setattr+0x786/0x2660 [ 962.390922] ext4_setattr+0x786/0x2660 [ 962.390963] ? __pfx___vfs_getxattr+0x10/0x10 [ 962.390999] ? current_time+0x106/0x190 [ 962.391037] ? from_vfsgid+0xef/0x150 [ 962.391070] ? __pfx_ext4_setattr+0x10/0x10 [ 962.391110] notify_change+0x677/0x1240 [ 962.391139] ? from_vfsuid+0xed/0x150 [ 962.391172] ? chown_common+0x3f7/0x660 [ 962.391199] chown_common+0x3f7/0x660 [ 962.391242] ? __pfx_chown_common+0x10/0x10 [ 962.391270] ? find_held_lock+0x2b/0x80 [ 962.391307] ? mnt_get_write_access+0x51/0x2d0 [ 962.391342] ? mnt_get_write_access+0x81/0x2d0 [ 962.391368] ? mnt_get_write_access+0x1ea/0x2d0 [ 962.391404] do_fchownat+0x125/0x1e0 [ 962.391432] ? __pfx_do_fchownat+0x10/0x10 [ 962.391457] ? ksys_write+0x1a3/0x240 04:54:29 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:54:29 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xeffdffff) [ 962.391494] ? __pfx_ksys_write+0x10/0x10 [ 962.391540] __x64_sys_chown+0x7b/0xc0 [ 962.391568] do_syscall_64+0xbf/0x360 [ 962.391596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.391622] RIP: 0033:0x7f6f889beb19 [ 962.391642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.391666] RSP: 002b:00007f6f85f34188 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 962.391692] RAX: ffffffffffffffda RBX: 00007f6f88ad1f60 RCX: 00007f6f889beb19 [ 962.391709] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000020000040 [ 962.391725] RBP: 00007f6f85f341d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.391740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.391755] R13: 00007ffe03d1c84f R14: 00007f6f85f34300 R15: 0000000000022000 [ 962.391791] [ 962.413255] EXT4-fs error (device sda) in ext4_setattr:5985: Out of memory 04:54:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 04:54:29 executing program 4: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) setresuid(0xee01, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 04:54:29 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) (fail_nth: 5) 04:54:29 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) 04:54:39 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) (fail_nth: 6) 04:54:39 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xfffffdef) 04:54:39 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) 04:54:39 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:54:39 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) r3 = syz_io_uring_complete(0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xee01}, 0xc) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000000c0)=0x1, 0x4) 04:54:39 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) (fail_nth: 1) 04:54:39 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "56c622446d08d0c19e93d5657b9ad9d3aab301000000000000311629ab13d5b9bf3eb9adb62ed1ef55704b87736f0f489ce6202e55dd9a1576d4d94a7db0c75066f8dbf863fd5ee3cf82a392256b1cb9764f840200732930bab0c05c91173aa20c31d36efe4db9882671c8abf63bbb52d632137db31aaba752606292fcc86832b7eb00462015e06e989e3e5028b9024a924d037ec26ed7afccf79bb0d78beeeb7502202c66f9755e096286da"}, 0xb7) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/158, 0x9e}], 0x1) 04:54:39 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) [ 972.970118] FAULT_INJECTION: forcing a failure. [ 972.970118] name failslab, interval 1, probability 0, space 0, times 0 [ 972.972053] CPU: 0 UID: 0 PID: 9907 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 972.972085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 972.972098] Call Trace: [ 972.972105] [ 972.972114] dump_stack_lvl+0xfa/0x120 [ 972.972158] should_fail_ex+0x4d7/0x5e0 [ 972.972196] should_failslab+0xc2/0x120 [ 972.972227] __kmalloc_cache_noprof+0x73/0x470 [ 972.972257] ? _kstrtoull+0x13e/0x200 [ 972.972288] ? __pfx__kstrtoull+0x10/0x10 [ 972.972318] ? alloc_pipe_info+0x10d/0x5a0 [ 972.972346] ? alloc_pipe_info+0x10d/0x5a0 [ 972.972366] alloc_pipe_info+0x10d/0x5a0 [ 972.972390] splice_direct_to_actor+0x78c/0x9d0 [ 972.972422] ? __pfx_direct_splice_actor+0x10/0x10 04:54:40 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) [ 972.972457] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 972.972487] ? __lock_acquire+0xc65/0x1b70 [ 972.972518] do_splice_direct+0x179/0x250 [ 972.972546] ? __pfx_do_splice_direct+0x10/0x10 [ 972.972575] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 972.972605] ? __do_sys_copy_file_range+0x18f/0x450 [ 972.972638] vfs_copy_file_range+0x7c3/0x1530 [ 972.972668] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 972.972695] ? __fget_files+0x20d/0x3b0 [ 972.972739] __do_sys_copy_file_range+0x18f/0x450 [ 972.972766] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 972.972790] ? ksys_write+0x1a3/0x240 [ 972.972823] ? __pfx_ksys_write+0x10/0x10 [ 972.972867] do_syscall_64+0xbf/0x360 [ 972.972892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.972915] RIP: 0033:0x7fc684f80b19 [ 972.972933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 972.972955] RSP: 002b:00007fc6824f6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 972.972977] RAX: ffffffffffffffda RBX: 00007fc685093f60 RCX: 00007fc684f80b19 [ 972.972993] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 972.973007] RBP: 00007fc6824f61d0 R08: 0000000000000401 R09: 0000000000000000 [ 972.973021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.973034] R13: 00007fffc8e158df R14: 00007fc6824f6300 R15: 0000000000022000 [ 972.973065] [ 973.011616] FAULT_INJECTION: forcing a failure. [ 973.011616] name failslab, interval 1, probability 0, space 0, times 0 [ 973.013443] CPU: 0 UID: 0 PID: 9905 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 973.013474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 973.013487] Call Trace: [ 973.013495] [ 973.013503] dump_stack_lvl+0xfa/0x120 [ 973.013546] should_fail_ex+0x4d7/0x5e0 [ 973.013584] ? jbd2__journal_start+0x193/0x6b0 [ 973.013609] should_failslab+0xc2/0x120 [ 973.013633] kmem_cache_alloc_noprof+0x5f/0x470 [ 973.013666] ? lock_is_held_type+0x9e/0x120 [ 973.013708] jbd2__journal_start+0x193/0x6b0 [ 973.013737] __ext4_journal_start_sb+0x325/0x5d0 [ 973.013772] ? ext4_dirty_inode+0xa5/0x130 [ 973.013812] ext4_dirty_inode+0xa5/0x130 [ 973.013849] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 973.013883] __mark_inode_dirty+0x1b7/0xd00 04:54:40 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x7ffffffff000) [ 973.013911] ext4_setattr+0x8f2/0x2660 [ 973.013959] ? __pfx___vfs_getxattr+0x10/0x10 [ 973.013992] ? current_time+0x106/0x190 [ 973.014026] ? from_vfsgid+0xef/0x150 [ 973.014055] ? __pfx_ext4_setattr+0x10/0x10 [ 973.014091] notify_change+0x677/0x1240 [ 973.014117] ? from_vfsuid+0xed/0x150 [ 973.014146] ? chown_common+0x3f7/0x660 [ 973.014171] chown_common+0x3f7/0x660 [ 973.014201] ? __pfx_chown_common+0x10/0x10 [ 973.014232] ? find_held_lock+0x2b/0x80 [ 973.014265] ? mnt_get_write_access+0x51/0x2d0 [ 973.014297] ? mnt_get_write_access+0x81/0x2d0 [ 973.014320] ? mnt_get_write_access+0x1ea/0x2d0 [ 973.014352] do_fchownat+0x125/0x1e0 [ 973.014378] ? __pfx_do_fchownat+0x10/0x10 [ 973.014401] ? ksys_write+0x1a3/0x240 [ 973.014434] ? __pfx_ksys_write+0x10/0x10 [ 973.014474] __x64_sys_chown+0x7b/0xc0 [ 973.014500] do_syscall_64+0xbf/0x360 [ 973.014525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.014549] RIP: 0033:0x7f6f889beb19 [ 973.014567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 973.014588] RSP: 002b:00007f6f85f34188 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 973.014611] RAX: ffffffffffffffda RBX: 00007f6f88ad1f60 RCX: 00007f6f889beb19 [ 973.014626] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000020000040 [ 973.014640] RBP: 00007f6f85f341d0 R08: 0000000000000000 R09: 0000000000000000 [ 973.014655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.014668] R13: 00007ffe03d1c84f R14: 00007f6f85f34300 R15: 0000000000022000 [ 973.014700] 04:54:40 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r2) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x1) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x811) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xb) r4 = dup(r1) readv(r4, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:54:40 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) setuid(0xffffffffffffffff) 04:54:40 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x4, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57801513}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400f1}, 0x10000010) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb829}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 04:54:40 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) (fail_nth: 2) 04:54:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) (fail_nth: 7) [ 973.335076] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2564 sclass=netlink_xfrm_socket pid=9928 comm=syz-executor.4 04:54:40 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xf0ffffff7f0000) 04:54:40 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 1) 04:54:40 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x74ab0c0e, 0xffffffff, 0x4, 0xdc85}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:54:40 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) (fail_nth: 3) [ 973.514847] FAULT_INJECTION: forcing a failure. [ 973.514847] name failslab, interval 1, probability 0, space 0, times 0 [ 973.516584] CPU: 1 UID: 0 PID: 9938 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 973.516613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 973.516626] Call Trace: [ 973.516634] [ 973.516642] dump_stack_lvl+0xfa/0x120 [ 973.516684] should_fail_ex+0x4d7/0x5e0 [ 973.516720] ? getname_flags.part.0+0x48/0x540 [ 973.516747] should_failslab+0xc2/0x120 [ 973.516770] kmem_cache_alloc_noprof+0x5f/0x470 [ 973.516799] ? find_held_lock+0x2b/0x80 [ 973.516830] ? ksys_write+0x187/0x240 [ 973.516866] getname_flags.part.0+0x48/0x540 [ 973.516895] getname_flags+0x95/0xe0 [ 973.516926] do_sys_openat2+0x9f/0x1b0 [ 973.516951] ? __pfx_do_sys_openat2+0x10/0x10 [ 973.516987] __x64_sys_creat+0xcc/0x120 [ 973.517014] ? __pfx___x64_sys_creat+0x10/0x10 [ 973.517039] ? __pfx_ksys_write+0x10/0x10 [ 973.517079] do_syscall_64+0xbf/0x360 [ 973.517103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.517126] RIP: 0033:0x7f5fc6611b19 [ 973.517142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 973.517163] RSP: 002b:00007f5fc3b87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 973.517184] RAX: ffffffffffffffda RBX: 00007f5fc6724f60 RCX: 00007f5fc6611b19 [ 973.517198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 973.517211] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 973.517232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.517245] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 973.517273] [ 973.531703] FAULT_INJECTION: forcing a failure. [ 973.531703] name failslab, interval 1, probability 0, space 0, times 0 [ 973.542633] CPU: 0 UID: 0 PID: 9942 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 973.542663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 973.542676] Call Trace: [ 973.542684] [ 973.542692] dump_stack_lvl+0xfa/0x120 [ 973.542735] should_fail_ex+0x4d7/0x5e0 [ 973.542771] ? alloc_pipe_info+0x1e8/0x5a0 [ 973.542792] should_failslab+0xc2/0x120 [ 973.542815] __kmalloc_noprof+0xb4/0x4b0 [ 973.542848] ? kasan_save_track+0x14/0x30 [ 973.542874] alloc_pipe_info+0x1e8/0x5a0 [ 973.542897] splice_direct_to_actor+0x78c/0x9d0 [ 973.542927] ? __pfx_direct_splice_actor+0x10/0x10 [ 973.542960] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 973.542988] ? __lock_acquire+0xc65/0x1b70 [ 973.543017] do_splice_direct+0x179/0x250 [ 973.543043] ? __pfx_do_splice_direct+0x10/0x10 [ 973.543070] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 973.543098] ? __do_sys_copy_file_range+0x18f/0x450 [ 973.543129] vfs_copy_file_range+0x7c3/0x1530 [ 973.543157] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 973.543183] ? __fget_files+0x20d/0x3b0 [ 973.543231] __do_sys_copy_file_range+0x18f/0x450 [ 973.543256] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 973.543279] ? ksys_write+0x1a3/0x240 [ 973.543310] ? __pfx_ksys_write+0x10/0x10 [ 973.543351] do_syscall_64+0xbf/0x360 [ 973.543374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.543397] RIP: 0033:0x7fc684f80b19 [ 973.543414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 973.543434] RSP: 002b:00007fc6824f6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 973.543455] RAX: ffffffffffffffda RBX: 00007fc685093f60 RCX: 00007fc684f80b19 [ 973.543470] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 973.543483] RBP: 00007fc6824f61d0 R08: 0000000000000401 R09: 0000000000000000 [ 973.543497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.543510] R13: 00007fffc8e158df R14: 00007fc6824f6300 R15: 0000000000022000 [ 973.543538] 04:54:49 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_eeprom={0x43, 0x0, 0x6, 0x1000, "538f6bfe7179979ebc444aeeb1367dbd5a68c98d8df35cc7b6b8d6ea0ea0945e16e96cea8f2e9e7ef3a45cecde951e863511903c5e5a8a5013c9ddbb6e26a30581bb896a690df1fabfb91c651d4aa1b05185b9c6f22cb498595f0fcc9ffa8613d43119e4accad037508696762dfc84909504f256a87b5828d0afd21dab26ba9d9fc7c6810e2bb3ba0a2a9eea19d1fee52c54bb2a5495baf4a7fcfc3d7e9b29f027ee75c2ecb205cd6e8254da94754695d5feb109c8b88e1357690f1f2053be32b601a24ede81d31feff1bdc8f63992bbda32ae55bbb46a4e2e7bd16eb1f26ae066d87ec3298a9a54f4b3e86f327796331e5d5bcfb479aa0a654175f52c49f955154f7827c7a7fc4c8e1c43aa5bf2b7c2a613fa537fc467a1fd2f745277fd4407b512f3348ce377e1b689af9299dd0bee7098f9d901499bbd05e37efbd4c88de080fcdcfe6dfcfbc1f71a5b556069e957ea7a97eebed92318dd03d4287505d63322d0c6e2e2bec9e1eb2bbffc8f936fd32a5fefc8cabff220b4a3612a42de8daad987c42bc92a54de389b98a8c6261d0637b6707d8f690fad4fae9ecc3639c636b3fe40dcf71bf355f93a478dbba6f7c73f7eaf996838a1a02f9ba3e76b95a839814d35af97e04105dd374670b017485a6f8cb5226250093316dd902dea0e59e9fb4a8fed02e789e6a15e5d4fcab87169195d081731337e2aba38dde972bcba892ee426cc3154ed043e44608c898f514593f90be3528392ed595b2b78c9d0fe2e93973f2fe6e6090c8f69c60c549abfae79b62be37c6f60888bc21d77ef8b105da9881b3bfbc7b548510fed52c3925e2cb83c153f752d1dbdb7e6b51389043c3de7557809685677e05c27f2855ef2c2319beb5d54d53e867f9ac215cd9d24f186bc974a7ef7693ee6c410903fbf6064c3bb6ac32286537b67a7155707ce6a2c9fc1c021d98a8064cf676c13bb16d7e917bb6cc43208acb44cb40907e78742baccf958635b64396ff226c612d0e4f0263e3e73a4de2bef0811b5af55f1966bb4e822350ec44d160b145db5c7a9ffe9f3863eb774e383bcdc30e29e9bdcebf3a898588f20f5c93601edad0f12725eb8528f88dfeeef84bf67456d4d6481df47c208463648ea6526a382df162422b25b8cd96041edfbe45035388861d877ffbf7a2587f779546e16c4543b743250ee85bf2fba0557cfb4a5d21b8ac7051a9bbde7747b3164dce67279acd9fa90100641c7e250e1a8f8cdd0f7740fd17a6982a3f978438f1fe9384c1f3c094954afaba912611fb6704bc8922643c9430c64084d40e5c09769311f81157282036ab770b8c1161959aee0b3ad9941d23b9588c1ec0a0be7824ea6f0d28d9f787406967af716e52ce8202e1b5759249588f054ae729bffc5029f6d097fcd40ad4e571c18b371ec9e92b29e2e5dc35ac3fc81fee2c51fa7847e936cff7711d66b2a2b5782e3bbe7170829882d6ad7308950f67e0707f2d3ddbe8f85cfc6c5457cb4be149828a23194fc59ab3a6e5ab95f6f430e300b448824ef2eefe36d37d796e5b1a22f702994838f0eab88ec407e8c195da50da90fed13e0d28924a2aa105fea538faaed027b6e8615b6607960d20705735ae1056f5a7990118edfd7dc87ded5decf034151732e6f729b5998d5aaff26c0433abb06bcea3bf16b137eda7853b796d0f66779f822d6d7de5f3c3ecc593716f4bcadf5a86c926216362a8df569c5c0f47b841da6f745d624e5765227628e41a3bb6c7dd37c77661897593d1e3425c8b0b413365669892525c184e7745504552686455233acbf6c3d1f922c2ac7d7b797d5ccdddb1448b09c19b3c4c6df7212b29a3db0b4407a638dc29d5dfef79b20db6f2d453047819cba74d8d77bf5d2a655804d10c467a3c0a6c14683b86e271942f72492823f98d3b2acc09e1a7532c29c95d8098123a385d8e289daed8d9f8bbb5d5f3897cd01d057498ce7185ec46b33d76cf649b2b6717add03fb3fe92b2825b56edecf9b678cf6df140f64e9b64ddd8e7e67d86aa8c4e0b21ded101f3176afc9faebc0c1410aa611e599643f59d2328ddedbf52a86b2bd50d8e918c7ea481d35838f458a148a30e62e9e9dc6e32e429775fc6035172e0e7105b35b70b63dec4dcece9d89ecc22eaabd9d0762408ad1fdf4f9f7eed3ba44a7d6f66978c0bbc6de475b6c8d5ba01febb8d4ff665c607984e0d8c55d62efa06ea6533c3ae5098daab022dc9d61a87fe51cc1f287e8efcf4e0a2d0b33e6efa539411984c94deebe08f139af561a41ee0485a146b4f025fb0817cb1600d305d229be960a45a08a448050c021894c2bb343b9ba633e841e93c3503215565c879f1d0ed264cd1cd9045b799e8b460b62abe937bc5baf2d3a5831f9f602bfca57706316eca64a9b587d4db712ea6879544ccdf39c7a2a7cd68358d8e7ffa193cb2f48bcf5f84f93e97c1f9059497c3f3d1337b1abf01e3a442922a4dd09d69ca36908c3b67d73a4b33284e8e82bd0a8b388a646b0b28131fa78a8548ab8d87a58d5ac8536f1bef811813877ed1bcdc5b21981e6a250a08fb47773d3f0c8feef72d64978ad3dc42650dbfda186cf0a3387d417c1ceb5ca7c89c5f927839e53047940d9223bf6184f99a3e384619794590cb02a21b66f881e7474035b25e56fc357608130b0681d6b87fac8e5f2df5fb06f1e86ed84757d575325813005019beddaee51a0b8b2fe5f5f8ec109817a97f317fb78f589c836737159516c3d052e06b224f26cef2b82c86f317dc37c369b927c0330023161d90c38ee565739358ded5136d6a7e0291ab53834e39170b50071ea14bc2fd554bdbbc6c0e915d90c00edba1a1633f0951c465ff997017378706292837e17289f33c08141b1ebc152d4948965a59457cfe4f8e0c37294154bfae2206abb46e9754b902a9e5f146d18a1808303f26afe693ae9ace9fa02197bdd88205905e8167421f369e750fa02bbe63841f8dacb1c3f6c0869d693c7c40c8b163323fd76299d37a3219798dc7b4f6a4f9eb486208a2e2f44e552bc5fc8b2400fe24219552f16c57de40bdaa0aa4f424e51dec5d92abf5a86e5fdd5a40ca262446dbf0a13933f9bed2fae99ee14b5608699503d917a531624327a4b8b1b941f70f5b6a993b2a31ba7c4784848d97d09a165a6c1c60c76026451b83f1678c382b9a195f0910b1fad3849fb8515a6c612881107238e93a27196c0223987a11f176399a352d38ea0c2569f91f38d043242c7d3f6996abe733b8c3dcff9c3d62acb28e15658410e814bbb7c399b5a93b6dfc5126827b13f3909340d4a2eb95eea57de93bab49e5b1da37f12cf8ed80cf01880f2281cbb658919d426edd03825d26499c1e83f8a7d9e706681122a1d809c87e3ece0a93368e8954824590e86f849141c69209a28712bbde3bb5826ad27c6a2b3e62cbbc792f43c1559e2ad6170b483ca23699f948ef53ce34cde25594260a7dc8446e14609ab8e34911232fa86a90e6d36c372f30003718a9936d670708a5777d176e65afbd00fa3a28d5d3a28382d79c0eb94463b89cd5589d3e8441714b05ca7f235a844097e0dc60a04078f3eb9298389fdac56ca16e2ef118e778ccf26c9878b0f41fe116932871c5470c49fc5bfcb03f8cacc977f737a932633f963181d5eb8fe396b283783f05fca0c109428c9d9ce98fc05fcf4cff4f66008c55fd711f9a9eea43377640379aad002507c53ab037040455b99499b16d7d9928bf966edff667d975962965129f3a63f697a7fa84ea72692a9b379c0e7836e7c9e99c9971f5c8a9992ab146acdb65b4029054fc30ceb15d13bb4e7a5fda9dcaf1c57edc5c2fd34bcd4fafda5badfa6ea66ce76da0082bc0be3414eafcb2aefae49f1f8ad21bde4fc22304756dc55959e22b19a3ab9eacb1670c04ef4af7d2d088a6b877f5885c4be059610b2535f77f5e77a581d1cb205c8e7dff7adbb5ff918bcf0c4537ac01a77006cee485d3a9da90cac3f1b7f301fc2e51ab82eaad0652eedce412a658cca0540cefbd12bb9aa9ef67c1db9b24e4909581861807f757570d2221c3ad1fc5d2c9e7692b4f12e7d0128ddc271b44b7c7c45f6cd03946d38d435934426a19ddbfeb89625876a109bafbc5721484457a88c18a51d128ac54e39f6483f9210755965ccb2e7860a163dcc66f6785c52d3fae6b6362b27395b8e6730418541eb29a67b5a55880e93cee2018281f0afae0287b25a44617eb8e4fd2687eeb263baa9b624f3798a7309dab0e7f75d0d61cdbbe65528df1303af0303bd65c564806674b15e0badd6a7d65cde9ebd0e35aae9f81a53b3427a5c9178b8ba558e56dd63fef90f74761388c0ee5980c1ca5efb16ecb41b7a71f6887e34ab0e3463231092668b1b93f4bd5bbb080b8e661b470116f9d3068e0e2485a514fec2b3a7d9c5abe8f68e13d626288b837c04ae8c4b9fc3cea9b3f6b45982c680a50ad14fa649fdc48d7b8daf285520e9ddfc74fa5310299a68a8963809a01b91439512d5748000439013b450290d7254d25ecd1f121961a9715e61c182db7c6b1e022c3e07720540782e5d1a3aa4d10a5ddfe483ed89b22c6e0114a4f09ee56c606dfbe96eef152c99e114f1968b725e2466a10796000ae13c5fd86c3971f678564f81c1f52dbe585578013c4ae1ba0a432cc3b488716b7b46ed12f253d351b30cfbf5abd4f8a71db4ee4eb1e7343c38631f88cc69565f2009dc50c325deb2af9da371ba7780b8fae9d64bc2c8d3de14d3cebfcf9eddfb5d7dfbdbe1e96dd8e91196f9ee9aa087dbb8d99c9ec177e41c09e63c0bc5f578b1b1de6d0a84e287859c39f573dfc560de45a920e5fdb7bd6329b1b7106b267a1c87729546ddd3258617cacab525b99df49fa976920a355ac53039112f8e27ce494ce92c16d1a883e7c5a481e959e315bed510d5f4767309fa6c47dfeeafbcbd82bdbe252a1ece1109df927329a98e278e2a26973a2c5aae811b1dc41c31b347beb8b28632042151c1981bafe199a77663460812bff244873344bd45fa1d4701b83e0baf2c63833d4872736e48f6749a12f7a0439a01e6a133b58f7ce55a82fa2fd00e33b0309f18395fea0d3a2f24ff1545fc56da362fb8639795007f1c453c9f5011b65fc578d6e1d23893244f0451adbc88a9b289c0cab687cea42e988398a12e6b1b16fb53f09dd75e7493e828f471c02554809244d0e1055e04546ef6b214fac01b176d7bec68715e15da21fd8d05371a6752a198dc30147ee512b63bb270fa2eb89b17af495887e3e0eaf53a10c5d860bf533e5c2c00ec7431cc891db2bf72ccc52f773cf3af053d968637ad814afd4b6d4d7f3fb8ee05538dc639d3299036c15fa1da47ebf2162ef2399d31f6d8d26d02b0407675231f653ac1fafa50e7c2a8c9949a6fafa63670fc4d6c23887ae79b26e9d1358e9b2856f75bd2a8a008130b453339e75202a1b078ebd570ae9311e400c93ba2fe3da000f1a33b3a053c751d69904c2da70fb31856f6adda9d9117514d00417f821a0e95ed1c95ba80989ace7bfc86da73d6b17c7a782640a14d907d1d034a378b53bc602bdee94849fd4d10e97a5f45f46e8477197cd427f19beb4582e4eb4b90bf36312db4b81d5b0a0113fb50bf7981edc60d6c80b23e166b4997cd7913fbcc523ec4eea5e06debc1a4456a4435c6e2c839e2e81192eafbf86892b1c3e634a01d61bc4e01adb2c908bd92914a21a5c5cfb9d009b27fd6c7c939ac5369d7340d1b2b285e81616c7b43c1fe83d358c35d3bc7a04f93"}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 04:54:49 executing program 6: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x119880, 0x3a) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x60000, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x1) r1 = dup(r0) readv(r1, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:54:49 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) (fail_nth: 8) 04:54:49 executing program 3: setresuid(0xee01, 0xee00, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) ioprio_set$uid(0x0, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) open$dir(&(0x7f0000000000)='./file0\x00', 0x8040, 0x28) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:54:49 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:54:49 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 2) 04:54:49 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xeffdffffffffffff) 04:54:49 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) (fail_nth: 4) 04:54:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c65300a160101f6db13616017c7ad632d80ae28c7d3ea6baebd2f18c468c561fe66e641952e0d24513d42cdcc"], 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) r5 = epoll_create(0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x2}, @hci={0x1f, 0x1}, @l2tp={0x2, 0x0, @multicast1, 0x2}, 0x1ff, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000000)='vlan0\x00', 0x6, 0xa1, 0x80}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x200080c0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 04:54:49 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xfffffffffffffdef) [ 982.969063] FAULT_INJECTION: forcing a failure. [ 982.969063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.970341] CPU: 1 UID: 0 PID: 9962 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 982.970363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 982.970371] Call Trace: [ 982.970375] [ 982.970379] dump_stack_lvl+0xfa/0x120 [ 982.970404] should_fail_ex+0x4d7/0x5e0 [ 982.970424] _copy_to_user+0x32/0xd0 [ 982.970440] simple_read_from_buffer+0xe0/0x180 [ 982.970458] proc_fail_nth_read+0x189/0x270 [ 982.970476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 982.970493] ? security_file_permission+0x22/0x90 [ 982.970507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 982.970524] vfs_read+0x1eb/0xbe0 [ 982.970544] ? __pfx_vfs_read+0x10/0x10 [ 982.970561] ? lock_release+0xc8/0x290 [ 982.970577] ? __fget_files+0x20d/0x3b0 [ 982.970600] ksys_read+0x121/0x240 [ 982.970617] ? __pfx_ksys_read+0x10/0x10 [ 982.970638] do_syscall_64+0xbf/0x360 [ 982.970651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.970664] RIP: 0033:0x7f6f8897169c [ 982.970673] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 982.970684] RSP: 002b:00007f6f85f34170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 982.970696] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6f8897169c [ 982.970704] RDX: 000000000000000f RSI: 00007f6f85f341e0 RDI: 0000000000000005 [ 982.970711] RBP: 00007f6f85f341d0 R08: 0000000000000000 R09: 0000000000000000 [ 982.970718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.970725] R13: 00007ffe03d1c84f R14: 00007f6f85f34300 R15: 0000000000022000 [ 982.970740] 04:54:50 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) setfsuid(r1) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x80, 0x3}, 0x18) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:54:50 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:54:50 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) (fail_nth: 5) [ 983.067772] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1544 sclass=netlink_xfrm_socket pid=9973 comm=syz-executor.4 [ 983.076331] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1544 sclass=netlink_xfrm_socket pid=9973 comm=syz-executor.4 04:54:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:54:50 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0x2, 0x7) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x3a) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) readv(r5, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) [ 983.099928] FAULT_INJECTION: forcing a failure. [ 983.099928] name failslab, interval 1, probability 0, space 0, times 0 04:54:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 3) [ 983.101049] CPU: 1 UID: 0 PID: 9977 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 983.101065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 983.101073] Call Trace: [ 983.101077] [ 983.101082] dump_stack_lvl+0xfa/0x120 [ 983.101108] should_fail_ex+0x4d7/0x5e0 [ 983.101129] ? iter_file_splice_write+0x1cd/0x10c0 [ 983.101146] should_failslab+0xc2/0x120 [ 983.101159] __kmalloc_noprof+0xb4/0x4b0 [ 983.101175] ? current_time+0x106/0x190 [ 983.101194] ? __pfx_current_time+0x10/0x10 [ 983.101219] iter_file_splice_write+0x1cd/0x10c0 [ 983.101237] ? find_held_lock+0x2b/0x80 [ 983.101260] ? __pfx_iter_file_splice_write+0x10/0x10 [ 983.101276] ? __lock_acquire+0xc65/0x1b70 [ 983.101289] ? shmem_file_splice_read+0x641/0xd00 [ 983.101316] ? lock_is_held_type+0x9e/0x120 [ 983.101335] ? __pfx_iter_file_splice_write+0x10/0x10 [ 983.101352] direct_splice_actor+0x192/0x7b0 [ 983.101368] splice_direct_to_actor+0x347/0x9d0 [ 983.101383] ? __pfx_direct_splice_actor+0x10/0x10 [ 983.101401] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 983.101416] ? __lock_acquire+0xc65/0x1b70 [ 983.101431] do_splice_direct+0x179/0x250 [ 983.101445] ? __pfx_do_splice_direct+0x10/0x10 [ 983.101460] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 983.101475] ? __do_sys_copy_file_range+0x18f/0x450 [ 983.101492] vfs_copy_file_range+0x7c3/0x1530 [ 983.101508] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 983.101522] ? __fget_files+0x20d/0x3b0 [ 983.101544] __do_sys_copy_file_range+0x18f/0x450 [ 983.101558] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 983.101570] ? ksys_write+0x1a3/0x240 [ 983.101588] ? __pfx_ksys_write+0x10/0x10 [ 983.101610] do_syscall_64+0xbf/0x360 [ 983.101622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.101635] RIP: 0033:0x7fc684f80b19 [ 983.101644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 983.101655] RSP: 002b:00007fc6824f6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 983.101667] RAX: ffffffffffffffda RBX: 00007fc685093f60 RCX: 00007fc684f80b19 [ 983.101675] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 983.101682] RBP: 00007fc6824f61d0 R08: 0000000000000401 R09: 0000000000000000 [ 983.101689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.101696] R13: 00007fffc8e158df R14: 00007fc6824f6300 R15: 0000000000022000 [ 983.101712] 04:54:50 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) [ 983.227093] FAULT_INJECTION: forcing a failure. [ 983.227093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.228192] CPU: 1 UID: 0 PID: 9992 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 983.228208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 983.228219] Call Trace: [ 983.228223] [ 983.228228] dump_stack_lvl+0xfa/0x120 [ 983.228254] should_fail_ex+0x4d7/0x5e0 [ 983.228279] strncpy_from_user+0x3b/0x2f0 [ 983.228296] getname_flags.part.0+0x8d/0x540 [ 983.228313] getname_flags+0x95/0xe0 [ 983.228330] do_sys_openat2+0x9f/0x1b0 [ 983.228345] ? __pfx_do_sys_openat2+0x10/0x10 [ 983.228364] __x64_sys_creat+0xcc/0x120 [ 983.228379] ? __pfx___x64_sys_creat+0x10/0x10 [ 983.228393] ? __pfx_ksys_write+0x10/0x10 [ 983.228415] do_syscall_64+0xbf/0x360 [ 983.228427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.228441] RIP: 0033:0x7f5fc6611b19 [ 983.228450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 983.228461] RSP: 002b:00007f5fc3b87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 983.228473] RAX: ffffffffffffffda RBX: 00007f5fc6724f60 RCX: 00007f5fc6611b19 [ 983.228481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 983.228488] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 983.228496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.228503] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 983.228519] 04:54:59 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) (fail_nth: 6) 04:54:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:54:59 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept4(r0, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x80, 0x80000) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@getae={0x8c, 0x1f, 0x10, 0x70bd2a, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4d2, 0x2, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x8, 0x3505}, [@user_kmaddress={0x2c, 0x13, {@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x2}}, @mark={0xc, 0x15, {0x35075c, 0x400}}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008804}, 0x4008000) r2 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 04:54:59 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '#! '}], 0xa, "c45aab0cfa08799b02c0c0dec7868bd151d2d935762c3bfef1906ab6b6436ba21e8ecf069757e03fbb2cc8b7f264cc2b6b3ca0dc5f61fadff0a52e440ef9ab99fa16"}, 0x51) 04:54:59 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:54:59 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x82100, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0c8d76fc63cbce1ce8", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf25160000000a00060008021100000000000a00060008021100000100000a001a0008021100000100000a00060008021100000100004a001a0008021100000000000a000600080200000a001a0008021100000100000a001a0008021100000000005e939647f489cee904103668683d36d90758797ae89f4ddb42e67803cdc12a5d91f002c4de2a93adce8768fb6a2b0f6677b0544a0b83f7dcd2a9be29572ab426b5060ac05407ff0eea8af0"], 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:54:59 executing program 7: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/block/loop6', 0x40202, 0x80) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xfb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41002, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, r1, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = dup(r5) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r4, 0x3, r5, 0x2, 0x80000}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x1c3000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f00000002c0)={0x40000002}) fcntl$setstatus(r2, 0x4, 0x800) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x16, 0x1f, 0xa, 0x0, 0x9a0e, 0x80, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x108, 0x401, 0xfffffffe, 0x2, 0x1, 0x7, 0x400, 0x0, 0x7, 0x0, 0x1000}, 0xffffffffffffffff, 0x3, r7, 0x10) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4202, 0x0) close(r10) 04:54:59 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 4) [ 993.007610] FAULT_INJECTION: forcing a failure. [ 993.007610] name failslab, interval 1, probability 0, space 0, times 0 [ 993.008949] CPU: 1 UID: 0 PID: 10008 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 993.008969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 993.008978] Call Trace: [ 993.008982] [ 993.008988] dump_stack_lvl+0xfa/0x120 [ 993.009016] should_fail_ex+0x4d7/0x5e0 [ 993.009040] ? alloc_empty_file+0x58/0x1e0 [ 993.009058] should_failslab+0xc2/0x120 [ 993.009073] kmem_cache_alloc_noprof+0x5f/0x470 [ 993.009093] ? __is_insn_slot_addr+0x140/0x290 [ 993.009119] alloc_empty_file+0x58/0x1e0 [ 993.009136] path_openat+0xe0/0x2880 [ 993.009163] ? __lock_acquire+0x694/0x1b70 [ 993.009180] ? __pfx_path_openat+0x10/0x10 [ 993.009207] do_filp_open+0x1e8/0x450 [ 993.009233] ? __pfx_do_filp_open+0x10/0x10 [ 993.009264] ? find_held_lock+0x2b/0x80 [ 993.009284] ? alloc_fd+0x2c1/0x560 [ 993.009304] ? lock_release+0xc8/0x290 [ 993.009321] ? _raw_spin_unlock+0x1e/0x40 [ 993.009341] ? alloc_fd+0x2c1/0x560 [ 993.009366] do_sys_openat2+0x104/0x1b0 [ 993.009383] ? __pfx_do_sys_openat2+0x10/0x10 [ 993.009408] __x64_sys_creat+0xcc/0x120 [ 993.009426] ? __pfx___x64_sys_creat+0x10/0x10 [ 993.009443] ? __pfx_ksys_write+0x10/0x10 [ 993.009470] do_syscall_64+0xbf/0x360 [ 993.009486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.009501] RIP: 0033:0x7f5fc6611b19 [ 993.009512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 993.009526] RSP: 002b:00007f5fc3b87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 993.009540] RAX: ffffffffffffffda RBX: 00007f5fc6724f60 RCX: 00007f5fc6611b19 [ 993.009550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 993.009559] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 993.009567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.009576] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 993.009595] 04:55:00 executing program 4: setresuid(0xee01, 0xee00, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x420003, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 04:55:00 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) (fail_nth: 7) 04:55:00 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x1, 0xff, 0x8, 0x0, 0xcdf, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x2, @perf_config_ext={0x4, 0x8}, 0x1002, 0x7, 0x80000001, 0x0, 0x6, 0x7f, 0x7, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x4) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0xdf, 0x9, 0x6, 0x0, 0x3, 0x2004, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000180), 0x4}, 0x40888, 0x10001, 0x4, 0x7, 0x0, 0x613, 0x8000, 0x0, 0x7f, 0x0, 0x3}, r1, 0x3, r0, 0x9) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x3) [ 993.142859] FAULT_INJECTION: forcing a failure. [ 993.142859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.144108] CPU: 1 UID: 0 PID: 10027 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 993.144128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 993.144137] Call Trace: [ 993.144142] [ 993.144148] dump_stack_lvl+0xfa/0x120 [ 993.144178] should_fail_ex+0x4d7/0x5e0 [ 993.144204] _copy_to_user+0x32/0xd0 [ 993.144228] simple_read_from_buffer+0xe0/0x180 [ 993.144251] proc_fail_nth_read+0x189/0x270 [ 993.144277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.144299] ? security_file_permission+0x22/0x90 [ 993.144316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.144337] vfs_read+0x1eb/0xbe0 [ 993.144363] ? __pfx_vfs_read+0x10/0x10 [ 993.144385] ? lock_release+0xc8/0x290 [ 993.144406] ? __fget_files+0x20d/0x3b0 [ 993.144438] ksys_read+0x121/0x240 [ 993.144458] ? __pfx_ksys_read+0x10/0x10 [ 993.144486] do_syscall_64+0xbf/0x360 [ 993.144502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.144518] RIP: 0033:0x7fc684f3369c [ 993.144529] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 993.144543] RSP: 002b:00007fc6824f6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 04:55:00 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 993.144558] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fc684f3369c [ 993.144567] RDX: 000000000000000f RSI: 00007fc6824f61e0 RDI: 0000000000000007 [ 993.144576] RBP: 00007fc6824f61d0 R08: 0000000000000000 R09: 0000000000000000 [ 993.144585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.144594] R13: 00007fffc8e158df R14: 00007fc6824f6300 R15: 0000000000022000 [ 993.144614] 04:55:00 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="fb36c9f9c507d3f031c1c639f0641000000a"], 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000200)=ANY=[@ANYBLOB="00fbf607915bff9eff6bb2d2eb5d54f0c0efb2cb7c580d67c59a26fce7484d170ce8975e65ae76de11f6f02c2dea6e53b3d895497e60970cacb5a03b1da475755166341ff616441c726b886d6baed44cf63989c70c301739a321c24dcd9b6a3d269fe7193cdb5514fefc7ef4ef1312dfccf2f486b248942081289a5e747cbab8d70064aa6b95013353245a5f8989173391c876f648cfa4ddd33d65629a9b6dca2c83549453da1c2f56a7179ec764cc2aaf2ad62bf1e5bb96c3c62f8b75e65a886d5d8ade351df46792c5b601265b8c44fec8d4b1344f7b0666d84ee80b41401efefe42b9d293d91e7da2"], 0xf6, 0x2) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040)=0x40, 0x4) 04:55:00 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = dup(r1) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x3, 0xb, 0x0, "e99382447c6f534dddc15aa1daf676a98f9400c2f773517fa9f727615213f7aa2e9791f98d23f170380b4196de973c479fa7cf4d1788a5501aef9082489486fa", "b0575e799035746c14768f2d0286364f3c1b5e66c6de46a06bf8c457d8295b2ecdb5a6ef4f25db40f2ab1632347dd1f418cd34174adc8a425594dd6946ba7273", "15e9df317ed678d42afcd451ffd5f1e43acd92d941416ac61a3531d353296836", [0x3ff, 0x2]}) r4 = pidfd_getfd(r0, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='.\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:55:09 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 5) 04:55:09 executing program 4: setresuid(0xee01, 0xee00, 0x0) syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100000000, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000200)="18eeed41e8739a71e5a3fb953c0e36b774876cbfd4e5d849f9cf89730d025459254197c647c21a043efad3034887eb0bb06c8b94e9e6cecd56d6b24811803eb58575b75a8719f192c31b29ef2979bf8d6566b17e91d351eff46199f484", 0x5d, 0x8}, {&(0x7f0000000280)="adb5e6b909fca86f95422936cd427770cafb3feee7da41dda6516c75f126f4a1726e639a2c756b04e939504bd73b60f72a5262c4df48d663d510ffbeb85ceadfe8e99bb0f601fe9d0e4653ac606995ffd3cf18a546c66bf96e97611ddf2f0400dca6a1dbb5734652e299b01782a4cbdfd8650fc4609ee95109419dadc0953189f100292bbca5eec66449c6a3d9351320e82be9af056dcd7b20697e906bc5281e31b17681b717750b5fc4eb943fdfeddbeafb32aba79ca83fb99c4a9c7a516b3306e962dc64c8aa6c4a47328c1814ff816bf9ed351b388beca857e8fa494fa135b40e3c3006084bde7474bcf8a046fac55b0086626d93", 0xf6, 0x39a}, {&(0x7f0000000380)="a75212de651c5fa12ea9fdb93a5089ef5deb55a12014dbf49903009992e4de9085f78754863e43b0931f8d4e4b4ea7fff6fb6f725e8dd4", 0x37, 0x9}], 0x2000000, &(0x7f0000000440)={[{'..:['}, {}, {}, {'nl80211\x00'}, {'{'}], [{@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}, {@obj_role={'obj_role', 0x3d, '\''}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\''}}, {@subj_type={'subj_type', 0x3d, '@&*'}}, {@subj_user={'subj_user', 0x3d, 'nl80211\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) geteuid() statx(r1, &(0x7f0000000000)='./file0\x00', 0x2000, 0x8, &(0x7f0000000080)) 04:55:09 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') 04:55:09 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "ff34fdc1b593eab8387caf718b0930b39dc260a6b529"}, 0x21) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:55:09 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:55:09 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x0, 0xea60}}) setfsuid(r0) setresuid(r0, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) geteuid() ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:55:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="125dd56f44b17d7f65300a"], 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/hid_redragon', 0x143002, 0x0) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0', [{0x20, ']'}, {0x20, '+\\@-*['}, {0x20, ']{'}, {0x20, '%'}], 0xa, "bf5656a3b10e9b8ad7ce491e130117b973f9c646579660f11ebc79391e8652d435d2dbb5854ac45a990657d22a8bac641080dc684b8d7f70d2251545b9056c241135e502733a5f3f637dff8a121b93b2c2fbfd743c79d1eb57bb4e2800d5ee07c9876baeaf64cdb3417273eeab73e625ac32749fd2208fc057bd71aad033fc0dcbe33739b0"}, 0x9e) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:55:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:55:09 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000280)=""/84) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r5) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x5}, [{0x2, 0x1, r5}, {0x2, 0x4, 0xee01}], {0x4, 0x6}, [{0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x4}, {0x20, 0x2}}, 0x3c, 0x3) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r8 = dup(r7) copy_file_range(r8, &(0x7f0000000040), r6, &(0x7f00000000c0)=0x401, 0x401, 0x0) write$binfmt_aout(r8, &(0x7f0000000200)={{0x108, 0x9, 0x1, 0x1ec, 0x2ca, 0x9, 0x37b, 0x900}, "6a771ac9562b39d4509add23040a6f3e06646145903ceb1c4541474a5aa398ed84155596bd2fec515c4aa3c34a37e85470c25c0d6aa56e6032bb44"}, 0x5b) r9 = dup(r1) readv(r9, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:55:09 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x402, 0x0) 04:55:09 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 6) 04:55:09 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) 04:55:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:55:09 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r3 = dup(r2) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x20}, 0x1c) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) r5 = fcntl$dupfd(r1, 0x406, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 1002.660342] FAULT_INJECTION: forcing a failure. [ 1002.660342] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.662616] CPU: 1 UID: 0 PID: 10082 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1002.662651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1002.662666] Call Trace: [ 1002.662674] [ 1002.662683] dump_stack_lvl+0xfa/0x120 [ 1002.662730] should_fail_ex+0x4d7/0x5e0 [ 1002.662771] ? security_file_alloc+0x35/0x130 [ 1002.662797] should_failslab+0xc2/0x120 [ 1002.662822] kmem_cache_alloc_noprof+0x5f/0x470 [ 1002.662858] ? __create_object+0x59/0x80 [ 1002.662892] security_file_alloc+0x35/0x130 [ 1002.662918] init_file+0x95/0x4c0 [ 1002.662946] alloc_empty_file+0x76/0x1e0 [ 1002.662976] path_openat+0xe0/0x2880 [ 1002.663023] ? __lock_acquire+0x694/0x1b70 [ 1002.663050] ? __pfx_path_openat+0x10/0x10 [ 1002.663096] do_filp_open+0x1e8/0x450 [ 1002.663133] ? __pfx_do_filp_open+0x10/0x10 [ 1002.663181] ? find_held_lock+0x2b/0x80 [ 1002.663223] ? alloc_fd+0x2c1/0x560 [ 1002.663257] ? lock_release+0xc8/0x290 [ 1002.663286] ? _raw_spin_unlock+0x1e/0x40 [ 1002.663319] ? alloc_fd+0x2c1/0x560 [ 1002.663362] do_sys_openat2+0x104/0x1b0 [ 1002.663391] ? __pfx_do_sys_openat2+0x10/0x10 [ 1002.663433] __x64_sys_creat+0xcc/0x120 [ 1002.663464] ? __pfx___x64_sys_creat+0x10/0x10 [ 1002.663493] ? __pfx_ksys_write+0x10/0x10 [ 1002.663534] ? do_syscall_64+0x85/0x360 [ 1002.663561] do_syscall_64+0xbf/0x360 [ 1002.663587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.663612] RIP: 0033:0x7f5fc6611b19 [ 1002.663631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1002.663655] RSP: 002b:00007f5fc3b87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1002.663680] RAX: ffffffffffffffda RBX: 00007f5fc6724f60 RCX: 00007f5fc6611b19 [ 1002.663696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1002.663711] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1002.663726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.663741] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 1002.663774] 04:55:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, &(0x7f0000000140), {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:55:19 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x4a9788c61c99f8c7, 0x80, 0xfb, 0x80, 0xd0, 0x6, 0x0, 0x4, 0x45404, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x8000, 0x400, 0x6, 0x3, 0x10001, 0x0, 0x4, 0x0, 0x1f, 0x0, 0x3f}, 0xffffffffffffffff, 0xa, r2, 0x8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 04:55:19 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getuid() r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x4, 0x9}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4083) 04:55:19 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 7) 04:55:19 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0x401, 0x0) socketpair(0x1a, 0x2, 0x1, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000dc0)={0x0, 0x3, r1, 0x1}) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x4, 0x70bd27, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r3, &(0x7f0000000940)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000540)="6da4820222fbd116d0b277ef949bf318247b850eb0051e79c87653c5de2b39875531d2d512c303a82e18e78d338e877cfd79f6b61dc185b9fa7b97c83fba1e73e222fe49e9eace2bf665843d8a21a8f5db75aa5ceb7bc820269b43b25f7b17fa8145ade00c6ee70401dec67795580e4078275d78b7663cdc496f8374bef6a3ba08ffd0309c5481888af15ff2d6647a", 0x8f}, {&(0x7f0000000600)="be9443c6e46e2ef52119f40ec2964b95571b93ad8b482d38201b4f6dd31bf4fbdc8f878d4d9f2a44bf6d8b450efa810c35f286251e689d7146e1fc42e00f64e726579cda417c0111af134592b17c7c87d60e4fd70f652a033faa4347ef7bf46a51ff11b4d46973de6ba11908ada8e2d8b611cab19a039c7a7f5c00d5575bd9b4d60e1b37fb5382ca9fac0acc26e0c07b647f58ffa7542ed7b384cbe77617fccaedca7559bdc9042f9e49fbc78ee5bb96649e1af47ebc604c8e752d5c1abfa18b20b7833974be88e1bb255d9efd9c8ede7543efd05a58a51d2398399ebfc78ea1d2fb2c5a15e6fafd4d39d5222d0e76a2dfb84cf1d0e42222bbdcf9", 0xfb}, {&(0x7f0000000700)="8c097466e3d19d31250e7284f25caaad15bc1af7e5f2228472f26dc2f011eab6d7b6b09f0ef63bfcab0aa103bf8bfcc12821db076b6dac69c0db246d3ae377fdcbf4f02d892fc7262bdf51aa5df4c9957b4cca83a60b35678576bff76ae26faf72793b55959628a0e46a9e39370c5951a86c6f3a81d206b2191c0912c6c2817841289f45", 0x84}, {&(0x7f00000007c0)="0a2152bb1b4f49d5f5bb8d777c3c7750e019e60bc4910c2844393d5e76669ff8f91c5763e3fe3c7c1c7d679cc2b103e1a002faa10b4f63f0ca5130e5c5ccea8b10d9e0e99b221ceb8764248e43b25550457100d04fc151b6211813ed25", 0x5d}, {&(0x7f0000000840)="22cff9e301c3722615f96076e5be2f0344ffe18a81c75d9e2a876d59fd79d2aaca60b9eafb9618b136a78a535e51b2fc9497aa4bfca69a518523c0190672ad13481fb6a5cc3e070b6cfb", 0x4a}], 0x5, 0x0, 0x0, 0x841}, 0x24004890) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = dup(r5) copy_file_range(r6, &(0x7f0000000040), r4, &(0x7f00000000c0)=0x401, 0x401, 0x0) recvmsg$unix(r4, &(0x7f0000000b80)={&(0x7f0000000140), 0x6e, &(0x7f0000000a80)=[{&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000480)=""/30, 0x1e}, {&(0x7f0000000980)=""/224, 0xe0}], 0x6, &(0x7f0000000b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x2100) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r7) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000d40)={0x1, 0x3, 0x1000, 0x5b, &(0x7f0000000bc0)="94100704641b893b6e8edf16b159b6ad66b3148b9d3ed83871152ba7f32157205d369fcd7ab6436bb179ba1c9c1c0b9c2942c8f2bea319a693fa6cd8f94bbbaac8dc91f80a3220dcb86b72d7bdc63516963836e119c8b92158cdae", 0xfa, 0x0, &(0x7f0000000c40)="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"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) dup3(r0, 0xffffffffffffffff, 0x80000) 04:55:19 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7d9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = getpid() r2 = getpid() tkill(r2, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000060c0)='./file0\x00', 0x1) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000006100)={0x1f, 0x0, @none}, &(0x7f0000006140)=0xe, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r10 = dup(r9) copy_file_range(r4, &(0x7f0000000040), r8, &(0x7f00000000c0)=0x401, 0x401, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000062c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000140)="50f873ecb8bdc3495755e58f1dd4cd2d975460edda02be0333105dd541e0cf50a0828687b04f455e5811db639e94f9bf6074e0c394f1df7327f5976d258354adfb6a6de51324568b521c32ff0106548e2879223eecfe6113112b0093bceb69674c900bb203140e91b6ef213082409bf8de5464a28709c32bd3e84076a1948abc1d33e87c2a2b3533b5ccbc9b957ffb75452672605d428c9e560ac09c3288a996744e6bce243a46f713a8c81ba152e4da263e846e53908916cc20b864969c033c9e15addda1a1", 0xc6}, {0xfffffffffffffffe}, {&(0x7f0000000240)="b76ee662b727739fb18b0f0850cf3b205502760b4c00dac606b9d6d989173d8d38e1cc05bf5160c592b1f04712f543bf77586eea3f58821e1bca19a7228756d5e0c98676ff97a72a4bc6cc9c69e5b86146d88e11fbffad644cc54513ec4d47ada8bc48f1e86a669b88cd0d663a0b2b9b9fcf9d4892d481b4dfe03fc57f94f455f3b204d1a3c2396b80bcfc6541a411435293b7f8c9de96509df01eda638245d21fd0a0041a1b9b890899fb9a35821bb1fc04911f366a60726eff8cd95ca624c6f233278c6956708c6d393eb43112cb81e1cf02d55f20ee2ca7f46eb7e6df151c8222f2deff39255c0658", 0xea}, {&(0x7f00000003c0)="1627a9e0d5144cab217ed5e460714c034feba60b38cb6edef2235f71383aa7bf384082971c7e663f1f72011e225e341d9689418d7a13abf14f731525451c53d8142a5821eaa3c803348ed9967e08ac963af619ad7f22f555ed08e6ecce0b8c1a1132cabb0575b9eb9e6ac7ba0b1e890d13b5eb5d53a4714835b05fb55f402943dc32318dc3ffb867776f345fbceeac75", 0x90}, {&(0x7f0000000000)="e74cb8e441c3b518851e3b89a87f3dd9a936e6cb219b3526233d7f45bc9789a1602661e58f1e3f832aa0ae220e74", 0x2e}, {&(0x7f0000000700)="4aa7d15b7ce050b64254be7c3f4c928658fbe15f146333e14b1ce5438327a0bf03a020ab47815e8b2d68adbedc0a094cf262299e1c41c23a39cdc0091b985a2231e7759909fb8ceb993b46f820b11ab30644d295c390", 0x56}], 0x6, 0x0, 0x0, 0x4004001}}, {{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000580)="df0000523e91ec7587d487d3c456a09290ca064e44cb82e82391fed8432d18a55581c812dfa9d86e8b592a9044d8601a678dbf8037572b21710c2a0085215ced239d20ec9061489fc3888c12daa08a9c6d6e5d8bf4dc171717f4ac6592d35e61", 0x60}, {&(0x7f0000000600)="285625741523aa1f3fbb423a5f8c146680dd46f973ce7eee42b8fc2d26071e79b6f35aaf49825f946b9ae6878e3771a211fbea38a1682de05e3e1b53c9136e5949330bedd35ff17123fbb6188b39ca4081696a1259c9bf09c73c02e64f0400a1b94694875537f73dc4e2d0e29fc55d10fe541da230ade662c8c680ecf0d9e82b74f8d07aee375ce43c828c", 0x8b}], 0x2, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r9, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0xf8, 0x4081}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="021ef63bc0d866e247462f28b9a06d4285e38bae384d1f1fb31531727a60a83f859ad79324503da74eb429b2aacdd40328fa8b70deddee227fab78c7e8662ea2", 0x40}, {&(0x7f0000000ac0)="e9ac17aa3e4555eed327c0b8469f67f6e22e22042b5bf73c60414d6c83b2eaac2303c03395fc9b191bd9dfb9962a1980a52375c4b419c23f36db77caff44a5b48faaba9c74d58c9e11049b418a1cda90a1a4d4d78fdd49a65077bf0555ec132c3406e623febf0c1b9ca88a33454a1b2a9396ae405701419a96fbbc8a421926ecf45422471cba8944f5c15f626e8d701efbd5e04c3911d4bf1982119515fa9a585899a662ff4addd55e29d14ba3ebaa4f7b5c89deabde5932ac52b7743455a21d8ea0", 0xc2}], 0x2, &(0x7f0000000800)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r10, r0, r4, r8, r9]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb0, 0x10}}, {{&(0x7f0000005a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005ac0)="1cc9028a5efcdac77d30bb129eaa9c9119aaa6345b8563d06c356524eaccb9f1a165b4bdfe821882901bc81298ece5683a23930a9652195b57c6f7e0a12125336e0cb7324c3c3d7e7c6011e3b9a50776db5e5e604b7403a463c39b479e88ebf2150bb94ba7268241f90cffe936174e8ea6ee546564d1ba67e6851a0e94e4e99b5e723ca9ddf6743b23b629853a19ad0ec065a3f23610cced9d993e097b2c0c34f7493524c88f82be4dd45c75d139", 0xae}, {&(0x7f0000005b80)="764f2bb566c01c22a201831fcdc6d1cee081c6967f62d366e3d52c2a1b99d1ef45d18d12a7af6138b3ea305594ec21712a3e89f3458bdc76020fb22a593aef9a99a3855c29d9392832ff336a1816f771d6fe02690c6fcff977a5a84e1aa5eb0d7d844a409e111b8bdd27d5321ddbaa85437d94a60f2f23d58c8c1cec39039ca1b17ab8cdf81d47d4e380157dae1cdd61d2c051b6f54331067399de837ec4e2c3eb3e", 0xa2}, {&(0x7f0000005c40)="b532016c7b2745510b339fbe13c7765fe1081abb5a4d", 0x16}], 0x3, &(0x7f0000006180)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, r0, r6, r7, 0xffffffffffffffff, r8]}}], 0x130, 0x800}}], 0x4, 0x804) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:55:19 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x410, 0x0) 04:55:19 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6f46c256e2b0d891130930d034f8b484e3fb809ec7c69c6789828ebac5d6e008e8fa9635154a9fc658a743ed2697a0af9bd191fac87dc0efe4473acd8129519e62748fe6fc7cea44021355d8c44ab2bf96a10f131ab734e966f9c910e67a270a33a8e712d4d2247e050903befd2d601a638030da3946687819bd04c4222101065357a48d42931f96631fc3398ec8e96cc55a614a6357663183add0f0c34cf30a70124d811ba27f015e09bbe8309b4141595b0198a186c2c5a19fe5e70da771f028391fb4376cd497cd5af3530000b211c55e76ee4d39bd89e966dda388e7df5239bf310878aad140"], 0xb) r2 = dup(r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10806602}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x280, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7a8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "074f6bc82783a0b3959ccd84c7993b825b2eb1a992409788f0f060"}}, @TIPC_NLA_NODE_ID={0xa9, 0x3, "38e70f1580ff380f50b15997dbbf3b6c85745f51a66088929da4fec4e2d86f163663fcf251b315d222e37e13bbcdc4660c97c251c8c62b7bcf51b23edc464384139d0bfacfd6fdd7a5981802645e61a3b63417ee10735131443c0e6c4260d970fe912fb495a7fdd1812cc08de30e2f1ea777c1a173d1471ef45fb3099ded0ecdfd639a4e43c2eb3bbb6a2cfa33c8ee34efaad7a9d370d7b721c402413379083267c203147f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00', 0xfe}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb70}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r4 = fsmount(r2, 0x0, 0xf9) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000180)=""/81, 0x51}], 0x1) 04:55:19 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xae4, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x1b4, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_b, @random="97b4cc9d9ec5", {0x7, 0x9}}, 0x0, @random=0x4, 0x2, @void, @void, @val={0x3, 0x1, 0xae}, @val={0x4, 0x6, {0xd, 0x82, 0x93e2, 0x8a}}, @val={0x6, 0x2, 0x5}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7}}, @val={0x76, 0x6, {0x7, 0x1, 0x2a, 0x4}}, [{0xdd, 0xb3, "f4d0256c214dd4803403d8707089a3f8e9daecd3eeff1176ab44d228d069d01b2f3887c5d1d0c0c730dc4a62e67fc02079cf9c05ec772ed49200cfec2c175f025ccab2be0f56674eeff1755205db53c27d32db5abac39879f0ad394d37e718e545d999be5867ea93b6e8f4aef4ea5bd19045a026a88f10f782c333f1ca3d6b4a5047cf2a49eb5040598b5642b6f8b107e7e0c1918167901dc3e9ff4e96421d2a87b40e340660994cb6adbd1d5661b33ea8b145"}, {0xdd, 0xaa, "051e1ee42953851a3c2f94478c4bc109dae42178daad382f28399fc1d4679050ac25d14e28a19cacac5081d217206da7b3c297f991b9318135f4101726f7922e704916ca4cf9451f8484b1dd3b331434439da1bd33ec4af5b9bd0b0e61eebe468a53f230dc145cb5646e9be3fd3c57df9246e76b8c2c8c9527bc6dcb278ca69ad99456bc95da69bda98110ee558a122de51bffd1fcbf70e59a6c9287f340eb71596e8039b40f56b19f13"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x6b, 0x7f, [@gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x51, @not_ext={{0x1, 0x0, 0x1}, 0x1, 0x7, 0x2, @broadcast, 0x5, "", 0x1f, 0x1, 0x5, [{{0x1}, @device_a, 0x81}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{}, @device_b, 0x3f}, {{0x0, 0x0, 0x1}, @broadcast, 0x28}, {{0x1}}]}}, @dsss={0x3, 0x1, 0xb2}, @chsw_timing={0x68, 0x4, {0x244b, 0x7}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x50, 0x80, [@erp={0x2a, 0x1, {0x1, 0x1}}, @ibss={0x6, 0x2, 0xd287}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0x70, 0x20}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0xca, 0x40}}, @peer_mgmt={0x75, 0x16, {0x1, 0x1, @void, @val=0x2f, @val="d7e1da284f03c5f517dac01201c5c712"}}]}, @NL80211_ATTR_BEACON_TAIL={0xa8, 0xf, [@prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x3, @device_b, 0x3ff, "", 0x0, 0x4, @device_b, 0xfffffb96}}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x5, 0x3}}, @random_vendor={0xdd, 0x4c, "9dcf7d0ff6a7d653aad37f33062f5b7e3ed3c26be7c67848d77630219f416c632af52dd88e696268fc8cdea91940d7809ba6069f887f0edae589c2c0124ce6779182b0be31e1c19497e5da8c"}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x9, 0x8, @device_a, 0x1ff, 0x0, 0x101}}, @channel_switch={0x25, 0x3, {0x1, 0xd, 0x7f}}, @dsss={0x3, 0x1, 0x84}, @dsss={0x3, 0x1, 0x7c}, @channel_switch={0x25, 0x3, {0x0, 0x80, 0xb4}}]}, @NL80211_ATTR_BEACON_HEAD={0x3e1, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xde}, @device_b, @device_a, @random="693a751f6498", {0xb, 0x6}}, 0x9, @default, 0x600, @val={0x0, 0x1e, @random="d628d7c9d6532002c70888df2b78c964c841eab16448680f5ab6c6ee8b77"}, @val={0x1, 0x4, [{0x9}, {0x6, 0x1}, {0x65, 0x1}, {0x36, 0x1}]}, @val={0x3, 0x1, 0xaf}, @val={0x4, 0x6, {0x1, 0x20, 0x6ce4, 0x4}}, @val={0x6, 0x2, 0xe67e}, @val={0x5, 0x36, {0x7, 0x65, 0x5, "2df855076b3634758a8cc2310e9250e4c6b77aa04301cc5495e15668f6b797f1288617253db12c4465ccdaae8554eb89eb150b"}}, @val={0x25, 0x3, {0x1, 0x74, 0x7}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x7, 0x0, {0xffffffff, 0x20, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0xc08, 0x8001, 0x90}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0xa9, 0x20, 0x5}}, [{0xdd, 0xe9, "5663504e80c5fb3fab2480ee7dfc6f86caa9ca3525b510f9e145cf78fe68178b16a4e62c6ed5765a88c9830aa3c7c947a8cf40046e7d75df76909276ebf85331c05f180ca26e4842b7cf1b902b4ab11d6d356e89778ded29785dd645a0884ab74c2ed60313a1c1b179166728d7ff03e058b01493c877efa41c5853f869cc987b01b851a45817e693e8ece9dc6b7d3bfe31c17d182464ee79f998e34995f08ec4a7c80f3e100c4b6c255fc273b7bb685dffea462b3e73bd8de0be75bdc4b2305b977fdc1de9c262d36ebf5017ef4493cc7976417ed5b540d92eeebe15dd9150a45e5879035c12fb7b4d"}, {0xdd, 0x89, "af962c27ea9c8c2831c00155aceeb9cc8dec79c3733c00e4866df17f06b1d241aa6c92f5c6ce2db517c2b0aca3f48d8f4834c25d11426216c33c08141c60a3ed1d33fe5a0ec97e027272d5ff8cb5f9098cee619982f0e7bf9ba202183a242aaad0039aa6365496c6b834b70289d0a6c7a31b0c3065ff116d460fdb9529744c48b5544b44cbf969a44a"}, {0xdd, 0x1d, "61c04e472ba65efbaa2bfdf2c63b8a5441656bbde23824fc072fb0a7ab"}, {0xdd, 0xc8, "097278ab0e7a108be3f878f8b86766bace8e7a3ab28ca826b6cf4f26634ebe77b18a2b9d223d1053e7eaff51c1e51327c5af0a0b0b82d99551555f1417290c265403e3899bd16882fe1ec54285449a8d5e528db73d05997200404f736a09e8ec38e640b081a0aa010c40384cb26f795d765699faf4ba7d21fc6d70ccb2fe6e50579efec4847d834dfd8482df087ffc3dacee3a537684c5b19ba07f10792b146e1904a8131d69be0f94f99f20df70f3092dcb79352712f14531d5a02cd951d260ca79088eb5e69ef0"}, {0xdd, 0xb7, "178bb373622709be23c412a2d6d92f3537235709bddbf8ec4bb1ccdf62e9b225d779c16c3215e5cbf20ef4ee06caea306b703b1a00e5d4db56b6356ae55c203b5215f40605ea2503a4f6bf977dc05182f085a691de17a5d41ac3fc44f4558cd262c825ff378d18b3039c251d6804fb7dc7c8b08a2f7f18a874d7a4fedb4ea3f9b82cfdbdf5123edf4f06d6d09a437b36eaa673bd9326429c23a8ccc9403a0f7e607fb5750d4cfa5af76ce9feaaeb526b76c070fd5a1ceb"}]}}, @NL80211_ATTR_IE={0x205, 0x2a, [@ibss={0x6, 0x2, 0x5}, @prep={0x83, 0x1f, @not_ext={{}, 0x3, 0x80, @device_a, 0xfffffffa, "", 0x2, 0x20, @device_b, 0x7ff}}, @chsw_timing={0x68, 0x4, {0x5}}, @tim={0x5, 0x90, {0x8, 0xcf, 0xd4, "129cbab3fb48dc65be373cbad93c601757b49807588670b4183c46f8732c6b251e7ee60a7eb026ee2b68b4974a4fc0f8e80eef57e06f8e70f6b2aacb0e725354250f7fac5950dca03af2e6f487cdf68fd590eca6c002effc7cd2bfc900613bbb5364ed896f0e410feebe311d74727160f8dc5fdfaafa20c89402ee44035305cb94ead58aacfca0060aff4aa57c"}}, @measure_req={0x26, 0x8e, {0x2, 0x0, 0x2e, "22a07d4eaf50f27f108936e2ae3d2d269877977c357c3de595eba42d5bd397c20a26f61fe086bb676b01eda2839b3b26dff33151c07199471b8980889b2fd7b67cba23411d7e38286459880fe50b61df483428e4f8554b9deae46dd440593e3cf691e18cc19fc2d2d2f2fe6d25081b287810613e307e95d9ea40174539d5790d0691080e8b1d380b54984d"}}, @cf={0x4, 0x6, {0x6, 0x40, 0x63, 0x8}}, @chsw_timing={0x68, 0x4, {0x7, 0x3}}, @fast_bss_trans={0x37, 0x6a, {0x7, 0x1, "2e9e3592f841e627dd0972a7fb301e98", "b962d8c92cb209e220091e16b33fb09f564f712ac11395abdee0a58646c3ce6e", "ebb2c46e5e7f1d54eba070408bc017e2fc264652609a838002eb6b30e0ad6194", [{0x2, 0x16, "f6ba404bf345470ce3ecfe07ad75bb3f4c7b34a252e4"}]}}, @preq={0x82, 0x30, @not_ext={{0x1, 0x0, 0x1}, 0x3f, 0x0, 0x1, @device_b, 0xffff, "", 0x7, 0xffff0000, 0x2, [{{0x0, 0x0, 0x1}, @broadcast, 0x880b}, {{0x0, 0x0, 0x1}, @device_a, 0x7}]}}, @cf={0x4, 0x6, {0x1f, 0x0, 0x3, 0x6}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x20, 0x80, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_b}}, @cf={0x4, 0x6, {0x20, 0x0, 0x9, 0x3}}]}, @NL80211_ATTR_FTM_RESPONDER={0xa8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x3a, 0x3, "37f101be794eeebae5ba88e1997d6e5e001e6498e2af081387d2319b0c372916f10572ab7d0e8c2f3c959a4a2e4f7c3d9c9375abe0fb"}, @NL80211_FTM_RESP_ATTR_LCI={0x1e, 0x2, "afde6209f79d5c907cd1d3727afa201c9adc9db81cef0d3ada2d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x37, 0x2, "063e006070780e6d979f2b252ec31b7944cf57b6c0e4b19700b13d47ca64e46c09540a3694b807f8da4ead0d4e8a449f993842"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0xf2, 0x91, "45f282b125721f61100bdb95229483b701db00be811e29cf156c3e20659800cf29be1dc51e027fbedbefc296e2997733db65487c609b4cc76a0ddda59ca908597b94ab32c32471169298a2d1514adddbc2b20bd4e1b6e72b057a12082af06ee3826a1633f51bc612181348484136a9d2b828151a19da3f272a70356b8a5231d005a8115903279dbe6c103824661b09b31e538c9df0d84d84809421508e7de0ad5da4f140a89955af931e84e0faf87fe2d65dafabea4689cb53ba668ac3fea6ffb67ae7537e5abdd678c0b7c4479ce9de4116fe5530660dffbe2faecd3db22ed7d414cf5208403dfe5fad610bb35b"}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}]}]}, 0xae4}, 0x1, 0x0, 0x0, 0x24000800}, 0x24044044) creat(&(0x7f0000000c40)='./file0/file0\x00', 0x45) 04:55:19 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x112) [ 1012.898172] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1010 sclass=netlink_xfrm_socket pid=10116 comm=syz-executor.4 04:55:19 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 8) 04:55:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, &(0x7f0000000180)=""/216, 0xd8, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:55:19 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() r1 = getpid() tkill(r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x1a, 0xff, 0x3, 0x20, 0x0, 0x100000001, 0x318c4, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x8080, 0x0, 0x698, 0xc, 0x321461c1, 0x8, 0x8000, 0x0, 0x9, 0x0, 0x300000000}, r1, 0x4, r0, 0x2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r3 = getpid() tkill(r3, 0x0) r4 = signalfd(r0, &(0x7f0000000240)={[0xc3]}, 0x8) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x2, 0x0, 0x4, 0x80, 0x0, 0x0, 0x1b004, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xc91, 0x101}, 0xa120, 0x0, 0x6, 0x8, 0x6, 0x100, 0x3d, 0x0, 0x4, 0x0, 0x8}, r3, 0xe, r4, 0xa) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) pidfd_open(r5, 0x0) [ 1012.957451] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1010 sclass=netlink_xfrm_socket pid=10123 comm=syz-executor.4 04:55:19 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x6, 0x71, 0x6, 0x2}, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:55:20 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) 04:55:20 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x2) 04:55:20 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = getpid() tkill(r1, 0x0) sendmsg$netlink(r0, &(0x7f0000000580)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc, &(0x7f0000000540)=[{&(0x7f00000000c0)={0x454, 0x42, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@generic="598b3aab440c0eba28cf8e06fe59a8360553722752c1687f013f7bb784e6b98b2f3fc68d61687c614c057c025311a52d8258eb1d157e8a7b7a2a9cc11e72cc99bf53", @nested={0x132, 0x36, 0x0, 0x1, [@generic="05d37bf9b52fc5d11eaa0792bf514904f2f2bbecb8e406731a8e8d6618005f", @typed={0x5a, 0xf, 0x0, 0x0, @binary="da3a508a7e79edcab54e2a805fe22a1923ea5e128ba9704a5549fa5e3ecdca587a5b0aaf7e19db3055a2f708ce5cbedd22695891c26e73a46eec95beb66e2d55b27664e1d58c2fb67c884cd46289f96d683dbfe388e6"}, @generic="d1242c90b10affabc95b5ece4070db93d492c8321e8651912091f5397eb654a0c184543a5795dd72bd0ceecb9fcec28b69d0428b0bd01982ef1ac1d4d0fa208b897c7d9d95e7e503eaa00452a24ce6d60a15eb7021e9ddb0b26b6fd9a6739910ab456b3622023d53e3a11bda05d0d6846e9bdc390015021ed817169a92004c072459fd7338f1e5ee6fd17002ddc356c3e6c629702d58207a16b104686ca8ee79797bddf3d18e1e71c56647aeb7a78b4c8d19d9"]}, @nested={0xe6, 0x48, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="b116224327bdf082b3679020fa4d07088c83a44b36ebbeb94fc831e87b90a1fdb1439e6d6d585c173cc00440b653b1dd6123cf109378d33e5ee3412e6b12d8d3b097d03188d4c8a0ae2d799c0ef5c8c03d497a24e9a07ded83965959a97dd0f31c5ac8c19827135b870c5f8e7f6552b3cb5f97a8264270021179950bdccb8a5cd1b14abf42f27f9acb3ae37c879589467d4b159f46fa2caea3fc8dda1361b64e4db4d6a9bd207a2fd0691bc498a6", @typed={0x29, 0x73, 0x0, 0x0, @binary="cdac911432132643c7f8e3471808755650eaa8844e462ab0a910a461d03d33a7323550e1f5"}]}, @nested={0xe7, 0x9, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@loopback}, @generic="676b4819afac6f6c4b979314db946fa58403d3920b4273ef119b19d26adc4e3cc2185b370dab41bc20e76bd0779b3b74ae7980dece1c39bc220ff9c38c34dd6016e90db92a6a97b6fbd55aec173219ce0be9988e0e6983424cc786fe304657fd2f55f14ea49ba75c6ee887ecce9073af", @typed={0x8, 0x2d, 0x0, 0x0, @ipv4=@empty}, @generic="7d7aa61d1132f0755f0e7644bab40f970e6ba7957f79e30243bd112f4db94b2cc072e29788bf49f25bd3eb0724b29655d8c9b739ae296a4559350e91cfa80d29cae3834c6aabc23c27f5be6fbf68148d59c210d0a9e3a74142e096"]}, @nested={0xf4, 0x5e, 0x0, 0x1, [@generic="a7519569579fa96bf4858642e1369404c09a17fc7c7b85ba2c13894fbb0bdd71cc5d57c27dbb871970b185579ae9e5c77486e66ab3e06aea4a8249", @typed={0x4, 0x56}, @typed={0x1f, 0x21, 0x0, 0x0, @binary="4f655431692d109816d72dcf4e713e4a00a43ea6fd3cddd127d7f5"}, @typed={0x8, 0x25, 0x0, 0x0, @fd}, @generic="f66b9dad4e65e15cac9c253b38ca2fb342bf7bf6bd23444db7f3b6cc11402d2c2bae037be6b1e01deffb1d6b0d7af15812335547136dfd7a5c9d678fff41d6a6f5820a0aabe4475552e9535159d77ef5ec80eff9aab13be4db6412d91b2c7abe74892576cb0477fd20a37d54f905e55fa3f9080bfd5887a3ce1cf4f7037a4de10d4a323418746903f9"]}, @typed={0x8, 0x20, 0x0, 0x0, @pid=r1}]}, 0x454}], 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fcntl$dupfd(r2, 0x0, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x4, 0x0, 0x1, 0x7, 0x0, 0xffff, 0x2203, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf8, 0x4, @perf_config_ext={0x5, 0x2}, 0x1, 0xffc, 0x4, 0x7, 0xffffffff, 0x1, 0x3, 0x0, 0x63ef7c0f, 0x0, 0xaa33}, 0x0, 0x2, r3, 0x2) 04:55:20 executing program 3: setresuid(0xee01, 0xee00, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000042c0)='./file0\x00', &(0x7f0000009f40), 0x4000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000009ac0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/83, 0x53}, {&(0x7f00000000c0)=""/46, 0x2e}, {&(0x7f0000000240)=""/125, 0x7d}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/90, 0x5a}, {&(0x7f0000001340)=""/197, 0xc5}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/246, 0xf6}], 0x8, &(0x7f0000001600)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x170}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000001800)=""/83, 0x53}, {&(0x7f0000001880)=""/105, 0x69}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000001a00)=""/181, 0xb5}, {&(0x7f0000001ac0)=""/182, 0xb6}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/83, 0x53}], 0x7, &(0x7f0000002c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000002cc0)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002d40)=""/75, 0x4b}, {&(0x7f0000002dc0)=""/97, 0x61}, {&(0x7f0000002e40)=""/76, 0x4c}, {&(0x7f0000002ec0)=""/47, 0x2f}, {&(0x7f0000002f00)=""/71, 0x47}, {&(0x7f0000002f80)=""/114, 0x72}], 0x6, &(0x7f0000003080)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000030c0), 0x6e, &(0x7f0000004280)=[{&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/203, 0xcb}, {&(0x7f0000004240)=""/16, 0x10}], 0x3, &(0x7f00000042c0)}}, {{&(0x7f0000004300), 0x6e, &(0x7f0000007700)=[{&(0x7f0000004380)=""/95, 0x5f}, {&(0x7f0000004400)=""/90, 0x5a}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/78, 0x4e}, {&(0x7f0000005500)=""/73, 0x49}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/96, 0x60}, {&(0x7f0000006600)=""/213, 0xd5}, {&(0x7f0000006700)=""/4096, 0x1000}], 0x9, &(0x7f00000077c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000007840), 0x6e, &(0x7f0000008940)=[{&(0x7f00000078c0)=""/4096, 0x1000}, {&(0x7f00000088c0)=""/86, 0x56}], 0x2}}, {{0x0, 0x0, &(0x7f0000009a40)=[{&(0x7f0000008980)=""/49, 0x31}, {&(0x7f00000089c0)=""/50, 0x32}, {&(0x7f0000008a00)=""/4096, 0x1000}, {&(0x7f0000009a00)=""/29, 0x1d}], 0x4, &(0x7f0000009a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x7, 0x40, &(0x7f0000009c80)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000009cc0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@aname={'aname', 0x3d, ':,})@'}}, {@dfltgid={'dfltgid', 0x3d, r0}}, {@debug}, {@version_u}, {@aname={'aname', 0x3d, '\xf2'}}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@aname={'aname', 0x3d, ':,^}'}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, '-#$#)/'}}, {@pcr={'pcr', 0x3d, 0x36}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@appraise}]}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = fcntl$dupfd(r3, 0x0, r3) newfstatat(0xffffffffffffff9c, &(0x7f0000009e80)='./file0\x00', &(0x7f0000009ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f0000001440)='./file0/file0\x00', 0xffffffffffffffff, r5) setfsuid(r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 1013.088617] FAULT_INJECTION: forcing a failure. [ 1013.088617] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.090908] CPU: 1 UID: 0 PID: 10137 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1013.090942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1013.090956] Call Trace: [ 1013.090964] [ 1013.090974] dump_stack_lvl+0xfa/0x120 [ 1013.091021] should_fail_ex+0x4d7/0x5e0 [ 1013.091062] should_failslab+0xc2/0x120 [ 1013.091086] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 1013.091125] ? __d_alloc+0x31/0xa10 [ 1013.091154] __d_alloc+0x31/0xa10 [ 1013.091181] d_alloc_parallel+0x112/0x1330 [ 1013.091223] ? lock_acquire+0x15e/0x2f0 [ 1013.091249] ? __d_lookup+0x73/0x490 [ 1013.091277] ? find_held_lock+0x2b/0x80 [ 1013.091311] ? __d_lookup+0x255/0x490 [ 1013.091339] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1013.091367] ? lock_is_held_type+0x9e/0x120 [ 1013.091408] ? __d_lookup+0x25f/0x490 [ 1013.091446] lookup_open.isra.0+0x64f/0x1530 [ 1013.091485] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1013.091536] ? __pfx_down_write+0x10/0x10 [ 1013.091558] ? mnt_get_write_access+0x1ea/0x2d0 [ 1013.091592] path_openat+0xc26/0x2880 [ 1013.091638] ? __lock_acquire+0x694/0x1b70 [ 1013.091663] ? __pfx_path_openat+0x10/0x10 [ 1013.091709] do_filp_open+0x1e8/0x450 [ 1013.091745] ? __pfx_do_filp_open+0x10/0x10 [ 1013.091793] ? find_held_lock+0x2b/0x80 [ 1013.091826] ? alloc_fd+0x2c1/0x560 [ 1013.091858] ? lock_release+0xc8/0x290 [ 1013.091889] ? alloc_fd+0x2c1/0x560 [ 1013.091932] do_sys_openat2+0x104/0x1b0 [ 1013.091961] ? __pfx_do_sys_openat2+0x10/0x10 [ 1013.092003] __x64_sys_creat+0xcc/0x120 [ 1013.092033] ? __pfx___x64_sys_creat+0x10/0x10 [ 1013.092062] ? __pfx_ksys_write+0x10/0x10 [ 1013.092103] ? do_syscall_64+0x85/0x360 [ 1013.092129] do_syscall_64+0xbf/0x360 [ 1013.092154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.092179] RIP: 0033:0x7f5fc6611b19 [ 1013.092198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1013.092221] RSP: 002b:00007f5fc3b87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1013.092245] RAX: ffffffffffffffda RBX: 00007f5fc6724f60 RCX: 00007f5fc6611b19 [ 1013.092262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1013.092276] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1013.092291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.092305] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 1013.092339] 04:55:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:55:29 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 9) 04:55:29 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x81, 0x1, 0x7, 0x1, 0x0, 0x40, 0xa0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x2880, 0x5, 0xff, 0x7, 0x81, 0x8, 0x9, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) 04:55:29 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x2) 04:55:29 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = getpid() tkill(0x0, 0xc) r2 = getpid() tkill(r2, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x5, 0x0, 0x3f, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x4, @perf_config_ext={0x0, 0x1}, 0x850, 0x5, 0x1000, 0x4, 0x3fb, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x139e}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6b, 0x0, 0x0, 0x80, 0x0, 0x100, 0x820, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x6b, 0xfff}, 0x4000, 0x1, 0x2, 0x8, 0x10000, 0x7, 0x80, 0x0, 0x5, 0x0, 0x4f5}, r2, 0xe, r3, 0x3) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0x1, 0x1, 0x31, 0x0, 0x3ff, 0x410, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x4, 0x73ae2981, 0x4, 0xbb9, 0x38, 0x5, 0x0, 0xb0, 0x0, 0x4}, r1, 0xd, r4, 0x0) 04:55:29 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x3) 04:55:29 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="2321886c65300a"], 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/14) r3 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r3, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000740)=""/168, 0xa8}], 0x3, 0x1, 0x46088a99) 04:55:29 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:55:30 executing program 3: setresuid(0xee01, 0xee00, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x1ff, 0x800}, {0x1, 0x3}, {0x9, 0x1}, {0x6}, {0x71, 0x7}, {0xb84, 0x6}, {0x9058, 0x5}, {0xf, 0x5d4b}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = signalfd4(r0, &(0x7f0000000080)={[0xb681]}, 0x8, 0x80800) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r3 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x1000) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) flistxattr(r4, &(0x7f0000000280)=""/24, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 04:55:30 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x8) 04:55:30 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7d9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = getpid() r2 = getpid() tkill(r2, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000060c0)='./file0\x00', 0x1) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000006100)={0x1f, 0x0, @none}, &(0x7f0000006140)=0xe, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r10 = dup(r9) copy_file_range(r4, &(0x7f0000000040), r8, &(0x7f00000000c0)=0x401, 0x401, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000062c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000140)="50f873ecb8bdc3495755e58f1dd4cd2d975460edda02be0333105dd541e0cf50a0828687b04f455e5811db639e94f9bf6074e0c394f1df7327f5976d258354adfb6a6de51324568b521c32ff0106548e2879223eecfe6113112b0093bceb69674c900bb203140e91b6ef213082409bf8de5464a28709c32bd3e84076a1948abc1d33e87c2a2b3533b5ccbc9b957ffb75452672605d428c9e560ac09c3288a996744e6bce243a46f713a8c81ba152e4da263e846e53908916cc20b864969c033c9e15addda1a1", 0xc6}, {0xfffffffffffffffe}, {&(0x7f0000000240)="b76ee662b727739fb18b0f0850cf3b205502760b4c00dac606b9d6d989173d8d38e1cc05bf5160c592b1f04712f543bf77586eea3f58821e1bca19a7228756d5e0c98676ff97a72a4bc6cc9c69e5b86146d88e11fbffad644cc54513ec4d47ada8bc48f1e86a669b88cd0d663a0b2b9b9fcf9d4892d481b4dfe03fc57f94f455f3b204d1a3c2396b80bcfc6541a411435293b7f8c9de96509df01eda638245d21fd0a0041a1b9b890899fb9a35821bb1fc04911f366a60726eff8cd95ca624c6f233278c6956708c6d393eb43112cb81e1cf02d55f20ee2ca7f46eb7e6df151c8222f2deff39255c0658", 0xea}, {&(0x7f00000003c0)="1627a9e0d5144cab217ed5e460714c034feba60b38cb6edef2235f71383aa7bf384082971c7e663f1f72011e225e341d9689418d7a13abf14f731525451c53d8142a5821eaa3c803348ed9967e08ac963af619ad7f22f555ed08e6ecce0b8c1a1132cabb0575b9eb9e6ac7ba0b1e890d13b5eb5d53a4714835b05fb55f402943dc32318dc3ffb867776f345fbceeac75", 0x90}, {&(0x7f0000000000)="e74cb8e441c3b518851e3b89a87f3dd9a936e6cb219b3526233d7f45bc9789a1602661e58f1e3f832aa0ae220e74", 0x2e}, {&(0x7f0000000700)="4aa7d15b7ce050b64254be7c3f4c928658fbe15f146333e14b1ce5438327a0bf03a020ab47815e8b2d68adbedc0a094cf262299e1c41c23a39cdc0091b985a2231e7759909fb8ceb993b46f820b11ab30644d295c390", 0x56}], 0x6, 0x0, 0x0, 0x4004001}}, {{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000580)="df0000523e91ec7587d487d3c456a09290ca064e44cb82e82391fed8432d18a55581c812dfa9d86e8b592a9044d8601a678dbf8037572b21710c2a0085215ced239d20ec9061489fc3888c12daa08a9c6d6e5d8bf4dc171717f4ac6592d35e61", 0x60}, {&(0x7f0000000600)="285625741523aa1f3fbb423a5f8c146680dd46f973ce7eee42b8fc2d26071e79b6f35aaf49825f946b9ae6878e3771a211fbea38a1682de05e3e1b53c9136e5949330bedd35ff17123fbb6188b39ca4081696a1259c9bf09c73c02e64f0400a1b94694875537f73dc4e2d0e29fc55d10fe541da230ade662c8c680ecf0d9e82b74f8d07aee375ce43c828c", 0x8b}], 0x2, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r9, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0xf8, 0x4081}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="021ef63bc0d866e247462f28b9a06d4285e38bae384d1f1fb31531727a60a83f859ad79324503da74eb429b2aacdd40328fa8b70deddee227fab78c7e8662ea2", 0x40}, {&(0x7f0000000ac0)="e9ac17aa3e4555eed327c0b8469f67f6e22e22042b5bf73c60414d6c83b2eaac2303c03395fc9b191bd9dfb9962a1980a52375c4b419c23f36db77caff44a5b48faaba9c74d58c9e11049b418a1cda90a1a4d4d78fdd49a65077bf0555ec132c3406e623febf0c1b9ca88a33454a1b2a9396ae405701419a96fbbc8a421926ecf45422471cba8944f5c15f626e8d701efbd5e04c3911d4bf1982119515fa9a585899a662ff4addd55e29d14ba3ebaa4f7b5c89deabde5932ac52b7743455a21d8ea0", 0xc2}], 0x2, &(0x7f0000000800)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r10, r0, r4, r8, r9]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb0, 0x10}}, {{&(0x7f0000005a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005ac0)="1cc9028a5efcdac77d30bb129eaa9c9119aaa6345b8563d06c356524eaccb9f1a165b4bdfe821882901bc81298ece5683a23930a9652195b57c6f7e0a12125336e0cb7324c3c3d7e7c6011e3b9a50776db5e5e604b7403a463c39b479e88ebf2150bb94ba7268241f90cffe936174e8ea6ee546564d1ba67e6851a0e94e4e99b5e723ca9ddf6743b23b629853a19ad0ec065a3f23610cced9d993e097b2c0c34f7493524c88f82be4dd45c75d139", 0xae}, {&(0x7f0000005b80)="764f2bb566c01c22a201831fcdc6d1cee081c6967f62d366e3d52c2a1b99d1ef45d18d12a7af6138b3ea305594ec21712a3e89f3458bdc76020fb22a593aef9a99a3855c29d9392832ff336a1816f771d6fe02690c6fcff977a5a84e1aa5eb0d7d844a409e111b8bdd27d5321ddbaa85437d94a60f2f23d58c8c1cec39039ca1b17ab8cdf81d47d4e380157dae1cdd61d2c051b6f54331067399de837ec4e2c3eb3e", 0xa2}, {&(0x7f0000005c40)="b532016c7b2745510b339fbe13c7765fe1081abb5a4d", 0x16}], 0x3, &(0x7f0000006180)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, r0, r6, r7, 0xffffffffffffffff, r8]}}], 0x130, 0x800}}], 0x4, 0x804) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:55:30 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) 04:55:30 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 10) 04:55:30 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x1, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000340)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x8, 0x1f, 0x20, 0x7, 0x0, 0x878, 0x42000, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x5, 0x8000}, 0x40002, 0x3, 0x2, 0x1, 0x6, 0x4, 0x7, 0x0, 0x8, 0x0, 0x68}, r2, 0xd, r3, 0xb) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7721202e2f66696c65300a01aaaf20d7ce91d268923b0de25091ec1b1884ee590d5590db9a5de2d51fa9bdca5950d865527a7cbfead4bd8daa61c96aa5929c43a27e1a9debba93e895df064f5786c0a5fdb7cb7681b10a6f9ade8a53f5a118dc00b56ae74b14ef4d2bc9aeee29aa32cb4d6473a03208f6b4cba3c2bd2edb9d02cf0f64fd7030677d4a1c74b35137a65b6808dfd295d00c29634748e1555539150790a26dc5defde52fa333bd337363be5a4238b5cab653f41b28"], 0xb) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = dup(r5) copy_file_range(r6, &(0x7f0000000040), r4, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000480)={0xfffffffffffffffb, 0x800000000000, 0x4, 0x1, 0xa, [{0x100, 0x7, 0x8, '\x00', 0x800}, {0x20, 0x5, 0x4ab, '\x00', 0x4}, {0x8, 0x795, 0x9, '\x00', 0xa}, {0x3b, 0x8, 0xb702, '\x00', 0x2180}, {0x3, 0x7ff, 0x4, '\x00', 0x1001}, {0x8, 0x200, 0x1, '\x00', 0x3}, {0x3, 0x8, 0x1, '\x00', 0x300}, {0x7, 0x7, 0x20, '\x00', 0x100}, {0x800, 0x5ff78fd8, 0x3, '\x00', 0x3180}, {0x9, 0x5, 0x4, '\x00', 0x4}]}) r7 = dup(r1) readv(r7, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='-^\x00', &(0x7f0000000100)='./file0\x00', r1) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{}, {0x20, '.\''}], 0xa, "ee660057eb81d6264a8294faf24e116a9e38629406554e2ca3e14b26b4bfdebb68237fae9e87a680263fe277a2555e1276cab040b477d373a3936956c6cf45b9713b74defa7439e0295ff50c184e762f75adaf02c604b78bcf3b1f757ee15e030d5fed2fec353990bf3a0a83ac8448afec35f0ce7c014f83b87f799e7a2942f4b53e1689cdc7d4b8adaa6b9166215eb44561a8f04ec7e102e76d0923"}, 0xab) 04:55:30 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2080, 0x22) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) [ 1023.172090] FAULT_INJECTION: forcing a failure. [ 1023.172090] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.173029] CPU: 0 UID: 0 PID: 10188 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1023.173045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1023.173053] Call Trace: [ 1023.173057] [ 1023.173065] dump_stack_lvl+0xfa/0x120 [ 1023.173091] should_fail_ex+0x4d7/0x5e0 [ 1023.173113] should_failslab+0xc2/0x120 [ 1023.173126] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 1023.173144] ? shmem_alloc_inode+0x27/0x50 [ 1023.173162] shmem_alloc_inode+0x27/0x50 [ 1023.173173] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1023.173185] alloc_inode+0x67/0x250 [ 1023.173200] new_inode+0x1e/0x160 [ 1023.173214] __shmem_get_inode+0x17c/0xe80 [ 1023.173231] shmem_mknod+0x64/0x250 [ 1023.173244] ? __pfx_shmem_create+0x10/0x10 [ 1023.173259] lookup_open.isra.0+0x10f8/0x1530 [ 1023.173279] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1023.173303] ? __pfx_down_write+0x10/0x10 [ 1023.173315] ? mnt_get_write_access+0x1ea/0x2d0 [ 1023.173332] path_openat+0xc26/0x2880 [ 1023.173354] ? __lock_acquire+0x694/0x1b70 [ 1023.173368] ? __pfx_path_openat+0x10/0x10 [ 1023.173390] do_filp_open+0x1e8/0x450 [ 1023.173407] ? __pfx_do_filp_open+0x10/0x10 [ 1023.173430] ? find_held_lock+0x2b/0x80 [ 1023.173446] ? alloc_fd+0x2c1/0x560 [ 1023.173461] ? lock_release+0xc8/0x290 [ 1023.173476] ? alloc_fd+0x2c1/0x560 [ 1023.173496] do_sys_openat2+0x104/0x1b0 [ 1023.173511] ? __pfx_do_sys_openat2+0x10/0x10 [ 1023.173531] __x64_sys_creat+0xcc/0x120 [ 1023.173545] ? __pfx___x64_sys_creat+0x10/0x10 [ 1023.173559] ? __pfx_ksys_write+0x10/0x10 [ 1023.173581] do_syscall_64+0xbf/0x360 [ 1023.173594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.173607] RIP: 0033:0x7f5fc6611b19 [ 1023.173616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1023.173628] RSP: 002b:00007f5fc3b87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1023.173639] RAX: ffffffffffffffda RBX: 00007f5fc6724f60 RCX: 00007f5fc6611b19 [ 1023.173647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1023.173654] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1023.173661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1023.173668] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 1023.173684] 04:55:30 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x4000, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000200000000806d2e2f66696c651000"]) fcntl$setstatus(r2, 0x4, 0x42800) 04:55:30 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq', 0xa000, 0x14f) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockname(r3, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x80) 04:55:30 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7d9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = getpid() r2 = getpid() tkill(r2, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000060c0)='./file0\x00', 0x1) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000006100)={0x1f, 0x0, @none}, &(0x7f0000006140)=0xe, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r10 = dup(r9) copy_file_range(r4, &(0x7f0000000040), r8, &(0x7f00000000c0)=0x401, 0x401, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000062c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000140)="50f873ecb8bdc3495755e58f1dd4cd2d975460edda02be0333105dd541e0cf50a0828687b04f455e5811db639e94f9bf6074e0c394f1df7327f5976d258354adfb6a6de51324568b521c32ff0106548e2879223eecfe6113112b0093bceb69674c900bb203140e91b6ef213082409bf8de5464a28709c32bd3e84076a1948abc1d33e87c2a2b3533b5ccbc9b957ffb75452672605d428c9e560ac09c3288a996744e6bce243a46f713a8c81ba152e4da263e846e53908916cc20b864969c033c9e15addda1a1", 0xc6}, {0xfffffffffffffffe}, {&(0x7f0000000240)="b76ee662b727739fb18b0f0850cf3b205502760b4c00dac606b9d6d989173d8d38e1cc05bf5160c592b1f04712f543bf77586eea3f58821e1bca19a7228756d5e0c98676ff97a72a4bc6cc9c69e5b86146d88e11fbffad644cc54513ec4d47ada8bc48f1e86a669b88cd0d663a0b2b9b9fcf9d4892d481b4dfe03fc57f94f455f3b204d1a3c2396b80bcfc6541a411435293b7f8c9de96509df01eda638245d21fd0a0041a1b9b890899fb9a35821bb1fc04911f366a60726eff8cd95ca624c6f233278c6956708c6d393eb43112cb81e1cf02d55f20ee2ca7f46eb7e6df151c8222f2deff39255c0658", 0xea}, {&(0x7f00000003c0)="1627a9e0d5144cab217ed5e460714c034feba60b38cb6edef2235f71383aa7bf384082971c7e663f1f72011e225e341d9689418d7a13abf14f731525451c53d8142a5821eaa3c803348ed9967e08ac963af619ad7f22f555ed08e6ecce0b8c1a1132cabb0575b9eb9e6ac7ba0b1e890d13b5eb5d53a4714835b05fb55f402943dc32318dc3ffb867776f345fbceeac75", 0x90}, {&(0x7f0000000000)="e74cb8e441c3b518851e3b89a87f3dd9a936e6cb219b3526233d7f45bc9789a1602661e58f1e3f832aa0ae220e74", 0x2e}, {&(0x7f0000000700)="4aa7d15b7ce050b64254be7c3f4c928658fbe15f146333e14b1ce5438327a0bf03a020ab47815e8b2d68adbedc0a094cf262299e1c41c23a39cdc0091b985a2231e7759909fb8ceb993b46f820b11ab30644d295c390", 0x56}], 0x6, 0x0, 0x0, 0x4004001}}, {{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000580)="df0000523e91ec7587d487d3c456a09290ca064e44cb82e82391fed8432d18a55581c812dfa9d86e8b592a9044d8601a678dbf8037572b21710c2a0085215ced239d20ec9061489fc3888c12daa08a9c6d6e5d8bf4dc171717f4ac6592d35e61", 0x60}, {&(0x7f0000000600)="285625741523aa1f3fbb423a5f8c146680dd46f973ce7eee42b8fc2d26071e79b6f35aaf49825f946b9ae6878e3771a211fbea38a1682de05e3e1b53c9136e5949330bedd35ff17123fbb6188b39ca4081696a1259c9bf09c73c02e64f0400a1b94694875537f73dc4e2d0e29fc55d10fe541da230ade662c8c680ecf0d9e82b74f8d07aee375ce43c828c", 0x8b}], 0x2, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r9, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0xf8, 0x4081}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="021ef63bc0d866e247462f28b9a06d4285e38bae384d1f1fb31531727a60a83f859ad79324503da74eb429b2aacdd40328fa8b70deddee227fab78c7e8662ea2", 0x40}, {&(0x7f0000000ac0)="e9ac17aa3e4555eed327c0b8469f67f6e22e22042b5bf73c60414d6c83b2eaac2303c03395fc9b191bd9dfb9962a1980a52375c4b419c23f36db77caff44a5b48faaba9c74d58c9e11049b418a1cda90a1a4d4d78fdd49a65077bf0555ec132c3406e623febf0c1b9ca88a33454a1b2a9396ae405701419a96fbbc8a421926ecf45422471cba8944f5c15f626e8d701efbd5e04c3911d4bf1982119515fa9a585899a662ff4addd55e29d14ba3ebaa4f7b5c89deabde5932ac52b7743455a21d8ea0", 0xc2}], 0x2, &(0x7f0000000800)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r10, r0, r4, r8, r9]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb0, 0x10}}, {{&(0x7f0000005a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005ac0)="1cc9028a5efcdac77d30bb129eaa9c9119aaa6345b8563d06c356524eaccb9f1a165b4bdfe821882901bc81298ece5683a23930a9652195b57c6f7e0a12125336e0cb7324c3c3d7e7c6011e3b9a50776db5e5e604b7403a463c39b479e88ebf2150bb94ba7268241f90cffe936174e8ea6ee546564d1ba67e6851a0e94e4e99b5e723ca9ddf6743b23b629853a19ad0ec065a3f23610cced9d993e097b2c0c34f7493524c88f82be4dd45c75d139", 0xae}, {&(0x7f0000005b80)="764f2bb566c01c22a201831fcdc6d1cee081c6967f62d366e3d52c2a1b99d1ef45d18d12a7af6138b3ea305594ec21712a3e89f3458bdc76020fb22a593aef9a99a3855c29d9392832ff336a1816f771d6fe02690c6fcff977a5a84e1aa5eb0d7d844a409e111b8bdd27d5321ddbaa85437d94a60f2f23d58c8c1cec39039ca1b17ab8cdf81d47d4e380157dae1cdd61d2c051b6f54331067399de837ec4e2c3eb3e", 0xa2}, {&(0x7f0000005c40)="b532016c7b2745510b339fbe13c7765fe1081abb5a4d", 0x16}], 0x3, &(0x7f0000006180)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, r0, r6, r7, 0xffffffffffffffff, r8]}}], 0x130, 0x800}}], 0x4, 0x804) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:55:38 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0xb) 04:55:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x81, 0x1, 0x7, 0x1, 0x0, 0x40, 0xa0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x2880, 0x5, 0xff, 0x7, 0x81, 0x8, 0x9, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) 04:55:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:55:38 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:55:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 11) 04:55:38 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x265, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="c5a47bf0dfe650848843ce1ef2335ef634b448a9e8cc498bb7e5f66d585f65f3d4da08f5cbd9420301b6c836db2f4f9e56a379adb3197a80671eac9dd911888d81867235403a5a97b069148f8dfe6e54a2edd12ebd8771f80bad21c2a5f02be907688f4f8dc3f006f19a1db867d40655958f908ec412b34d9aa879cd74b150d5cde822b07493d25f2f35c42d8f890d50c44c1691a24d4254bf5f981ef5ace5ba972c1a3c94928ce4d38bfa1b57495d98f1a1ba1b9de224b24330e2", 0xbb, 0x80000000}, {&(0x7f0000000200)="58f2fe768b7b7f8eddd332b5faef3587e5473c6b86a789538c4ba44740921b29a55ccaca7b581c86877fce2b68d0a4ca8902b7b06d790926be3e0e800c54088ac4cd234b5178976d4d81f9058b258c14cd307b8b2223363490f3cdc2359b6d1e4b5c6a70e9d1b8d41b576f1e69a839040042643c37f1c8738db6e6647de7232aad9507928f143674bb9acd236310de957b60a97d4020589f7dddc0c36eb1e879a91dab6e688a6cd9329210b00f2b9fe31791a1858c282cead180", 0xba, 0x9}], 0x804022, &(0x7f00000002c0)={[{'--].'}, {').'}, {'sit0\x00'}, {'sit0\x00'}], [{@smackfshat={'smackfshat', 0x3d, 'sit0\x00'}}, {@obj_role={'obj_role', 0x3d, 'sit0\x00'}}, {@smackfsfloor}, {@obj_user}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x9, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000380)="b95f0b14b3b3e8056442856fed03f91f8cb977243b47ae1dc89d3b0a5fc7b28ec4bc032d4922f4f03b9492dafae3b3f17396e31160868d05fc8efa3f8359f7975c601df1aa92ab122b4b7b68d2f19e54260be625cdc3033ddadc74bdaba9ac17c4945dade736917fd5433241884b5b53452d5efce503d2ac19f69ee26ccec35693c7de00bd7bcce432c00e3e4bd3dbd3f577b75ad046f2a863545ef8c4399785e58a18206bbd5a95a33b545f081a211fdfbe9e3af96877e8735f3bbaba0181caaaba02621ae97073903ae199b3f4a30a0c97047f2955ffada5ae9f6ebff85b8b31bcffb17ebbeca78cc22386", 0xec, 0xffffffffffff7fff}, {&(0x7f0000000480)="3513aafec46153f8f850600217ef47a4d8381caf9d61acdaa7cdb005769db601f63dc4c4daa3659ae9b4b7b9d3b3b8cdd393f054985762a9254b8066761fca2b47a6346b763ffc221d82ded6579e6a53850391780e891d578cad914c96a4d7f1cf1798d3d4cef51d95e594b82710cb2a8ecdb833f8fb452a78d78094382736e9ed41ec4e4d58ffc659db609a35e8c0b3261dfd928d0b30edc7c9e1b853f3cdeef6570655f642cf3ea09e0891e4d5a62cb16292350c33141ba8b6ef8dc41c21ae2196cc9403c8edbe00869cc7e2c9e88e700a788795af7655cf", 0xd9, 0x8}, {&(0x7f0000000580)="93eeb3b192811690b56679bd807e2946016e16301a79a151090b9a5d5ce3c90f5d7134b5ee0d583aa571edac6d2bd7e9e676a1c7dfb55a91202bdf8cdbc7052385a90626d49495624452000171442b6b9bf6bb6fdee3d308c43d2419aacbaf5968fa99bea5dfa7d533bc97cc233ea1903c9df1c74abde877b437", 0x7a, 0x7}, {&(0x7f0000000600)="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", 0x1000, 0x1f}, {&(0x7f0000001600)="e1dace93a6dbf33ce02fe83624a78d756c6a99dc7d9900c8af6db89614a899d02c21e8de89534fc7c436f91c8b8d0ed767dada5dfc1feca60faa02972023609b76de1eccbf39932264554f546281c04abe07fde10d0ba7726ad6f7cfcfd53bed2d1576a2e3f30829b6c69f0b03be96940471bddef3848bc46811ed5db3d57c08cee57c8184cb675532390bda2e0c4c934acad19729761435072a7b644eecb748d5d27267c2c23936", 0xa8, 0x101}], 0x300000, &(0x7f0000001740)={[{').'}, {'{('}, {'nfs4\x00'}, {'obj_user'}], [{@audit}, {@appraise}, {@hash}, {@measure}, {@pcr={'pcr', 0x3d, 0x10}}, {@fowner_lt}]}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lsetxattr$system_posix_acl(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)='system.posix_acl_default\x00', &(0x7f0000001940)={{}, {0x1, 0x7}, [{0x2, 0x3, r4}, {0x2, 0x8, 0xee00}, {0x2, 0x0, r4}], {0x4, 0x3}, [{0x8, 0x4, r5}], {0x10, 0x4}, {0x20, 0x3}}, 0x44, 0x2) write$binfmt_script(r2, &(0x7f0000002c80)={'#! ', './file0', [{}, {0x20, '\x94'}], 0xa, "d26c513955e7f0900a34951c6689f7df71a1311c27c8cab3085e11274db4b169cd151a0500000080d3d08b9f3bf8a580da7cfc6aba2b9716ff0a61367e9cf8bcb462a2316f2d62236c9f2ff3613fe863f9072ec6dc0ea17d51a8def18915975811db966214c9b4f6447b0919e4a808531329442765051603f5e96e7c9cfe726793d5501198aacdfb376c52e28bc959e1e26facbca7aa9400"/161}, 0xaf) dup(r3) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x180, 0x0) socketpair(0x26, 0x6, 0x9, &(0x7f0000001a00)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000001ac0)={{r7}, 0x0, 0xa, @inherit={0x70, &(0x7f0000001a40)={0x0, 0x5, 0x6, 0x9, {0x1c, 0x0, 0xdd06, 0xd34, 0x2}, [0x2, 0x89, 0xe79a, 0x7, 0x4]}}, @subvolid=0x100}) r8 = syz_mount_image$nfs(&(0x7f0000002ac0), &(0x7f0000002b00)='./file0\x00', 0x2, 0x0, &(0x7f0000002b40), 0x40000, &(0x7f0000002b80)={[{'--].'}], [{@euid_eq={'euid', 0x3d, r4}}, {@seclabel}]}) copy_file_range(r8, &(0x7f0000000040)=0xb30, r2, &(0x7f00000000c0)=0x3fe, 0x401, 0x0) setsockopt$inet_buf(r2, 0x0, 0x2a, &(0x7f00000017c0)="94d99090e4e33ff906a4f4b55db37f37d16d5e814c9abc233cf73e7ffc5463b800a9413f10b57ca05a1bdb035f56a243d5", 0x31) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:55:38 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x40, 0x8, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x28c1, 0x8, 0x8, 0x5, 0x5, 0x3ff, 0xf355, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0xa, r1, 0x0) 04:55:38 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x820) r5 = dup(r1) readv(r5, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:55:38 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{}], 0xa, "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"}, 0x100c) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x6, 0x4, 0x0, 0x9, 0x0, 0xb95, 0x40800, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc1, 0x4, @perf_bp={&(0x7f0000000040), 0xd}, 0x1010, 0x4, 0x7fffffff, 0x6, 0x3ff, 0x6, 0x55e4, 0x0, 0x759c, 0x0, 0x7fffffff}, r1, 0x6, r0, 0xf5054d970e7c3897) 04:55:38 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:55:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x30021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x401, 0x3, 0x3, 0x8, 0x5, [{0x1, 0xca, 0x2, '\x00', 0x1000}, {0x8, 0x7, 0x1e0, '\x00', 0x800}, {0x3f, 0x3ff, 0x800, '\x00', 0x81}, {0x9, 0x40, 0x3, '\x00', 0x1}, {0x8001, 0xfd6, 0x400, '\x00', 0x808}]}) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:55:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 12) 04:55:38 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x10) 04:55:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) [ 1031.836178] FAULT_INJECTION: forcing a failure. [ 1031.836178] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.837206] CPU: 1 UID: 0 PID: 10247 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1031.837226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1031.837234] Call Trace: [ 1031.837239] [ 1031.837244] dump_stack_lvl+0xfa/0x120 [ 1031.837269] should_fail_ex+0x4d7/0x5e0 [ 1031.837290] ? security_inode_alloc+0x3e/0x130 [ 1031.837308] should_failslab+0xc2/0x120 [ 1031.837321] kmem_cache_alloc_noprof+0x5f/0x470 [ 1031.837339] ? lockdep_init_map_type+0x4b/0x240 [ 1031.837356] security_inode_alloc+0x3e/0x130 [ 1031.837375] inode_init_always_gfp+0xc94/0xff0 [ 1031.837396] alloc_inode+0x8d/0x250 [ 1031.837409] new_inode+0x1e/0x160 [ 1031.837422] __shmem_get_inode+0x17c/0xe80 [ 1031.837441] shmem_mknod+0x64/0x250 [ 1031.837454] ? __pfx_shmem_create+0x10/0x10 [ 1031.837468] lookup_open.isra.0+0x10f8/0x1530 [ 1031.837488] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1031.837512] ? __pfx_down_write+0x10/0x10 [ 1031.837523] ? mnt_get_write_access+0x1ea/0x2d0 [ 1031.837540] path_openat+0xc26/0x2880 [ 1031.837562] ? __lock_acquire+0x694/0x1b70 [ 1031.837573] ? __pfx_path_openat+0x10/0x10 [ 1031.837595] do_filp_open+0x1e8/0x450 [ 1031.837612] ? __pfx_do_filp_open+0x10/0x10 [ 1031.837635] ? find_held_lock+0x2b/0x80 [ 1031.837651] ? alloc_fd+0x2c1/0x560 [ 1031.837666] ? lock_release+0xc8/0x290 [ 1031.837680] ? alloc_fd+0x2c1/0x560 [ 1031.837701] do_sys_openat2+0x104/0x1b0 [ 1031.837715] ? __pfx_do_sys_openat2+0x10/0x10 [ 1031.837735] __x64_sys_creat+0xcc/0x120 [ 1031.837749] ? __pfx___x64_sys_creat+0x10/0x10 [ 1031.837763] ? __pfx_ksys_write+0x10/0x10 [ 1031.837785] do_syscall_64+0xbf/0x360 [ 1031.837798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.837810] RIP: 0033:0x7f5fc6611b19 [ 1031.837820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1031.837831] RSP: 002b:00007f5fc3b87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1031.837842] RAX: ffffffffffffffda RBX: 00007f5fc6724f60 RCX: 00007f5fc6611b19 [ 1031.837850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1031.837857] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1031.837864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1031.837871] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 1031.837886] 04:55:47 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x111402, 0x20) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:55:47 executing program 3: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000, 0x400, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0xee00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:55:47 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:55:47 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x16) 04:55:47 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = signalfd4(r1, &(0x7f00000000c0)={[0x7]}, 0x8, 0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) dup2(r0, r0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:55:47 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 13) 04:55:47 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7d9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = getpid() r2 = getpid() tkill(r2, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000060c0)='./file0\x00', 0x1) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000006100)={0x1f, 0x0, @none}, &(0x7f0000006140)=0xe, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r10 = dup(r9) copy_file_range(r4, &(0x7f0000000040), r8, &(0x7f00000000c0)=0x401, 0x401, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000062c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000140)="50f873ecb8bdc3495755e58f1dd4cd2d975460edda02be0333105dd541e0cf50a0828687b04f455e5811db639e94f9bf6074e0c394f1df7327f5976d258354adfb6a6de51324568b521c32ff0106548e2879223eecfe6113112b0093bceb69674c900bb203140e91b6ef213082409bf8de5464a28709c32bd3e84076a1948abc1d33e87c2a2b3533b5ccbc9b957ffb75452672605d428c9e560ac09c3288a996744e6bce243a46f713a8c81ba152e4da263e846e53908916cc20b864969c033c9e15addda1a1", 0xc6}, {0xfffffffffffffffe}, {&(0x7f0000000240)="b76ee662b727739fb18b0f0850cf3b205502760b4c00dac606b9d6d989173d8d38e1cc05bf5160c592b1f04712f543bf77586eea3f58821e1bca19a7228756d5e0c98676ff97a72a4bc6cc9c69e5b86146d88e11fbffad644cc54513ec4d47ada8bc48f1e86a669b88cd0d663a0b2b9b9fcf9d4892d481b4dfe03fc57f94f455f3b204d1a3c2396b80bcfc6541a411435293b7f8c9de96509df01eda638245d21fd0a0041a1b9b890899fb9a35821bb1fc04911f366a60726eff8cd95ca624c6f233278c6956708c6d393eb43112cb81e1cf02d55f20ee2ca7f46eb7e6df151c8222f2deff39255c0658", 0xea}, {&(0x7f00000003c0)="1627a9e0d5144cab217ed5e460714c034feba60b38cb6edef2235f71383aa7bf384082971c7e663f1f72011e225e341d9689418d7a13abf14f731525451c53d8142a5821eaa3c803348ed9967e08ac963af619ad7f22f555ed08e6ecce0b8c1a1132cabb0575b9eb9e6ac7ba0b1e890d13b5eb5d53a4714835b05fb55f402943dc32318dc3ffb867776f345fbceeac75", 0x90}, {&(0x7f0000000000)="e74cb8e441c3b518851e3b89a87f3dd9a936e6cb219b3526233d7f45bc9789a1602661e58f1e3f832aa0ae220e74", 0x2e}, {&(0x7f0000000700)="4aa7d15b7ce050b64254be7c3f4c928658fbe15f146333e14b1ce5438327a0bf03a020ab47815e8b2d68adbedc0a094cf262299e1c41c23a39cdc0091b985a2231e7759909fb8ceb993b46f820b11ab30644d295c390", 0x56}], 0x6, 0x0, 0x0, 0x4004001}}, {{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000580)="df0000523e91ec7587d487d3c456a09290ca064e44cb82e82391fed8432d18a55581c812dfa9d86e8b592a9044d8601a678dbf8037572b21710c2a0085215ced239d20ec9061489fc3888c12daa08a9c6d6e5d8bf4dc171717f4ac6592d35e61", 0x60}, {&(0x7f0000000600)="285625741523aa1f3fbb423a5f8c146680dd46f973ce7eee42b8fc2d26071e79b6f35aaf49825f946b9ae6878e3771a211fbea38a1682de05e3e1b53c9136e5949330bedd35ff17123fbb6188b39ca4081696a1259c9bf09c73c02e64f0400a1b94694875537f73dc4e2d0e29fc55d10fe541da230ade662c8c680ecf0d9e82b74f8d07aee375ce43c828c", 0x8b}], 0x2, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r9, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0xf8, 0x4081}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="021ef63bc0d866e247462f28b9a06d4285e38bae384d1f1fb31531727a60a83f859ad79324503da74eb429b2aacdd40328fa8b70deddee227fab78c7e8662ea2", 0x40}, {&(0x7f0000000ac0)="e9ac17aa3e4555eed327c0b8469f67f6e22e22042b5bf73c60414d6c83b2eaac2303c03395fc9b191bd9dfb9962a1980a52375c4b419c23f36db77caff44a5b48faaba9c74d58c9e11049b418a1cda90a1a4d4d78fdd49a65077bf0555ec132c3406e623febf0c1b9ca88a33454a1b2a9396ae405701419a96fbbc8a421926ecf45422471cba8944f5c15f626e8d701efbd5e04c3911d4bf1982119515fa9a585899a662ff4addd55e29d14ba3ebaa4f7b5c89deabde5932ac52b7743455a21d8ea0", 0xc2}], 0x2, &(0x7f0000000800)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r10, r0, r4, r8, r9]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb0, 0x10}}, {{&(0x7f0000005a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005ac0)="1cc9028a5efcdac77d30bb129eaa9c9119aaa6345b8563d06c356524eaccb9f1a165b4bdfe821882901bc81298ece5683a23930a9652195b57c6f7e0a12125336e0cb7324c3c3d7e7c6011e3b9a50776db5e5e604b7403a463c39b479e88ebf2150bb94ba7268241f90cffe936174e8ea6ee546564d1ba67e6851a0e94e4e99b5e723ca9ddf6743b23b629853a19ad0ec065a3f23610cced9d993e097b2c0c34f7493524c88f82be4dd45c75d139", 0xae}, {&(0x7f0000005b80)="764f2bb566c01c22a201831fcdc6d1cee081c6967f62d366e3d52c2a1b99d1ef45d18d12a7af6138b3ea305594ec21712a3e89f3458bdc76020fb22a593aef9a99a3855c29d9392832ff336a1816f771d6fe02690c6fcff977a5a84e1aa5eb0d7d844a409e111b8bdd27d5321ddbaa85437d94a60f2f23d58c8c1cec39039ca1b17ab8cdf81d47d4e380157dae1cdd61d2c051b6f54331067399de837ec4e2c3eb3e", 0xa2}, {&(0x7f0000005c40)="b532016c7b2745510b339fbe13c7765fe1081abb5a4d", 0x16}], 0x3, &(0x7f0000006180)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, r0, r6, r7, 0xffffffffffffffff, r8]}}], 0x130, 0x800}}], 0x4, 0x804) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:55:47 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x20}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r1) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x80, 0x5, [{0x1000, 0x7ff, 0x10001, '\x00', 0x980}, {0x6224, 0x8001, 0x7c3d055, '\x00', 0x289}, {0x80000000, 0x0, 0x0, '\x00', 0x800}, {0x101, 0x6809, 0x4, '\x00', 0x100}, {0x0, 0x3, 0x7ff, '\x00', 0x188}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:55:47 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r5) getgroups(0xa, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0x0]) fchown(r5, 0x0, r6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_team\x00', {0x1}, 0x8}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:55:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) 04:55:48 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) 04:55:48 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x104) 04:55:48 executing program 3: setresuid(0xee01, 0xee00, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000140)=""/228, 0xe4}, {&(0x7f0000000240)=""/139, 0x8b}], 0x2, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000600)=""/22, 0x16}, {&(0x7f0000000640)=""/68, 0x44}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x2, 0x40000000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:55:48 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 14) 04:55:48 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) poll(&(0x7f0000000000)=[{r1, 0x2c8}], 0x1, 0x6c) write$binfmt_script(r0, 0x0, 0x0) 04:55:48 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1c0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f4edffff02110a000000006ddd1d29933eaae44f9a578dd16e352d8618afa454457fe3cd00b545aad541a35627bffa1099be9c948b70727032188c34"], 0xb) r1 = dup(0xffffffffffffffff) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000040)) readv(r1, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) recvmsg(r4, &(0x7f0000000580)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)}, {&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000480)=""/145, 0x91}], 0x4}, 0x0) 04:55:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x9, 0x5, 0x20, 0x0, 0x0, 0x21028, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_config_ext={0x7fffffff, 0x4}, 0x11208, 0x0, 0x1cb5c071, 0x4, 0x6, 0x1f, 0x8001, 0x0, 0x7, 0x0, 0x8}, r2, 0xd, 0xffffffffffffffff, 0x1) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r1) copy_file_range(r3, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x80, 0x7, 0x96, 0x3, 0x0, 0x4e, 0x200, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4002, 0x4fa3, 0x4, 0x1, 0x80, 0x57, 0x2, 0x0, 0x10000, 0x0, 0x100000000000000}, 0xffffffffffffffff, 0xf, r3, 0x6) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='!\x00') [ 1041.234315] FAULT_INJECTION: forcing a failure. [ 1041.234315] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.235469] CPU: 1 UID: 0 PID: 10307 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1041.235500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1041.235507] Call Trace: [ 1041.235512] [ 1041.235516] dump_stack_lvl+0xfa/0x120 [ 1041.235542] should_fail_ex+0x4d7/0x5e0 [ 1041.235563] ? security_inode_init_security+0x13d/0x390 [ 1041.235580] should_failslab+0xc2/0x120 [ 1041.235593] __kmalloc_noprof+0xb4/0x4b0 [ 1041.235614] security_inode_init_security+0x13d/0x390 [ 1041.235631] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1041.235647] ? __pfx_security_inode_init_security+0x10/0x10 [ 1041.235669] shmem_mknod+0xea/0x250 [ 1041.235682] ? __pfx_shmem_create+0x10/0x10 [ 1041.235697] lookup_open.isra.0+0x10f8/0x1530 [ 1041.235718] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1041.235743] ? __pfx_down_write+0x10/0x10 [ 1041.235755] ? mnt_get_write_access+0x1ea/0x2d0 [ 1041.235772] path_openat+0xc26/0x2880 [ 1041.235795] ? __lock_acquire+0x694/0x1b70 [ 1041.235809] ? __pfx_path_openat+0x10/0x10 [ 1041.235832] do_filp_open+0x1e8/0x450 [ 1041.235849] ? __pfx_do_filp_open+0x10/0x10 [ 1041.235873] ? find_held_lock+0x2b/0x80 [ 1041.235889] ? alloc_fd+0x2c1/0x560 [ 1041.235906] ? lock_release+0xc8/0x290 [ 1041.235920] ? alloc_fd+0x2c1/0x560 [ 1041.235941] do_sys_openat2+0x104/0x1b0 [ 1041.235955] ? __pfx_do_sys_openat2+0x10/0x10 [ 1041.235976] __x64_sys_creat+0xcc/0x120 [ 1041.235991] ? __pfx___x64_sys_creat+0x10/0x10 [ 1041.236005] ? __pfx_ksys_write+0x10/0x10 [ 1041.236025] ? do_syscall_64+0x85/0x360 [ 1041.236039] do_syscall_64+0xbf/0x360 [ 1041.236051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.236064] RIP: 0033:0x7f5fc6611b19 [ 1041.236074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1041.236085] RSP: 002b:00007f5fc3b87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1041.236097] RAX: ffffffffffffffda RBX: 00007f5fc6724f60 RCX: 00007f5fc6611b19 [ 1041.236105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1041.236112] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1041.236119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1041.236126] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 1041.236142] 04:55:57 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x1, 0xff, 0x8, 0x0, 0xcdf, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x2, @perf_config_ext={0x4, 0x8}, 0x1002, 0x7, 0x80000001, 0x0, 0x6, 0x7f, 0x7, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x4) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0xdf, 0x9, 0x6, 0x0, 0x3, 0x2004, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000180), 0x4}, 0x40888, 0x10001, 0x4, 0x7, 0x0, 0x613, 0x8000, 0x0, 0x7f, 0x0, 0x3}, r1, 0x3, r0, 0x9) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x3) 04:55:57 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x300) 04:55:57 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x5, 0x7f, 0x4, 0x1e, 0x0, 0x5, 0x10040, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000040), 0xd}, 0x40, 0x69f, 0x2, 0x8, 0x1, 0x1, 0x9, 0x0, 0x4, 0x0, 0x4ee}, r1, 0xe, r0, 0xb) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c403, 0x1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000240)=0x0) fchownat(r3, &(0x7f0000000200)='./file0\x00', r6, 0xee01, 0x400) write$binfmt_script(r2, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000003c0)={0x0, 0x0, 0x8001}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f00000001c0)={{r0}, {@val={r8}, @actul_num={@void, 0x0, 0x4b}}}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000280)=0x81) 04:55:57 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 15) 04:55:57 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0], 0xb) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x141080) mknodat$loop(r2, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x0) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:55:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44008}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:55:57 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2d, 0x7, 0x1f, {0x4, @usr_ip6_spec={@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5, 0x2b, 0x7}, {0x0, @local, 0xe761, 0xfe, [0xfffffffc]}, @tcp_ip4_spec={@loopback, @broadcast, 0x4e22, 0x4e22}, {0x0, @random="5021a9a18e36", 0x6, 0xfffb, [0xfff, 0x401]}, 0x3da, 0x8000}, 0x4, [0xff, 0x1, 0xd7, 0xffffffff]}}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:55:57 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) 04:55:58 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x58) 04:55:58 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 16) 04:55:58 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$FITHAW(r3, 0xc0045878) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)=r6) 04:55:58 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0xb00) 04:55:58 executing program 7: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1ff]}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x3c, @empty, 0x4e21, 0x0, 'dh\x00', 0x15, 0x1ff, 0x38}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_batadv\x00', &(0x7f00000003c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x21, 0x7, 0x0, 0x200, 0x0, 0x7, 0x8, 0x4, 0x1, 0x5, 0x81, 0x10000, 0x0, 0x6, 0x0, 0x6, 0x400, 0x6, 0x5, 0x9, 0x9, 0x2, 0xfffffffd, 0x4, 0xd60, 0x6f6, 0x7ff, 0x1, 0x800, 0x4c, 0x4, 0x9, 0x1a3, 0x3ff, 0x3, 0xffffffff, 0x1ff, 0xffff8001, 0x5, 0x94, 0x7f, 0x7, 0x2, 0x9, 0x7fffffff, 0x80, 0x63, 0x3, 0x2, 0xbc, 0x80, 0x5, 0x8001, 0x2, 0x4, 0x8, 0x1a, 0x2, 0x9, 0x8, 0x6, 0x0, 0x6, 0x7ff, 0x800, 0x8, 0x9, 0x5, 0x6, 0x6, 0x3ff, 0xfff, 0xb49, 0x10001, 0x8, 0x4, 0x0, 0x2, 0x94, 0x2, 0xfff, 0x8, 0x3ff, 0x7, 0x5, 0x9, 0x0, 0x1, 0x733c, 0x7, 0x8, 0x9e7a, 0x3bbe, 0x1, 0x7, 0x20, 0x8, 0x9, 0x1000000, 0x5, 0x2, 0x3, 0x7, 0x140000, 0x7, 0x2, 0x2, 0x4, 0x1000, 0x1, 0x7, 0x1ff, 0x9, 0x7, 0xcd4, 0x1ff, 0x7, 0x8, 0x0, 0x20ce, 0x6, 0xff, 0x3ff, 0x9, 0x2f, 0x5, 0x800, 0x101], "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"}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) 04:55:58 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x1, 0xff, 0x8, 0x0, 0xcdf, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x2, @perf_config_ext={0x4, 0x8}, 0x1002, 0x7, 0x80000001, 0x0, 0x6, 0x7f, 0x7, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x4) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0xdf, 0x9, 0x6, 0x0, 0x3, 0x2004, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000180), 0x4}, 0x40888, 0x10001, 0x4, 0x7, 0x0, 0x613, 0x8000, 0x0, 0x7f, 0x0, 0x3}, r1, 0x3, r0, 0x9) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x3) 04:55:58 executing program 3: setresuid(0xee01, 0xee00, 0x0) syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="0e4e169169068352273af97960d25c5fa18484984950b8a52dd186623e67281c71c27989c19e9333ac67624663ffa4464ff2b5e906b455e0f9071d6f01fe2c3874d0a2c2c7", 0x45}], 0x2000000, &(0x7f0000000280)={[{'sit0\x00'}, {'*/'}], [{@subj_type={'subj_type', 0x3d, '\x0f\x973\x8f\x00'}}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, '*('}}, {@subj_type={'subj_type', 0x3d, '\'*(\x81\'}]%-^{)@{.^'}}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'subj_type'}}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) geteuid() ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:55:58 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 17) 04:55:58 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = getpid() r1 = getpid() tkill(r1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x40, 0x2, 0x9, 0x0, 0x0, 0xd6, 0x420, 0x4f92292497a3c451, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x40000, 0x4, 0x10000, 0x0, 0xffffffff, 0x1ff, 0x2, 0x0, 0x3e09, 0x0, 0xffffffffffffffff}, r1, 0x8, r4, 0x9) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='status\x00') pread64(r5, &(0x7f0000000140)=""/183, 0xb7, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) pidfd_open(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 04:56:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x58) 04:56:06 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffff001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x63) 04:56:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1008, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f7abadbfb300a"], 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x3) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x10000) 04:56:06 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 18) 04:56:06 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x1600) 04:56:06 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r5 = dup(r1) readv(r5, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:56:06 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 1) 04:56:06 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = accept$packet(r1, 0x0, &(0x7f0000000000)) sendto$packet(r2, &(0x7f0000000040)="e58c56c0a70ea5837ed91303b63ef8cbfdc79ca710ab36189c", 0x19, 0x4000000, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x5e, 0x6, @random="572ad790b113"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 1059.489390] FAULT_INJECTION: forcing a failure. [ 1059.489390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.490468] CPU: 1 UID: 0 PID: 10376 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1059.490484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1059.490492] Call Trace: [ 1059.490496] [ 1059.490501] dump_stack_lvl+0xfa/0x120 [ 1059.490526] should_fail_ex+0x4d7/0x5e0 [ 1059.490557] _copy_from_user+0x30/0xd0 [ 1059.490571] copy_clone_args_from_user+0x152/0x7a0 [ 1059.490590] ? find_held_lock+0x2b/0x80 [ 1059.490607] ? get_pid_task+0xfd/0x250 [ 1059.490626] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1059.490645] ? get_pid_task+0x107/0x250 [ 1059.490662] ? proc_fail_nth_write+0x98/0x250 [ 1059.490680] ? find_held_lock+0x2b/0x80 [ 1059.490696] ? ksys_write+0x121/0x240 [ 1059.490713] ? lock_is_held_type+0x9e/0x120 [ 1059.490734] __do_sys_clone3+0xa5/0x280 [ 1059.490745] ? __pfx___do_sys_clone3+0x10/0x10 [ 1059.490757] ? __mutex_unlock_slowpath+0x157/0x650 [ 1059.490775] ? kernel_write+0x653/0x660 [ 1059.490793] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1059.490813] ? __fget_files+0x20d/0x3b0 [ 1059.490833] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1059.490854] ? ksys_write+0x1a3/0x240 [ 1059.490870] ? __pfx_ksys_write+0x10/0x10 [ 1059.490891] do_syscall_64+0xbf/0x360 [ 1059.490904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.490916] RIP: 0033:0x7f4a9ce31b19 [ 1059.490925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1059.490937] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1059.490948] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1059.490956] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1059.490963] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1059.490972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.490979] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1059.490994] 04:56:06 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 2) [ 1059.565967] FAULT_INJECTION: forcing a failure. [ 1059.565967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.567030] CPU: 1 UID: 0 PID: 10391 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1059.567047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1059.567053] Call Trace: [ 1059.567058] [ 1059.567063] dump_stack_lvl+0xfa/0x120 [ 1059.567088] should_fail_ex+0x4d7/0x5e0 [ 1059.567109] _copy_from_user+0x30/0xd0 [ 1059.567123] copy_clone_args_from_user+0x4ba/0x7a0 [ 1059.567144] ? get_pid_task+0xfd/0x250 [ 1059.567163] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1059.567184] ? find_held_lock+0x2b/0x80 [ 1059.567201] ? ksys_write+0x121/0x240 [ 1059.567223] ? lock_is_held_type+0x9e/0x120 [ 1059.567243] __do_sys_clone3+0xa5/0x280 [ 1059.567254] ? __pfx___do_sys_clone3+0x10/0x10 [ 1059.567272] ? __fget_files+0x20d/0x3b0 [ 1059.567292] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1059.567313] ? ksys_write+0x1a3/0x240 [ 1059.567330] ? __pfx_ksys_write+0x10/0x10 [ 1059.567351] do_syscall_64+0xbf/0x360 [ 1059.567364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.567376] RIP: 0033:0x7f4a9ce31b19 [ 1059.567385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1059.567396] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1059.567408] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1059.567416] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1059.567423] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1059.567430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.567437] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1059.567452] [ 1059.587077] FAULT_INJECTION: forcing a failure. [ 1059.587077] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.588118] CPU: 1 UID: 0 PID: 10387 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1059.588138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1059.588145] Call Trace: [ 1059.588150] [ 1059.588154] dump_stack_lvl+0xfa/0x120 [ 1059.588178] should_fail_ex+0x4d7/0x5e0 [ 1059.588199] should_failslab+0xc2/0x120 [ 1059.588215] __kvmalloc_node_noprof+0x10d/0x590 [ 1059.588233] ? simple_xattr_alloc+0x46/0xa0 [ 1059.588250] ? simple_xattr_alloc+0x46/0xa0 [ 1059.588261] simple_xattr_alloc+0x46/0xa0 [ 1059.588273] shmem_initxattrs+0x20a/0x520 [ 1059.588290] security_inode_init_security+0x26d/0x390 [ 1059.588308] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1059.588321] ? __pfx_security_inode_init_security+0x10/0x10 [ 1059.588342] shmem_mknod+0xea/0x250 [ 1059.588355] ? __pfx_shmem_create+0x10/0x10 [ 1059.588369] lookup_open.isra.0+0x10f8/0x1530 [ 1059.588389] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1059.588413] ? __pfx_down_write+0x10/0x10 [ 1059.588425] ? mnt_get_write_access+0x1ea/0x2d0 [ 1059.588442] path_openat+0xc26/0x2880 [ 1059.588463] ? __lock_acquire+0x694/0x1b70 [ 1059.588477] ? __pfx_path_openat+0x10/0x10 [ 1059.588499] do_filp_open+0x1e8/0x450 [ 1059.588516] ? __pfx_do_filp_open+0x10/0x10 [ 1059.588539] ? find_held_lock+0x2b/0x80 [ 1059.588555] ? alloc_fd+0x2c1/0x560 [ 1059.588571] ? lock_release+0xc8/0x290 [ 1059.588586] ? alloc_fd+0x2c1/0x560 [ 1059.588606] do_sys_openat2+0x104/0x1b0 [ 1059.588620] ? __pfx_do_sys_openat2+0x10/0x10 [ 1059.588640] __x64_sys_creat+0xcc/0x120 [ 1059.588654] ? __pfx___x64_sys_creat+0x10/0x10 [ 1059.588668] ? __pfx_ksys_write+0x10/0x10 [ 1059.588687] ? do_syscall_64+0x85/0x360 [ 1059.588701] do_syscall_64+0xbf/0x360 [ 1059.588713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.588725] RIP: 0033:0x7f5fc6611b19 [ 1059.588734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1059.588746] RSP: 002b:00007f5fc3b87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1059.588757] RAX: ffffffffffffffda RBX: 00007f5fc6724f60 RCX: 00007f5fc6611b19 [ 1059.588765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1059.588772] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1059.588779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1059.588786] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 1059.588801] 04:56:15 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 3) 04:56:15 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x18, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x40010, r3, 0xffffffffffff0001) getpid() r4 = fork() perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x40, 0x2, 0xfa, 0x7f, 0x0, 0x80000000, 0x601, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdc0, 0x0, @perf_config_ext={0x80000001, 0x7f}, 0x4000, 0xaa76, 0x2e, 0x5, 0xfffffffff37591da, 0x9, 0x2, 0x0, 0xc2, 0x0, 0x9}, r4, 0x9, 0xffffffffffffffff, 0x1) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f00000000c0)={0x6, 0x0, 0x1, 0x9, 0x5, [{0x1, 0xffffffffffffff31, 0x80000000, '\x00', 0x1307}, {0xb2, 0x3, 0x100000000, '\x00', 0x480}, {0x1, 0xfffffffffffffffa, 0x800, '\x00', 0x488}, {0xfffffffffffeffff, 0x8000, 0x80000001, '\x00', 0x82}, {0x9, 0xd0, 0x1, '\x00', 0x202}]}) 04:56:15 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) setfsuid(r2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:56:15 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 19) [ 1068.722410] loop6: detected capacity change from 0 to 256 04:56:15 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x58) 04:56:15 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x80000) 04:56:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$FITHAW(r1, 0xc0045878) 04:56:15 executing program 6: r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r2) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001540)={{0x0, 0x40, 0xf6, 0x480000000000, 0x4, 0x3, 0x84, 0x69e, 0x7, 0xfffffff9, 0x3, 0x4, 0x4, 0x8001, 0x20}}) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1401f8c9b2000000000404"], 0xb) r3 = dup(r1) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x1, 0x7, &(0x7f0000000640)=[{&(0x7f0000000100)="d092ed86fe415844f1bd3f8298f8ac8362f9d87df5b84f27ceb3f39583e95ccc0ad516e65499d824f264809a6f4d4cd420818ca6a9", 0x35, 0xb489}, {&(0x7f0000000200)="498ff0fa1743eab3a32204e5f4d5593b01e40499e1df8562242b8716e37eda5c75eddd98a2c5a7fdcabc783f355a00769241401332c92952d5b59e07e55c36e9cb1154b050559b37465d4b69cf5a1f141628a57e6b16ab69357bb84f3f2b5b2af01cc4f79f03e565869a35a543fc367fbd99826c8807f8f685555d638ea218a41acf39ce2f8b36a42f85d5666594f5b3065b6bbf874fff65b5424ef859250a84a07718e523967682fe97e40586a7adebb2619c83b93a", 0xb6, 0x101}, {&(0x7f00000002c0)="7db1f7c936c55927e818bb4a7466df363c93a92aa494a8db006977fe7929f9be2d9ee7c9595dc877393566bd42dc6ba414c142766cbd2f1deae686284dfc35549b48dec7c8f6e53b62df498cf26cc916b78162db59b27aecfaef60f1e06cc9bfdc9e29a1afa827aece8ebaf979aa53a66c253f6fb6e210f8e4a921ad6420ecf8bf17e0", 0x83, 0xa183}, {&(0x7f0000000380)="1ac49ebb3ad5b1e9eee5c2df344acc90c4191570e4420b99535537d2f49086947317ee395a361144c07eff76d5f640aefa98f9156be7c45f154d6ccdd661db41369df2fd5e3919821867dc8538ff01151220e06ba2dbec8c4792dabdc84c92f9764fd9915b901bcf9a32", 0x6a, 0x4}, {&(0x7f0000000440)="14e0f3b9257dbf514ff9d9c968a2e00f0038c5e4548143c7071c7f1f1859824c3d1bd134d2a765ea1fb3ad2736476d0560083b6c0070079f6e8f29a72b7da6ec198e602481bdaef96abbd27a854637c7bd599f578e301a80a2235852a89b4a5affe64a6fe8d99a0abfdeb72fe389d8194d21d677a69768f74f7d8182507c6306", 0x80, 0x9}, {&(0x7f00000004c0)="bb35eb4929bb1db26cc01840a486d0a058a31b42a1ca134f49d00e2dac34edf4d3a189e5e41a3fa2ea001af9747d23eb1fb679635a0b74046fcf8ddc17f2d9d7ebbd48bcee152c9aaf712b3b567e19", 0x4f, 0x2}, {&(0x7f0000000540)="463877206804520f8a6e1e4fae39d0a2cf5c352737091120460237b1c85676188cbe55a13ff655522f1eb5ffb8ec8b14d451caffd1797625ad84b847d54e372df744f9b31a08ffb2840d7a6c37a155867eed78ff44773df359f7654fd4f6fb20906d788a0080535124077e226c260eacb22554d7cbf0fda73af77f8d2b1142a4c53fba446f51698e53894168bbdfa2c60e7a8196928f74147c82760b2855b6a90d839646eb09a0d10460e03184e33fc52ce7081be1f3b8a9e3f36da51b717277b752060708f7086d7db5dcba8265ce9436dc650152700906e667e1cd91", 0xdd, 0x10001}], 0x140004, &(0x7f0000000700)={[{}, {'K%\'\',+^-*'}, {'(('}, {'&'}, {'{'}], [{@pcr={'pcr', 0x3d, 0x10}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x64, 0xa, 0x66, 0x32, 0x32, 0x34, 0x31], 0x2d, [0x39, 0x0, 0x31, 0x63], 0x2d, [0x63, 0x30, 0x61, 0x36], 0x2d, [0x35, 0x61, 0x38, 0x32], 0x2d, [0x37, 0x38, 0x31, 0x1d311579979c581f, 0x30, 0x32, 0x38, 0x3b]}}}]}) readv(r3, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) epoll_wait(0xffffffffffffffff, &(0x7f0000000880)=[{}, {}], 0x2, 0x2) mount$cgroup(0x0, &(0x7f0000000780)='./file0/file0\x00', &(0x7f00000007c0), 0x94001, &(0x7f0000000800)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@none}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@hash}, {@pcr={'pcr', 0x3d, 0x23}}, {@subj_role={'subj_role', 0x3d, 'fsuuid'}}]}) [ 1068.739746] loop6: detected capacity change from 0 to 256 [ 1068.753390] FAULT_INJECTION: forcing a failure. [ 1068.753390] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.755526] CPU: 0 UID: 0 PID: 10418 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1068.755562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.755577] Call Trace: [ 1068.755586] [ 1068.755596] dump_stack_lvl+0xfa/0x120 [ 1068.755644] should_fail_ex+0x4d7/0x5e0 [ 1068.755687] should_failslab+0xc2/0x120 [ 1068.755713] kmem_cache_alloc_node_noprof+0x71/0x470 [ 1068.755751] ? copy_process+0x45a/0x73e0 [ 1068.755798] copy_process+0x45a/0x73e0 [ 1068.755837] ? __pfx__kstrtoull+0x10/0x10 [ 1068.755879] ? lock_acquire+0x15e/0x2f0 [ 1068.755906] ? __might_fault+0xe0/0x190 [ 1068.755938] ? __pfx_copy_process+0x10/0x10 [ 1068.755979] ? __might_fault+0xe0/0x190 [ 1068.756011] ? _copy_from_user+0x5b/0xd0 [ 1068.756045] kernel_clone+0xea/0x820 [ 1068.756066] ? get_pid_task+0xfd/0x250 [ 1068.756106] ? __pfx_kernel_clone+0x10/0x10 [ 1068.756138] ? find_held_lock+0x2b/0x80 [ 1068.756173] ? ksys_write+0x121/0x240 [ 1068.756220] ? lock_is_held_type+0x9e/0x120 [ 1068.756264] __do_sys_clone3+0x1f5/0x280 [ 1068.756287] ? __pfx___do_sys_clone3+0x10/0x10 [ 1068.756328] ? __fget_files+0x20d/0x3b0 [ 1068.756372] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1068.756415] ? ksys_write+0x1a3/0x240 [ 1068.756452] ? __pfx_ksys_write+0x10/0x10 [ 1068.756500] do_syscall_64+0xbf/0x360 [ 1068.756527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.756554] RIP: 0033:0x7f4a9ce31b19 [ 1068.756573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.756598] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1068.756623] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1068.756641] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1068.756656] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1068.756672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.756687] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1068.756721] [ 1068.775042] FAULT_INJECTION: forcing a failure. [ 1068.775042] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.782904] CPU: 1 UID: 0 PID: 10419 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1068.782924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.782933] Call Trace: [ 1068.782938] [ 1068.782945] dump_stack_lvl+0xfa/0x120 [ 1068.782973] should_fail_ex+0x4d7/0x5e0 [ 1068.782995] should_failslab+0xc2/0x120 [ 1068.783008] __kvmalloc_node_noprof+0x10d/0x590 [ 1068.783027] ? simple_xattr_alloc+0x46/0xa0 [ 1068.783044] ? simple_xattr_alloc+0x46/0xa0 [ 1068.783055] simple_xattr_alloc+0x46/0xa0 [ 1068.783068] shmem_initxattrs+0x20a/0x520 [ 1068.783085] security_inode_init_security+0x26d/0x390 [ 1068.783102] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1068.783116] ? __pfx_security_inode_init_security+0x10/0x10 [ 1068.783137] shmem_mknod+0xea/0x250 [ 1068.783151] ? __pfx_shmem_create+0x10/0x10 [ 1068.783165] lookup_open.isra.0+0x10f8/0x1530 [ 1068.783186] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1068.783214] ? __pfx_down_write+0x10/0x10 [ 1068.783226] ? mnt_get_write_access+0x1ea/0x2d0 [ 1068.783243] path_openat+0xc26/0x2880 [ 1068.783265] ? __lock_acquire+0x694/0x1b70 [ 1068.783279] ? __pfx_path_openat+0x10/0x10 [ 1068.783301] do_filp_open+0x1e8/0x450 [ 1068.783318] ? __pfx_do_filp_open+0x10/0x10 [ 1068.783341] ? find_held_lock+0x2b/0x80 [ 1068.783357] ? alloc_fd+0x2c1/0x560 [ 1068.783373] ? lock_release+0xc8/0x290 [ 1068.783388] ? alloc_fd+0x2c1/0x560 [ 1068.783408] do_sys_openat2+0x104/0x1b0 [ 1068.783422] ? __pfx_do_sys_openat2+0x10/0x10 [ 1068.783443] __x64_sys_creat+0xcc/0x120 [ 1068.783457] ? __pfx___x64_sys_creat+0x10/0x10 [ 1068.783470] ? __pfx_ksys_write+0x10/0x10 [ 1068.783490] ? do_syscall_64+0x85/0x360 [ 1068.783504] do_syscall_64+0xbf/0x360 [ 1068.783516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.783534] RIP: 0033:0x7f5fc6611b19 [ 1068.783546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.783560] RSP: 002b:00007f5fc3b87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1068.783575] RAX: ffffffffffffffda RBX: 00007f5fc6724f60 RCX: 00007f5fc6611b19 [ 1068.783583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1068.783590] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1068.783597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1068.783603] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 1068.783619] 04:56:15 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}], 0xa, "fb038bd93044240bf11b34314bfa20793cb2edbf5bb5539c95bfed0d6965bc57929fd21a5208f76b004888e84e327a075ec92782078d875dbe134b3ce6584fa04e2fff083637316068b022f52277a895283916700357b28dadb287cbfc146c088bbfd3abd0cea7b7f2c3a68e8e78bdb8a1176cbb25200d6f93538d4e471d57"}, 0x92) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:56:15 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x1000000) 04:56:15 executing program 3: setresuid(0xee01, 0xee00, 0x0) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2007) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, 0xee00) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r2, 0x29, 0x9, 0x4, 0x7fff, 0x69, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x40, 0x1, 0x6, 0x80000001}}) 04:56:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x400081, 0x2c) write$binfmt_script(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x220ee0ef, 0x8000, 0x2, 0x5, 0x0, [0x7fffffff, 0x7, 0x7, 0x7f]}) 04:56:15 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x1040000) 04:56:15 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 4) 04:56:15 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 20) 04:56:15 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202912360e14e500b75209"], 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) readv(r5, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:56:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:56:16 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 5) [ 1069.044468] FAULT_INJECTION: forcing a failure. [ 1069.044468] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.045468] CPU: 1 UID: 0 PID: 10453 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1069.045503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1069.045511] Call Trace: [ 1069.045515] [ 1069.045520] dump_stack_lvl+0xfa/0x120 [ 1069.045546] should_fail_ex+0x4d7/0x5e0 [ 1069.045568] ? shmem_initxattrs+0x120/0x520 [ 1069.045582] should_failslab+0xc2/0x120 [ 1069.045594] __kmalloc_noprof+0xb4/0x4b0 [ 1069.045611] ? __asan_memcpy+0x3d/0x60 [ 1069.045631] shmem_initxattrs+0x120/0x520 [ 1069.045646] security_inode_init_security+0x26d/0x390 [ 1069.045664] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1069.045678] ? __pfx_security_inode_init_security+0x10/0x10 [ 1069.045699] shmem_mknod+0xea/0x250 [ 1069.045712] ? __pfx_shmem_create+0x10/0x10 [ 1069.045726] lookup_open.isra.0+0x10f8/0x1530 [ 1069.045746] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1069.045771] ? __pfx_down_write+0x10/0x10 [ 1069.045782] ? mnt_get_write_access+0x1ea/0x2d0 [ 1069.045799] path_openat+0xc26/0x2880 [ 1069.045821] ? __lock_acquire+0x694/0x1b70 [ 1069.045834] ? __pfx_path_openat+0x10/0x10 [ 1069.045857] do_filp_open+0x1e8/0x450 [ 1069.045874] ? __pfx_do_filp_open+0x10/0x10 [ 1069.045897] ? find_held_lock+0x2b/0x80 [ 1069.045913] ? alloc_fd+0x2c1/0x560 [ 1069.045928] ? lock_release+0xc8/0x290 [ 1069.045943] ? alloc_fd+0x2c1/0x560 [ 1069.045963] do_sys_openat2+0x104/0x1b0 [ 1069.045978] ? __pfx_do_sys_openat2+0x10/0x10 [ 1069.045999] __x64_sys_creat+0xcc/0x120 [ 1069.046013] ? __pfx___x64_sys_creat+0x10/0x10 [ 1069.046027] ? __pfx_ksys_write+0x10/0x10 [ 1069.046049] do_syscall_64+0xbf/0x360 [ 1069.046061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.046074] RIP: 0033:0x7f5fc6611b19 [ 1069.046084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1069.046095] RSP: 002b:00007f5fc3b87188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1069.046107] RAX: ffffffffffffffda RBX: 00007f5fc6724f60 RCX: 00007f5fc6611b19 [ 1069.046115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1069.046122] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.046129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1069.046136] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 1069.046152] 04:56:16 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x2000000) 04:56:16 executing program 3: setresuid(0xee01, 0xee00, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x2, &(0x7f0000000240)=[{&(0x7f0000000080)="5e9a76ec9ae6a431ee6dd7242a3265998a598671ec98b5bb6f6d1a115f6a6cf95d877a932d36f8f2620b416adeac5e5ff9c8d1ccf427a0e84723b43c242b808bb2bdc1cd465d20938ae80ef098cc12c853f074f236f373fc51e3780ca33a40011b9c75081c0b69eb725efe95e67881", 0x6f, 0x4}, {&(0x7f0000000140)="6f07ff6a269a88839a984d46423eda530dae46041ffa394c94958ebc810c66b4732cd0d1c54e903341a50bb2245d252a1e67a7947262994b61af9b190e087586e03e289930ca11eb450fb733a29a880892d03405c0825589e824b649e14312832e8db3ae000be2767dd67d65d2d99b3398e4cec7916ca66275c8e8bd12a8eac6be283fd9eca06e7a9b6e926b0a0d1d86c66a30c2e880612f0c5d6ab6060457693bafc1607038579550d3ec5067486a8765a29cc479062914545622d257cb3b389965f7dc1de1b4c51626b03ade96b79711ab94c2e10b4799246134f93325b3bbcffd35a002bb87590fce5a3ec14c0e4df8", 0xf1, 0x3}], 0x20000, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@abort}, {@noquota}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, 'sit0\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r0}}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:56:16 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) waitid$P_PIDFD(0x3, r1, &(0x7f00000000c0), 0x80000000, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121c0, 0x115) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=0x9, 0x8, 0x0) readv(r3, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) [ 1069.129169] FAULT_INJECTION: forcing a failure. [ 1069.129169] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1069.130357] CPU: 1 UID: 0 PID: 10460 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1069.130374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1069.130382] Call Trace: [ 1069.130386] [ 1069.130391] dump_stack_lvl+0xfa/0x120 [ 1069.130416] should_fail_ex+0x4d7/0x5e0 [ 1069.130438] should_fail_alloc_page+0xe0/0x110 [ 1069.130451] prepare_alloc_pages+0x1af/0x500 [ 1069.130468] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1069.130485] ? find_held_lock+0x2/0x80 [ 1069.130503] ? lock_release+0xc8/0x290 [ 1069.130517] ? lock_acquire+0x15e/0x2f0 [ 1069.130528] ? __memcg_slab_post_alloc_hook+0x443/0x9d0 [ 1069.130547] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1069.130565] ? lock_release+0xc8/0x290 [ 1069.130579] ? __memcg_slab_post_alloc_hook+0x4ac/0x9d0 [ 1069.130598] ? __create_object+0x59/0x80 [ 1069.130625] ? __asan_memset+0x24/0x50 [ 1069.130644] __alloc_pages_noprof+0xc/0x1b0 [ 1069.130660] copy_process+0x4ea/0x73e0 [ 1069.130678] ? __pfx__kstrtoull+0x10/0x10 [ 1069.130698] ? lock_acquire+0x15e/0x2f0 [ 1069.130709] ? __might_fault+0xe0/0x190 [ 1069.130724] ? __pfx_copy_process+0x10/0x10 [ 1069.130742] ? __might_fault+0xe0/0x190 [ 1069.130756] ? _copy_from_user+0x5b/0xd0 [ 1069.130771] kernel_clone+0xea/0x820 [ 1069.130781] ? get_pid_task+0xfd/0x250 [ 1069.130799] ? __pfx_kernel_clone+0x10/0x10 [ 1069.130814] ? find_held_lock+0x2b/0x80 [ 1069.130829] ? ksys_write+0x121/0x240 [ 1069.130846] ? lock_is_held_type+0x9e/0x120 [ 1069.130866] __do_sys_clone3+0x1f5/0x280 [ 1069.130877] ? __pfx___do_sys_clone3+0x10/0x10 [ 1069.130895] ? __fget_files+0x20d/0x3b0 [ 1069.130916] ? fput+0x92/0xd0 [ 1069.130927] ? ksys_write+0x1a3/0x240 [ 1069.130944] ? __pfx_ksys_write+0x10/0x10 [ 1069.130962] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1069.130983] do_syscall_64+0xbf/0x360 [ 1069.130996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.131008] RIP: 0033:0x7f4a9ce31b19 [ 1069.131017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1069.131029] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1069.131040] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1069.131048] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1069.131055] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.131062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.131069] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1069.131084] 04:56:25 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 21) 04:56:25 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x110) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x44200, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="23210c2e2f66696c65300ae9e47d8d7bee63f76f755369e96fb4ee9a48760db7b38c14f8eeb635749b41442febf7dde9a9be3559bae5d301d226cfbf5d2a5b"], 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:56:25 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = getpid() tkill(r2, 0x0) r3 = dup3(r1, r0, 0x80000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x3, 0x2, 0x2, 0x22, 0x0, 0x80000000, 0x40020, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x5124, 0x2, 0xfffffffa, 0x3, 0x6, 0x8001, 0x6, 0x0, 0x9, 0x0, 0x5}, r2, 0x3, r3, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 04:56:25 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xfffffffffffffffe) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0xffff, 0x1, [{0x80000000, 0x7, 0x4, '\x00', 0x5000}]}) getpid() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:56:25 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 6) 04:56:25 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) 04:56:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x3000000) 04:56:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 1) 04:56:25 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) chown(&(0x7f0000000040)='./file0\x00', r0, r1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) r3 = getegid() chown(&(0x7f0000000080)='./file0\x00', r2, r3) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setfsuid(r4) setresuid(r4, r0, r0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setresuid(r5, r5, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) [ 1078.309956] FAULT_INJECTION: forcing a failure. [ 1078.309956] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.311984] CPU: 1 UID: 0 PID: 10492 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1078.312014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1078.312027] Call Trace: [ 1078.312034] [ 1078.312042] dump_stack_lvl+0xfa/0x120 [ 1078.312084] should_fail_ex+0x4d7/0x5e0 [ 1078.312120] ? dup_fd+0x4d/0xa80 [ 1078.312150] should_failslab+0xc2/0x120 [ 1078.312171] kmem_cache_alloc_noprof+0x5f/0x470 [ 1078.312201] ? __pfx_avc_has_perm+0x10/0x10 [ 1078.312239] dup_fd+0x4d/0xa80 [ 1078.312275] copy_process+0x21b5/0x73e0 [ 1078.312309] ? __pfx__kstrtoull+0x10/0x10 [ 1078.312352] ? __pfx_copy_process+0x10/0x10 [ 1078.312385] ? __might_fault+0xe0/0x190 [ 1078.312413] ? _copy_from_user+0x5b/0xd0 [ 1078.312441] kernel_clone+0xea/0x820 [ 1078.312459] ? get_pid_task+0xfd/0x250 [ 1078.312492] ? __pfx_kernel_clone+0x10/0x10 [ 1078.312519] ? find_held_lock+0x2b/0x80 [ 1078.312549] ? ksys_write+0x121/0x240 [ 1078.312581] ? lock_is_held_type+0x9e/0x120 [ 1078.312617] __do_sys_clone3+0x1f5/0x280 [ 1078.312636] ? __pfx___do_sys_clone3+0x10/0x10 [ 1078.312671] ? __fget_files+0x20d/0x3b0 [ 1078.312706] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1078.312743] ? ksys_write+0x1a3/0x240 [ 1078.312774] ? __pfx_ksys_write+0x10/0x10 [ 1078.312813] do_syscall_64+0xbf/0x360 [ 1078.312836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.312858] RIP: 0033:0x7f4a9ce31b19 [ 1078.312875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1078.312898] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1078.312921] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1078.312935] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1078.312948] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1078.312961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.312974] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1078.313002] [ 1078.369694] FAULT_INJECTION: forcing a failure. [ 1078.369694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.370833] CPU: 0 UID: 0 PID: 10496 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1078.370850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1078.370858] Call Trace: [ 1078.370862] [ 1078.370867] dump_stack_lvl+0xfa/0x120 [ 1078.370893] should_fail_ex+0x4d7/0x5e0 [ 1078.370914] _copy_from_user+0x30/0xd0 [ 1078.370929] copy_clone_args_from_user+0x152/0x7a0 [ 1078.370949] ? find_held_lock+0x2b/0x80 [ 1078.370967] ? get_pid_task+0xfd/0x250 [ 1078.370987] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1078.371005] ? get_pid_task+0x107/0x250 [ 1078.371023] ? proc_fail_nth_write+0x98/0x250 [ 1078.371041] ? find_held_lock+0x2b/0x80 [ 1078.371057] ? ksys_write+0x121/0x240 [ 1078.371075] ? lock_is_held_type+0x9e/0x120 [ 1078.371096] __do_sys_clone3+0xa5/0x280 [ 1078.371107] ? __pfx___do_sys_clone3+0x10/0x10 [ 1078.371120] ? __mutex_unlock_slowpath+0x157/0x650 [ 1078.371137] ? kernel_write+0x653/0x660 [ 1078.371155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1078.371175] ? __fget_files+0x20d/0x3b0 [ 1078.371196] ? fput+0x92/0xd0 [ 1078.371212] ? ksys_write+0x1a3/0x240 [ 1078.371228] ? __pfx_ksys_write+0x10/0x10 [ 1078.371246] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1078.371269] do_syscall_64+0xbf/0x360 [ 1078.371281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.371294] RIP: 0033:0x7f27ed07cb19 [ 1078.371303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1078.371314] RSP: 002b:00007f27ea5d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1078.371326] RAX: ffffffffffffffda RBX: 00007f27ed190020 RCX: 00007f27ed07cb19 [ 1078.371334] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1078.371341] RBP: 00007f27ea5d11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1078.371348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.371355] R13: 00007ffc9eed857f R14: 00007f27ea5d1300 R15: 0000000000022000 [ 1078.371370] 04:56:25 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="010007000000000000000000", @ANYRES32=r0, @ANYBLOB="02000000020000002e2f66696c653000"]) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:56:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0xb000000) 04:56:25 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 22) 04:56:25 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="2321208cc9b6d16c65300a"], 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)) 04:56:25 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696c654c8b"], 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:56:25 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 7) 04:56:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 2) [ 1078.559479] FAULT_INJECTION: forcing a failure. [ 1078.559479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.561363] CPU: 1 UID: 0 PID: 10517 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1078.561393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1078.561406] Call Trace: [ 1078.561413] [ 1078.561421] dump_stack_lvl+0xfa/0x120 [ 1078.561463] should_fail_ex+0x4d7/0x5e0 [ 1078.561499] _copy_from_user+0x30/0xd0 [ 1078.561524] copy_clone_args_from_user+0x4ba/0x7a0 [ 1078.561560] ? get_pid_task+0xfd/0x250 [ 1078.561594] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1078.561633] ? find_held_lock+0x2b/0x80 [ 1078.561663] ? ksys_write+0x121/0x240 [ 1078.561695] ? lock_is_held_type+0x9e/0x120 [ 1078.561731] __do_sys_clone3+0xa5/0x280 [ 1078.561751] ? __pfx___do_sys_clone3+0x10/0x10 [ 1078.561785] ? __fget_files+0x20d/0x3b0 [ 1078.561822] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1078.561859] ? ksys_write+0x1a3/0x240 [ 1078.561889] ? __pfx_ksys_write+0x10/0x10 [ 1078.561929] do_syscall_64+0xbf/0x360 [ 1078.561952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.561974] RIP: 0033:0x7f27ed07cb19 [ 1078.561990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1078.562011] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1078.562032] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1078.562047] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1078.562060] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1078.562073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.562085] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1078.562114] 04:56:35 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 8) 04:56:35 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 3) 04:56:35 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="638f3b0bea8e09eeb70000"], 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='\x00') 04:56:35 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:56:35 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:56:35 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x10000000) 04:56:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) pidfd_open(r0, 0x0) getpid() 04:56:35 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 23) [ 1088.203396] FAULT_INJECTION: forcing a failure. [ 1088.203396] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.204798] CPU: 1 UID: 0 PID: 10530 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1088.204822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1088.204833] Call Trace: [ 1088.204839] [ 1088.204846] dump_stack_lvl+0xfa/0x120 [ 1088.204881] should_fail_ex+0x4d7/0x5e0 [ 1088.204911] should_failslab+0xc2/0x120 [ 1088.204929] __kmalloc_cache_noprof+0x73/0x470 [ 1088.204953] ? alloc_fdtable+0x81/0x2a0 [ 1088.204981] ? alloc_fdtable+0x81/0x2a0 [ 1088.205003] alloc_fdtable+0x81/0x2a0 [ 1088.205027] dup_fd+0x6ef/0xa80 [ 1088.205056] copy_process+0x21b5/0x73e0 [ 1088.205084] ? __pfx__kstrtoull+0x10/0x10 [ 1088.205118] ? __pfx_copy_process+0x10/0x10 [ 1088.205145] ? __might_fault+0xe0/0x190 [ 1088.205168] ? _copy_from_user+0x5b/0xd0 [ 1088.205190] kernel_clone+0xea/0x820 [ 1088.205205] ? get_pid_task+0xfd/0x250 [ 1088.205238] ? __pfx_kernel_clone+0x10/0x10 [ 1088.205259] ? find_held_lock+0x2b/0x80 [ 1088.205284] ? ksys_write+0x121/0x240 [ 1088.205309] ? lock_is_held_type+0x9e/0x120 [ 1088.205338] __do_sys_clone3+0x1f5/0x280 [ 1088.205354] ? __pfx___do_sys_clone3+0x10/0x10 [ 1088.205381] ? __fget_files+0x20d/0x3b0 [ 1088.205410] ? fput+0x92/0xd0 [ 1088.205427] ? ksys_write+0x1a3/0x240 [ 1088.205452] ? __pfx_ksys_write+0x10/0x10 [ 1088.205479] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1088.205510] do_syscall_64+0xbf/0x360 [ 1088.205528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.205546] RIP: 0033:0x7f4a9ce31b19 [ 1088.205560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1088.205576] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1088.205593] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1088.205605] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1088.205615] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1088.205626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.205636] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1088.205658] 04:56:35 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x16000000) [ 1088.259767] FAULT_INJECTION: forcing a failure. [ 1088.259767] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.261117] CPU: 1 UID: 0 PID: 10535 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1088.261157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1088.261167] Call Trace: [ 1088.261173] [ 1088.261179] dump_stack_lvl+0xfa/0x120 [ 1088.261217] should_fail_ex+0x4d7/0x5e0 [ 1088.261246] should_failslab+0xc2/0x120 [ 1088.261264] kmem_cache_alloc_node_noprof+0x71/0x470 [ 1088.261289] ? copy_process+0x45a/0x73e0 [ 1088.261320] copy_process+0x45a/0x73e0 [ 1088.261345] ? __pfx__kstrtoull+0x10/0x10 [ 1088.261372] ? lock_acquire+0x15e/0x2f0 [ 1088.261390] ? __might_fault+0xe0/0x190 [ 1088.261411] ? __pfx_copy_process+0x10/0x10 [ 1088.261438] ? __might_fault+0xe0/0x190 [ 1088.261458] ? _copy_from_user+0x5b/0xd0 [ 1088.261480] kernel_clone+0xea/0x820 [ 1088.261494] ? get_pid_task+0xfd/0x250 [ 1088.261520] ? __pfx_kernel_clone+0x10/0x10 [ 1088.261540] ? find_held_lock+0x2b/0x80 [ 1088.261563] ? ksys_write+0x121/0x240 [ 1088.261588] ? lock_is_held_type+0x9e/0x120 [ 1088.261616] __do_sys_clone3+0x1f5/0x280 [ 1088.261631] ? __pfx___do_sys_clone3+0x10/0x10 [ 1088.261658] ? __fget_files+0x20d/0x3b0 [ 1088.261686] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1088.261715] ? ksys_write+0x1a3/0x240 [ 1088.261739] ? __pfx_ksys_write+0x10/0x10 [ 1088.261769] do_syscall_64+0xbf/0x360 [ 1088.261787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.261805] RIP: 0033:0x7f27ed07cb19 [ 1088.261818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1088.261834] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1088.261851] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1088.261862] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1088.261872] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1088.261882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.261892] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1088.261914] 04:56:35 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 24) 04:56:35 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x11, r1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@can, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) 04:56:35 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) futimesat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x2710}}) r3 = creat(&(0x7f0000000200)='./file0\x00', 0xac) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xff, 0x6, 0x4, 0x67, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x4, @perf_config_ext={0x401, 0x3}, 0x2067, 0x7c1, 0x0, 0x5, 0x9, 0x7, 0x8, 0x0, 0x1072, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r0, 0x1) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) write$P9_RGETATTR(r3, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x3142, {0x80, 0x0, 0x4}, 0x0, 0xee00, 0xffffffffffffffff, 0x3, 0x0, 0x7, 0x3, 0x5, 0x9, 0x2, 0x10001, 0x8, 0x401, 0x40, 0x9, 0x0, 0x5f8, 0x1}}, 0xa0) write$binfmt_script(r1, 0x0, 0x0) 04:56:35 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 9) [ 1088.388194] FAULT_INJECTION: forcing a failure. [ 1088.388194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.389729] CPU: 1 UID: 0 PID: 10548 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1088.389750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1088.389760] Call Trace: [ 1088.389765] [ 1088.389771] dump_stack_lvl+0xfa/0x120 [ 1088.389803] should_fail_ex+0x4d7/0x5e0 [ 1088.389830] _copy_to_user+0x32/0xd0 [ 1088.389850] simple_read_from_buffer+0xe0/0x180 [ 1088.389874] proc_fail_nth_read+0x189/0x270 [ 1088.389900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1088.389925] ? security_file_permission+0x22/0x90 [ 1088.389943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1088.389964] vfs_read+0x1eb/0xbe0 [ 1088.389990] ? __pfx_vfs_read+0x10/0x10 [ 1088.390013] ? lock_release+0xc8/0x290 [ 1088.390033] ? __fget_files+0x20d/0x3b0 [ 1088.390063] ksys_read+0x121/0x240 [ 1088.390084] ? __pfx_ksys_read+0x10/0x10 [ 1088.390113] do_syscall_64+0xbf/0x360 [ 1088.390130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.390146] RIP: 0033:0x7f5fc65c469c [ 1088.390158] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1088.390173] RSP: 002b:00007f5fc3b87170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1088.390188] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5fc65c469c [ 1088.390198] RDX: 000000000000000f RSI: 00007f5fc3b871e0 RDI: 0000000000000004 [ 1088.390207] RBP: 00007f5fc3b871d0 R08: 0000000000000000 R09: 0000000000000000 [ 1088.390222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1088.390231] R13: 00007ffc88d5612f R14: 00007f5fc3b87300 R15: 0000000000022000 [ 1088.390251] 04:56:35 executing program 6: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, '.\x00'}) dup2(r2, r1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)={0x808140, 0x48, 0x10}, 0x18) 04:56:35 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x7ffffffffffff) 04:56:35 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 4) 04:56:35 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 10) 04:56:35 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x8000000000000) [ 1088.542929] FAULT_INJECTION: forcing a failure. [ 1088.542929] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.544196] CPU: 1 UID: 0 PID: 10566 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1088.544219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1088.544227] Call Trace: [ 1088.544232] [ 1088.544237] dump_stack_lvl+0xfa/0x120 [ 1088.544266] should_fail_ex+0x4d7/0x5e0 [ 1088.544289] should_failslab+0xc2/0x120 [ 1088.544304] __kvmalloc_node_noprof+0x10d/0x590 [ 1088.544324] ? alloc_fdtable+0xd0/0x2a0 [ 1088.544347] ? alloc_fdtable+0xd0/0x2a0 [ 1088.544363] alloc_fdtable+0xd0/0x2a0 [ 1088.544382] dup_fd+0x6ef/0xa80 [ 1088.544405] copy_process+0x21b5/0x73e0 [ 1088.544426] ? __pfx__kstrtoull+0x10/0x10 [ 1088.544453] ? __pfx_copy_process+0x10/0x10 [ 1088.544475] ? __might_fault+0xe0/0x190 [ 1088.544493] ? _copy_from_user+0x5b/0xd0 [ 1088.544510] kernel_clone+0xea/0x820 [ 1088.544521] ? get_pid_task+0xfd/0x250 [ 1088.544543] ? __pfx_kernel_clone+0x10/0x10 [ 1088.544559] ? find_held_lock+0x2b/0x80 [ 1088.544579] ? ksys_write+0x121/0x240 [ 1088.544599] ? lock_is_held_type+0x9e/0x120 [ 1088.544623] __do_sys_clone3+0x1f5/0x280 [ 1088.544635] ? __pfx___do_sys_clone3+0x10/0x10 [ 1088.544656] ? __fget_files+0x20d/0x3b0 [ 1088.544679] ? fput+0x92/0xd0 [ 1088.544693] ? ksys_write+0x1a3/0x240 [ 1088.544712] ? __pfx_ksys_write+0x10/0x10 [ 1088.544733] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1088.544758] do_syscall_64+0xbf/0x360 [ 1088.544772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.544787] RIP: 0033:0x7f4a9ce31b19 [ 1088.544797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1088.544811] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1088.544824] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1088.544833] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1088.544841] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1088.544849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1088.544857] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1088.544875] 04:56:35 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) fsetxattr$security_capability(r2, &(0x7f0000000200), &(0x7f0000000240)=@v3={0x3000000, [{0x5, 0x4}, {0x4, 0x8}], 0xee00}, 0x18, 0x2) r3 = dup(r1) readv(r3, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:56:35 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) write$binfmt_script(r0, 0x0, 0x0) 04:56:45 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:56:45 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:56:45 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 11) 04:56:45 executing program 3: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000140)="a9bade61c2ba9fb227f028bb9e5655161f17929e7d46797f88b117f3e373e8e6202dd383468fbdca3232a1b46d8478d92376647bd9d8cb3691d84d28b8456c767eb71b6c70ac3f42162f8701a979593057d4e8eaf8e753b6018fffac6cd69f3ebf1c0daa5d574f34a2c23769e8a16dfc0b7d3d5d697f8e1e4c1e5340c6a33c4aab31376fe8f9358335b3a2bf857d58067976c5ef9204627e727a39a8") setresuid(0xee01, 0xee00, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) setfsuid(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:56:45 executing program 7: socketpair(0x29, 0x3, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='z'], 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) sendfile(r0, r1, 0x0, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(0xffffffffffffffff) copy_file_range(r7, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0x401, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)={0x0, r6, 0x1000, 0x5, 0x3, 0x3}) write$binfmt_script(r4, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:56:45 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 5) 04:56:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x100000000000000) 04:56:45 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = getpid() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000006c0), 0x2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r4) clone3(&(0x7f0000000940)={0x11000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0, {0x5}, &(0x7f00000007c0)=""/57, 0x39, &(0x7f0000000800)=""/193, &(0x7f0000000900)=[r1, r1], 0x2, {r2}}, 0x58) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, r8) recvmsg$unix(r2, &(0x7f0000000bc0)={&(0x7f00000009c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/225, 0xe1}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000c00)={r0, 0x400, 0x2, 0x7fffffff}) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r11) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000c40), 0x212201) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000140)="9bd46dd04b147e840af5b61a20cb2747b222943176e00911766314d012154ab3f680fc8664a1a8b3de89fb0ae2653a09f47bd74f3eb30d4afe3f849d19fe603f5b0f9e2181e338c53b35d2409db3dfeff39bdbd7eec3ca6fd9d1b9497c3d1a5f80705697856441ed906c14752048f4cd7e366da0a04744b7a6", 0x79}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r2, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r9}}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r0, r2, 0xffffffffffffffff, r10, r11, r12]}}], 0x178, 0x400c5}, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) [ 1098.767053] FAULT_INJECTION: forcing a failure. [ 1098.767053] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1098.769011] CPU: 0 UID: 0 PID: 10601 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1098.769043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1098.769057] Call Trace: [ 1098.769065] [ 1098.769074] dump_stack_lvl+0xfa/0x120 [ 1098.769119] should_fail_ex+0x4d7/0x5e0 [ 1098.769159] should_fail_alloc_page+0xe0/0x110 [ 1098.769186] prepare_alloc_pages+0x1af/0x500 [ 1098.769225] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 1098.769258] ? find_held_lock+0x2/0x80 [ 1098.769293] ? lock_release+0xc8/0x290 [ 1098.769322] ? lock_acquire+0x15e/0x2f0 04:56:45 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x2) [ 1098.769345] ? __memcg_slab_post_alloc_hook+0x443/0x9d0 [ 1098.769380] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1098.769416] ? lock_release+0xc8/0x290 [ 1098.769443] ? __memcg_slab_post_alloc_hook+0x4ac/0x9d0 [ 1098.769484] ? __create_object+0x59/0x80 [ 1098.769514] ? __asan_memset+0x24/0x50 [ 1098.769554] __alloc_pages_noprof+0xc/0x1b0 [ 1098.769586] copy_process+0x4ea/0x73e0 [ 1098.769623] ? __pfx__kstrtoull+0x10/0x10 [ 1098.769661] ? lock_acquire+0x15e/0x2f0 [ 1098.769684] ? __might_fault+0xe0/0x190 [ 1098.769713] ? __pfx_copy_process+0x10/0x10 [ 1098.769750] ? __might_fault+0xe0/0x190 [ 1098.769780] ? _copy_from_user+0x5b/0xd0 [ 1098.769811] kernel_clone+0xea/0x820 [ 1098.769830] ? get_pid_task+0xfd/0x250 [ 1098.769867] ? __pfx_kernel_clone+0x10/0x10 [ 1098.769896] ? find_held_lock+0x2b/0x80 [ 1098.769928] ? ksys_write+0x121/0x240 [ 1098.769962] ? lock_is_held_type+0x9e/0x120 [ 1098.770001] __do_sys_clone3+0x1f5/0x280 [ 1098.770023] ? __pfx___do_sys_clone3+0x10/0x10 [ 1098.770064] ? perf_trace_preemptirq_template+0x259/0x430 04:56:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x104000000000000) [ 1098.770105] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1098.770143] ? ksys_write+0x1a3/0x240 [ 1098.770177] ? __pfx_ksys_write+0x10/0x10 [ 1098.770221] do_syscall_64+0xbf/0x360 [ 1098.770246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.770270] RIP: 0033:0x7f27ed07cb19 [ 1098.770288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1098.770310] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1098.770333] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1098.770349] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1098.770363] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.770378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.770392] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1098.770423] 04:56:45 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 12) [ 1098.876990] FAULT_INJECTION: forcing a failure. [ 1098.876990] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.878957] CPU: 0 UID: 0 PID: 10611 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1098.878989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1098.879002] Call Trace: [ 1098.879010] [ 1098.879019] dump_stack_lvl+0xfa/0x120 [ 1098.879062] should_fail_ex+0x4d7/0x5e0 [ 1098.879100] should_failslab+0xc2/0x120 [ 1098.879124] __kvmalloc_node_noprof+0x10d/0x590 [ 1098.879158] ? alloc_fdtable+0x13d/0x2a0 [ 1098.879195] ? alloc_fdtable+0x13d/0x2a0 [ 1098.879230] alloc_fdtable+0x13d/0x2a0 [ 1098.879262] dup_fd+0x6ef/0xa80 [ 1098.879301] copy_process+0x21b5/0x73e0 [ 1098.879337] ? __pfx__kstrtoull+0x10/0x10 [ 1098.879382] ? __pfx_copy_process+0x10/0x10 [ 1098.879418] ? __might_fault+0xe0/0x190 [ 1098.879448] ? _copy_from_user+0x5b/0xd0 [ 1098.879478] kernel_clone+0xea/0x820 [ 1098.879497] ? get_pid_task+0xfd/0x250 [ 1098.879533] ? __pfx_kernel_clone+0x10/0x10 [ 1098.879561] ? find_held_lock+0x2b/0x80 [ 1098.879593] ? ksys_write+0x121/0x240 [ 1098.879626] ? lock_is_held_type+0x9e/0x120 [ 1098.879665] __do_sys_clone3+0x1f5/0x280 [ 1098.879686] ? __pfx___do_sys_clone3+0x10/0x10 [ 1098.879722] ? __fget_files+0x20d/0x3b0 [ 1098.879760] ? fput+0x92/0xd0 [ 1098.879784] ? ksys_write+0x1a3/0x240 [ 1098.879816] ? __pfx_ksys_write+0x10/0x10 [ 1098.879853] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1098.879894] do_syscall_64+0xbf/0x360 [ 1098.879918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.879942] RIP: 0033:0x7f4a9ce31b19 [ 1098.879960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1098.879982] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1098.880004] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1098.880020] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1098.880034] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.880047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1098.880061] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1098.880091] 04:56:46 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$dupfd(r0, 0x0, r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r3, 0xf9, 0x6, 0x200}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000000)={'sit0\x00', 0x0}) 04:56:46 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 13) 04:56:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 6) 04:56:56 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 14) 04:56:56 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1f, 0x8, 0xf7, 0x2, 0x0, 0x100, 0x102, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4fb, 0x2, @perf_config_ext={0x5, 0x8000}, 0x808, 0x1, 0x80000001, 0x8, 0x800, 0x2, 0xffff, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r0, 0x9) write$binfmt_script(r1, 0x0, 0x0) 04:56:56 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = getpgrp(r0) mq_notify(r1, &(0x7f0000000000)={0x0, 0x15, 0x4, @tid=r2}) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:56:56 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x3) 04:56:56 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x32f}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2d}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x24}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24004801}, 0x20000001) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) readv(r3, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:56:56 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = getuid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(0xffffffffffffffff) copy_file_range(r2, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0x401, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r3) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = dup(r5) copy_file_range(r6, &(0x7f0000000040), r4, &(0x7f00000000c0)=0x401, 0x401, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r7) r8 = getegid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae66a49e38c9d633c98e665084b5972383ebf0393f1d4e77efe64efafc9ab919a744f59b4ca4852eeb72ffbe3eef57ff4157ccdf08d81245890f63ca52a8c38ddc8009c9cc4ea25fab916cd8bc747c058d9f324766c9452489ab4b6fc58b965bd50d94ec676669f1c296507a2dfc7b748bd8687699f78e672b088f9854c0b6596ac6eaef2e4fea0c4496ece782adec6ecd07c42fdef407bb2850c2feb93ff374e7cb73609fc0d0dd7bb3724a20594bf71399b68fd299ddeb9ec634f2d9658a", 0xbf}, {&(0x7f0000000180)="679ab50ae22774d919", 0x9}], 0x2, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, r0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}], 0xb0, 0x8001}, 0x4880) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x4, 0x4) ioprio_set$uid(0x3, r0, 0x0) fcntl$dupfd(r1, 0x0, r1) 04:56:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x200000000000000) [ 1109.497614] FAULT_INJECTION: forcing a failure. [ 1109.497614] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.499213] CPU: 1 UID: 0 PID: 10638 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1109.499243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1109.499256] Call Trace: [ 1109.499264] [ 1109.499272] dump_stack_lvl+0xfa/0x120 [ 1109.499315] should_fail_ex+0x4d7/0x5e0 [ 1109.499351] ? dup_fd+0x4d/0xa80 [ 1109.499381] should_failslab+0xc2/0x120 [ 1109.499403] kmem_cache_alloc_noprof+0x5f/0x470 [ 1109.499433] ? __pfx_avc_has_perm+0x10/0x10 [ 1109.499463] dup_fd+0x4d/0xa80 [ 1109.499499] copy_process+0x21b5/0x73e0 [ 1109.499533] ? __pfx__kstrtoull+0x10/0x10 [ 1109.499576] ? __pfx_copy_process+0x10/0x10 [ 1109.499610] ? __might_fault+0xe0/0x190 [ 1109.499638] ? _copy_from_user+0x5b/0xd0 [ 1109.499666] kernel_clone+0xea/0x820 [ 1109.499684] ? get_pid_task+0xfd/0x250 [ 1109.499718] ? __pfx_kernel_clone+0x10/0x10 [ 1109.499744] ? find_held_lock+0x2b/0x80 [ 1109.499775] ? ksys_write+0x121/0x240 [ 1109.499806] ? lock_is_held_type+0x9e/0x120 [ 1109.499843] __do_sys_clone3+0x1f5/0x280 [ 1109.499862] ? __pfx___do_sys_clone3+0x10/0x10 [ 1109.499897] ? __fget_files+0x20d/0x3b0 [ 1109.499933] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1109.499969] ? ksys_write+0x1a3/0x240 [ 1109.499999] ? __pfx_ksys_write+0x10/0x10 [ 1109.500039] do_syscall_64+0xbf/0x360 [ 1109.500063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.500085] RIP: 0033:0x7f27ed07cb19 [ 1109.500101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1109.500122] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1109.500143] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1109.500157] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1109.500170] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1109.500183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.500196] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1109.500224] [ 1109.506514] FAULT_INJECTION: forcing a failure. [ 1109.506514] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.530252] CPU: 0 UID: 0 PID: 10643 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1109.530283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1109.530296] Call Trace: [ 1109.530304] [ 1109.530313] dump_stack_lvl+0xfa/0x120 [ 1109.530357] should_fail_ex+0x4d7/0x5e0 [ 1109.530394] ? copy_fs_struct+0x49/0x350 [ 1109.530416] should_failslab+0xc2/0x120 [ 1109.530439] kmem_cache_alloc_noprof+0x5f/0x470 [ 1109.530468] ? do_raw_spin_unlock+0x53/0x220 [ 1109.530497] ? __asan_memset+0x24/0x50 [ 1109.530534] copy_fs_struct+0x49/0x350 [ 1109.530557] copy_process+0x302d/0x73e0 [ 1109.530592] ? __pfx__kstrtoull+0x10/0x10 [ 1109.530635] ? __pfx_copy_process+0x10/0x10 [ 1109.530669] ? __might_fault+0xe0/0x190 [ 1109.530697] ? _copy_from_user+0x5b/0xd0 [ 1109.530726] kernel_clone+0xea/0x820 [ 1109.530744] ? get_pid_task+0xfd/0x250 [ 1109.530778] ? __pfx_kernel_clone+0x10/0x10 [ 1109.530805] ? find_held_lock+0x2b/0x80 [ 1109.530835] ? ksys_write+0x121/0x240 [ 1109.530868] ? lock_is_held_type+0x9e/0x120 [ 1109.530916] __do_sys_clone3+0x1f5/0x280 [ 1109.530936] ? __pfx___do_sys_clone3+0x10/0x10 [ 1109.530971] ? __fget_files+0x20d/0x3b0 [ 1109.531008] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1109.531045] ? ksys_write+0x1a3/0x240 [ 1109.531076] ? __pfx_ksys_write+0x10/0x10 [ 1109.531116] do_syscall_64+0xbf/0x360 [ 1109.531138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.531161] RIP: 0033:0x7f4a9ce31b19 [ 1109.531178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1109.531199] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1109.531226] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1109.531241] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1109.531254] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1109.531267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1109.531280] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1109.531308] 04:56:56 executing program 7: getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x4, 0x4d, [0xfa8, 0x80000001, 0x9, 0x1, 0x6, 0x3], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0)=""/77}, &(0x7f00000001c0)=0x78) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:56:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x300000000000000) 04:56:56 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x4) 04:56:56 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0x1, 0x7f, 0xe10, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x8, 0x10, 0x34, 0x4}}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140), &(0x7f0000000180)={0x0, 0xfb, 0xbc, 0x4, 0x8, "f4390cfb232be91fa87548b9844e550e", "abd1c702fc9f895cb068ea8dc52efb06db838adc8f49680678b8f1fbe283ca742fe74627250641dba64d94f72542761539ecbc031b5c7a926bbcffdc130b50ccdf9e9514552ac1c1c9ea7b4dab8e6b1529dbaedf0024cdf251d54e67e4b0b90716e577243986c3750ba7cb74e357f35fdceeb84095eb027eecd4237ea1f443493fed8950642ce2cc830ae85f29e53a38d5c3aa1de92a34d2f01e2e38f789450c2cbc5e9b878a9a"}, 0xbc, 0x1) 04:56:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 7) 04:57:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 8) 04:57:06 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0xb00000000000000) 04:57:06 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 15) 04:57:06 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x5) 04:57:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x200) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f0000000100)=0x8, 0x401, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0x248000, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 04:57:06 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0xb4) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:57:06 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) r2 = mq_open(&(0x7f00000003c0)='{@)\xed\x00', 0x40, 0x10, &(0x7f0000000400)={0x100, 0x3, 0x81, 0x4}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000480)=@ethtool_rxnfc={0x29, 0x0, 0x8000, {0x3, @udp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x2b}, @mcast1, 0x4e21, 0x4e20, 0xf8}, {0x0, @local, 0x2, 0x1f, [0x7, 0x7]}, @hdata="0b0770525bbc11770f8acf0ef6aae6f215dcb08e5e42dd273c8badcf78da28cd919f9111d7e9a2026b52a816f120326d844ace3a", {0x0, @broadcast, 0x7, 0xffff, [0x6, 0x1]}, 0xffff, 0xfffff113}, 0x2, [0x400, 0x1]}}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000440)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000000140)='./file0\x00', 0x2000, 0x4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x424, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x91}, 0x8844) ioctl$FITHAW(r0, 0xc0045878) chown(&(0x7f0000000000)='./file0\x00', r4, r5) 04:57:06 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="51eda6805c23d31c85be958b4b4f4bca69dd2089818304813c71829ac61161632ab72c6d3142d360b978a37fa55eb9e7cd0f026459457aa777b5acbda8f13fd5361f064a2ff2a6d4b5f393c0a199602cac8ef0874b4e56d1362ed4fa8f2664d6443fb45cbc2f1f4ab818b653299408c4495a8b2bdcefd05172f7c375b6858165728d9c71dd87e9e20f861840c593", 0x8e}, {&(0x7f0000000180)="c617a0576667e07a0adca4aae5fd625d68b043a6617e5d78d9cfa270d2f061a2b6e0c3078a931a2a1c37cf605210ed029844588df05f42a78b55a0d6c8e2b4edd3aa40be5813ab05e8e304c2bc1affdefa7be7845df3e0e3351d6912eedd0570a5cf61bb214f307f5da11474fa721cd81f958839eb83a70feca583487e4123f442000bd1bd982dd2de4ddc13b90335c9e66c8c83d866e9414b412f9d1fd62252ed319f206e4775605e8d3a0c9ff8ca7d22cfc6313972e77d9a03cd6c2e168fe096bf5fd2d5d631ac5ba297579b5492dc333a53bc2f3db4b42092049354a915cc882b31bab0721e2322c9a967e940a2", 0xef}, {&(0x7f0000000280)="91b230591344dc37d3c6229040de8af6746a2957b113bde8db7f2025e950c4d30324157d2ad3bef9716d3d922d5b02999887852aca6015c83d175249245f391d3de6872e71d84db381387c6eb6a8dc991788f9d6418dcdfddc48dfff273124e0bbd1eb56534af3e37830f1d985ae5cdf0869722ecfd3970d8651deda04c850aa9065b6b18b080fb50e13d121aecd5d", 0x8f}, {&(0x7f00000003c0)="2841ec5ed2891eca62ea03ddf9aed7487e67c604230d54324592d1554403101b6ece057a54fd003cfb4810e508b64af9e0a775f1e7c7c86d5edf6de8c847dea59de51637fc8b05ba16bd687c87171b83a6f25bf041e7eee7a265bd70fcbcbbd7c1b17a2636bb5915f5b8d3ccf8f65c738d102b97c6a26f0721d00db2b064e8d72dd8d0c8", 0x84}, {&(0x7f0000000480)="c405f7c760e4d5256711fd0da5a67d8a75df4cd277414b1e517be6b458a8b98898d114d76d0f5f56c8a7cfe2e31769f2d12016937feb64fa2cb6d8a1689cc36a06bae1e043454e769f72dce6c8a60dc27002eeefed49c5382239cbd05d26988e5d2e5437ed5e9f856ae8cfa7a9a3397d5941407dbba813b21af9d0dba740df156024be244711b58b08e46ae977b37360e7ad17d7d688396d305c296dafe728d0104c4571ccd02b876e0f4fb23a97be10ef1901b9b5b56a726c491126d393fb3cc2df7bb78d7e5081c92844f402dd80d483fb39b1aa7d93e8d81bd3c43a3d1d", 0xdf}], 0x5, 0x80, 0xfff, 0x4) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) [ 1119.134898] FAULT_INJECTION: forcing a failure. [ 1119.134898] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.136774] CPU: 0 UID: 0 PID: 10674 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1119.136804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.136816] Call Trace: [ 1119.136823] [ 1119.136832] dump_stack_lvl+0xfa/0x120 [ 1119.136873] should_fail_ex+0x4d7/0x5e0 [ 1119.136909] should_failslab+0xc2/0x120 [ 1119.136931] __kmalloc_cache_noprof+0x73/0x470 [ 1119.136962] ? alloc_fdtable+0x81/0x2a0 [ 1119.136996] ? alloc_fdtable+0x81/0x2a0 [ 1119.137024] alloc_fdtable+0x81/0x2a0 [ 1119.137053] dup_fd+0x6ef/0xa80 [ 1119.137089] copy_process+0x21b5/0x73e0 [ 1119.137123] ? __pfx__kstrtoull+0x10/0x10 [ 1119.137166] ? __pfx_copy_process+0x10/0x10 [ 1119.137199] ? __might_fault+0xe0/0x190 [ 1119.137235] ? _copy_from_user+0x5b/0xd0 [ 1119.137263] kernel_clone+0xea/0x820 [ 1119.137281] ? get_pid_task+0xfd/0x250 [ 1119.137314] ? __pfx_kernel_clone+0x10/0x10 [ 1119.137341] ? find_held_lock+0x2b/0x80 [ 1119.137371] ? ksys_write+0x121/0x240 [ 1119.137402] ? lock_is_held_type+0x9e/0x120 [ 1119.137438] __do_sys_clone3+0x1f5/0x280 [ 1119.137458] ? __pfx___do_sys_clone3+0x10/0x10 [ 1119.137495] ? perf_trace_preemptirq_template+0x259/0x430 [ 1119.137533] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1119.137567] ? ksys_write+0x1a3/0x240 [ 1119.137598] ? __pfx_ksys_write+0x10/0x10 [ 1119.137638] do_syscall_64+0xbf/0x360 [ 1119.137660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.137682] RIP: 0033:0x7f27ed07cb19 [ 1119.137699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.137719] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1119.137740] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1119.137755] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1119.137768] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.137781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.137793] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1119.137821] 04:57:06 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x1000000000000000) 04:57:06 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#! '}], 0xa, "df9419691fbb71b965dc31cb2efe4e3edf50a883c6ce4501eaec8e0f4e1517ed"}, 0x2f) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r2) openat$cgroup_pressure(r0, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r3) r4 = dup(r1) readv(r4, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) 04:57:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 9) 04:57:06 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 16) 04:57:06 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x6) 04:57:06 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) ioprio_set$uid(0x0, r2, 0x4007) 04:57:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 10) 04:57:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30400, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = getpid() tkill(r2, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x3f, 0xfd, 0x1f, 0x40, 0x0, 0x1, 0x92054, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000300), 0xd}, 0x2040, 0x7ff, 0x0, 0x2, 0x0, 0x9, 0x40, 0x0, 0x10001, 0x0, 0x3}, r2, 0xb, r1, 0xb) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0) r4 = getpgrp(r0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x40, 0x7, 0x0, 0x40, 0x0, 0x5, 0x3800, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x40cef8a0dd399132, 0x7fffffff, 0x5, 0x5, 0x0, 0x7b9, 0x8, 0x0, 0x8, 0x0, 0x3}, r4, 0xd, 0xffffffffffffffff, 0x6) r5 = clone3(&(0x7f00000003c0)={0x2c188000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x31}, &(0x7f0000000240)=""/42, 0x2a, &(0x7f0000000280)=""/10, &(0x7f00000002c0)=[r0, r0, r0], 0x3, {r3}}, 0x58) fork() pidfd_open(r5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xc5, 0x1, 0x1e, 0x7, 0x0, 0x0, 0x200a0, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0xa020, 0x5, 0x1000, 0x1, 0x5, 0xd1, 0x9, 0x0, 0x1f, 0x0, 0x89}, r0, 0x1, r3, 0x2) getpid() 04:57:06 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, ')}-.@#'}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '!@}'}, {0x20, '#! '}, {0x20, '\xb1*#&'}], 0xa, "40f47b884ad226de19f07f778fe1eadbd323d16e0aa032d00fe67815d418961cf002db667892aa630b8510095eb5fb7b0e5f4eaa85f7bccc4eead8a4903340d9ee57b9be6900ee039d1e0eea5a9ae0e1f95ce4efa7860f9c6de3dba34f427c3ac93012201ce34a2a20b88dc2c2ac27429a1791acd1cfc7"}, 0x9f) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') lseek(r0, 0x8, 0x4) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = dup(r1) readv(r6, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x20000) [ 1119.514830] FAULT_INJECTION: forcing a failure. [ 1119.514830] name failslab, interval 1, probability 0, space 0, times 0 04:57:06 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) [ 1119.516677] CPU: 1 UID: 0 PID: 10708 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1119.516708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.516722] Call Trace: [ 1119.516730] [ 1119.516739] dump_stack_lvl+0xfa/0x120 [ 1119.516784] should_fail_ex+0x4d7/0x5e0 [ 1119.516822] ? create_new_namespaces+0x30/0xab0 [ 1119.516853] should_failslab+0xc2/0x120 [ 1119.516876] kmem_cache_alloc_noprof+0x5f/0x470 [ 1119.516917] create_new_namespaces+0x30/0xab0 [ 1119.516948] ? security_capable+0x2f/0x90 [ 1119.516985] copy_namespaces+0x45c/0x580 [ 1119.517017] copy_process+0x26d5/0x73e0 [ 1119.517053] ? __pfx__kstrtoull+0x10/0x10 [ 1119.517099] ? __pfx_copy_process+0x10/0x10 [ 1119.517135] ? __might_fault+0xe0/0x190 [ 1119.517166] ? _copy_from_user+0x5b/0xd0 [ 1119.517196] kernel_clone+0xea/0x820 [ 1119.517223] ? get_pid_task+0xfd/0x250 [ 1119.517258] ? __pfx_kernel_clone+0x10/0x10 [ 1119.517287] ? find_held_lock+0x2b/0x80 [ 1119.517319] ? ksys_write+0x121/0x240 [ 1119.517353] ? lock_is_held_type+0x9e/0x120 [ 1119.517393] __do_sys_clone3+0x1f5/0x280 [ 1119.517414] ? __pfx___do_sys_clone3+0x10/0x10 [ 1119.517451] ? __fget_files+0x20d/0x3b0 [ 1119.517490] ? fput+0x92/0xd0 [ 1119.517514] ? ksys_write+0x1a3/0x240 [ 1119.517547] ? __pfx_ksys_write+0x10/0x10 [ 1119.517583] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1119.517625] do_syscall_64+0xbf/0x360 [ 1119.517649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.517672] RIP: 0033:0x7f4a9ce31b19 [ 1119.517690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.517712] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1119.517735] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1119.517751] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1119.517765] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.517779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.517792] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1119.517822] 04:57:06 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x1600000000000000) 04:57:06 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) 04:57:06 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 11) 04:57:06 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x7) 04:57:06 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1e3182, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:57:17 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 12) 04:57:17 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 17) 04:57:17 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r1 = getpid() tkill(r0, 0x43) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r1) 04:57:17 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setfsuid(0xee01) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:57:17 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0xffffffff00000000) 04:57:17 executing program 7: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x10000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{}, {0x20, '/'}, {0x20, '%'}, {0x20, '}!(@*&/:g){[-'}, {0x20, ']'}, {}], 0xa, "7461926058c2e9d2f3cdabd995f99cdf2349481e0fefc91ec9095f45cf281dd5193588a10f0de48d48148b96d5a90b15a2c68cfc4a376efe16ab5955dc6640e2d7e8489250403abb2c73a7eda4ae62422446c368a354c1fcfd13784991f67231f55851ed6e0dee6dd41578601b3308614c52f7d1781dcc431260743ac84eed9832eb4f3625778b86e225c26d6cc9ff0956d29044c2429615b4d855f4b4a716665eb9a71cc8f2ac1f7574f7f8544403"}, 0xd0) write$binfmt_script(r0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5e1) setns(r1, 0x0) 04:57:17 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x8) 04:57:17 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0xbb) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) [ 1130.198031] FAULT_INJECTION: forcing a failure. [ 1130.198031] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.199860] CPU: 0 UID: 0 PID: 10767 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1130.199890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1130.199902] Call Trace: [ 1130.199909] [ 1130.199918] dump_stack_lvl+0xfa/0x120 [ 1130.199959] should_fail_ex+0x4d7/0x5e0 [ 1130.199995] should_failslab+0xc2/0x120 [ 1130.200018] __kvmalloc_node_noprof+0x10d/0x590 [ 1130.200051] ? alloc_fdtable+0x13d/0x2a0 [ 1130.200087] ? alloc_fdtable+0x13d/0x2a0 [ 1130.200114] alloc_fdtable+0x13d/0x2a0 [ 1130.200143] dup_fd+0x6ef/0xa80 [ 1130.200180] copy_process+0x21b5/0x73e0 [ 1130.200221] ? __pfx__kstrtoull+0x10/0x10 [ 1130.200264] ? __pfx_copy_process+0x10/0x10 [ 1130.200298] ? __might_fault+0xe0/0x190 [ 1130.200326] ? _copy_from_user+0x5b/0xd0 [ 1130.200354] kernel_clone+0xea/0x820 [ 1130.200372] ? get_pid_task+0xfd/0x250 [ 1130.200405] ? __pfx_kernel_clone+0x10/0x10 [ 1130.200432] ? find_held_lock+0x2b/0x80 [ 1130.200462] ? ksys_write+0x121/0x240 [ 1130.200493] ? lock_is_held_type+0x9e/0x120 [ 1130.200529] __do_sys_clone3+0x1f5/0x280 [ 1130.200549] ? __pfx___do_sys_clone3+0x10/0x10 [ 1130.200586] ? perf_trace_preemptirq_template+0x259/0x430 [ 1130.200624] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1130.200659] ? ksys_write+0x1a3/0x240 [ 1130.200689] ? __pfx_ksys_write+0x10/0x10 [ 1130.200729] do_syscall_64+0xbf/0x360 [ 1130.200752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.200774] RIP: 0033:0x7f27ed07cb19 [ 1130.200790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1130.200811] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1130.200832] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1130.200846] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1130.200859] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1130.200872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1130.200885] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1130.200913] 04:57:17 executing program 3: setresuid(0xee01, 0xee00, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) chown(&(0x7f0000000380)='./file0\x00', r0, 0xffffffffffffffff) getuid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5c}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xc9, 0x8]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x181282, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'macvlan1\x00'}}}, ["", "", "", "", "", ""]}, 0x2c}}, 0x20040000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syzkaller1\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="3b00000105000000ffff0000c0ffffff000000000200000001010000ff0300000700000004000000060000000000010059860c2e0335f4815903cea42679b8f52e42ccc2f04416ff4c8a07d9e156dae2747f356b4ea1a0ce04259de5f1c8022264c868da484862a998705b476d33863c64f4bcdfd473e10533e0bcde3ab53ee9429c13d5989cd62c29aba7ff0300000000000091c8461a8e883a9987c65a1ad7fc26006badef9cb0c5a5"]}) 04:57:17 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x18) 04:57:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 13) 04:57:28 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x64) 04:57:28 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xb6, 0x5, 0x1f, 0x0, 0x8, 0x4880, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x40b4, 0x95, 0x1b, 0x1, 0x1, 0xa179, 0x5000, 0x0, 0x3, 0x0, 0x8}, r1, 0x10, 0xffffffffffffffff, 0x2) 04:57:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = getpid() r1 = getpgrp(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa, 0x7, 0x35, 0x1f, 0x0, 0x8, 0xe000, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x9}, 0x1000, 0x8000, 0x101, 0x5, 0x6, 0x7f, 0x5, 0x0, 0xfffffff7, 0x0, 0xfffffffffffffff7}, r1, 0x0, r2, 0x8) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:57:28 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 18) 04:57:28 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7, 0x2c, "7afa2cc4ad632e0f164bd51c1ea3faee2960d417b6e87bf4c5a230ecb22c130c2137c5d5dcf9013fa5018282"}}) setfsuid(0xffffffffffffffff) 04:57:28 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) r3 = io_uring_setup(0x4408, &(0x7f00000000c0)={0x0, 0xd9c8, 0x0, 0x1, 0x1d8, 0x0, r2}) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0', [{0x20, ':'}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '.:&!'}, {0x20, '#'}], 0xa, "79c021fed437a7a4002403a28734c288e5e0307cc2783e717385ce6ec2b1f35d93537eca2b87a14293d0e7246029e8847b214a4337c6d23002b1d8b5c97fa946a815170eaf536e3f2ed6c8e70c9993aa7c2773e01c660f6137bdad3b8c491c140b1c435d5700d70e6d9bbd0063b7cd44e9da46951f597eec925f344c3cd024e75f4dbaff8ae8b86fb8de3d1522341235"}, 0xb0) 04:57:28 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0xffffffffffff0700) [ 1141.280850] FAULT_INJECTION: forcing a failure. [ 1141.280850] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.281745] CPU: 0 UID: 0 PID: 10784 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1141.281762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.281769] Call Trace: [ 1141.281774] [ 1141.281778] dump_stack_lvl+0xfa/0x120 [ 1141.281804] should_fail_ex+0x4d7/0x5e0 [ 1141.281826] should_failslab+0xc2/0x120 [ 1141.281839] __kmalloc_cache_noprof+0x73/0x470 [ 1141.281856] ? inc_ucount+0x212/0x270 [ 1141.281877] ? copy_ipcs+0x1a0/0x630 [ 1141.281895] ? copy_ipcs+0x1a0/0x630 [ 1141.281907] copy_ipcs+0x1a0/0x630 [ 1141.281920] ? copy_utsname+0xae/0x470 [ 1141.281933] create_new_namespaces+0x210/0xab0 [ 1141.281948] ? security_capable+0x2f/0x90 [ 1141.281968] copy_namespaces+0x45c/0x580 [ 1141.281984] copy_process+0x26d5/0x73e0 [ 1141.282003] ? __pfx__kstrtoull+0x10/0x10 [ 1141.282026] ? __pfx_copy_process+0x10/0x10 [ 1141.282044] ? __might_fault+0xe0/0x190 [ 1141.282059] ? _copy_from_user+0x5b/0xd0 [ 1141.282074] kernel_clone+0xea/0x820 [ 1141.282084] ? get_pid_task+0xfd/0x250 [ 1141.282102] ? __pfx_kernel_clone+0x10/0x10 [ 1141.282117] ? find_held_lock+0x2b/0x80 [ 1141.282134] ? ksys_write+0x121/0x240 [ 1141.282152] ? lock_is_held_type+0x9e/0x120 [ 1141.282173] __do_sys_clone3+0x1f5/0x280 [ 1141.282183] ? __pfx___do_sys_clone3+0x10/0x10 [ 1141.282202] ? __fget_files+0x20d/0x3b0 [ 1141.282226] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1141.282246] ? ksys_write+0x1a3/0x240 [ 1141.282262] ? __pfx_ksys_write+0x10/0x10 [ 1141.282284] do_syscall_64+0xbf/0x360 [ 1141.282296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.282309] RIP: 0033:0x7f4a9ce31b19 [ 1141.282318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.282329] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1141.282341] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1141.282349] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1141.282356] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.282363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.282370] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1141.282385] 04:57:28 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 19) 04:57:28 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321af9a1885059ffa6980837aa6dac6108d84dbf5ab7f7399943f7ea5c27a79bfd541897bf8e1f5cef1c353341edab7e8b608c4a0b95fa69b27ac96fe1fd20c96f44be68af1e555dad712542b96330cae0230eb4fb5f73227405df43d0537f5f11b9021ef6ec79bdc6009ff46f07ed735dc6e16a38dc7d3c8a0426b7c1ccbdea20e0279"], 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x20) 04:57:28 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x220042, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:57:28 executing program 7: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xf0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000}, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1a) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20160c0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e7364656c65676174652c6d656d6f72795f726563f5727369766570726f742c6d656d6f72795f72656375727369766570726f742c827364656c656761fd9122283578fc4d0f4274652c72646d612c6e73"]) 04:57:28 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 20) 04:57:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 14) 04:57:28 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x300) 04:57:28 executing program 1: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0, 0x83}, r0, 0x0, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='=! ./file0\n'], 0xb) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x16) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r6, 0x400, 0x70bd2b, 0x25dfd3fd, {{}, {}, {0x18, 0x17, {0x1000000e, 0x3, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1840}, 0x800) r7 = dup(r2) copy_file_range(r7, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7ebde0a4) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) [ 1141.515045] FAULT_INJECTION: forcing a failure. [ 1141.515045] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.516009] CPU: 0 UID: 0 PID: 10817 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1141.516026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.516033] Call Trace: [ 1141.516038] [ 1141.516042] dump_stack_lvl+0xfa/0x120 [ 1141.516068] should_fail_ex+0x4d7/0x5e0 [ 1141.516089] should_failslab+0xc2/0x120 [ 1141.516102] __kmalloc_cache_noprof+0x73/0x470 [ 1141.516120] ? alloc_fs_context+0x58/0x9e0 [ 1141.516139] ? alloc_fs_context+0x58/0x9e0 [ 1141.516154] alloc_fs_context+0x58/0x9e0 [ 1141.516170] ? __kmalloc_cache_noprof+0x369/0x470 [ 1141.516187] mq_init_ns+0x172/0x630 [ 1141.516203] copy_ipcs+0x38d/0x630 [ 1141.516219] ? copy_utsname+0xae/0x470 [ 1141.516233] create_new_namespaces+0x210/0xab0 [ 1141.516250] ? security_capable+0x2f/0x90 [ 1141.516268] copy_namespaces+0x45c/0x580 [ 1141.516284] copy_process+0x26d5/0x73e0 [ 1141.516303] ? __pfx__kstrtoull+0x10/0x10 [ 1141.516326] ? __pfx_copy_process+0x10/0x10 [ 1141.516345] ? __might_fault+0xe0/0x190 [ 1141.516361] ? _copy_from_user+0x5b/0xd0 [ 1141.516376] kernel_clone+0xea/0x820 [ 1141.516386] ? get_pid_task+0xfd/0x250 [ 1141.516404] ? __pfx_kernel_clone+0x10/0x10 [ 1141.516418] ? find_held_lock+0x2b/0x80 [ 1141.516435] ? ksys_write+0x121/0x240 [ 1141.516452] ? lock_is_held_type+0x9e/0x120 [ 1141.516472] __do_sys_clone3+0x1f5/0x280 [ 1141.516483] ? __pfx___do_sys_clone3+0x10/0x10 [ 1141.516501] ? __fget_files+0x20d/0x3b0 [ 1141.516521] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1141.516541] ? ksys_write+0x1a3/0x240 [ 1141.516557] ? __pfx_ksys_write+0x10/0x10 [ 1141.516579] do_syscall_64+0xbf/0x360 [ 1141.516591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.516603] RIP: 0033:0x7f4a9ce31b19 [ 1141.516613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.516624] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1141.516635] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1141.516643] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1141.516650] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.516657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.516664] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1141.516679] 04:57:28 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) recvmmsg$unix(r1, &(0x7f0000000300)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000080)=""/103, 0x67}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0x1, 0x2003, &(0x7f0000000340)={0x77359400}) statx(r2, &(0x7f0000000380)='./file0\x00', 0x100, 0x10, &(0x7f00000003c0)) [ 1141.553388] FAULT_INJECTION: forcing a failure. [ 1141.553388] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.554373] CPU: 0 UID: 0 PID: 10819 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1141.554389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.554396] Call Trace: [ 1141.554400] [ 1141.554404] dump_stack_lvl+0xfa/0x120 [ 1141.554426] should_fail_ex+0x4d7/0x5e0 [ 1141.554446] ? copy_fs_struct+0x49/0x350 [ 1141.554458] should_failslab+0xc2/0x120 [ 1141.554469] kmem_cache_alloc_noprof+0x5f/0x470 [ 1141.554485] ? do_raw_spin_unlock+0x53/0x220 [ 1141.554500] ? __asan_memset+0x24/0x50 [ 1141.554520] copy_fs_struct+0x49/0x350 [ 1141.554533] copy_process+0x302d/0x73e0 [ 1141.554551] ? __pfx__kstrtoull+0x10/0x10 [ 1141.554575] ? __pfx_copy_process+0x10/0x10 [ 1141.554593] ? __might_fault+0xe0/0x190 [ 1141.554608] ? _copy_from_user+0x5b/0xd0 [ 1141.554623] kernel_clone+0xea/0x820 [ 1141.554633] ? get_pid_task+0xfd/0x250 [ 1141.554650] ? __pfx_kernel_clone+0x10/0x10 [ 1141.554665] ? find_held_lock+0x2b/0x80 [ 1141.554681] ? ksys_write+0x121/0x240 [ 1141.554698] ? lock_is_held_type+0x9e/0x120 [ 1141.554717] __do_sys_clone3+0x1f5/0x280 [ 1141.554728] ? __pfx___do_sys_clone3+0x10/0x10 [ 1141.554748] ? perf_trace_preemptirq_template+0x259/0x430 [ 1141.554768] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1141.554787] ? ksys_write+0x1a3/0x240 [ 1141.554803] ? __pfx_ksys_write+0x10/0x10 [ 1141.554825] do_syscall_64+0xbf/0x360 [ 1141.554837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.554849] RIP: 0033:0x7f27ed07cb19 [ 1141.554858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.554869] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1141.554880] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1141.554888] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1141.554895] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.554902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.554909] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1141.554924] 04:57:28 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x2f, 0xff, 0x3f, 0x0, 0x0, 0x2101, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x4, 0xffffffff}, 0x8000, 0x30, 0x4, 0x3, 0x100000000, 0x7, 0x2, 0x0, 0x52, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x3f, 0xf9, 0x0, 0x7f, 0x0, 0xfffffffffffff66b, 0x84010, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7f}, 0x2340, 0x2, 0x0, 0x9, 0x0, 0x1, 0x7ff, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0x10, r1, 0x3) clone3(&(0x7f00000003c0)={0x401100, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0x17}, &(0x7f0000000180)=""/172, 0xac, &(0x7f0000000240)=""/92, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffff7}}, './file0\x00'}) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x4a, 0x1, 0x3f, 0x1, 0x0, 0x5, 0x40981, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x9}, 0x80420, 0xd45b, 0x9, 0x2, 0x2, 0x3f, 0x40, 0x0, 0xdfa3, 0x0, 0x2d}, r3, 0xe, r4, 0xa) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = fcntl$getown(r2, 0x9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r5}}, './file0\x00'}) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x9, 0x7, 0xeb, 0x7, 0x0, 0x0, 0x200, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000540)}, 0x100c0, 0x6, 0x3, 0x1, 0x3, 0x8, 0x8000, 0x0, 0x0, 0x0, 0x35}, r7, 0x6, r8, 0x2) write$binfmt_script(r6, 0x0, 0x0) 04:57:28 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 15) 04:57:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='@']) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:57:37 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 16) 04:57:37 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r0) ftruncate(r0, 0x4) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:57:37 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) recvmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000140), 0x6e, &(0x7f0000000540), 0x4d, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x120) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0x2, 0x2, 0x1, 0x0, 0x3, 0x2, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8c, 0x7}, 0x0, 0xbbcf, 0x5, 0x5, 0x0, 0xfff, 0x4, 0x0, 0x1, 0x0, 0x98b7}, r1, 0x5, r2, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:57:37 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101240, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x2000000000000000, 0xffffffff) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = dup(r5) copy_file_range(r6, &(0x7f0000000040), r4, &(0x7f00000000c0)=0x401, 0x401, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setfsuid(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r9 = dup(r8) copy_file_range(r9, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file0\x00'}) fchown(r4, r7, 0xee00) 04:57:37 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 21) 04:57:37 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:57:37 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x408) 04:57:37 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000140), r0, &(0x7f00000000c0)=0x401, 0x20047f4, 0x0) accept4(r0, &(0x7f0000000080)=@hci, &(0x7f0000000000)=0x80, 0x800) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x400000007fffffff, 0x3ff, 0x0) fchmodat(r5, &(0x7f0000000100)='./file0\x00', 0x42) setresuid(0xee01, 0xee00, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f0000000040)={'syztnl1\x00', 0x0}) [ 1150.101979] FAULT_INJECTION: forcing a failure. [ 1150.101979] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.102917] CPU: 1 UID: 0 PID: 10846 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1150.102933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1150.102941] Call Trace: [ 1150.102945] [ 1150.102950] dump_stack_lvl+0xfa/0x120 [ 1150.102975] should_fail_ex+0x4d7/0x5e0 [ 1150.102996] ? create_new_namespaces+0x30/0xab0 [ 1150.103013] should_failslab+0xc2/0x120 [ 1150.103026] kmem_cache_alloc_noprof+0x5f/0x470 [ 1150.103047] create_new_namespaces+0x30/0xab0 [ 1150.103063] ? security_capable+0x2f/0x90 [ 1150.103081] copy_namespaces+0x45c/0x580 [ 1150.103098] copy_process+0x26d5/0x73e0 [ 1150.103117] ? __pfx__kstrtoull+0x10/0x10 [ 1150.103140] ? __pfx_copy_process+0x10/0x10 [ 1150.103158] ? __might_fault+0xe0/0x190 [ 1150.103174] ? _copy_from_user+0x5b/0xd0 [ 1150.103189] kernel_clone+0xea/0x820 [ 1150.103213] ? get_pid_task+0xfd/0x250 [ 1150.103232] ? __pfx_kernel_clone+0x10/0x10 [ 1150.103246] ? find_held_lock+0x2b/0x80 [ 1150.103263] ? ksys_write+0x121/0x240 [ 1150.103282] ? lock_is_held_type+0x9e/0x120 [ 1150.103302] __do_sys_clone3+0x1f5/0x280 [ 1150.103313] ? __pfx___do_sys_clone3+0x10/0x10 [ 1150.103331] ? __fget_files+0x20d/0x3b0 [ 1150.103351] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1150.103372] ? ksys_write+0x1a3/0x240 [ 1150.103388] ? __pfx_ksys_write+0x10/0x10 [ 1150.103410] do_syscall_64+0xbf/0x360 [ 1150.103422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.103435] RIP: 0033:0x7f27ed07cb19 [ 1150.103444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1150.103455] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1150.103467] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1150.103475] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1150.103482] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.103489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.103496] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1150.103511] [ 1150.137061] tmpfs: Unknown parameter '@' [ 1150.151661] tmpfs: Unknown parameter '@' 04:57:37 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r4, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r3, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000340)={{0xe2, 0x1f}, {0x43, 0x5}, 0x0, 0x2, 0x2}) r8 = dup(r2) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82300) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9, {r8}}, './file0\x00'}) copy_file_range(r8, 0x0, r1, 0x0, 0x401, 0x0) 04:57:37 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:57:37 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000032c0)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000003080)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f00000003c0)=""/184, 0xb8}, {}, {&(0x7f00000002c0)=""/69, 0x45}], 0x5}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000700)=""/16, 0x10}, {&(0x7f0000002080)=""/117, 0x75}, {&(0x7f00000007c0)=""/101, 0x65}, {&(0x7f0000001f80)=""/202, 0xca}, {&(0x7f0000000940)=""/202, 0xca}, {&(0x7f0000000a40)=""/123, 0x7b}, {&(0x7f0000000ac0)=""/103, 0x67}], 0x9, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}}, {{&(0x7f0000000cc0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000d40)=""/55, 0x37}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/54, 0x36}], 0x3, &(0x7f0000001e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000001f00), 0x6e, &(0x7f0000002280), 0x0, &(0x7f0000002100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002340)=""/143, 0x8f}, {&(0x7f0000002400)=""/205, 0xcd}, {&(0x7f0000002500)=""/239, 0xef}], 0x3, &(0x7f0000002640)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000840)=""/208, 0xd0}, {&(0x7f0000002880)=""/28, 0x1c}, {&(0x7f00000028c0)=""/254, 0xfe}], 0x3, &(0x7f0000003340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000002b40), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002bc0)=""/56, 0x38}, {&(0x7f0000002c00)=""/92, 0x5c}, {&(0x7f0000002c80)=""/177, 0xb1}, {&(0x7f0000002d40)=""/65, 0x41}], 0x4}}, {{0x0, 0x0, &(0x7f0000002e00), 0x0, &(0x7f0000002e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000002ec0), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002f40)=""/105, 0x69}], 0x1, &(0x7f0000003000)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x9, 0x12023, &(0x7f0000003300)={r1, r2+10000000}) 04:57:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30400, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = getpid() tkill(r2, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x3f, 0xfd, 0x1f, 0x40, 0x0, 0x1, 0x92054, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000300), 0xd}, 0x2040, 0x7ff, 0x0, 0x2, 0x0, 0x9, 0x40, 0x0, 0x10001, 0x0, 0x3}, r2, 0xb, r1, 0xb) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0) r4 = getpgrp(r0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x40, 0x7, 0x0, 0x40, 0x0, 0x5, 0x3800, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x40cef8a0dd399132, 0x7fffffff, 0x5, 0x5, 0x0, 0x7b9, 0x8, 0x0, 0x8, 0x0, 0x3}, r4, 0xd, 0xffffffffffffffff, 0x6) r5 = clone3(&(0x7f00000003c0)={0x2c188000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x31}, &(0x7f0000000240)=""/42, 0x2a, &(0x7f0000000280)=""/10, &(0x7f00000002c0)=[r0, r0, r0], 0x3, {r3}}, 0x58) fork() pidfd_open(r5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xc5, 0x1, 0x1e, 0x7, 0x0, 0x0, 0x200a0, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0xa020, 0x5, 0x1000, 0x1, 0x5, 0xd1, 0x9, 0x0, 0x1f, 0x0, 0x89}, r0, 0x1, r3, 0x2) getpid() 04:57:37 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 17) 04:57:37 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 22) [ 1150.349854] FAULT_INJECTION: forcing a failure. [ 1150.349854] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.352009] CPU: 0 UID: 0 PID: 10879 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1150.352042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1150.352055] Call Trace: [ 1150.352062] [ 1150.352071] dump_stack_lvl+0xfa/0x120 [ 1150.352115] should_fail_ex+0x4d7/0x5e0 [ 1150.352152] ? copy_fs_struct+0x49/0x350 [ 1150.352175] should_failslab+0xc2/0x120 [ 1150.352198] kmem_cache_alloc_noprof+0x5f/0x470 [ 1150.352243] ? do_raw_spin_unlock+0x53/0x220 [ 1150.352273] ? __asan_memset+0x24/0x50 [ 1150.352312] copy_fs_struct+0x49/0x350 [ 1150.352337] copy_process+0x302d/0x73e0 [ 1150.352373] ? __pfx__kstrtoull+0x10/0x10 [ 1150.352419] ? __pfx_copy_process+0x10/0x10 [ 1150.352455] ? __might_fault+0xe0/0x190 [ 1150.352485] ? _copy_from_user+0x5b/0xd0 [ 1150.352515] kernel_clone+0xea/0x820 [ 1150.352534] ? get_pid_task+0xfd/0x250 [ 1150.352570] ? __pfx_kernel_clone+0x10/0x10 [ 1150.352598] ? find_held_lock+0x2b/0x80 [ 1150.352630] ? ksys_write+0x121/0x240 [ 1150.352664] ? lock_is_held_type+0x9e/0x120 [ 1150.352704] __do_sys_clone3+0x1f5/0x280 [ 1150.352727] ? __pfx___do_sys_clone3+0x10/0x10 [ 1150.352766] ? perf_trace_preemptirq_template+0x259/0x430 [ 1150.352807] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1150.352844] ? ksys_write+0x1a3/0x240 [ 1150.352877] ? __pfx_ksys_write+0x10/0x10 [ 1150.352920] do_syscall_64+0xbf/0x360 [ 1150.352945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.352968] RIP: 0033:0x7f27ed07cb19 [ 1150.352986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1150.353008] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1150.353031] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1150.353046] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1150.353060] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.353074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.353087] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1150.353117] [ 1150.419902] FAULT_INJECTION: forcing a failure. [ 1150.419902] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.421833] CPU: 0 UID: 0 PID: 10881 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1150.421865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1150.421878] Call Trace: [ 1150.421886] [ 1150.421895] dump_stack_lvl+0xfa/0x120 [ 1150.421938] should_fail_ex+0x4d7/0x5e0 [ 1150.421977] should_failslab+0xc2/0x120 [ 1150.422000] __kmalloc_cache_noprof+0x73/0x470 [ 1150.422029] ? __create_object+0x59/0x80 [ 1150.422058] ? mqueue_init_fs_context+0x4b/0x480 [ 1150.422089] ? mqueue_init_fs_context+0x4b/0x480 [ 1150.422111] ? lockdep_init_map_type+0x4b/0x240 [ 1150.422137] mqueue_init_fs_context+0x4b/0x480 [ 1150.422160] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 1150.422187] alloc_fs_context+0x570/0x9e0 [ 1150.422234] mq_init_ns+0x172/0x630 [ 1150.422263] copy_ipcs+0x38d/0x630 [ 1150.422286] ? copy_utsname+0xae/0x470 [ 1150.422311] create_new_namespaces+0x210/0xab0 [ 1150.422343] ? security_capable+0x2f/0x90 [ 1150.422379] copy_namespaces+0x45c/0x580 [ 1150.422411] copy_process+0x26d5/0x73e0 [ 1150.422447] ? __pfx__kstrtoull+0x10/0x10 [ 1150.422492] ? __pfx_copy_process+0x10/0x10 [ 1150.422529] ? __might_fault+0xe0/0x190 [ 1150.422559] ? _copy_from_user+0x5b/0xd0 [ 1150.422589] kernel_clone+0xea/0x820 [ 1150.422608] ? get_pid_task+0xfd/0x250 [ 1150.422644] ? __pfx_kernel_clone+0x10/0x10 [ 1150.422672] ? find_held_lock+0x2b/0x80 [ 1150.422704] ? ksys_write+0x121/0x240 [ 1150.422737] ? lock_is_held_type+0x9e/0x120 [ 1150.422776] __do_sys_clone3+0x1f5/0x280 [ 1150.422797] ? __pfx___do_sys_clone3+0x10/0x10 [ 1150.422834] ? __fget_files+0x20d/0x3b0 [ 1150.422873] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1150.422912] ? ksys_write+0x1a3/0x240 [ 1150.422945] ? __pfx_ksys_write+0x10/0x10 [ 1150.422988] do_syscall_64+0xbf/0x360 [ 1150.423012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.423035] RIP: 0033:0x7f4a9ce31b19 [ 1150.423053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1150.423076] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1150.423099] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1150.423114] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1150.423128] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.423142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.423155] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1150.423186] 04:57:46 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 23) 04:57:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 18) 04:57:46 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000002700)={&(0x7f0000000140)=@ieee802154={0x24, @short}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x80000000) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r2 = getpid() pidfd_open(r2, 0x0) 04:57:46 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0x0, 0x5, 0x6, 0x0, 0x3, 0x11018, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x80000000}, 0x10090, 0x4, 0x2, 0x2, 0x2, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0xfff}, 0x0, 0xc, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x9, 0x3, 0x4, 0x5, 0x0, 0x7fffffff, 0x0, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x4}, 0x1c0, 0x100000001, 0x1, 0x1, 0xffffffffffffffff, 0x4a73, 0x6, 0x0, 0x7, 0x0, 0x1ff}, r1, 0xf, 0xffffffffffffffff, 0x0) 04:57:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) recvmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000140), 0x6e, &(0x7f0000000540), 0x4d, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x120) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0x2, 0x2, 0x1, 0x0, 0x3, 0x2, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8c, 0x7}, 0x0, 0xbbcf, 0x5, 0x5, 0x0, 0xfff, 0x4, 0x0, 0x1, 0x0, 0x98b7}, r1, 0x5, r2, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:57:46 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r3) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x6, 0x0, 0x0, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="00ca4a785e12dcf5417f4ec801ee5813e80874b61af6678582f516763333cec6428be0b5df51dd03f858507f4b05aa5f5e2218fc5c55109445a2"]) chdir(&(0x7f0000000000)='./file0\x00') r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="23e8fc06ee5d377cde300a5b8a9141f849829baab0be22033048"], 0xb) r6 = dup(r5) copy_file_range(r6, 0x0, r4, 0x0, 0x401, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xe0300, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r6, 0x40047211, &(0x7f0000000180)=0x10) 04:57:46 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x1, 0x7f2, 0x0, @empty, @mcast2, 0x80, 0x80, 0x9, 0x2}}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r5) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x2, 0x69d, 0x6a, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x8, 0x8, 0x42e363a0}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000300)=@acquire={0x474, 0x17, 0x300, 0x70bd25, 0x25dfdbff, {{@in=@empty, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, {@in=@remote, @in=@broadcast, 0x4e21, 0x4, 0x4e22, 0xfff, 0x2, 0x80, 0x8297be1d387f7a27, 0x2e, r4, r5}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x4e23, 0xd0ed, 0x4e20, 0x101, 0xa, 0x0, 0x20, 0x0, 0x0, r6}, {0x7, 0x9, 0x7, 0x4bba, 0x6, 0xffffffff, 0x6, 0x401}, {0x9, 0xf92f, 0x1, 0xfffffffffffffffa}, 0x500733a6, 0x6e6bb3, 0x0, 0x1, 0x2, 0x1}, 0xfff, 0x10000, 0x6, 0x70bd2d}, [@policy={0xac, 0x7, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4e24, 0xeec3, 0x4e20, 0x3, 0xa, 0x60, 0x80, 0x29, r7, r8}, {0xfff, 0x5, 0x3ff, 0x20, 0x80000001, 0x3, 0x6, 0x4}, {0x7f, 0x2, 0xf9c1, 0x1000}, 0x3f, 0x6e6bbf, 0x2, 0x0, 0x1, 0x2}}, @etimer_thresh={0x8, 0xc, 0xfff}, @algo_crypt={0xbd, 0x2, {{'cbc(blowfish)\x00'}, 0x3a8, "7ba5ccaeee3943cd552156cd55c2b717ed838b9aa71b89e8b486f77435261cb1a4d018475a2c3d99cee63b051c79418f60cfa8db921cc1c63017f4cf8945be050ce416d23ca7734bc69c0b6cdadda2df4d9ec0db19d7ef72ea6f902eeb06e399c5c76e7d623159c78174dd915a8b956d0a3ef5f86f"}}, @sec_ctx={0x7c, 0x8, {0x78, 0x8, 0x44b9e6fd53d285ec, 0x9, 0x70, "0581a94cb8f1dc45984230780a22c2988697ab6b0c80378ccddb215d17bb8fd89dea6428cc268e039255bfcd8542447aa69d8516446a749de1f7820f74580697543e5b3b9e9f0680e9281a82fca7d878432d7095c8320a54db0701fcfef3fd8bb05a22506295506a4b483a41edb8e30b"}}, @lastused={0xc, 0xf, 0x10001}, @algo_auth_trunc={0x11c, 0x14, {{'xcbc(aes-asm)\x00'}, 0x680, 0xc0, "1eaf0477614e24004531f865bdaa88797e25a407642a87da073b95653849074380c6ee16d0b6eb684213dfcbb11ef020c910ea06eea385dcd1be2d544b48ecd3ce9f70854af21e6f84e625c0af0b1efca12d61a0639a21c705ecdc3fd28681f6b78329d529ada0207586a49c694142c33610c9cc6d8fec4ba0aad361103b06badaa5830bcc2173c8da2982f415f12749a2e9729b71ecf2a11de184cc8efe29db0d42c27d5953a507008e1328d1391e2d4df7c44747d8da62ffe6dc7b8f2430f0559b86456a48bec84738b3fd9e810398"}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in=@loopback, 0x0, 0x2}}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x474}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000880)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r11, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:57:46 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x480) 04:57:46 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 24) 04:57:46 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x500) [ 1159.242995] FAULT_INJECTION: forcing a failure. [ 1159.242995] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.244778] CPU: 1 UID: 0 PID: 10906 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1159.244808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.244822] Call Trace: [ 1159.244829] [ 1159.244838] dump_stack_lvl+0xfa/0x120 [ 1159.244881] should_fail_ex+0x4d7/0x5e0 [ 1159.244918] should_failslab+0xc2/0x120 [ 1159.244941] __kmalloc_cache_noprof+0x73/0x470 [ 1159.244973] ? inc_ucount+0x212/0x270 [ 1159.245004] ? copy_ipcs+0x1a0/0x630 [ 1159.245035] ? copy_ipcs+0x1a0/0x630 [ 1159.245059] copy_ipcs+0x1a0/0x630 [ 1159.245082] ? copy_utsname+0xae/0x470 [ 1159.245107] create_new_namespaces+0x210/0xab0 [ 1159.245137] ? security_capable+0x2f/0x90 [ 1159.245173] copy_namespaces+0x45c/0x580 [ 1159.245204] copy_process+0x26d5/0x73e0 [ 1159.245246] ? __pfx__kstrtoull+0x10/0x10 [ 1159.245291] ? __pfx_copy_process+0x10/0x10 [ 1159.245325] ? __might_fault+0xe0/0x190 [ 1159.245355] ? _copy_from_user+0x5b/0xd0 [ 1159.245384] kernel_clone+0xea/0x820 [ 1159.245403] ? get_pid_task+0xfd/0x250 [ 1159.245437] ? __pfx_kernel_clone+0x10/0x10 [ 1159.245465] ? find_held_lock+0x2b/0x80 [ 1159.245497] ? ksys_write+0x121/0x240 [ 1159.245531] ? lock_is_held_type+0x9e/0x120 [ 1159.245568] __do_sys_clone3+0x1f5/0x280 [ 1159.245588] ? __pfx___do_sys_clone3+0x10/0x10 [ 1159.245624] ? __fget_files+0x20d/0x3b0 [ 1159.245662] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1159.245699] ? ksys_write+0x1a3/0x240 [ 1159.245730] ? __pfx_ksys_write+0x10/0x10 [ 1159.245772] do_syscall_64+0xbf/0x360 [ 1159.245795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.245818] RIP: 0033:0x7f27ed07cb19 [ 1159.245835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.245856] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1159.245878] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1159.245893] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1159.245907] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.245920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1159.245933] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1159.245962] [ 1159.277012] FAULT_INJECTION: forcing a failure. [ 1159.277012] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.279112] CPU: 0 UID: 0 PID: 10910 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1159.279129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.279138] Call Trace: [ 1159.279142] [ 1159.279147] dump_stack_lvl+0xfa/0x120 [ 1159.279175] should_fail_ex+0x4d7/0x5e0 [ 1159.279196] should_failslab+0xc2/0x120 [ 1159.279214] __kmalloc_cache_noprof+0x73/0x470 [ 1159.279230] ? find_held_lock+0x2b/0x80 [ 1159.279249] ? alloc_super+0x53/0xb80 [ 1159.279278] ? alloc_super+0x53/0xb80 [ 1159.279293] alloc_super+0x53/0xb80 [ 1159.279309] ? lock_release+0xc8/0x290 [ 1159.279324] sget_fc+0xfe/0xb80 [ 1159.279340] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1159.279357] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1159.279369] get_tree_nodev+0x28/0x190 [ 1159.279387] mqueue_get_tree+0xf6/0x140 [ 1159.279398] vfs_get_tree+0x93/0x340 [ 1159.279412] fc_mount+0x18/0x110 [ 1159.279427] mq_init_ns+0x42e/0x630 [ 1159.279442] copy_ipcs+0x38d/0x630 [ 1159.279454] ? copy_utsname+0xae/0x470 [ 1159.279468] create_new_namespaces+0x210/0xab0 [ 1159.279485] ? security_capable+0x2f/0x90 [ 1159.279504] copy_namespaces+0x45c/0x580 [ 1159.279521] copy_process+0x26d5/0x73e0 [ 1159.279540] ? __pfx__kstrtoull+0x10/0x10 [ 1159.279564] ? __pfx_copy_process+0x10/0x10 [ 1159.279582] ? __might_fault+0xe0/0x190 [ 1159.279598] ? _copy_from_user+0x5b/0xd0 [ 1159.279613] kernel_clone+0xea/0x820 [ 1159.279623] ? get_pid_task+0xfd/0x250 [ 1159.279642] ? __pfx_kernel_clone+0x10/0x10 [ 1159.279656] ? find_held_lock+0x2b/0x80 [ 1159.279672] ? ksys_write+0x121/0x240 [ 1159.279690] ? lock_is_held_type+0x9e/0x120 [ 1159.279710] __do_sys_clone3+0x1f5/0x280 [ 1159.279721] ? __pfx___do_sys_clone3+0x10/0x10 [ 1159.279739] ? __fget_files+0x20d/0x3b0 [ 1159.279759] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1159.279780] ? ksys_write+0x1a3/0x240 [ 1159.279796] ? __pfx_ksys_write+0x10/0x10 [ 1159.279818] do_syscall_64+0xbf/0x360 [ 1159.279831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.279843] RIP: 0033:0x7f4a9ce31b19 [ 1159.279853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.279864] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1159.279875] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1159.279883] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1159.279890] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.279897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1159.279904] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1159.279919] 04:57:46 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x164) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='!! ./file0\n'], 0xb) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) mkdirat(r4, &(0x7f00000001c0)='./file0\x00', 0x40) dup(r3) mknodat$loop(r3, &(0x7f0000000100)='./file0\x00', 0x8081, 0x0) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:57:46 executing program 3: setresuid(0xee01, 0xee00, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r3) inotify_init1(0x800) r4 = socket(0x18, 0x8edc04a344b3a586, 0x8) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000180)={{}, 0x100, './file0\x00'}) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000040000000000"], 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) r8 = fcntl$dupfd(r2, 0x406, r7) creat(&(0x7f0000000140)='./file0\x00', 0x140) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:57:46 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r4, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r3, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000340)={{0xe2, 0x1f}, {0x43, 0x5}, 0x0, 0x2, 0x2}) r8 = dup(r2) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82300) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9, {r8}}, './file0\x00'}) copy_file_range(r8, 0x0, r1, 0x0, 0x401, 0x0) 04:57:55 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 25) 04:57:55 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r4, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r3, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000340)={{0xe2, 0x1f}, {0x43, 0x5}, 0x0, 0x2, 0x2}) r8 = dup(r2) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82300) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9, {r8}}, './file0\x00'}) copy_file_range(r8, 0x0, r1, 0x0, 0x401, 0x0) 04:57:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 19) 04:57:55 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='o']) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) mount_setattr(r3, &(0x7f00000000c0)='./file0\x00', 0x100, &(0x7f0000000180)={0xf2, 0x100076, 0x80000, {r4}}, 0x20) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#!file0\n\x00\x00\x00'], 0xb) r5 = dup(r2) copy_file_range(r5, 0x0, r1, 0x0, 0x401, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r5, 0xf505, 0x0) 04:57:55 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x68}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xd1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000340)=0x9, 0x4) r6 = accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x40800) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000280)=0x13, 0x4) setuid(0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x5290c0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000040)={0x1}) pidfd_send_signal(r1, 0xa, &(0x7f00000002c0)={0x2, 0x6, 0x80}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000140)={{0x101, 0x8d}, 0x100, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:57:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x88, 0x3f, 0x8, 0x6, 0x0, 0x8, 0x4ea40, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x400}, 0x0, 0x9, 0x2, 0x2, 0x5, 0x7, 0x9, 0x0, 0x0, 0x0, 0x4}, r0, 0x3, r3, 0x12) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:57:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x538) 04:57:55 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2) fcntl$setstatus(r0, 0x4, 0x4000) write$binfmt_script(r1, 0x0, 0x0) r3 = fork() r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x13c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x90, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x82a9}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20048000}, 0x800) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="53a9273fbc631b18035f2d7355f7ac8efcca366800f4defd44412a438b6db6410a0014cad5aa3488a66cf475e4f596a1b0c0c6bebc9be79c791e846721a3297840da7d8fb52690b658eced28b184d15478d83c6308f508c29280418aefb5c9d243bdd2cc5cefa63dc6d35bf73d5a682ad1f0256e9559adea4bf349e9df1b890711700063b8f61769c370692c33fd5d3d26aa583b193d35fed07a845825bb146d348de2a60ca7bca8fff317377e2378e2fdd42df9607c0690245d3b3f457a08b7dacbed87ea16ec4c164dfafd7ca484e67fc395df681989e357877eed1b88106ea83ad88535c299ec9c10df43", 0xec}], 0x1, 0x8f2, 0x9, 0x12) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x4d0080, 0x49) r7 = dup(r6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65302020285e3a232c212d20736970000a8e9bc31c9e9979b5a866368681071390affdcb1ed784eb041ec53ab75011db97f09e91db2499ef5de5e4a739421355706f48c41ac715f0c7fe54e36eecea025d5dde4753daa011bbab6867e619ed2d61ee8d3f6621d7be479eb7911bea10dac2e8ec856564c8c28cf79d786d380e69a1b69b7a2f660115a80f0587b84d2be2585d42371a6b1acf877579b4c2c88271d3f7d1bcc3d9e26fd0d2877a179f0820b975b39b7e3d62924c447ac51f20d28e0be43b1db50bf8994ba65e3f8c963bd1efd0337da150e89c1d0f11e90137e02674070000c23c03c4870e"], 0xef) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c2000000", @ANYRES16=r8, @ANYBLOB="000227bd7000fcdbdf25020000002800038008000500ac14143b1400020073797a6b616c6c657230000000000000060007004e2000000c00028006000e004e24000058000180060001000200000008000b0073697000080008000000000014000300fc02000000000000000000000000000014000300ff01000000000000000000000000000108000900340000000c0007000500000013000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8041}, 0x4008000) [ 1168.804036] tmpfs: Unknown parameter 'o' [ 1168.808096] tmpfs: Unknown parameter 'o' 04:57:55 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x80804, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0]) chdir(&(0x7f0000000000)='./file0\x00') r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, 0x0, r3, 0x0, 0x401, 0x0) 04:57:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 20) 04:57:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x600) 04:57:55 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 26) [ 1168.966685] FAULT_INJECTION: forcing a failure. [ 1168.966685] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.967721] CPU: 1 UID: 0 PID: 10954 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1168.967738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.967745] Call Trace: [ 1168.967748] [ 1168.967753] dump_stack_lvl+0xfa/0x120 [ 1168.967777] should_fail_ex+0x4d7/0x5e0 [ 1168.967796] should_failslab+0xc2/0x120 [ 1168.967808] __kmalloc_cache_noprof+0x73/0x470 [ 1168.967825] ? alloc_fs_context+0x58/0x9e0 [ 1168.967844] ? alloc_fs_context+0x58/0x9e0 [ 1168.967859] alloc_fs_context+0x58/0x9e0 [ 1168.967874] ? __kmalloc_cache_noprof+0x369/0x470 [ 1168.967891] mq_init_ns+0x172/0x630 [ 1168.967907] copy_ipcs+0x38d/0x630 [ 1168.967919] ? copy_utsname+0xae/0x470 [ 1168.967931] create_new_namespaces+0x210/0xab0 [ 1168.967947] ? security_capable+0x2f/0x90 [ 1168.967966] copy_namespaces+0x45c/0x580 [ 1168.967983] copy_process+0x26d5/0x73e0 [ 1168.968001] ? __pfx__kstrtoull+0x10/0x10 [ 1168.968024] ? __pfx_copy_process+0x10/0x10 [ 1168.968042] ? __might_fault+0xe0/0x190 [ 1168.968058] ? _copy_from_user+0x5b/0xd0 [ 1168.968073] kernel_clone+0xea/0x820 [ 1168.968083] ? get_pid_task+0xfd/0x250 [ 1168.968101] ? __pfx_kernel_clone+0x10/0x10 [ 1168.968115] ? find_held_lock+0x2b/0x80 [ 1168.968132] ? ksys_write+0x121/0x240 [ 1168.968149] ? lock_is_held_type+0x9e/0x120 [ 1168.968169] __do_sys_clone3+0x1f5/0x280 [ 1168.968180] ? __pfx___do_sys_clone3+0x10/0x10 [ 1168.968198] ? __fget_files+0x20d/0x3b0 [ 1168.968222] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1168.968243] ? ksys_write+0x1a3/0x240 [ 1168.968259] ? __pfx_ksys_write+0x10/0x10 [ 1168.968280] do_syscall_64+0xbf/0x360 [ 1168.968292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.968304] RIP: 0033:0x7f27ed07cb19 [ 1168.968314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.968325] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1168.968336] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1168.968344] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1168.968351] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1168.968358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.968364] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1168.968380] 04:57:56 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000000)=0xc6d, 0x4) 04:57:56 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x700) [ 1169.073389] FAULT_INJECTION: forcing a failure. [ 1169.073389] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.075473] CPU: 0 UID: 0 PID: 10961 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1169.075507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.075522] Call Trace: [ 1169.075530] [ 1169.075539] dump_stack_lvl+0xfa/0x120 [ 1169.075588] should_fail_ex+0x4d7/0x5e0 [ 1169.075629] ? security_sb_alloc+0xe3/0x140 [ 1169.075665] should_failslab+0xc2/0x120 [ 1169.075695] __kmalloc_noprof+0xb4/0x4b0 [ 1169.075733] ? __pfx_down_write_nested+0x10/0x10 [ 1169.075764] ? lockdep_init_map_type+0x4b/0x240 [ 1169.075804] security_sb_alloc+0xe3/0x140 [ 1169.075841] alloc_super+0x23b/0xb80 [ 1169.075876] ? lock_release+0xc8/0x290 [ 1169.075907] sget_fc+0xfe/0xb80 [ 1169.075942] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1169.075979] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1169.076004] get_tree_nodev+0x28/0x190 [ 1169.076042] mqueue_get_tree+0xf6/0x140 [ 1169.076066] vfs_get_tree+0x93/0x340 [ 1169.076097] fc_mount+0x18/0x110 [ 1169.076127] mq_init_ns+0x42e/0x630 [ 1169.076158] copy_ipcs+0x38d/0x630 [ 1169.076184] ? copy_utsname+0xae/0x470 [ 1169.076219] create_new_namespaces+0x210/0xab0 [ 1169.076253] ? security_capable+0x2f/0x90 [ 1169.076292] copy_namespaces+0x45c/0x580 [ 1169.076327] copy_process+0x26d5/0x73e0 [ 1169.076366] ? __pfx__kstrtoull+0x10/0x10 [ 1169.076416] ? __pfx_copy_process+0x10/0x10 [ 1169.076458] ? __might_fault+0xe0/0x190 [ 1169.076490] ? _copy_from_user+0x5b/0xd0 [ 1169.076523] kernel_clone+0xea/0x820 [ 1169.076543] ? get_pid_task+0xfd/0x250 [ 1169.076586] ? __pfx_kernel_clone+0x10/0x10 [ 1169.076621] ? find_held_lock+0x2b/0x80 [ 1169.076655] ? ksys_write+0x121/0x240 [ 1169.076698] ? lock_is_held_type+0x9e/0x120 [ 1169.076740] __do_sys_clone3+0x1f5/0x280 [ 1169.076763] ? __pfx___do_sys_clone3+0x10/0x10 [ 1169.076803] ? __fget_files+0x20d/0x3b0 [ 1169.076845] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1169.076887] ? ksys_write+0x1a3/0x240 [ 1169.076923] ? __pfx_ksys_write+0x10/0x10 [ 1169.076970] do_syscall_64+0xbf/0x360 [ 1169.076996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.077022] RIP: 0033:0x7f4a9ce31b19 [ 1169.077040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.077064] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1169.077088] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1169.077105] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1169.077120] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.077135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1169.077150] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1169.077187] 04:57:56 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r4, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r3, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000340)={{0xe2, 0x1f}, {0x43, 0x5}, 0x0, 0x2, 0x2}) r8 = dup(r2) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82300) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9, {r8}}, './file0\x00'}) copy_file_range(r8, 0x0, r1, 0x0, 0x401, 0x0) 04:57:56 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x6, 0x7, &(0x7f0000000580)=[{&(0x7f0000000100)="e8231c5f38a6eb58913b438c8a9ab9058787597b74669c4b64945bfe2f7bef8a720cad8aa52c221734d29c1263189c758b51ad9d19306017021039ea58df1172b9b883c1b2bda27ec962b715975657ca25eaa7d49f92f1466f487ba976dd2133aabc96d9fed95bd0add76cd0d4fbf775f205a48d91d9f0a3a2d3e5580090e2f7945ecfe8dc56cfad", 0x88, 0x6}, {&(0x7f00000001c0)="1116eed522d021a91efb1e107c64ead79d140f6a603f0097ff210a255a77cc264afab34b586df055a944b4026408a20a1a8e5cdee0a8707bbd422e050b0279a1678780e54b471f7ea5744782d1a11d39f8f6426885f1d7fd3f", 0x59, 0x2}, {&(0x7f0000000240)="9964e19a8db4edc1193c86077bf1cf028ac8b553842071464c4ad45f08e7e435e46ecf3badc68f19ea390d45635411c361425e24685d3ecb851ff6da213568cccf1285469ca2ace2c6806ca0ed9b756339aa26", 0x53, 0x4}, {&(0x7f00000002c0)="b425400563be51556898041ac29886fd4c5133ec7b37b1d151d6cb584ee46db8932d2c4c163339987606a0e36a30d886ae0b97ada8555bd9d26122e27f4c747fe1781a7a7921f242571420761020334ba45af8c6eb0e9c2730a4c6d5b3", 0x5d, 0x4}, {&(0x7f00000003c0)="2854e5afee9066648d00f42012bd70320c5524492f8a69acad364d02c9b568c97444420998e5dd4924275ed421507b805e148416e6181b82eaf0a463824cf8b0f75673fc22c78f4fb544332229a6b5868242e8bf49101a5a90a164284858980dac3a0c37cd300de72b111250cdad8a9bfef08d2a419e5ec6ef14083d52c5cb536629211d62e31d2f36a1328c77fd04c6a474c8c119d41c626bb2af45837da87d", 0xa0, 0x3f}, {&(0x7f0000000480)="550ca9e79b33cdd4eca67572c8d0aa051b29c141d8dccea581be382bcc4b31f49a490114915ca83ca0a6464601abcd058264aa23c16fb0491ee1ad866f7a5242974f85b9cbd0fa8bebdaaac619c6de198fe99502b9f14f1eb53386ce044459c6f99affb4ab4bbac2", 0x68, 0x80000001}, {&(0x7f0000000500)="adcc8de2926b2a824729eebd1b429c50d921e721b5f9ac6bd9a1d881c23319d15fdc76d7c85ad96f2b73eb09e83d2c09ebc274feb0e388956b8266830790e6b5653d47831d81adcd3d9b0aa27d0ab039e6192bac613b18c7c96915add9", 0x5d, 0x9}], 0x40400, &(0x7f0000000640)={[{@dots}, {@nodots}, {@fat=@nfs}], [{@subj_type={'subj_type', 0x3d, '-'}}, {@pcr={'pcr', 0x3d, 0x2d}}, {@permit_directio}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) openat(r0, &(0x7f00000006c0)='./file0\x00', 0x705c82, 0x90) 04:57:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 21) 04:57:56 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x804) 04:57:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2386028f0797ceb490739cc82b3a4750210a0001000000000000"], 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) mount_setattr(r3, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0xf0, 0x140000, {r0}}, 0x20) 04:57:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 22) [ 1169.284837] FAULT_INJECTION: forcing a failure. [ 1169.284837] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.285902] CPU: 1 UID: 0 PID: 10982 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1169.285920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.285927] Call Trace: [ 1169.285932] [ 1169.285937] dump_stack_lvl+0xfa/0x120 [ 1169.285964] should_fail_ex+0x4d7/0x5e0 [ 1169.285985] should_failslab+0xc2/0x120 [ 1169.285999] __kmalloc_cache_noprof+0x73/0x470 [ 1169.286015] ? __create_object+0x59/0x80 [ 1169.286031] ? mqueue_init_fs_context+0x4b/0x480 [ 1169.286048] ? mqueue_init_fs_context+0x4b/0x480 [ 1169.286060] ? lockdep_init_map_type+0x4b/0x240 [ 1169.286074] mqueue_init_fs_context+0x4b/0x480 [ 1169.286086] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 1169.286100] alloc_fs_context+0x570/0x9e0 [ 1169.286120] mq_init_ns+0x172/0x630 [ 1169.286135] copy_ipcs+0x38d/0x630 [ 1169.286147] ? copy_utsname+0xae/0x470 [ 1169.286161] create_new_namespaces+0x210/0xab0 [ 1169.286179] ? security_capable+0x2f/0x90 [ 1169.286199] copy_namespaces+0x45c/0x580 [ 1169.286221] copy_process+0x26d5/0x73e0 [ 1169.286244] ? __pfx__kstrtoull+0x10/0x10 [ 1169.286269] ? __pfx_copy_process+0x10/0x10 [ 1169.286287] ? __might_fault+0xe0/0x190 [ 1169.286305] ? _copy_from_user+0x5b/0xd0 [ 1169.286320] kernel_clone+0xea/0x820 [ 1169.286330] ? get_pid_task+0xfd/0x250 [ 1169.286350] ? __pfx_kernel_clone+0x10/0x10 [ 1169.286365] ? find_held_lock+0x2b/0x80 [ 1169.286383] ? ksys_write+0x121/0x240 [ 1169.286401] ? lock_is_held_type+0x9e/0x120 [ 1169.286423] __do_sys_clone3+0x1f5/0x280 [ 1169.286434] ? __pfx___do_sys_clone3+0x10/0x10 [ 1169.286452] ? __fget_files+0x20d/0x3b0 [ 1169.286474] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1169.286494] ? ksys_write+0x1a3/0x240 [ 1169.286511] ? __pfx_ksys_write+0x10/0x10 [ 1169.286540] do_syscall_64+0xbf/0x360 [ 1169.286558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.286572] RIP: 0033:0x7f27ed07cb19 [ 1169.286582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.286593] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1169.286605] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1169.286613] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1169.286621] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.286628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1169.286635] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1169.286651] 04:57:56 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x1800) 04:58:05 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 27) 04:58:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x3805) 04:58:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:58:05 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r1) write$binfmt_script(r0, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x8a, 0x4, 0x18, 0x20, 0x0, 0x402, 0x62000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2ec5, 0x1, @perf_config_ext={0x60, 0x9}, 0x8, 0x3, 0x40, 0x4, 0x1f, 0x8000, 0xffff, 0x0, 0x3, 0x0, 0x8002}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2d66696c65300ad425469c52a9d02060e08657ca39b8e2bd6fa05963d1d47c25d992b9b64dbf9482b2bebbb93bc216e80b31894595df597d4fcea9b3b34a832a8bc287ee0f38763d9237b0b73fba383b5738bdbe543e32f370e35ca2cc32491e22e1bfe050f582c54211b018ce2a3966ff00a3f80dbe6785d22aa36fb6f23cbef155893a44083a73a56bc4d7c5aaf395934c"], 0xb) r5 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x42000, 0x20) write$P9_RREADDIR(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="a14893dd6f9519d17fffff08030000000600000000000000ff010000000000000607002e2f66696c65300401000000010000000000000000100000000000000307002e2f66696c65302002000000070000000000000001010000000000000007002e2f66696c65300002000000040000000000000000000080000000000807002e2f66696c6530"], 0x87) r6 = dup(r4) copy_file_range(r6, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x100000001, 0x0) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000140)={0x2, 0x0, 0x13, 0x14, 0x1c8, &(0x7f00000003c0)="b9d79f715f8eeadbf8fe0190bf3986432d7d5900b9bef27f37cdd1292c1380c5c3f06c154bd969c43a59a5b438fd1b842c871d65589801b27365fe45783b5a8213e0bb6fbf91db48ea060d915b4c0003f46ed9ca87aa239d1b2e3223bd4ca8222c24fe78e38ddfbbec0a91fa8124da46b32a1e7d469b2e0527237bee1ea705f9ac99e69bc4555cab20ad31b62f1d9005d573bbdf65e1181c56f1a6a9e9d124c7f04cf589f1e260f9bb7aecd2086469a964bff61f9bd0f418c4165bf5451c3b7d3d8019fa24fedb38bd75c30c2fdbe2630b99c6921a6f786942189d23dd51c499b331d7d7e1e56b4e927ae5e86c0e4aa8f0a44674f1df896385decbae9ddf868e32fd57305de1e21d88956440da6cc3554def97a623959998f5341f9590f73fdb8b3db4cfa2a5e78fc1b0afafc962e89be9d94a770a56d590fcd59d849e5470cd4dc4d747d049694ca06314d1db4ac0b455d3fbb64191c9584a0665e907e3e57cd9db442b42dd40238a279919ac6d107a1168c470430677ba786afb0d30b5933370f3172999617f6d06d9d9d919a5341d6eb759caaf9d0ffb8ce6349257d6391f891b454bbdfba5420fc2b2731f5cab64cc7ea40af8016de38b0ca699707d8a4a177d0e3d361f52bf124f54866fc50bb8a6e47804c23ac44dee948ece570acb5089a08d67fed57d20b95c011fc915612f605e930786b4f1c2372b1a6ab010f2adf184d7960223ab299f4db393c5179f1dca4ed3c61c6d8d55ebeb940280c69f5cfcfbd29a55ec995c80a543fcc344a8735cf9a2e791cd809c64e4bdda0604e86d41abcc342d4d22f166ce5c317376a96848517b74c0044b3d1e1289975064aa7a8cf5445a442b6dc2574b9624238d2613f932dcfde9355d78f15c50c62c2c33d46a7e7e0f49adcab2141e1f340b4b3abfba8e5870c19b13f2d2051e5214742847fd2a27185b8ae5fa029a778fde57d92d8e62e5ccf6e098c17141e56fc0c87ed788caf68897d7bc5aed1d0727bd4bc43e7536fa54d864247ae28e3e732e74bfb8528d7f3c5a1ee6e4fb204bbdebe710a1c4457ff24816f2d3116005eaf1eddc517b56e885e9e6aeac3c24fe22cf19ba576de7a37267f73b6f3ffb42f8af0095dd9ee348f7c4f7a64bcbaff7c3de6229aaf5c28ded0ace56db751dc8214e87de5ba534d084ccfc1c131749cd29e951add8128720be13b7b1a8cf317cfa10fa04db66a082d855a222d3d38352640413baf76a239b68f0ddc462f676e1261b6369b150ae027ea2d0c51f29a10b1a2814c71cadb5f588661f3ec787b2a2bd887b19888392d528ba2be7b455e7d7fa9cd5287e1af9e069aa25e32f0068847f72c4d4b309d38e28aa370423e80b5a92ddd04290404d3a3a8e0f9235c5e92b37dd517f35318d5f94b657d22b53bc67571962922d70ab572fda691a73cb2fb2a293250799"}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r8 = dup(r7) copy_file_range(r8, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000007c0)='&(\x00') 04:58:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 23) 04:58:05 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r4, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r3, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000340)={{0xe2, 0x1f}, {0x43, 0x5}, 0x0, 0x2, 0x2}) r8 = dup(r2) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82300) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r9, {r8}}, './file0\x00'}) 04:58:05 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), 0x453c00, &(0x7f0000001240)={[{@cpuset_v2_mode}, {@xattr}, {@name}], [{@obj_role={'obj_role', 0x3d, '\'*'}}]}) dup(r1) pwritev2(r1, &(0x7f0000001180)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000100)="0d20fa11735eb5eb14414e0d2acc95b9048d086bbc22e419c5f1d4b5cb10997b1c0e9ddf3775f8cfd419e4708f49ed7263e8ef062943", 0x36}], 0x2, 0x3, 0xf1f, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, 0x0, r0, 0x0, 0x401, 0x0) 04:58:05 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000200)=@generic={0x2, 0xffffffff, 0x5}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="233e160a"], 0xb) r4 = dup(r3) setuid(0xee00) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66690100300afae707fe47188217a3c5e1a843a265c41d85dd57adcd88671db84181f1280558cdfaa37fad7fe492395f0c036e058d848733a1fd6704215c63ca64cb329835b598f98869833e627ccb14fac89938bbc24ffe4cd4046b5b83f5a5"], 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) r8 = openat2(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10900, 0x28, 0x18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="000000002e2f66826c653000"]) socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$sock_ifreq(r4, 0x8911, &(0x7f0000000000)={'bond_slave_0\x00', @ifru_hwaddr=@link_local}) 04:58:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 24) 04:58:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f00000000c0)={0x200, 0x3, 0x4, 0x0, 0x6, [{0x5efb, 0xe65, 0x1, '\x00', 0x800}, {0x5, 0x100000001, 0x8, '\x00', 0xa00}, {0x9, 0x800, 0x1, '\x00', 0x2809}, {0xfffffffffffffffe, 0x9, 0x6, '\x00', 0x100}, {0xd95e, 0x80000001, 0x42e0}, {0x6d41, 0x2, 0x400, '\x00', 0x1000}]}) 04:58:05 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 28) 04:58:05 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r4, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r3, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000340)={{0xe2, 0x1f}, {0x43, 0x5}, 0x0, 0x2, 0x2}) dup(r2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82300) [ 1178.839062] FAULT_INJECTION: forcing a failure. [ 1178.839062] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.840970] CPU: 1 UID: 0 PID: 11022 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1178.841001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1178.841013] Call Trace: [ 1178.841020] [ 1178.841028] dump_stack_lvl+0xfa/0x120 [ 1178.841069] should_fail_ex+0x4d7/0x5e0 [ 1178.841105] should_failslab+0xc2/0x120 [ 1178.841126] __kmalloc_cache_noprof+0x73/0x470 [ 1178.841154] ? find_held_lock+0x2b/0x80 [ 1178.841186] ? alloc_super+0x53/0xb80 [ 1178.841228] ? alloc_super+0x53/0xb80 [ 1178.841255] alloc_super+0x53/0xb80 [ 1178.841283] ? lock_release+0xc8/0x290 [ 1178.841310] sget_fc+0xfe/0xb80 [ 1178.841340] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1178.841370] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1178.841391] get_tree_nodev+0x28/0x190 [ 1178.841423] mqueue_get_tree+0xf6/0x140 [ 1178.841444] vfs_get_tree+0x93/0x340 [ 1178.841471] fc_mount+0x18/0x110 [ 1178.841496] mq_init_ns+0x42e/0x630 [ 1178.841523] copy_ipcs+0x38d/0x630 [ 1178.841545] ? copy_utsname+0xae/0x470 [ 1178.841568] create_new_namespaces+0x210/0xab0 [ 1178.841597] ? security_capable+0x2f/0x90 [ 1178.841631] copy_namespaces+0x45c/0x580 [ 1178.841661] copy_process+0x26d5/0x73e0 [ 1178.841694] ? __pfx__kstrtoull+0x10/0x10 [ 1178.841736] ? __pfx_copy_process+0x10/0x10 [ 1178.841770] ? __might_fault+0xe0/0x190 [ 1178.841798] ? _copy_from_user+0x5b/0xd0 [ 1178.841826] kernel_clone+0xea/0x820 [ 1178.841844] ? get_pid_task+0xfd/0x250 [ 1178.841876] ? __pfx_kernel_clone+0x10/0x10 [ 1178.841903] ? find_held_lock+0x2b/0x80 [ 1178.841932] ? ksys_write+0x121/0x240 [ 1178.841963] ? lock_is_held_type+0x9e/0x120 [ 1178.841999] __do_sys_clone3+0x1f5/0x280 [ 1178.842019] ? __pfx___do_sys_clone3+0x10/0x10 [ 1178.842053] ? __fget_files+0x20d/0x3b0 [ 1178.842089] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1178.842125] ? ksys_write+0x1a3/0x240 [ 1178.842156] ? __pfx_ksys_write+0x10/0x10 [ 1178.842196] do_syscall_64+0xbf/0x360 [ 1178.842218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.842241] RIP: 0033:0x7f27ed07cb19 [ 1178.842258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.842278] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1178.842299] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1178.842314] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1178.842327] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.842340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.842352] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1178.842380] 04:58:17 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r4, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r3, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000340)={{0xe2, 0x1f}, {0x43, 0x5}, 0x0, 0x2, 0x2}) dup(r2) 04:58:17 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="026722db7d11420270ab5d5853c49766596d736698570a8aaa926ababc1f97187340b88497b06edee552ce34"]) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101340, 0x1c1) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:58:17 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 25) 04:58:17 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000000)={'sit0\x00', 0x0}) 04:58:17 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000063c0)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000061c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/233, 0xe9}, {&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f0000001480)=""/157, 0x9d}], 0x6, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001640)=""/117, 0x75}, {&(0x7f00000016c0)=""/207, 0xcf}, {&(0x7f00000017c0)=""/70, 0x46}, {&(0x7f0000001840)=""/225, 0xe1}], 0x4}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002f80)=[{&(0x7f00000019c0)=""/199, 0xc7}, {&(0x7f0000001ac0)=""/230, 0xe6}, {&(0x7f0000001bc0)=""/66, 0x42}, {&(0x7f0000001c40)=""/175, 0xaf}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/47, 0x2f}, {&(0x7f0000002d40)=""/86, 0x56}, {&(0x7f0000002dc0)=""/132, 0x84}, {&(0x7f0000002e80)=""/229, 0xe5}], 0x9}}, {{&(0x7f0000003040)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/4, 0x4}, {&(0x7f0000004100)=""/114, 0x72}, {&(0x7f0000004180)=""/1, 0x1}], 0x4, &(0x7f0000004200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000004280)=@abs, 0x6e, &(0x7f0000004380)=[{&(0x7f0000004300)=""/93, 0x5d}], 0x1, &(0x7f00000043c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x188}}, {{&(0x7f0000004580), 0x6e, &(0x7f0000005840)=[{&(0x7f0000004600)=""/52, 0x34}, {&(0x7f0000004640)=""/106, 0x6a}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/133, 0x85}, {&(0x7f0000005780)=""/145, 0x91}], 0x5}}, {{&(0x7f00000058c0), 0x6e, &(0x7f0000005c00)=[{&(0x7f0000005940)=""/5, 0x5}, {&(0x7f0000005980)=""/228, 0xe4}, {&(0x7f0000005a80)=""/90, 0x5a}, {&(0x7f0000005b00)=""/118, 0x76}, {&(0x7f0000005b80)=""/90, 0x5a}], 0x5, &(0x7f0000005c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005cc0)=@abs, 0x6e, &(0x7f0000006080)=[{&(0x7f0000005d40)=""/195, 0xc3}, {&(0x7f0000005e40)=""/144, 0x90}, {&(0x7f0000005f00)=""/141, 0x8d}, {&(0x7f0000005fc0)=""/8, 0x8}, {&(0x7f0000006000)=""/99, 0x63}], 0x5, &(0x7f0000006100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x8, 0x10140, &(0x7f0000006400)={r1, r2+10000000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000006440)=']$\x00') r5 = perf_event_open$cgroup(&(0x7f0000006540)={0x1, 0x80, 0x7, 0xc6, 0x1, 0x5, 0x0, 0x2, 0x80010, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0x3}, 0x9000, 0x0, 0x0, 0x1, 0x0, 0x2d5, 0x7, 0x0, 0x8, 0x0, 0x81}, r4, 0xf, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f00000064c0)={0x4, 0x80, 0x3c, 0x3f, 0x6, 0x5, 0x0, 0x10000, 0x40000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000006480), 0xc}, 0x4010c, 0x2, 0xffff, 0x4, 0x0, 0x8, 0x1ff, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x1, r5, 0x1) write$binfmt_script(r0, 0x0, 0x0) 04:58:17 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x6400) 04:58:17 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 29) 04:58:17 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x7, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) [ 1190.386329] tmpfs: Unknown parameter 'g"Û}Bp«]XSÄ—fYmsf˜W [ 1190.386329] Šª’jº¼—s@¸„—°nÞåRÎ4' [ 1190.425637] tmpfs: Unknown parameter 'g"Û}Bp«]XSÄ—fYmsf˜W [ 1190.425637] Šª’jº¼—s@¸„—°nÞåRÎ4' 04:58:17 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:58:17 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 26) 04:58:17 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 30) 04:58:17 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x8004) 04:58:17 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x30, 0xffffffffffffffff, 0x992) getpid() r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/145, 0x91}, {&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f00000003c0)=""/143, 0x8f}], 0x5) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:58:17 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x794474b0}, 0x40001}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000140)=':*#-\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ppoll(&(0x7f0000000000)=[{r1, 0x6dbbd43b395af88a}, {r2}, {r1, 0x40}, {r8, 0x210}, {0xffffffffffffffff, 0x6440}, {r1, 0x8}], 0x6, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x6]}, 0x8) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r9, 0x0, 0x0) [ 1190.569272] FAULT_INJECTION: forcing a failure. [ 1190.569272] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.571121] CPU: 1 UID: 0 PID: 11059 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1190.571153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1190.571166] Call Trace: [ 1190.571175] [ 1190.571184] dump_stack_lvl+0xfa/0x120 [ 1190.571234] should_fail_ex+0x4d7/0x5e0 [ 1190.571274] ? security_sb_alloc+0xe3/0x140 [ 1190.571307] should_failslab+0xc2/0x120 [ 1190.571331] __kmalloc_noprof+0xb4/0x4b0 [ 1190.571362] ? __pfx_down_write_nested+0x10/0x10 [ 1190.571392] ? lockdep_init_map_type+0x4b/0x240 [ 1190.571423] security_sb_alloc+0xe3/0x140 [ 1190.571458] alloc_super+0x23b/0xb80 [ 1190.571491] ? lock_release+0xc8/0x290 [ 1190.571543] sget_fc+0xfe/0xb80 [ 1190.571576] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1190.571609] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1190.571631] get_tree_nodev+0x28/0x190 [ 1190.571666] mqueue_get_tree+0xf6/0x140 [ 1190.571689] vfs_get_tree+0x93/0x340 [ 1190.571718] fc_mount+0x18/0x110 [ 1190.571746] mq_init_ns+0x42e/0x630 [ 1190.571776] copy_ipcs+0x38d/0x630 [ 1190.571800] ? copy_utsname+0xae/0x470 [ 1190.571826] create_new_namespaces+0x210/0xab0 [ 1190.571858] ? security_capable+0x2f/0x90 [ 1190.571894] copy_namespaces+0x45c/0x580 [ 1190.571927] copy_process+0x26d5/0x73e0 [ 1190.571964] ? __pfx__kstrtoull+0x10/0x10 [ 1190.572011] ? __pfx_copy_process+0x10/0x10 [ 1190.572048] ? __might_fault+0xe0/0x190 [ 1190.572078] ? _copy_from_user+0x5b/0xd0 [ 1190.572109] kernel_clone+0xea/0x820 [ 1190.572129] ? get_pid_task+0xfd/0x250 [ 1190.572165] ? __pfx_kernel_clone+0x10/0x10 [ 1190.572195] ? find_held_lock+0x2b/0x80 [ 1190.572226] ? ksys_write+0x121/0x240 [ 1190.572260] ? lock_is_held_type+0x9e/0x120 [ 1190.572300] __do_sys_clone3+0x1f5/0x280 [ 1190.572321] ? __pfx___do_sys_clone3+0x10/0x10 [ 1190.572360] ? __fget_files+0x20d/0x3b0 [ 1190.572400] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1190.572439] ? ksys_write+0x1a3/0x240 [ 1190.572472] ? __pfx_ksys_write+0x10/0x10 [ 1190.572517] do_syscall_64+0xbf/0x360 [ 1190.572541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.572565] RIP: 0033:0x7f27ed07cb19 [ 1190.572583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1190.572605] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1190.572628] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1190.572644] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1190.572658] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.572672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1190.572686] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1190.572718] 04:58:17 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0xe, [0x2, 0x0, 0x6, 0x92de, 0x9, 0x7], 0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/14}, &(0x7f0000000300)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000140)=0xe8) setresuid(0xee01, 0xee00, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:58:17 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x7ff, 0x10400) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r1) copy_file_range(r3, 0x0, r0, 0x0, 0x401, 0x0) 04:58:27 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 31) 04:58:27 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x30000) 04:58:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="3f2120102f66696c65300a"], 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3ff) syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:58:27 executing program 7: perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xed, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x40800, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x0, 0x20, 0x8, 0x4, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x2000000000a, 0xffffffffffffffff, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\xc9\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='E}~]\ti5'], 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000003c0)={{r4}, "04c4dd94186ce5ce8ff3fda1279641dc89f1d55807b3fcf27658734bc7ce8b4f56f1c51c84e94519fd40bc67268f7a87ff7146b09d6871490025ce88bcdcfa63dd2165ea6021f036c67d75786546e586e8f80e0bb6173aa1b6084d4b7d27cf5febff9407e9a5d3c7382df6e1a88436e76aefad18747f4defa435259cb6e8f2ca3342ee184bfb818a15f087cb7d9d9393ef706679bbf25c830dcedabc4cfc60d88f201868f4f3e46f808a15ba730bedaa168568a2712a010d0cbc8bc3ab70858fa9684c5cf387400d2742d14433d9ad84b91cb5747783f64074ae4e7ad5f10e8e0ab1562d7d739077595abaea7e168b096ee9b31a062c9dded49f4ab91a9320d18402ef01421d89cdefe99a1b4aaa269b11ae44ea41407d3a1adcf8bd7d87e2cf18a8d26f93f0562c19ec19d1a2b00cd2482f82f68263b4c629449b621b31a533a76f5d215ef0686701800539ebd085801728b07ae238d9109e84cbae700182d1fb3ee33c9dcae78b134d9997f0f03ae0ca26063b966502a2f8a09b5ef678f3baf9919630c78cbaf581784a6dff66b14684cbe81d52f3e75a05fccba34a67087fa2f84eb43171bd1ca6e8e63c078df0d3337f0fce106090e3a051f68746e321677b66163da8405d699ef881c2f0dea17bd32660c30ede00f8ee45114db247e897fdbfe44704cd9178fb76b976681ebbfd1ceaa1ec1b1fb09c654416593d6a73c45e7beb08c625369b2c7d562dbcb460b6e2e3d33a78c34169450d9c915021e2c2af7c4f1b1122014c450521aeb830f58d721fa6ef3e247ac6c4509965925ccc426a3e6c2a1ab277c888751acaee69814decbce37058b7703d065f048769bfc58944f4bdc9e6c70669049c26f244b2dd0bc3d196eaf099bc5de4879961657c4091d190438b24dc7fffe3b508c2ee7100f32c4041349839d6bb1a4f01074af9ca8e67eab6483f422aadd77a7430ea2feef178b00305cb6c127425f3346364d7ecdcd3c786f973e328c91096339e0c7dca8b57287e8abcf530019fc39438aae2a9d4bdc13facbf906816e975118eea45dad7086339a03a60509e47d5320572c9f74a1e355295e0008e31267aff89642b15894ac61e5d33c7334357b841029d42440a1e2e3fc6c1b8d168ac1652d06afea69cdf64f1c79e076275fa9480f69fc6bf003fc94d2462cf9cd4217e3a177b1d653b2c1d597357b8904c68d22e355e0f3b064fdbbe268ee2845f27a17b4e328f5ad63889dffe0964022045fc59a47a2781f5b496412adb46c6d54afe593b12724e88c05387c6efd9a2a8447f1724f393a4a7628a619f2401a0d73c2088ecd8cf79e1b6186499801953c932a328e5316c01ea2f5beca0cfb3f826c1bf8b24549eb7b702da021d5f7585206aabf52a17ff37c41ced59461777ebb17aea30939e5c292ea0a6df91a0a6ea6d12b4195bf6f2c57ccf56176a11f87df7872d123a93639d2ac92d0362f571e32e821d02456c869290f06004c69d9031d13bd97b31e03ebe17307ff24ea4c2b0bfaebe6304175396a35bc3acf59430805eebb30ae8155bc4dceae0b66943136c011838d87882efe1c3b717251f988d53bdcabfffebe9bec51de9231536e9cf4cc96dc432cc7015520a5387a4f0210ab0482666aa12d56fb4f3155a85804e550d8a25e363eb97dfb4b8c72d7ea27867a22a1e5e49068d74e1916446faba56943ea73740a8f2ac9d59bed673e14b618682576559956c970f77c4bbc646dc3a8b11dcae5a21f1a0952f8948466627f9de7569d6726de49c17f363045d21f27fed3205007cf17a8d68ea901857ee1fd4ca53c2e786e5048ae4e33d2dd35be3d6246ca2ebbb9076117f3f70f2502677451e3af4c5b6bb0fc23611e9b96feac0bcce91d094d011261489137cd96f2bb1de0dd89a35bf4c4e4af22b9e069463e656e5cec7331eb97db20ca5e2113c76966ad244927c18c13ca397792c8ad57559e7cbd0aa760bc19d2e2ec9e34b29ead7eeba38f8e0bf949dca16b1316e454f43f88380abdda65d4ad99570f4bd637ee84feb292f0960fbdf09fc1ae0d620a0d55a09b30afd4c94a715c87a306c226c889cdbf46648b38fda8107739247b572ebb063a7c853bffd109318052b5afcf0212300615bdb07963363ef1ef0dcd00c55009b87b9e8ee96617840be56ed66fd46f320c56e258969c94a064aa1a87df06f38279485650f6c17708bce13981a742a97ce4a2e6176dfe515c937424af56e85eccb3fa5a0bbe0d20ffafb2ed712b60137a77f0cbbc564b0823db7b422b901cc58c97aea4e4f1a43400f6ffbf41eff75ded3dd56f446584ce150376f0f159f6c074e01c7b07f5d2ec236276a8c8e9c12e9199d0c84f13da1dcec46f9633e778f999e79e6b644c4acf060b90df51a3be37479e26b5fe88f73a59d715ad573ccc2fbbcec4267e1d87dcfeac0d2f8fc403963adc67ec9fd387e66dbe6645382585658e8a4612a7b7fffefd411c719eca693f660accd2efed1d380480c1a86e07c3f77308a873f3ef32d1218a8e61d5b7284bca2c6a51831f424d559d2229ce82053da32c7fcafce7b1566a4c420158ac951f5bb7ffadffa7c0326e84f8ad9dff7aeb6a8abf8898367807a45528088b01c6764623415170ea07cea025eff8cf90435ef6aad8088ac3ff1196cced00b10d8d697ab8b61713453a528244c9cce5002d6994a76c81185bd6acc20c02ac0368ce58a4242c77d6b8e2065d420e0da774f58e07bea31dc9517512bef681f698fef569c7139afa603920e9f1bfec0a2590191c94340158a186542804a7f83974b0937943f4f695a281e7c1449174ba76d55280433583c898a9b66ac30bf328d3d59461191e18521bf184916a105800c69309e17760b89748c48aa68f03dc97d05c8cc2aa15f93e83a1efc2a2df97e06bd31cc8d70adc3f2acd90aed50893f440971bc2ecf980faf3ea8fd1dda360cd5877579b59d83d3badc0a101c2b14aa86c9011aaf170487001fb6cb7098352f5095061d03eb1c1c03ae6f18bda8584c66893ff855b4d8d30af1758af7630e774dfc8011fd2b31f071dd4bc330f738e5b6427b99a4e479d83ef16bd23404630b202ebc79b0c9e7e3835e3e9d1a6003f7f3907987006088a5f64046998fe3a38ad86b5b471f165b87fec147d31d0e16f3dfa1cedf65a699355ce3654692b7ba8f9937b711859506ffe8b856e1b33cb4a3da43803e41a13fdc2dc62c7753f229227005ccf3e58a7898c9e66c09aad0affb9b484ca417f9e26a7104ffee47da4a123d4ac7c38817e3c675c1b7ede7ebfff27b47f6947a54ee77c12a2b40e5d3b4ddc19d5fcaa5d331c38a2f3e98d22fa14ff97c1b6bd9626ab2d18baf8b5928469a8a0308784b3a9f43c6f34cc9e4197f528bc31ac3c0c991344ef8d345718fcbf53486dd1a2b1cb188a18607dc2ebc842301164e75cd7d2610ebeee071ab808111c4adf1314250dd025ba671e5178784ebbc3d9620dbe5defff223db289f79608ff0f8c668f1ade0105136315f065db3af9bb141f2f3aa77ccbb51666ff869aae543e278672adb6faabb194d316753e27ac5251c4253c85d846b76d9bcb5d31d8e1a299c61ba2cd31c7245185766bb1293b1605c69641e3a1e9c5bf40b24a89151549cd916e7580f6c83d7467f38c75ee25d46825c03d8803eef933dcc37fe36a760d070fbc8d39178025c91d770a505421a1be3705b87595382a378553ad8afaeb9291a33e2e5ebdf3e1a36187b96f2c49f53cf3319abce877de4f077f7dd988510bc90a8336d8d83e12702c096facf0ffea6430ce9c42c60c64a8424b664c95aaa778f04125050e0edf6fefc9dbf2a08dbc6c8a04946d7dd211272e27e4db7d581c25a990cf702e2ad623b99d1f8c5c61930f11c1cc981eb02c7c029c314d401ac1bc33f1d259ae9aa07149666304f6128be7b1c4ba3b3ad9b26eb8236ca5e02a9829fcd0b3babe0e2a913f41cb8cb111e93b19cc242d1c95cb9dea73a0a46ebfe0ca87b7fbfa638dfe32f12193b9c70f3227b3ebd808e6b4fe81ed937f356f719155807f209d768f74674f009eba111ebe10fb19d07afbf3e2ed3e5ca99c77647e70ec9fbd41f2239efac2225e9d34af605ce322cc4505de33e087ef2c6a82f0f6716584afd71434835d2d762f6cf13cd07500afc22e54eae0c67e8944ad791ad5d71e8e01b87b78f05e2565458b4c2d6c6e369667d03226c9d815825e45ab50be33e13dbe9899dd16edb56fbfda042989b851a629d2c50da81a7ac299cedfa4cf64a1c39cd5122710aa4efe64737d618fb9190bc433685d78a79c016e841140e19f0be6d29a50f540c0c0309bbb61a3f3fa27ab3ea3a9e03bed2b36d7c48bc09e5fca24aa35323008e18e405eebae29c3ffe9c26f78c62894652277bc421df526b8aa61a2c2a4a849d1a862c1a6e1c1d3557abcf4f8e42ded0022ac42779bc3b8742c9dd7124220457863aa1dc2d79d6a45073e735f2bb7e2efad1cbb63b27e7d01cb68b3c30d4352abe414550a8067691c31930ca3c61d6860209d5999e30e33d0319dd8d9ae7ab40e4d88d9a8df2ac90cdcd6f396e0a5a085b1c2e03076decf1f9c54f525d413ca2b5fcee18a8fa08db1758bea9700682c1e6d2339383b0fe2843b988f0200e78dd413ea7f8aceba08f0334e0652e186cf52e5a54afa1e14da8ffa4e00d24247cd687168041f01cdad7ba3a044506c721c6ef8b50c09037dd9ad9ae72b5cde8003f57a4ac324261ecfa01186ccb8e55ebc1b8dcf8d9ef67fe5f7e1cc1c1e036699edcb957cb25499ece88d649cddac670701f50508a1d179ebc0363e77b2f71ecf2c41fe38f389850ec24040caf3b81dbe2fec145e7c72b857e1fd0338e6dd29ead40140c67272f4a620fd9371aa780bc5303f5349c48c21bce98b523073233a84b760bf577aa8a11f3efa1208d4cd8167f25ae715510d5dabb59c9a18f5ca7f9062b8006014efe73bb2325899faf40804521a7c29748b7611f34615630ecb83c549848c903a651b84f333fdb6d3fcf1ae0c6d5897f8959491278e34f671cbe1e4f4b83b3087278a730116522e32f90c1fd2eadfbdaf7fc0018ea95238ee3d835fc1cea89f00329d263b53c4b9f06a769a8eb8141992c8f5736163ae6bdeeff5f8fb09e2330b007628fef3b60f847b8c1e35ef3a199df34628f8cf6ffefdd2ed37d73290b07a55d574137b64d2119332fbfa6329b2b4b417d4c8e6ea75fd23b0ff4c704afffca646b841a45c7bff0f718f1d4bcd82e477a9bd509290562642c1dd7d92f10a3b865f7737a6804b14a1104aa753b326e34e61153bccd1245b0512f9cb9c68a9fcee6792b2f41fe944adad5f3d7f737412935ce8f71af61ba73e56b3e8667f86b9dbe492538642b9292c33f3e5e6ee268338a8fbc6811cd7555ea0ffeb8546f167236ea17dfe81dbd7276c7796b7a86ba765e69a0f560b77f256c3276f91dc5a3d4ffd71771a93f949565991bcf507d0ca10252151d3d2c6cad7f85abe69379ee85cd1f5b6af79f15d65af58eea044ec512fdaf6134d048841cc38e48f9de3592b6b90b1dca913c06b6fef4c208c3ea9c3e83f730f0a96b1a0a1a7287635264de8c373c7e65fa3a36b5bdfdc8d0c0de9f66c8c3eaa1dc07a8f65a95f5aa2c87fd77e64824ac53f7df28d59d3d272aba2dba5721fbd661e334223603c9c958ca6b0784d23658c97c4dc68b332e5efeae52ca546599fc62d06c66e9871507e45f5f707498dd69a8c9093a30386e34bb03412db98de1da5c6c5ec63a"}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 04:58:27 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r3, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = dup(r5) copy_file_range(r6, &(0x7f0000000040), r4, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000340)={{0xe2, 0x1f}, {0x43, 0x5}, 0x0, 0x2, 0x2}) 04:58:27 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000100)=0x4, &(0x7f0000000180)=0x2) 04:58:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 27) 04:58:27 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000600)) setresuid(0xee01, 0xee00, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x62c, 0x8, &(0x7f00000004c0)=[{&(0x7f0000000080)="935e6b48de1788d69ffc9c9c71ab8ea512e29c8b2cebd91cbff635c04e7da359f16f85b06517cfb546f1eb2848f3cc6cf15d9cdb7dc6c1cc89a71871e3a92dfc79910891083869342c01f073f1b2648079a612139638de67277be22de078bd63a458fd351fc6249874c5a3", 0x6b, 0x200}, {&(0x7f0000000140)="d9ab079cc37dd9be401693f4498e0777c807a18cc82b2915383bc36855a8567952221d9aaf07b5446777745b00a6672ef3983cc69a32f7d800945b0dbea689a0e416288b5ea151672126616f6a12ac1ece4cad10715ce851cd697d00993a445c1ac779c3b80a60e9251b7f", 0x6b, 0x5}, {&(0x7f00000001c0)="bb68f5321cb11d2ae068e96b75d8ef5291f24144331742260c90bae8c48f1bcc7eb9204067b71af25a70936a37", 0x2d, 0x400}, {&(0x7f0000000200)="9e76d78001f5cad7772c44f54da85b3392afbcb953decb6446eeef620f7aaaceb6213ff5ffc25b7e639d39080796e2b084de9035fac0aa8aa9abfe4add6fa355370f3741d727739b7bb3f11fe918a3e885ae7260e352d7e2c88dcbb21dfbf9448230474f30d1f627370c433c525be8344136bb77649a12e99e01579a1531ae79148410c7d78e5a2552ee9850", 0x8c, 0x7}, {&(0x7f00000002c0)="05068de4c9abbeac368f336bb39a299def10ec57ed53e14062808839707c713e8a77bae1845dd87e0ef800e16e5e43c966523fc82b1b96fe8920f5fd271f82ba60b831a64e4602aca622f6100d2d40e489e9fc1af66f764165aa1d93ca96755660d980ae78941333135debfab66d91e3bb0bb89b44af45cbeafff7960d31707f1d50516004f975c19c1cb66121c517b269b77cb2867c540e6108e40d8a3846d95cafb1ca82fda21284b5ff7255113e492393650889a232819d477a0b1501c6b44a2474b2a08654cfb0151fd9f266280863d068033cf9974312a4082441384f9d39adcdac74edf8d8cde36bcdccde6e", 0xef, 0x20}, {&(0x7f00000003c0)="839c06a5a02b7805896deaa1f05e3056c0cc4516483905f5945d03c3048fd05721fc32b734f6c9fd0a1bd35831985a7e04df5a467986", 0x36, 0x7cca}, {&(0x7f0000000400)="3a22151aa921ab1f0fa8b81a4d3831ad91d53a649f94debb071f5f99e783c847d91acf10a1884da22f729cfe0c9802a007fc85b4f1f7e5c072869e7cc44124a470463dc720ea", 0x46, 0x8}, {&(0x7f0000000480)="290883f45fe0bc28b1971ac9", 0xc, 0x5}], 0x801, &(0x7f0000000580)={[{@journal_checksum}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, 'sit0\x00'}}, {@uid_eq={'uid', 0x3d, r3}}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 1200.017536] FAULT_INJECTION: forcing a failure. [ 1200.017536] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.018483] CPU: 0 UID: 0 PID: 11091 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1200.018499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1200.018507] Call Trace: [ 1200.018511] [ 1200.018520] dump_stack_lvl+0xfa/0x120 [ 1200.018546] should_fail_ex+0x4d7/0x5e0 [ 1200.018568] should_failslab+0xc2/0x120 [ 1200.018581] __kmalloc_cache_noprof+0x73/0x470 [ 1200.018598] ? do_raw_spin_lock+0x123/0x260 [ 1200.018615] ? shrinker_alloc+0xad/0xad0 [ 1200.018629] ? shrinker_alloc+0xad/0xad0 [ 1200.018639] shrinker_alloc+0xad/0xad0 [ 1200.018650] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1200.018668] ? __create_object+0x59/0x80 [ 1200.018682] ? pcpu_obj_full_size+0x3c/0x90 [ 1200.018697] ? pcpu_alloc_noprof+0x12d/0x1140 [ 1200.018714] ? __pfx_shrinker_alloc+0x10/0x10 [ 1200.018725] ? lockdep_init_map_type+0x4b/0x240 [ 1200.018739] ? __raw_spin_lock_init+0x3a/0x110 [ 1200.018756] alloc_super+0x841/0xb80 [ 1200.018777] sget_fc+0xfe/0xb80 [ 1200.018793] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1200.018809] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1200.018822] get_tree_nodev+0x28/0x190 [ 1200.018839] mqueue_get_tree+0xf6/0x140 [ 1200.018851] vfs_get_tree+0x93/0x340 [ 1200.018865] fc_mount+0x18/0x110 [ 1200.018880] mq_init_ns+0x42e/0x630 [ 1200.018895] copy_ipcs+0x38d/0x630 [ 1200.018907] ? copy_utsname+0xae/0x470 [ 1200.018921] create_new_namespaces+0x210/0xab0 [ 1200.018938] ? security_capable+0x2f/0x90 [ 1200.018959] copy_namespaces+0x45c/0x580 [ 1200.018975] copy_process+0x26d5/0x73e0 [ 1200.018994] ? __pfx__kstrtoull+0x10/0x10 [ 1200.019019] ? __pfx_copy_process+0x10/0x10 [ 1200.019037] ? __might_fault+0xe0/0x190 [ 1200.019054] ? _copy_from_user+0x5b/0xd0 [ 1200.019070] kernel_clone+0xea/0x820 [ 1200.019080] ? get_pid_task+0xfd/0x250 [ 1200.019099] ? __pfx_kernel_clone+0x10/0x10 [ 1200.019113] ? find_held_lock+0x2b/0x80 [ 1200.019131] ? ksys_write+0x121/0x240 [ 1200.019149] ? lock_is_held_type+0x9e/0x120 [ 1200.019169] __do_sys_clone3+0x1f5/0x280 [ 1200.019180] ? __pfx___do_sys_clone3+0x10/0x10 [ 1200.019198] ? __fget_files+0x20d/0x3b0 [ 1200.019219] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1200.019241] ? ksys_write+0x1a3/0x240 [ 1200.019257] ? __pfx_ksys_write+0x10/0x10 [ 1200.019279] do_syscall_64+0xbf/0x360 [ 1200.019291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.019304] RIP: 0033:0x7f4a9ce31b19 [ 1200.019313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1200.019325] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1200.019336] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1200.019344] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1200.019351] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1200.019358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1200.019365] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1200.019381] 04:58:27 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x40000) 04:58:27 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='-\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:58:27 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 32) 04:58:27 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25, 0x34, 0x30, 0x34, 0x36, 0x67, 0x38]}}, {@huge_within_size}]}) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:58:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 28) 04:58:27 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r3, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = dup(r5) copy_file_range(r6, &(0x7f0000000040), r4, &(0x7f00000000c0)=0x401, 0x401, 0x0) [ 1200.311607] tmpfs: Bad value for 'nr_blocks' 04:58:27 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x2) 04:58:27 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x80000) [ 1200.337662] tmpfs: Bad value for 'nr_blocks' 04:58:27 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) 04:58:27 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 29) 04:58:27 executing program 3: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00032abd7000fddbdf256b0000000a001a0008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000000000a00060008021100000100000a001a000802110000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setresuid(0xee01, 0xee00, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0xee00) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 1200.450800] FAULT_INJECTION: forcing a failure. [ 1200.450800] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.451864] CPU: 0 UID: 0 PID: 11141 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1200.451881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1200.451888] Call Trace: [ 1200.451893] [ 1200.451898] dump_stack_lvl+0xfa/0x120 [ 1200.451924] should_fail_ex+0x4d7/0x5e0 [ 1200.451945] ? security_sb_alloc+0xe3/0x140 [ 1200.451964] should_failslab+0xc2/0x120 [ 1200.451977] __kmalloc_noprof+0xb4/0x4b0 [ 1200.451994] ? __pfx_down_write_nested+0x10/0x10 [ 1200.452012] ? lockdep_init_map_type+0x4b/0x240 [ 1200.452028] security_sb_alloc+0xe3/0x140 [ 1200.452045] alloc_super+0x23b/0xb80 [ 1200.452063] ? lock_release+0xc8/0x290 [ 1200.452078] sget_fc+0xfe/0xb80 [ 1200.452095] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1200.452111] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1200.452124] get_tree_nodev+0x28/0x190 [ 1200.452141] mqueue_get_tree+0xf6/0x140 [ 1200.452153] vfs_get_tree+0x93/0x340 [ 1200.452167] fc_mount+0x18/0x110 [ 1200.452182] mq_init_ns+0x42e/0x630 [ 1200.452197] copy_ipcs+0x38d/0x630 [ 1200.452214] ? copy_utsname+0xae/0x470 [ 1200.452227] create_new_namespaces+0x210/0xab0 [ 1200.452249] ? security_capable+0x2f/0x90 [ 1200.452268] copy_namespaces+0x45c/0x580 [ 1200.452284] copy_process+0x26d5/0x73e0 [ 1200.452303] ? __pfx__kstrtoull+0x10/0x10 [ 1200.452328] ? __pfx_copy_process+0x10/0x10 [ 1200.452347] ? __might_fault+0xe0/0x190 [ 1200.452364] ? _copy_from_user+0x5b/0xd0 [ 1200.452379] kernel_clone+0xea/0x820 [ 1200.452389] ? get_pid_task+0xfd/0x250 [ 1200.452408] ? __pfx_kernel_clone+0x10/0x10 [ 1200.452423] ? find_held_lock+0x2b/0x80 [ 1200.452438] ? ksys_write+0x121/0x240 [ 1200.452457] ? lock_is_held_type+0x9e/0x120 [ 1200.452477] __do_sys_clone3+0x1f5/0x280 [ 1200.452488] ? __pfx___do_sys_clone3+0x10/0x10 [ 1200.452508] ? perf_trace_preemptirq_template+0x259/0x430 [ 1200.452530] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1200.452549] ? ksys_write+0x1a3/0x240 [ 1200.452566] ? __pfx_ksys_write+0x10/0x10 [ 1200.452587] do_syscall_64+0xbf/0x360 [ 1200.452600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.452613] RIP: 0033:0x7f27ed07cb19 [ 1200.452622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1200.452634] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1200.452646] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1200.452654] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1200.452661] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1200.452668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1200.452675] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1200.452691] 04:58:37 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 33) 04:58:37 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 30) 04:58:37 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0x7, 0x2, 0x4, 0x0, 0x7, 0x8000, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x42a0d, 0x6, 0x0, 0x4, 0xffffffff, 0x72, 0x3, 0x0, 0x100}, 0x0, 0x6, r0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 04:58:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="503ab5f06f0d6d63d85c2cceab686acee52bf44e2fea1f0340b2f4a80d8ca8f37051197566cbb3fcb8ab79454bd7a3e54b5813488b5807a6d5388e7e56e8b52ff045bcbdbf7f4cf3adb1c442a9d05bac0c8a1a6ff17a6427a292e04bbfe1978076c5f0b4ba459603d3"]) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:58:37 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x1000000) 04:58:37 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='veth1_to_team\x00', 0x10) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 04:58:37 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200088c1}, 0x4000001) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x800) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:58:37 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r3, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r5) 04:58:37 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0xb, 0x3, 0x1d, 0x4, 0x1, 0xa8, 0x5, 0x81, 0x80, [0x5, 0x5, 0x401, 0x3f, 0x4cb, 0x5, 0x0, 0xfffffff9], [0xc9]}}) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 1210.186954] tmpfs: Unknown parameter 'P:µðomcØ\' [ 1210.198927] FAULT_INJECTION: forcing a failure. [ 1210.198927] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.200301] CPU: 0 UID: 0 PID: 11166 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1210.200324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1210.200335] Call Trace: [ 1210.200341] [ 1210.200347] dump_stack_lvl+0xfa/0x120 [ 1210.200380] should_fail_ex+0x4d7/0x5e0 [ 1210.200409] ? __list_lru_init+0xeb/0x4a0 [ 1210.200434] should_failslab+0xc2/0x120 [ 1210.200450] __kmalloc_noprof+0xb4/0x4b0 [ 1210.200473] ? lockdep_init_map_type+0x4b/0x240 [ 1210.200495] __list_lru_init+0xeb/0x4a0 [ 1210.200515] alloc_super+0x938/0xb80 [ 1210.200544] sget_fc+0xfe/0xb80 [ 1210.200567] ? __pfx_set_anon_super_fc+0x10/0x10 04:58:37 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 31) [ 1210.200590] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1210.200606] get_tree_nodev+0x28/0x190 [ 1210.200630] mqueue_get_tree+0xf6/0x140 [ 1210.200646] vfs_get_tree+0x93/0x340 [ 1210.200674] fc_mount+0x18/0x110 [ 1210.200699] mq_init_ns+0x42e/0x630 [ 1210.200725] copy_ipcs+0x38d/0x630 [ 1210.200742] ? copy_utsname+0xae/0x470 [ 1210.200760] create_new_namespaces+0x210/0xab0 [ 1210.200783] ? security_capable+0x2f/0x90 [ 1210.200815] copy_namespaces+0x45c/0x580 [ 1210.200838] copy_process+0x26d5/0x73e0 [ 1210.200864] ? __pfx__kstrtoull+0x10/0x10 [ 1210.200896] ? __pfx_copy_process+0x10/0x10 [ 1210.200921] ? __might_fault+0xe0/0x190 [ 1210.200943] ? _copy_from_user+0x5b/0xd0 [ 1210.200967] kernel_clone+0xea/0x820 [ 1210.200986] ? get_pid_task+0xfd/0x250 [ 1210.201011] ? __pfx_kernel_clone+0x10/0x10 [ 1210.201031] ? find_held_lock+0x2b/0x80 [ 1210.201059] ? ksys_write+0x121/0x240 [ 1210.201085] ? lock_is_held_type+0x9e/0x120 [ 1210.201113] __do_sys_clone3+0x1f5/0x280 [ 1210.201128] ? __pfx___do_sys_clone3+0x10/0x10 [ 1210.201155] ? __fget_files+0x20d/0x3b0 [ 1210.201189] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1210.201232] ? ksys_write+0x1a3/0x240 [ 1210.201263] ? __pfx_ksys_write+0x10/0x10 [ 1210.201294] do_syscall_64+0xbf/0x360 [ 1210.201312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.201329] RIP: 0033:0x7f4a9ce31b19 [ 1210.201346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1210.201363] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1210.201379] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1210.201390] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1210.201400] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1210.201410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1210.201419] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1210.201441] [ 1210.242156] tmpfs: Unknown parameter 'P:µðomcØ\' 04:58:37 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/27, 0x1b}, {&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f0000000400)=""/164, 0xa4}], 0x7, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x10002) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r3) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r4) getgroups(0x2, &(0x7f0000000640)=[0xee01, 0xee00]) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x3}, [{0x2, 0x3, r1}, {0x2, 0x3, r2}, {0x2, 0x7, 0xee01}, {0x2, 0x6, r3}, {0x2, 0x6, r4}], {}, [{}, {0x8, 0x2, r5}, {0x8, 0x4}, {0x8, 0x1, 0xee00}], {}, {0x20, 0x7}}, 0x6c, 0x2) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r7, 0x89f6, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) [ 1210.307301] FAULT_INJECTION: forcing a failure. [ 1210.307301] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.308870] CPU: 0 UID: 0 PID: 11175 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1210.308895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1210.308904] Call Trace: [ 1210.308910] [ 1210.308916] dump_stack_lvl+0xfa/0x120 [ 1210.308947] should_fail_ex+0x4d7/0x5e0 [ 1210.308975] should_failslab+0xc2/0x120 [ 1210.308993] __kmalloc_cache_noprof+0x73/0x470 [ 1210.309016] ? shrinker_alloc+0xad/0xad0 [ 1210.309035] ? shrinker_alloc+0xad/0xad0 [ 1210.309049] shrinker_alloc+0xad/0xad0 [ 1210.309064] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1210.309087] ? __create_object+0x59/0x80 [ 1210.309106] ? pcpu_obj_full_size+0x3c/0x90 [ 1210.309126] ? pcpu_alloc_noprof+0x12d/0x1140 [ 1210.309148] ? __pfx_shrinker_alloc+0x10/0x10 [ 1210.309164] ? lockdep_init_map_type+0x4b/0x240 [ 1210.309183] ? __raw_spin_lock_init+0x3a/0x110 [ 1210.309214] alloc_super+0x841/0xb80 [ 1210.309242] sget_fc+0xfe/0xb80 [ 1210.309266] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1210.309289] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1210.309305] get_tree_nodev+0x28/0x190 [ 1210.309329] mqueue_get_tree+0xf6/0x140 [ 1210.309351] vfs_get_tree+0x93/0x340 [ 1210.309378] fc_mount+0x18/0x110 [ 1210.309404] mq_init_ns+0x42e/0x630 [ 1210.309425] copy_ipcs+0x38d/0x630 [ 1210.309441] ? copy_utsname+0xae/0x470 [ 1210.309460] create_new_namespaces+0x210/0xab0 [ 1210.309490] ? security_capable+0x2f/0x90 [ 1210.309516] copy_namespaces+0x45c/0x580 [ 1210.309539] copy_process+0x26d5/0x73e0 [ 1210.309564] ? __pfx__kstrtoull+0x10/0x10 [ 1210.309597] ? __pfx_copy_process+0x10/0x10 [ 1210.309622] ? __might_fault+0xe0/0x190 [ 1210.309644] ? _copy_from_user+0x5b/0xd0 [ 1210.309673] kernel_clone+0xea/0x820 [ 1210.309687] ? get_pid_task+0xfd/0x250 [ 1210.309712] ? __pfx_kernel_clone+0x10/0x10 [ 1210.309735] ? find_held_lock+0x2b/0x80 [ 1210.309763] ? ksys_write+0x121/0x240 [ 1210.309786] ? lock_is_held_type+0x9e/0x120 [ 1210.309814] __do_sys_clone3+0x1f5/0x280 [ 1210.309829] ? __pfx___do_sys_clone3+0x10/0x10 [ 1210.309858] ? perf_trace_preemptirq_template+0x259/0x430 [ 1210.309894] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1210.309929] ? ksys_write+0x1a3/0x240 [ 1210.309960] ? __pfx_ksys_write+0x10/0x10 [ 1210.309991] do_syscall_64+0xbf/0x360 [ 1210.310008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.310026] RIP: 0033:0x7f27ed07cb19 [ 1210.310043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1210.310059] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1210.310075] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1210.310086] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1210.310096] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1210.310105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1210.310115] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1210.310137] 04:58:46 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 04:58:46 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 34) 04:58:46 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r3, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 04:58:46 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x2000000) 04:58:46 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(0xffffffffffffffff) copy_file_range(r2, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0x401, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) dup3(0xffffffffffffffff, r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000140)=0x10001, r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x0, 0x4, 0x40, 0x0, 0x800, 0x1, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x7f, 0x5}, 0x4020, 0x5, 0x1f, 0x9, 0x8, 0x8aa2, 0x4}, r7, 0x1, r0, 0x8) 04:58:46 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf7, 0x8, 0x3f, 0x1, 0x0, 0x9cb, 0xb200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1c000000, 0x4, @perf_config_ext={0x45d, 0x8}, 0x4002, 0x28000000000, 0x101, 0x1, 0x6, 0x5a6e, 0x1000, 0x0, 0xd719, 0x0, 0x1}, 0x0, 0x2, r0, 0x2) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = fork() r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x9, 0x7, 0xd6, 0x0, 0xf1f7, 0x10000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x20004000000000, 0x8}, 0x4, 0x6ede, 0x3, 0x9, 0x8, 0x7ff, 0x5, 0x0, 0xfff, 0x0, 0x1}, r2, 0x10, r5, 0x3) r6 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x422000) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000040)='\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 04:58:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 32) 04:58:46 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000200)="fd25fed13ff9fc1258529058354c2f2c11eada16928de921c22364a71252ea8855f93f7b40b35f88f479c1eded97b24fb7167eaa4f14fb17cd0c9f924021932cad2139762a9f9ceb3e02ce8d238243586a3f7abff565fc3d3ad40ca73d03e2f6ec59623f80a2cd88321dbd795e787a7fa13fb967b900619eb216aee8ede6745c6dd73e61774ff48c71d409705b46e7094d833a5735a8811fd7a2fd5937f84812eb14a2c503cb60de13e82bbc079d347cfe0c535b6b31774c94cf19abeb5b2784d86788", 0xc3, 0x20}, {&(0x7f0000000300)="e60e5f6c767ef309ea2380ffe61c9cc35a03ad841e7b3f0712a1443f1ecf814ad065c1edb627ea5460f576ee4b0553111585c714afa7a9bfbc846eda3b75a8188add7812e909e4571498a8ae18e53e2f8b315ff5a7e4", 0x56, 0x73}, {&(0x7f0000000380)="29f1422556f5f1a1724ac0bf120582adb066f7c2af9acc1e2350bacf9b96130b2f1bf581d8f30969639d23137eec4d4aa85968a526093ded1f16", 0x3a, 0x401}, {&(0x7f0000000440)="e2441940d348f9ae4ab1d1181ab1ca26a238c8c6bd40a1af84f4e30ded134c125f2d9b0782ea6dfe15e645dcdd809c5bbfc6d179a573a8705d728fe4106032942517be537f70ab2ec0af0efd082ffdba92dd8a8bb546ccbd4aecb36083156497d56dcfaf0a6e8ff5d907729c62fe2c1e9cdec35e3423f92fe03ebf656890710bc8f02eeed6ec149cbcb3319833a9ec62450cad98bf6bcb2694020fc8c016c27598e5f2a05b6305528742705fd0559d342c07b1c0b567f82a", 0xb8, 0x6}, {&(0x7f0000000500)="a3a0d8ce8c1a5c669f52671993424c264892f2d2d6ebfe912d811ad3acdc7657e28ef618a1040ce1bd175ff2e069a43bc1b87efef1daa95d99356cd17da57ff48994b611e3537facff6c8521b7f5e0d60641383d59bc13fb58373f2b930507487d76594e46700d559dc65200829f2e35df3e0c4fd47dad890ae954e913690102e0b42a064b399bd9", 0x88, 0x200}], 0x800, &(0x7f0000000640)={[{@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x44}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@hash}, {@fsname={'fsname', 0x3d, ']'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'os2.'}}, {@dont_measure}, {@dont_measure}, {@fsname={'fsname', 0x3d, '\'$@'}}]}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000800)={{r2}, {@void, @actul_num={@val=0x2b, 0x9, 0x67}}}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x181000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xc14}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4040046) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#! I/file0\n'], 0xb) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) lremovexattr(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)=@random={'os2.', 'tmpfs\x00'}) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = dup(r5) copy_file_range(r6, &(0x7f0000000040), r4, &(0x7f00000000c0)=0x401, 0x401, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_SET_FD(r4, 0x4c00, r7) [ 1219.131912] loop5: detected capacity change from 0 to 4 [ 1219.177904] loop5: detected capacity change from 0 to 4 04:58:46 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 35) 04:58:46 executing program 3: r0 = msgget(0x1, 0x120) getgroups(0x4, &(0x7f0000000040)=[0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff]) r2 = msgget$private(0x0, 0x501) msgsnd(r2, &(0x7f0000000140)={0x0, "7021a2b6236907a18e4430220c04b84c2ec1cc504642e37e12602ac483b45070ab4fce60d65c61fc5ad02d52078b81a4fcd14fbc2d0b5a1d91c3ebf436d0f739f617ff7c65316ff30c83f2"}, 0x53, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x2, 0xee00, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1da, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x80000001, 0x1, 0x1, 0x1, 0x3ff, 0x3, 0x0, 0xffffffffffffffff}) setresuid(0xee01, 0xee00, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:58:46 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x3000000) 04:58:46 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1a485, 0xffaf, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) r1 = getpid() r2 = getpid() tkill(r2, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3f, 0x4, 0x3, 0x3, 0x0, 0x0, 0x24008, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x7, 0x4}, 0x10000, 0x80000001, 0xc4b, 0x3, 0x7, 0x80000000, 0xf801, 0x0, 0x8, 0x0, 0x8}, r1, 0xb, r3, 0x0) pidfd_open(r2, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x7) creat(&(0x7f0000000080)='./file0\x00', 0x2) r7 = clone3(&(0x7f0000000500)={0x204000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x13}, &(0x7f0000000200)=""/155, 0x9b, &(0x7f0000000440)=""/184, &(0x7f00000002c0)=[r2, 0xffffffffffffffff], 0x2, {r6}}, 0x58) tkill(r7, 0x16) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) [ 1219.311856] FAULT_INJECTION: forcing a failure. [ 1219.311856] name failslab, interval 1, probability 0, space 0, times 0 04:58:46 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r3, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 04:58:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 33) [ 1219.313798] CPU: 1 UID: 0 PID: 11210 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1219.313830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1219.313844] Call Trace: [ 1219.313852] [ 1219.313860] dump_stack_lvl+0xfa/0x120 [ 1219.313905] should_fail_ex+0x4d7/0x5e0 [ 1219.313943] ? __list_lru_init+0xeb/0x4a0 [ 1219.313969] should_failslab+0xc2/0x120 [ 1219.313992] __kmalloc_noprof+0xb4/0x4b0 [ 1219.314023] ? lockdep_init_map_type+0x4b/0x240 [ 1219.314056] __list_lru_init+0xeb/0x4a0 [ 1219.314084] alloc_super+0x981/0xb80 [ 1219.314125] sget_fc+0xfe/0xb80 [ 1219.314157] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1219.314191] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1219.314221] get_tree_nodev+0x28/0x190 [ 1219.314256] mqueue_get_tree+0xf6/0x140 [ 1219.314278] vfs_get_tree+0x93/0x340 [ 1219.314307] fc_mount+0x18/0x110 [ 1219.314335] mq_init_ns+0x42e/0x630 [ 1219.314364] copy_ipcs+0x38d/0x630 [ 1219.314388] ? copy_utsname+0xae/0x470 [ 1219.314413] create_new_namespaces+0x210/0xab0 [ 1219.314445] ? security_capable+0x2f/0x90 [ 1219.314482] copy_namespaces+0x45c/0x580 [ 1219.314515] copy_process+0x26d5/0x73e0 [ 1219.314551] ? __pfx__kstrtoull+0x10/0x10 [ 1219.314598] ? __pfx_copy_process+0x10/0x10 [ 1219.314635] ? __might_fault+0xe0/0x190 [ 1219.314664] ? _copy_from_user+0x5b/0xd0 [ 1219.314695] kernel_clone+0xea/0x820 [ 1219.314714] ? get_pid_task+0xfd/0x250 [ 1219.314750] ? __pfx_kernel_clone+0x10/0x10 [ 1219.314779] ? find_held_lock+0x2b/0x80 [ 1219.314811] ? ksys_write+0x121/0x240 [ 1219.314845] ? lock_is_held_type+0x9e/0x120 [ 1219.314885] __do_sys_clone3+0x1f5/0x280 [ 1219.314906] ? __pfx___do_sys_clone3+0x10/0x10 [ 1219.314943] ? __fget_files+0x20d/0x3b0 [ 1219.314982] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1219.315022] ? ksys_write+0x1a3/0x240 [ 1219.315055] ? __pfx_ksys_write+0x10/0x10 [ 1219.315099] do_syscall_64+0xbf/0x360 [ 1219.315123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.315147] RIP: 0033:0x7f4a9ce31b19 [ 1219.315165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.315187] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1219.315210] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1219.315226] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1219.315240] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.315254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1219.315268] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1219.315298] 04:58:46 executing program 3: setresuid(0xee01, 0xee00, 0x0) setuid(0xee01) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x800, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0xee01, r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 1219.424981] FAULT_INJECTION: forcing a failure. [ 1219.424981] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.426764] CPU: 1 UID: 0 PID: 11221 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1219.426794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1219.426807] Call Trace: [ 1219.426814] [ 1219.426822] dump_stack_lvl+0xfa/0x120 [ 1219.426864] should_fail_ex+0x4d7/0x5e0 [ 1219.426901] ? __list_lru_init+0xeb/0x4a0 [ 1219.426925] should_failslab+0xc2/0x120 [ 1219.426946] __kmalloc_noprof+0xb4/0x4b0 [ 1219.426977] ? lockdep_init_map_type+0x4b/0x240 [ 1219.427006] __list_lru_init+0xeb/0x4a0 [ 1219.427033] alloc_super+0x938/0xb80 [ 1219.427070] sget_fc+0xfe/0xb80 [ 1219.427100] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1219.427130] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1219.427151] get_tree_nodev+0x28/0x190 [ 1219.427183] mqueue_get_tree+0xf6/0x140 [ 1219.427211] vfs_get_tree+0x93/0x340 [ 1219.427238] fc_mount+0x18/0x110 [ 1219.427264] mq_init_ns+0x42e/0x630 [ 1219.427291] copy_ipcs+0x38d/0x630 [ 1219.427313] ? copy_utsname+0xae/0x470 [ 1219.427337] create_new_namespaces+0x210/0xab0 [ 1219.427367] ? security_capable+0x2f/0x90 [ 1219.427401] copy_namespaces+0x45c/0x580 [ 1219.427431] copy_process+0x26d5/0x73e0 [ 1219.427465] ? __pfx__kstrtoull+0x10/0x10 [ 1219.427508] ? __pfx_copy_process+0x10/0x10 [ 1219.427542] ? __might_fault+0xe0/0x190 [ 1219.427570] ? _copy_from_user+0x5b/0xd0 [ 1219.427598] kernel_clone+0xea/0x820 [ 1219.427616] ? get_pid_task+0xfd/0x250 [ 1219.427649] ? __pfx_kernel_clone+0x10/0x10 [ 1219.427676] ? find_held_lock+0x2b/0x80 [ 1219.427706] ? ksys_write+0x121/0x240 [ 1219.427750] ? lock_is_held_type+0x9e/0x120 [ 1219.427786] __do_sys_clone3+0x1f5/0x280 [ 1219.427806] ? __pfx___do_sys_clone3+0x10/0x10 [ 1219.427841] ? __fget_files+0x20d/0x3b0 [ 1219.427878] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1219.427918] ? ksys_write+0x1a3/0x240 [ 1219.427949] ? __pfx_ksys_write+0x10/0x10 [ 1219.427989] do_syscall_64+0xbf/0x360 [ 1219.428012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.428034] RIP: 0033:0x7f27ed07cb19 [ 1219.428051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.428072] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1219.428094] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1219.428108] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1219.428121] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.428134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1219.428146] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1219.428175] 04:58:46 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) chown(&(0x7f00000000c0)='./file0\x00', r0, 0xee00) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, r4) mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x880000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',subj_user=tmpfs\x00,defconuext=root,\x00']) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x401, 0x401, 0x0) utimensat(r7, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}}, 0x0) r8 = dup(r2) copy_file_range(r8, 0x0, r1, 0x0, 0x401, 0x0) 04:58:46 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x4000000) 04:58:46 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) fcntl$dupfd(r0, 0x0, r1) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) 04:58:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 34) 04:58:46 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x5000000) 04:58:46 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 36) 04:58:46 executing program 3: kexec_load(0x2, 0x3, &(0x7f0000000240)=[{&(0x7f0000000000)="0ddb0a59a2369b87e7346b16407f393d47ba49926c4c52168229c38efd5b1f141be42afaab25ca3d75998c4435f325b0553ea541932f3b1a3ad9f11585a8ca07307f871b4b0f54926048e4918a3f161a151b846ed4dbb4acb96dc65dac5d5867fb0001aa58bfe1a69aa08113e78bc5b8342c371306856968f007b96daa5969c2440fb94803fb5954a8448befd58f2cd18c69c242f8b9b88d4abef3de07bd694702ebce27b4af7e4814e123d13907f3949fd21023fff51305a97bc0ed328e734da3561ba43f14", 0xc6, 0x0, 0x5}, {&(0x7f0000000140)="a830171f47c3966d2f857ef2bf3cad3825152a347c5a594426", 0x19, 0x8, 0x3}, {&(0x7f0000000180)="fb63c56cf763062a5bb92b71f2932ec80f12346d3240229ffcb2718d6683dd56d3bc4eb4e51f29d7b92b371fe42e7ab1ef809e84b59bdedadf3670d146b27e49497750134c9be21e3ddf77e1957484aaa600aaa07ea8decce5628ba0386f547405cc9e7b2a427ebc32b7a1f7e1b64f78e016f8daa0700daddae2201c23667fd29ab3e8eb980e", 0x86, 0x4, 0x5}], 0x0) setresuid(0xee01, 0xee00, 0xee00) setfsuid(0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) kexec_load(0x1, 0x8, &(0x7f00000015c0)=[{&(0x7f00000002c0)="ea4c0deab282109274052c94f2dcbd16fda6739f6830181f0a62c7efaeffdfba8f86d42e056ad950465ab766ac7f2987497ba48ae84c99ca21efd4814f417c69b99243a6ed2070912a3c6016d57cc090811aa0075b78c0dff46305c9426b33bce9b2", 0x62, 0x7, 0x7fff}, {&(0x7f0000000340)="c95977426262fdd5d3476a85b9c629871fdbc579b4ba19c2a9247b6ae65877e6d75819", 0x23, 0x8, 0x80000000}, {&(0x7f0000000380)="92e6f163c0b629789248a3bfeaa199ac7066ab92128a108db4d2e74182fef5", 0x1f, 0x401, 0x4}, {&(0x7f00000003c0)="6e69cceffe05461e11a49cd7288277dd43600f941f00f086935fbc73e003e6b2afabd1c5bf122ee16268e4410adeec", 0x2f, 0x2b, 0x4}, {&(0x7f0000000400)="8e5e15dddf64d3c37b62ebf766a99428ab32f619141fb795f24235ba7a24d1980826c3d0714817c124ca49ced82a5ebf8194d14a8df6d851b5f00bbd9d44a1dae48914cddc3eb9897f5588b9f7566b6885724d0d9a1dc8106062923d9ffc6f7d6a5ab4503857b6b9d6130556442f169b23ff2d27366cd1393d718a8f61a925944203cce8787903d7c045f0efad30157307d04438e72b83c6918553f14d940d19f7bd470412f1fc5b908579202bd0c95ee5c588c55ee6540a39d6ea88e8e6475e4199f111183b2a2d8ee38abb25121d6a7a4ebd7c094d9f3cc045b8c5675a1cedeb741d5afb813f8676b4", 0xea, 0x3f}, {&(0x7f0000000500)="5d66f7818355683583bd35206b", 0xd, 0xfffffffffffffffc, 0x7}, {&(0x7f0000000540)="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", 0x1000, 0x29bc49d3, 0x8}, {&(0x7f0000001540)="0d7de91dfd419a473ece65452474c9f1b7dac7347f834c149dca03877bcf6afca0cea5b5d425f8a7803782c9706b9e1975427fbcd4f89859e55e41f2f5e6dcadf2ddcc907af46a770d20e8889bd62cedd2cc6e19bb4d684a1860a5fd919d02cfb458e1643029bb3969e54e9f0b79f8330ce3a6b0ef97f3f94fe588", 0x7b, 0x3, 0x9}], 0x150000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 04:58:56 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r3, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) accept$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:58:56 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x6000000) 04:58:56 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x24008000}, 0x4004055) r1 = fcntl$dupfd(r0, 0x0, r0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) r3 = geteuid() setresuid(r2, r3, 0xee01) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:58:56 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x36aac07a}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x8, 0x7, 0x40b, 0x4, 0x9}) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:58:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x103080, 0x184) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='\'\\\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:58:56 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 37) 04:58:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 35) 04:58:56 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="04"], 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) [ 1229.289766] FAULT_INJECTION: forcing a failure. [ 1229.289766] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.292158] CPU: 0 UID: 0 PID: 11261 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1229.292199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1229.292223] Call Trace: [ 1229.292234] [ 1229.292245] dump_stack_lvl+0xfa/0x120 [ 1229.292302] should_fail_ex+0x4d7/0x5e0 [ 1229.292345] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1229.292377] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1229.292405] should_failslab+0xc2/0x120 [ 1229.292435] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 1229.292475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1229.292517] ? mqueue_alloc_inode+0x27/0x50 [ 1229.292545] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1229.292570] mqueue_alloc_inode+0x27/0x50 [ 1229.292592] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1229.292615] alloc_inode+0x67/0x250 [ 1229.292644] new_inode+0x1e/0x160 [ 1229.292673] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1229.292697] mqueue_get_inode+0x2e/0xdf0 [ 1229.292719] ? sget_fc+0x766/0xb80 [ 1229.292758] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1229.292781] mqueue_fill_super+0x14e/0x260 [ 1229.292806] get_tree_nodev+0xdc/0x190 [ 1229.292845] mqueue_get_tree+0xf6/0x140 [ 1229.292870] vfs_get_tree+0x93/0x340 [ 1229.292902] fc_mount+0x18/0x110 [ 1229.292931] mq_init_ns+0x42e/0x630 [ 1229.292963] copy_ipcs+0x38d/0x630 [ 1229.292990] ? copy_utsname+0xae/0x470 [ 1229.293018] create_new_namespaces+0x210/0xab0 [ 1229.293054] ? security_capable+0x2f/0x90 [ 1229.293094] copy_namespaces+0x45c/0x580 [ 1229.293130] copy_process+0x26d5/0x73e0 [ 1229.293170] ? __pfx__kstrtoull+0x10/0x10 [ 1229.293221] ? __pfx_copy_process+0x10/0x10 [ 1229.293261] ? __might_fault+0xe0/0x190 [ 1229.293295] ? _copy_from_user+0x5b/0xd0 [ 1229.293328] kernel_clone+0xea/0x820 [ 1229.293350] ? get_pid_task+0xfd/0x250 [ 1229.293389] ? __pfx_kernel_clone+0x10/0x10 [ 1229.293422] ? find_held_lock+0x2b/0x80 [ 1229.293458] ? ksys_write+0x121/0x240 [ 1229.293497] ? lock_is_held_type+0x9e/0x120 [ 1229.293540] __do_sys_clone3+0x1f5/0x280 [ 1229.293564] ? __pfx___do_sys_clone3+0x10/0x10 [ 1229.293606] ? __fget_files+0x20d/0x3b0 [ 1229.293649] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1229.293692] ? ksys_write+0x1a3/0x240 [ 1229.293728] ? __pfx_ksys_write+0x10/0x10 04:58:56 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x7000000) [ 1229.293777] do_syscall_64+0xbf/0x360 [ 1229.293804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.293830] RIP: 0033:0x7f4a9ce31b19 04:58:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x90210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() r0 = fsmount(0xffffffffffffffff, 0x1, 0x6) openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa0a00, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) [ 1229.293850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1229.293874] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1229.293899] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1229.293916] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1229.293932] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.293947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1229.293962] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1229.293996] 04:58:56 executing program 5: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2808012, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=00000000000000000005127,mpol=interleave:8/5,uid=', @ANYRESHEX=r0, @ANYBLOB=',nr_inodes=m,uid=', @ANYRESHEX=r1, @ANYBLOB="2c6d706f6c3d7072656665723d7374617469633a3a342c00ebe73063217faddfb51d1e65ae18a3778c34f123453eca49101dfbac1c513f720e209890df"]) chdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, r5) chown(&(0x7f0000000140)='./file0\x00', r3, r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = dup(r6) copy_file_range(r7, 0x0, r2, 0x0, 0x401, 0x0) [ 1229.375917] FAULT_INJECTION: forcing a failure. [ 1229.375917] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.377718] CPU: 1 UID: 0 PID: 11274 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1229.377742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1229.377751] Call Trace: [ 1229.377757] [ 1229.377763] dump_stack_lvl+0xfa/0x120 [ 1229.377795] should_fail_ex+0x4d7/0x5e0 [ 1229.377822] ? __list_lru_init+0xeb/0x4a0 [ 1229.377840] should_failslab+0xc2/0x120 [ 1229.377856] __kmalloc_noprof+0xb4/0x4b0 [ 1229.377877] ? lockdep_init_map_type+0x4b/0x240 [ 1229.377900] __list_lru_init+0xeb/0x4a0 [ 1229.377920] alloc_super+0x981/0xb80 [ 1229.377948] sget_fc+0xfe/0xb80 [ 1229.377970] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1229.377993] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1229.378009] get_tree_nodev+0x28/0x190 [ 1229.378032] mqueue_get_tree+0xf6/0x140 [ 1229.378048] vfs_get_tree+0x93/0x340 [ 1229.378068] fc_mount+0x18/0x110 [ 1229.378086] mq_init_ns+0x42e/0x630 [ 1229.378106] copy_ipcs+0x38d/0x630 [ 1229.378123] ? copy_utsname+0xae/0x470 [ 1229.378140] create_new_namespaces+0x210/0xab0 [ 1229.378162] ? security_capable+0x2f/0x90 [ 1229.378187] copy_namespaces+0x45c/0x580 [ 1229.378215] copy_process+0x26d5/0x73e0 [ 1229.378240] ? __pfx__kstrtoull+0x10/0x10 [ 1229.378272] ? __pfx_copy_process+0x10/0x10 [ 1229.378296] ? __might_fault+0xe0/0x190 [ 1229.378317] ? _copy_from_user+0x5b/0xd0 [ 1229.378338] kernel_clone+0xea/0x820 [ 1229.378351] ? get_pid_task+0xfd/0x250 [ 1229.378376] ? __pfx_kernel_clone+0x10/0x10 [ 1229.378396] ? find_held_lock+0x2b/0x80 [ 1229.378417] ? ksys_write+0x121/0x240 [ 1229.378440] ? lock_is_held_type+0x9e/0x120 [ 1229.378467] __do_sys_clone3+0x1f5/0x280 [ 1229.378481] ? __pfx___do_sys_clone3+0x10/0x10 [ 1229.378507] ? __fget_files+0x20d/0x3b0 [ 1229.378534] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1229.378560] ? ksys_write+0x1a3/0x240 [ 1229.378583] ? __pfx_ksys_write+0x10/0x10 [ 1229.378612] do_syscall_64+0xbf/0x360 [ 1229.378629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.378646] RIP: 0033:0x7f27ed07cb19 [ 1229.378658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1229.378673] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1229.378689] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1229.378700] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1229.378709] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.378719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1229.378729] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1229.378750] 04:58:56 executing program 3: setresuid(0xee01, 0xee00, 0xee00) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:58:56 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 38) 04:59:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 36) 04:59:05 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 39) 04:59:05 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="971896b67432d5a26e5c008da223d51892f5a2f86472c5716fa7b6da6b074242f54d5affe68035eb45b797"]) chdir(&(0x7f0000000380)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696cd1300ab548c2ff53023f975caad6f7efe0300b59295babe852fed1caa7b1f7"], 0xb) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/159, 0x9f, 0x100, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x4, 0xfffffffe}}, 0x80) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "0439c913b49f24294e849e8feb9a0e"}, 0x1a) r5 = dup(r1) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r8 = dup(r7) copy_file_range(r8, &(0x7f0000000040), r6, &(0x7f00000000c0)=0x401, 0x401, 0x0) open$dir(&(0x7f00000002c0)='./file0\x00', 0x101480, 0x0) sendfile(r6, r2, &(0x7f0000000300)=0x7, 0x4) copy_file_range(r5, 0x0, r0, 0x0, 0x401, 0x0) 04:59:05 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) statx(r2, &(0x7f0000000300)='./file0\x00', 0x800, 0x80, &(0x7f0000000440)) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x8040000) 04:59:05 executing program 1: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x400200) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:59:05 executing program 3: read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:59:05 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="c603bf48d771160162774f7bff33b724fd91acf0b8b9c125b38ea208746481457f4d61f7941629f6f2aa569aaea5345ab1ec6d32faf071c912b17b9e6f3fc4f76764e10b0124f9bc648d2fdc2010d3a0c261c5cecddc3f0537aa068ae4bb25936daa88425a4ef9a2f58ca59d074f95e2495d694d6e305cedf9c4fa2898cf092a987f8ce61e893b7e9f8b1476f296489a90fdc97ac484d7b5a7252a6454ac32e8442ce4b3bce560db2b6ea92ed6d227a50aaa9a758ac292cef8caf314aa622216f6402406415f31f28fa4d0bac15c8690c22d92f926c973cfe80a9ea6c19e824268650a1446727ee28f0e2d4960186525e9aacb580a97ca", 0xf7}, 0x1, 0x0, 0x0, 0x4000000}, 0x1c) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x100) write$binfmt_script(r0, 0x0, 0x0) flock(r1, 0x1) [ 1238.537266] FAULT_INJECTION: forcing a failure. [ 1238.537266] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.538228] CPU: 0 UID: 0 PID: 11299 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1238.538248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1238.538255] Call Trace: [ 1238.538260] [ 1238.538265] dump_stack_lvl+0xfa/0x120 [ 1238.538291] should_fail_ex+0x4d7/0x5e0 [ 1238.538312] ? memcg_list_lru_alloc+0x4da/0x760 [ 1238.538328] should_failslab+0xc2/0x120 [ 1238.538340] __kmalloc_noprof+0xb4/0x4b0 [ 1238.538356] ? __lock_acquire+0x694/0x1b70 [ 1238.538371] memcg_list_lru_alloc+0x4da/0x760 [ 1238.538390] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1238.538409] ? get_mem_cgroup_from_objcg+0xf8/0x430 [ 1238.538425] __memcg_slab_post_alloc_hook+0x130/0x9d0 [ 1238.538442] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1238.538460] ? __create_object+0x59/0x80 [ 1238.538475] kmem_cache_alloc_lru_noprof+0x3c1/0x460 [ 1238.538491] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1238.538511] ? mqueue_alloc_inode+0x27/0x50 [ 1238.538525] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1238.538536] mqueue_alloc_inode+0x27/0x50 [ 1238.538546] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1238.538557] alloc_inode+0x67/0x250 [ 1238.538570] new_inode+0x1e/0x160 [ 1238.538583] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1238.538594] mqueue_get_inode+0x2e/0xdf0 [ 1238.538604] ? sget_fc+0x766/0xb80 [ 1238.538622] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1238.538632] mqueue_fill_super+0x14e/0x260 [ 1238.538644] get_tree_nodev+0xdc/0x190 [ 1238.538661] mqueue_get_tree+0xf6/0x140 [ 1238.538672] vfs_get_tree+0x93/0x340 [ 1238.538687] fc_mount+0x18/0x110 [ 1238.538701] mq_init_ns+0x42e/0x630 [ 1238.538716] copy_ipcs+0x38d/0x630 [ 1238.538728] ? copy_utsname+0xae/0x470 [ 1238.538741] create_new_namespaces+0x210/0xab0 [ 1238.538758] ? security_capable+0x2f/0x90 [ 1238.538776] copy_namespaces+0x45c/0x580 [ 1238.538793] copy_process+0x26d5/0x73e0 [ 1238.538811] ? __pfx__kstrtoull+0x10/0x10 [ 1238.538835] ? __pfx_copy_process+0x10/0x10 [ 1238.538853] ? __might_fault+0xe0/0x190 [ 1238.538868] ? _copy_from_user+0x5b/0xd0 [ 1238.538884] kernel_clone+0xea/0x820 [ 1238.538894] ? get_pid_task+0xfd/0x250 [ 1238.538912] ? __pfx_kernel_clone+0x10/0x10 [ 1238.538927] ? find_held_lock+0x2b/0x80 [ 1238.538943] ? ksys_write+0x121/0x240 [ 1238.538960] ? lock_is_held_type+0x9e/0x120 [ 1238.538980] __do_sys_clone3+0x1f5/0x280 [ 1238.538990] ? __pfx___do_sys_clone3+0x10/0x10 [ 1238.539009] ? __fget_files+0x20d/0x3b0 [ 1238.539028] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1238.539048] ? ksys_write+0x1a3/0x240 [ 1238.539065] ? __pfx_ksys_write+0x10/0x10 [ 1238.539086] do_syscall_64+0xbf/0x360 [ 1238.539099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.539111] RIP: 0033:0x7f4a9ce31b19 [ 1238.539121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.539132] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1238.539143] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1238.539151] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1238.539158] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.539165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.539172] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1238.539188] [ 1238.576282] tmpfs: Unknown parameter '—–¶t2Õ¢n\' [ 1238.590491] tmpfs: Unknown parameter '—–¶t2Õ¢n\' 04:59:05 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setfsuid(r2) setresuid(r2, 0xffffffffffffffff, r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = fcntl$dupfd(r4, 0x0, r4) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r6) getgroups(0x7, &(0x7f0000000040)=[r1, r3, r3, r3, r3, 0xee01, r3]) chown(&(0x7f0000000000)='./file0\x00', r6, r7) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:59:05 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r1 = dup(r0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x401, 0x0) 04:59:05 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 40) 04:59:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 37) 04:59:05 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r0 = getpid() tkill(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x37, 0x0, 0x3, 0xd3, 0x0, 0x0, 0xb0584, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x6080, 0x2, 0x3770, 0x7, 0x4, 0x0, 0x8, 0x0, 0x1, 0x0, 0x9}, r0, 0xc, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200440, 0x40) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 04:59:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:59:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x18000000) [ 1238.792814] FAULT_INJECTION: forcing a failure. [ 1238.792814] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.793892] CPU: 0 UID: 0 PID: 11334 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1238.793908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1238.793916] Call Trace: [ 1238.793920] [ 1238.793925] dump_stack_lvl+0xfa/0x120 [ 1238.793950] should_fail_ex+0x4d7/0x5e0 [ 1238.793968] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1238.793982] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1238.793993] should_failslab+0xc2/0x120 [ 1238.794006] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 1238.794023] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1238.794042] ? mqueue_alloc_inode+0x27/0x50 [ 1238.794055] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1238.794066] mqueue_alloc_inode+0x27/0x50 [ 1238.794077] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1238.794087] alloc_inode+0x67/0x250 [ 1238.794101] new_inode+0x1e/0x160 [ 1238.794114] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1238.794125] mqueue_get_inode+0x2e/0xdf0 [ 1238.794135] ? sget_fc+0x766/0xb80 [ 1238.794153] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1238.794164] mqueue_fill_super+0x14e/0x260 [ 1238.794175] get_tree_nodev+0xdc/0x190 [ 1238.794192] mqueue_get_tree+0xf6/0x140 [ 1238.794208] vfs_get_tree+0x93/0x340 [ 1238.794223] fc_mount+0x18/0x110 [ 1238.794237] mq_init_ns+0x42e/0x630 [ 1238.794256] copy_ipcs+0x38d/0x630 [ 1238.794268] ? copy_utsname+0xae/0x470 [ 1238.794281] create_new_namespaces+0x210/0xab0 [ 1238.794298] ? security_capable+0x2f/0x90 [ 1238.794317] copy_namespaces+0x45c/0x580 [ 1238.794333] copy_process+0x26d5/0x73e0 [ 1238.794352] ? __pfx__kstrtoull+0x10/0x10 [ 1238.794376] ? __pfx_copy_process+0x10/0x10 [ 1238.794395] ? __might_fault+0xe0/0x190 [ 1238.794410] ? _copy_from_user+0x5b/0xd0 [ 1238.794426] kernel_clone+0xea/0x820 [ 1238.794436] ? get_pid_task+0xfd/0x250 [ 1238.794454] ? __pfx_kernel_clone+0x10/0x10 [ 1238.794468] ? find_held_lock+0x2b/0x80 [ 1238.794485] ? ksys_write+0x121/0x240 [ 1238.794503] ? lock_is_held_type+0x9e/0x120 [ 1238.794522] __do_sys_clone3+0x1f5/0x280 [ 1238.794533] ? __pfx___do_sys_clone3+0x10/0x10 [ 1238.794553] ? perf_trace_preemptirq_template+0x259/0x430 [ 1238.794574] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1238.794593] ? ksys_write+0x1a3/0x240 [ 1238.794609] ? __pfx_ksys_write+0x10/0x10 [ 1238.794631] do_syscall_64+0xbf/0x360 [ 1238.794644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.794656] RIP: 0033:0x7f27ed07cb19 [ 1238.794666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.794677] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1238.794689] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1238.794696] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1238.794703] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.794710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.794717] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1238.794733] 04:59:05 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 41) 04:59:05 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000000)) 04:59:05 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:59:05 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:14 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:14 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setfsuid(r0) setresuid(0xee01, r0, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in6=@remote, 0x4e20, 0x3, 0x4e20, 0x2, 0x2, 0x20, 0x0, 0x3b, 0x0, r0}, {0x2ee5, 0x4, 0x6, 0x4, 0x4, 0x4d8, 0xc6, 0x8000}, {0x5, 0x6, 0x8, 0xd66a}, 0x8, 0x6e6bbe, 0x1, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x6c}, 0x2, @in6=@private2, 0x3507, 0x3, 0x0, 0x80, 0xfffffffd, 0x80000001, 0x5}}, 0xe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:59:14 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2c646b67094c30e32cfc28418b0c0515"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x28}, @NL80211_ATTR_PMKID={0x14, 0x55, "cca27570de227ae1040566f1e1ebe840"}, @NL80211_ATTR_PMK={0x14, 0xfe, "691fca28a2febda2f6b7881304c5340b"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x80800) 04:59:14 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r0, 0x2, 0x2) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:59:14 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0xfe, 0x6, 0x9, 0x0, 0x7fffffff, 0x4c710, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x2, 0xffffff7d, 0x1, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xb) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:59:14 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 38) 04:59:14 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x38050000) 04:59:14 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 42) 04:59:14 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:14 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 43) [ 1247.936974] FAULT_INJECTION: forcing a failure. [ 1247.936974] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.938690] CPU: 1 UID: 0 PID: 11379 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1247.938720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1247.938734] Call Trace: [ 1247.938741] [ 1247.938750] dump_stack_lvl+0xfa/0x120 [ 1247.938793] should_fail_ex+0x4d7/0x5e0 [ 1247.938829] ? security_inode_alloc+0x3e/0x130 [ 1247.938861] should_failslab+0xc2/0x120 [ 1247.938884] kmem_cache_alloc_noprof+0x5f/0x470 [ 1247.938917] ? lockdep_init_map_type+0x4b/0x240 [ 1247.938948] security_inode_alloc+0x3e/0x130 [ 1247.938981] inode_init_always_gfp+0xc94/0xff0 [ 1247.939018] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1247.939039] alloc_inode+0x8d/0x250 [ 1247.939063] new_inode+0x1e/0x160 [ 1247.939087] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1247.939107] mqueue_get_inode+0x2e/0xdf0 [ 1247.939126] ? sget_fc+0x766/0xb80 [ 1247.939159] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1247.939179] mqueue_fill_super+0x14e/0x260 [ 1247.939201] get_tree_nodev+0xdc/0x190 [ 1247.939241] mqueue_get_tree+0xf6/0x140 [ 1247.939262] vfs_get_tree+0x93/0x340 [ 1247.939289] fc_mount+0x18/0x110 [ 1247.939314] mq_init_ns+0x42e/0x630 [ 1247.939342] copy_ipcs+0x38d/0x630 [ 1247.939364] ? copy_utsname+0xae/0x470 [ 1247.939388] create_new_namespaces+0x210/0xab0 [ 1247.939418] ? security_capable+0x2f/0x90 [ 1247.939451] copy_namespaces+0x45c/0x580 [ 1247.939481] copy_process+0x26d5/0x73e0 [ 1247.939515] ? __pfx__kstrtoull+0x10/0x10 [ 1247.939559] ? __pfx_copy_process+0x10/0x10 [ 1247.939594] ? __might_fault+0xe0/0x190 [ 1247.939623] ? _copy_from_user+0x5b/0xd0 [ 1247.939651] kernel_clone+0xea/0x820 [ 1247.939670] ? get_pid_task+0xfd/0x250 [ 1247.939703] ? __pfx_kernel_clone+0x10/0x10 [ 1247.939730] ? find_held_lock+0x2b/0x80 [ 1247.939760] ? ksys_write+0x121/0x240 [ 1247.939792] ? lock_is_held_type+0x9e/0x120 [ 1247.939829] __do_sys_clone3+0x1f5/0x280 [ 1247.939849] ? __pfx___do_sys_clone3+0x10/0x10 [ 1247.939884] ? __fget_files+0x20d/0x3b0 [ 1247.939921] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1247.939972] ? ksys_write+0x1a3/0x240 [ 1247.940003] ? __pfx_ksys_write+0x10/0x10 [ 1247.940044] do_syscall_64+0xbf/0x360 [ 1247.940067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.940089] RIP: 0033:0x7f4a9ce31b19 [ 1247.940106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1247.940127] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1247.940149] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1247.940164] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1247.940177] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1247.940190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1247.940203] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1247.940233] 04:59:25 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:25 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 44) 04:59:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 39) 04:59:25 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xf0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0xfffffffa, 0xfffe, 0x0, 0x3, 0x0, 0x10000000000002}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) 04:59:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) pwritev2(r3, &(0x7f0000000440)=[{&(0x7f0000000100)="6bc0aa0694acccc73d7dc854a5f7259699db9166e22647c0b3a89580ef0d86fa18e621699e0c18748fbb37e69b6d52d0091ce30c5c6f2034dd", 0x39}, {&(0x7f0000000180)="f2eb45de1c8c537658cf75e011886edcf82e0330fae831eaceecf67e8a511752fc845b6af498b214f9584c3e8cd83cbc240f2bdd635c7f31d84f6cef02e80949f2414980783b85d6f764ec162eafad69ae6a17aa1a1792bd64909c22642f088454945b39505cd51f7e47483dbce31d2190210b6ea80fc20e3a8f36b9a35365bee02f7b5a3393e6579076007290038bf3a626a44fc564c7f50b8fd1736510e49ed605f669ae4c584002173c9a2b6a2e30f9e09f1a2289b3f655af5e63f3f5ed1a53722725161d713a615e", 0xca}, {&(0x7f0000000280)="c3868da369822f0d5eaf4eea3cc27a673821040f4a854d83a0e1ef654bdb9a03fce3d7f93feb8e922f8a40169591ab2df912fa41dcf689dc9d8b15a2a5141bf9126256cabc747e731f66567d14", 0x4d}, {&(0x7f0000000300)="c072df0c09174b7923e5bdfe34e61d8434229f8be9b90ff346b0ff6d7648eb8ef0656c3c49a0f30b6d689545288bed8a6dd945ce14ca9df03a0f406c07ff04fa3094024127b84167b1396679ac4333f596db06403c778d03c9c9744f8e09b0af70bbfc1a4159f9e78aef7764495c69a671d37dd13c87879ab639887301671e1e87dd0dcf91b7d8b94bc3590c6167a91126a81c89ea02aab392d3b9135d66f8442bedf4da832ba017484d5d5ce871130602959f673d6545b54945249596169f69019526f65d773f03165c5855debb21dd2a9fc637e267c18cd1e5c21b173d38769fa1badf0fbd4b7c94", 0xe9}], 0x4, 0xf482, 0x0, 0x4) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000480), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r3, r5, 0x2) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:59:25 executing program 7: perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x800f}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x9]}, 0x8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 04:59:25 executing program 3: setresuid(0xee01, 0xee00, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)={0x18, r3, 0x1, 0x0, 0x0, {0x6}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x7, 0x7ff, 0x2e, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8000, 0x2, 0x1}}) getpeername$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001740)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000001840)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'syztnl1\x00', &(0x7f0000001880)={'ip6_vti0\x00', 0x0, 0x4, 0x7f, 0x3, 0x8, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x0, 0x4}}) r9 = memfd_secret(0x0) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000280)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001940)={0x18c, r3, 0x10, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x1}, 0x40810) 04:59:25 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x64000000) [ 1258.157801] FAULT_INJECTION: forcing a failure. [ 1258.157801] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.159054] CPU: 1 UID: 0 PID: 11391 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1258.159075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.159084] Call Trace: [ 1258.159090] [ 1258.159096] dump_stack_lvl+0xfa/0x120 [ 1258.159127] should_fail_ex+0x4d7/0x5e0 [ 1258.159154] ? memcg_list_lru_alloc+0x4da/0x760 [ 1258.159174] should_failslab+0xc2/0x120 [ 1258.159189] __kmalloc_noprof+0xb4/0x4b0 [ 1258.159215] ? __lock_acquire+0x694/0x1b70 [ 1258.159235] memcg_list_lru_alloc+0x4da/0x760 [ 1258.159259] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1258.159284] ? get_mem_cgroup_from_objcg+0xf8/0x430 [ 1258.159304] __memcg_slab_post_alloc_hook+0x130/0x9d0 [ 1258.159328] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1258.159350] ? __create_object+0x59/0x80 [ 1258.159369] kmem_cache_alloc_lru_noprof+0x3c1/0x460 [ 1258.159390] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1258.159415] ? mqueue_alloc_inode+0x27/0x50 [ 1258.159434] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1258.159448] mqueue_alloc_inode+0x27/0x50 [ 1258.159462] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1258.159475] alloc_inode+0x67/0x250 [ 1258.159493] new_inode+0x1e/0x160 [ 1258.159509] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1258.159523] mqueue_get_inode+0x2e/0xdf0 [ 1258.159536] ? sget_fc+0x766/0xb80 [ 1258.159559] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1258.159573] mqueue_fill_super+0x14e/0x260 [ 1258.159588] get_tree_nodev+0xdc/0x190 [ 1258.159610] mqueue_get_tree+0xf6/0x140 [ 1258.159625] vfs_get_tree+0x93/0x340 [ 1258.159644] fc_mount+0x18/0x110 [ 1258.159662] mq_init_ns+0x42e/0x630 [ 1258.159681] copy_ipcs+0x38d/0x630 [ 1258.159696] ? copy_utsname+0xae/0x470 [ 1258.159714] create_new_namespaces+0x210/0xab0 [ 1258.159735] ? security_capable+0x2f/0x90 [ 1258.159759] copy_namespaces+0x45c/0x580 [ 1258.159780] copy_process+0x26d5/0x73e0 [ 1258.159805] ? __pfx__kstrtoull+0x10/0x10 [ 1258.159835] ? __pfx_copy_process+0x10/0x10 [ 1258.159859] ? __might_fault+0xe0/0x190 [ 1258.159878] ? _copy_from_user+0x5b/0xd0 [ 1258.159898] kernel_clone+0xea/0x820 [ 1258.159910] ? get_pid_task+0xfd/0x250 [ 1258.159934] ? __pfx_kernel_clone+0x10/0x10 [ 1258.159953] ? find_held_lock+0x2b/0x80 [ 1258.159974] ? ksys_write+0x121/0x240 [ 1258.159996] ? lock_is_held_type+0x9e/0x120 [ 1258.160021] __do_sys_clone3+0x1f5/0x280 [ 1258.160050] ? __pfx___do_sys_clone3+0x10/0x10 [ 1258.160074] ? __fget_files+0x20d/0x3b0 [ 1258.160099] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1258.160125] ? ksys_write+0x1a3/0x240 [ 1258.160147] ? __pfx_ksys_write+0x10/0x10 [ 1258.160175] do_syscall_64+0xbf/0x360 [ 1258.160191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.160207] RIP: 0033:0x7f27ed07cb19 [ 1258.160219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.160234] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1258.160249] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1258.160259] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1258.160268] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.160278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1258.160286] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1258.160307] 04:59:25 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:25 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:59:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 40) 04:59:25 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x7ffffffb) 04:59:25 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:25 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 45) 04:59:25 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:59:25 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) [ 1258.460778] FAULT_INJECTION: forcing a failure. [ 1258.460778] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.461760] CPU: 1 UID: 0 PID: 11425 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1258.461777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.461785] Call Trace: [ 1258.461790] [ 1258.461796] dump_stack_lvl+0xfa/0x120 [ 1258.461822] should_fail_ex+0x4d7/0x5e0 [ 1258.461841] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1258.461856] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1258.461867] should_failslab+0xc2/0x120 [ 1258.461881] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 1258.461900] ? __d_alloc+0x31/0xa10 [ 1258.461914] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1258.461925] __d_alloc+0x31/0xa10 [ 1258.461935] ? mqueue_get_inode+0x1f6/0xdf0 [ 1258.461947] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1258.461959] d_make_root+0x42/0x90 [ 1258.461970] mqueue_fill_super+0x176/0x260 [ 1258.461982] get_tree_nodev+0xdc/0x190 [ 1258.462001] mqueue_get_tree+0xf6/0x140 [ 1258.462013] vfs_get_tree+0x93/0x340 [ 1258.462028] fc_mount+0x18/0x110 [ 1258.462042] mq_init_ns+0x42e/0x630 [ 1258.462058] copy_ipcs+0x38d/0x630 [ 1258.462070] ? copy_utsname+0xae/0x470 [ 1258.462084] create_new_namespaces+0x210/0xab0 [ 1258.462101] ? security_capable+0x2f/0x90 [ 1258.462121] copy_namespaces+0x45c/0x580 [ 1258.462137] copy_process+0x26d5/0x73e0 [ 1258.462156] ? __pfx__kstrtoull+0x10/0x10 [ 1258.462181] ? __pfx_copy_process+0x10/0x10 [ 1258.462204] ? __might_fault+0xe0/0x190 [ 1258.462221] ? _copy_from_user+0x5b/0xd0 [ 1258.462236] kernel_clone+0xea/0x820 [ 1258.462247] ? get_pid_task+0xfd/0x250 [ 1258.462266] ? __pfx_kernel_clone+0x10/0x10 [ 1258.462281] ? find_held_lock+0x2b/0x80 [ 1258.462299] ? ksys_write+0x121/0x240 [ 1258.462317] ? lock_is_held_type+0x9e/0x120 [ 1258.462338] __do_sys_clone3+0x1f5/0x280 [ 1258.462349] ? __pfx___do_sys_clone3+0x10/0x10 [ 1258.462369] ? __fget_files+0x20d/0x3b0 [ 1258.462390] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1258.462411] ? ksys_write+0x1a3/0x240 [ 1258.462428] ? __pfx_ksys_write+0x10/0x10 [ 1258.462450] do_syscall_64+0xbf/0x360 [ 1258.462466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.462481] RIP: 0033:0x7f4a9ce31b19 [ 1258.462492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.462504] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1258.462516] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1258.462525] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1258.462532] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.462540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1258.462547] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1258.462563] 04:59:25 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x80040000) 04:59:36 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 41) 04:59:36 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() r1 = gettid() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0/file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7b, 0x81, 0x40, 0x2, 0x0, 0x100000000, 0xc4a, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x5004, 0x10001, 0x1, 0x8, 0x3f, 0x3, 0x1, 0x0, 0xd5, 0x0, 0x8}, r1, 0x2, r2, 0x8) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:59:36 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0), 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) r3 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0/file0\x00'}) copy_file_range(r2, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x401, 0x401, 0x0) recvmmsg$unix(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000540)=""/10, 0xa}, {&(0x7f0000000580)=""/142, 0x8e}, {&(0x7f0000000640)=""/101, 0x65}], 0x9, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000010000000000000000eefbe9a203935e1ea9a6c4db73d946ad9dbe0c94c93e1cf9a0abceb74ec6430d51bda2f9ee97e444beaea61c0388b8c0ae785befdc508aade4e37007040f0e6225b3be8390cc88f679a5557a426c4762129573848d7bbb5e2bbd3b55b168024b7c0be0ca6eee", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x58}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/108, 0x6c}, {&(0x7f0000000880)=""/237, 0xed}, {&(0x7f0000000980)=""/162, 0xa2}], 0x3, &(0x7f0000000a80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x2, 0x1, &(0x7f0000000b40)={0x77359400}) r4 = syz_io_uring_complete(0x0) r5 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:59:36 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 46) 04:59:36 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x131002, 0x26) write$binfmt_script(r0, 0x0, 0x0) 04:59:36 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000180)={{r0}, 0x4, &(0x7f00000000c0)=[0xffffffffffffffc0, 0x100, 0x5, 0x80000001], 0x7, 0x0, [0x9, 0x8, 0xffffffff00000001, 0x5]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, 0x0, r0, 0x0, 0x401, 0x0) 04:59:36 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0xa1ffffff) 04:59:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 42) 04:59:36 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:36 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000540)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000009c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000a40)={0x35c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5b, 0x3, "f70115103c4a956310d9b7041d3999aba6d9b154d4f12c678e7bfea61718c52ea9209a290cccf234ac5a06d07de887fe26b97081811033efd6a24513460deaf03cc2a9a8cdab5a2993c5f69b1fd9890e55e04173066f80"}, @TIPC_NLA_NODE_ID={0xe8, 0x3, "6df3c7fbd66506cb6b31eb6543a67a230a8a69d8a834167093a12a5ddfdf7bcd217720a73de7891941074de3214085aab13f4b66d208c1b18db5519f014e302e5c9d0e953db96e5e0a602b4952424bcfae3fd480886116969e73bc738e1b6acdb35f8ecd904f7304646d266ed87355d0d5ab13817ee6cffdaa7e9f7de667bbfc6be48ea23ca58e00c07e1c6bfab68e7a7d0fddd964affc8174bf4dd4e359925d7ad727b461bf33d6efe6434311c8ab869b5d72e1f3166a4c61e47fa0d46d3b0ff39132baeac262e8b36f069f28e00b33d95d6773dffbe3e8f71f577b3f28c957c139d15d"}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "e35b6e4561d72074d04edb746b74aeffd4cedb11f3310017e2c480fab6b0"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "2a002dad4c3adbe933df28609bbd3226ba419447621664b6"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc98}, @TIPC_NLA_PUBL_TYPE={0x0, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x4, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x91}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x15}, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) pwritev2(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)="254b414c1a4f4bd56977d653cee5041d38ac45b2fb350b324ec4aa4d1399d2f38e0017a245b27fdeb667a3a97cc998854cb7ba1af87ced6a79258df7d2ef89a001aef1705a11dc2b1b3bffcc7a5f392aa2040cfaed0a246dc1af57255b507eb2076dedab34aa15879eb1fc88235529bf84a64bd396a2ba077ed0ea70190249a6910725a76e20d4", 0x87}, {&(0x7f0000000180)="3547cae7972dedec00b9ba16f639498bdfcd328a28b504c951fe410e30c4889afc88e4b757e15f96d50662cbcc2627484d9e6ed3de1bcd7ee3ad496b4e3e4e3a15571759cf001ce578f7140534fd3d74ebd3f360efef5ad9be33f850fc8c", 0x5e}, {&(0x7f0000000200)="90e115fc7e616338424f36ca651af850d3e40643acacdc0b6e7635654710892f3498a2f73508a87c7f8cea2a03033561a71c173127f846de61256a052982c8282242c13c9924d1e5fa4e67e65d9441ff6efd0a2da9b1f86cc3662211f53709220c9e18fee299508e4ba8c281000b9e6fc8155d87e4d88b258f4109cd7f", 0x7d}, {&(0x7f0000000280)="00faee6c8520fbb8a9c8072ba379c250b0f2df2c6f24a94251fdda4ad9dc8abc4f7b50c704ca35", 0x27}, {&(0x7f00000002c0)="4ff006766a8eebeabe83621914a828aa9d358645ef4b80b59b5be4c9b70d7c894b6eab92597d06c93268b5d5ec02a18786c42625a364c601013c97b81bb1c69882ebe98ae1f713ec89fb14553b259aea3cc493840ad557980f44e8b194de7ed9379965", 0x63}, {&(0x7f00000003c0)="45a24535da49beeb52654793cdc3874350495fedbf3cfd77ba91e15568342e409e3114f457d19d4f0aa5b9c7a94ec5b746eac2f9fb33f86e3e7e7142129b344c93231bc8a994b0e47590a0b68497b41a2075c4d5a405c479a03dfe02bcdeb65899ca739f242eda9da99af397ea77e1f13dae1a7bbf901e3d20c44d3b1c44d0843a9acce2fa85379dfd5c48e5e20b1c6bcd7a8a657826dec33bceea44c4fe6a818e3e04f0c8b3bca520a0407a0c417636094b23e92667250f9533ce0bf6359c14a7", 0xc1}], 0x6, 0xfffffffc, 0xea10, 0x6) r4 = dup2(r2, r0) open_by_handle_at(r4, &(0x7f0000000a00)=@reiserfs_6={0x18, 0x6, {0x1, 0x4, 0x2, 0x1, 0x2, 0x80}}, 0x281100) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:59:36 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0xfbffff7f) 04:59:36 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 47) [ 1269.934730] FAULT_INJECTION: forcing a failure. [ 1269.934730] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.935822] CPU: 1 UID: 0 PID: 11468 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1269.935839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1269.935847] Call Trace: [ 1269.935851] [ 1269.935856] dump_stack_lvl+0xfa/0x120 [ 1269.935882] should_fail_ex+0x4d7/0x5e0 [ 1269.935903] ? memcg_list_lru_alloc+0x4da/0x760 [ 1269.935918] should_failslab+0xc2/0x120 [ 1269.935930] __kmalloc_noprof+0xb4/0x4b0 [ 1269.935946] ? __lock_acquire+0x694/0x1b70 [ 1269.935963] memcg_list_lru_alloc+0x4da/0x760 [ 1269.935981] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1269.936000] ? get_mem_cgroup_from_objcg+0xf8/0x430 [ 1269.936017] __memcg_slab_post_alloc_hook+0x130/0x9d0 [ 1269.936035] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1269.936053] ? __create_object+0x59/0x80 [ 1269.936068] kmem_cache_alloc_lru_noprof+0x3c1/0x460 [ 1269.936085] ? __d_alloc+0x31/0xa10 [ 1269.936098] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1269.936110] __d_alloc+0x31/0xa10 [ 1269.936120] ? mqueue_get_inode+0x1f6/0xdf0 [ 1269.936145] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1269.936155] d_make_root+0x42/0x90 [ 1269.936166] mqueue_fill_super+0x176/0x260 [ 1269.936178] get_tree_nodev+0xdc/0x190 [ 1269.936196] mqueue_get_tree+0xf6/0x140 [ 1269.936211] vfs_get_tree+0x93/0x340 [ 1269.936226] fc_mount+0x18/0x110 [ 1269.936240] mq_init_ns+0x42e/0x630 [ 1269.936255] copy_ipcs+0x38d/0x630 [ 1269.936267] ? copy_utsname+0xae/0x470 [ 1269.936282] create_new_namespaces+0x210/0xab0 [ 1269.936298] ? security_capable+0x2f/0x90 [ 1269.936317] copy_namespaces+0x45c/0x580 [ 1269.936333] copy_process+0x26d5/0x73e0 [ 1269.936352] ? __pfx__kstrtoull+0x10/0x10 [ 1269.936376] ? __pfx_copy_process+0x10/0x10 [ 1269.936395] ? __might_fault+0xe0/0x190 [ 1269.936410] ? _copy_from_user+0x5b/0xd0 [ 1269.936425] kernel_clone+0xea/0x820 [ 1269.936435] ? get_pid_task+0xfd/0x250 [ 1269.936453] ? __pfx_kernel_clone+0x10/0x10 [ 1269.936468] ? find_held_lock+0x2b/0x80 [ 1269.936485] ? ksys_write+0x121/0x240 [ 1269.936502] ? lock_is_held_type+0x9e/0x120 [ 1269.936522] __do_sys_clone3+0x1f5/0x280 [ 1269.936533] ? __pfx___do_sys_clone3+0x10/0x10 [ 1269.936552] ? __fget_files+0x20d/0x3b0 [ 1269.936572] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1269.936592] ? ksys_write+0x1a3/0x240 [ 1269.936609] ? __pfx_ksys_write+0x10/0x10 [ 1269.936631] do_syscall_64+0xbf/0x360 [ 1269.936643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.936656] RIP: 0033:0x7f4a9ce31b19 [ 1269.936666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1269.936678] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1269.936690] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1269.936698] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1269.936705] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1269.936712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1269.936719] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1269.936735] 04:59:36 executing program 3: setresuid(0xee01, 0xee00, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x5e, 0x7, 0x7, 0x8ed6, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7800, 0x8000, 0x9a6, 0xffff}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002280), 0x492282, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000002340)=@req={0x28, &(0x7f0000002300)={'veth1\x00', @ifru_settings={0x0, 0x0, @fr=&(0x7f00000022c0)={0x1f, 0x3, 0x1, 0x9, 0x1f, 0x1000, 0x9}}}}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@local, @in6=@loopback, 0x4e22, 0x0, 0x4e24, 0x7f, 0xa, 0x20, 0x20, 0x2c, r0, r2}, {0x934, 0x1ff, 0x3, 0x76, 0x2, 0x200, 0x10001}, {0x5, 0x0, 0x40, 0x6}, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x3, 0x0, 0x94, 0x1, 0x8, 0x3}}, 0xe8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001600), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001680)=""/101, 0x65}, {&(0x7f0000001700)=""/103, 0x67}, {&(0x7f0000001780)=""/224, 0xe0}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000001940)=""/14, 0xe}], 0x5, &(0x7f0000001a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001b40)=""/172, 0xac}, {&(0x7f0000001c00)=""/199, 0xc7}, {&(0x7f0000001d00)=""/32, 0x20}, {&(0x7f0000001d40)=""/221, 0xdd}, {&(0x7f0000001e40)=""/168, 0xa8}], 0x5, &(0x7f0000001f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x2, 0xe73278e17b835c0, &(0x7f00000020c0)={0x0, 0x3938700}) syz_mount_image$nfs4(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000001580)=[{&(0x7f0000000440)="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", 0x1000, 0x8239}, {&(0x7f0000001440)="3384e57b5c14f35a4365fade4b58aba8a22a826caf187a241c5b960ad20ec3a3353edf8e7cbf9690fb2f03c310706192013865d1cb8f88371523786949e0d82e0c468f82ac54f0d3dbce13e396ee0ae12ce33d0aa7fba0f79584c1d37b0435cd6e11caf477ebf359df1b5589346baf8c62ecd47a005990013bb313122ce39a9a38d99650b730c1ac6402f9deb9c9b835ae19a74a97fb5a14791478e713f1f995ba15b65a1a630ccef937fd989373bf15898511a3ada5b7bf2e0e04eed7c8a2420ee37707b9473b4f2836518bf4473bf3e1fac76bf817baf91907163132d9cbad5b", 0xe1, 0xdf6}, {&(0x7f0000001540)="52d043efc1666514ea4dec175dc574ba26933067064b224e0fc87fa47c23f263d466540981a7dd35a84b8d9c404fbc8704", 0x31, 0x6}], 0x22000, &(0x7f0000002100)={[{}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_hash}, {@fowner_eq={'fowner', 0x3d, r3}}, {@subj_role={'subj_role', 0x3d, 'trans=unix,'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x39, 0x64, 0x35, 0x64, 0x31, 0x35, 0x34], 0x2d, [0x63, 0x66, 0x39, 0x31], 0x2d, [0x66, 0x32, 0x0, 0x37], 0x2d, [0x39, 0x31, 0x39, 0x31], 0x2d, [0x36, 0x30, 0x63, 0x36, 0x35, 0x36, 0x32, 0x33]}}}]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = fcntl$dupfd(r5, 0x0, r5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r6) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x44406, &(0x7f0000000300)={'trans=unix,', {[{@uname={'uname', 0x3d, 'sit0\x00'}}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-\xe0'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r2}}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@seclabel}]}}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r7) fchown(r7, 0xee01, r4) 04:59:36 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x4b8000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f0000001640)='./file0\x00', 0x400, 0x174) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000001800)) write$binfmt_script(r2, &(0x7f0000001680)={'#! ', './file0', [{0x20, '/dev/hpet\x00'}, {}, {0x20, '+*^'}, {0x20, '/dev/hpet\x00'}, {0x20, '/dev/hpet\x00'}, {0x20, '/dev/hpet\x00'}]}, 0x3c) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001e80)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x40, 0x4, 0x1, 0x6, 0x0, 0x401, 0xc0208, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x0, 0x2}, 0x200, 0xbef, 0x1, 0x3, 0xfffffffffffffff7, 0x9, 0x5b1, 0x0, 0xd2, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) connect(r1, &(0x7f0000001780)=@pppoe={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 'erspan0\x00'}}, 0x80) mknodat$loop(0xffffffffffffff9c, &(0x7f0000001e40)='./file0\x00', 0x40, 0x1) sendfile(r0, r0, 0x0, 0x8) recvmmsg$unix(r5, &(0x7f0000004700)=[{{&(0x7f0000000100), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000200)=""/176, 0xb0}], 0x4}}, {{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000001440)=""/86, 0x56}], 0x1, &(0x7f00000014c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000001840)=[{&(0x7f00000016c0)=""/100, 0x64}, {&(0x7f0000001600)=""/18, 0x12}, {&(0x7f0000001740)=""/56, 0x38}, {&(0x7f0000001780)}, {&(0x7f00000017c0)}, {&(0x7f0000001800)}], 0x6, &(0x7f00000018c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000019c0)=""/70, 0x46}, {&(0x7f0000001a40)=""/82, 0x52}, {&(0x7f0000001ac0)=""/29, 0x1d}, {&(0x7f0000001b00)=""/101, 0x65}, {&(0x7f0000001b80)=""/193, 0xc1}, {&(0x7f0000001c80)=""/86, 0x56}, {&(0x7f0000001d00)=""/155, 0x9b}], 0x7, &(0x7f0000004300)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="5e2f1b7fefa4b66400bf50c7fb406067b6271e39713d7d553d7e02f7af88cb8ac7fd19656db19b41ad2fff3f7c875783fee7939b1f5a8acd835e7aecf2816004bc77ba94e0807337c579b50b7f2517309928ed2fcb08e00573e4d34f46616584cac0897cd44c82ab9e"], 0x78}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001f40)=""/71, 0x47}, {&(0x7f0000001fc0)=""/160, 0xa0}, {&(0x7f0000002080)=""/67, 0x43}, {&(0x7f0000002100)=""/15, 0xf}, {&(0x7f0000002140)=""/105, 0x69}], 0x5, &(0x7f0000002240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f00000022c0), 0x6e, &(0x7f0000003680)=[{&(0x7f0000002340)=""/240, 0xf0}, {&(0x7f0000002440)=""/210, 0xd2}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/241, 0xf1}, {&(0x7f0000003640)=""/12, 0xc}], 0x5, &(0x7f0000003700)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f00000037c0)=@abs, 0x6e, &(0x7f0000003880)=[{&(0x7f0000003840)=""/60, 0x3c}], 0x1, &(0x7f00000038c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003a80)=""/97, 0x61}, {&(0x7f0000003b00)=""/199, 0xc7}, {&(0x7f0000003c00)=""/162, 0xa2}, {&(0x7f0000003cc0)=""/32, 0x20}, {&(0x7f0000003d00)=""/111, 0x6f}, {&(0x7f0000003d80)=""/116, 0x74}, {&(0x7f0000003e00)=""/207, 0xcf}], 0x7, &(0x7f0000003f80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000001000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000004040)=""/229, 0xffdf}, {&(0x7f0000004140)=""/78, 0x4e}, {&(0x7f00000041c0)=""/28, 0x1c}, {&(0x7f0000004200)=""/138, 0x8a}], 0x4, &(0x7f0000004a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000004440)=@abs, 0x6e, &(0x7f0000004500)=[{&(0x7f00000044c0)=""/58, 0x3a}], 0x1, &(0x7f0000004540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x188}}], 0xa, 0x40, &(0x7f0000004980)={0x0, 0x989680}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000004a00)={0x4, 0x80, 0x3, 0x2, 0x81, 0x4, 0x0, 0x7ff, 0x504, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000049c0), 0xe}, 0x2000, 0x8, 0x3, 0x5, 0x1, 0x2, 0xfff, 0x0, 0x38d, 0x0, 0x6}) ioctl$CDROMSEEK(r1, 0x5316, &(0x7f0000000040)={0x97, 0x1, 0xff, 0x1f, 0x1, 0x9}) 04:59:37 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:37 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x111) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x4000) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:59:37 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:59:37 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 43) 04:59:37 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) chdir(&(0x7f0000000000)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:37 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 48) 04:59:37 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r2) setresuid(r1, 0xffffffffffffffff, r2) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 1270.150127] FAULT_INJECTION: forcing a failure. [ 1270.150127] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.152296] CPU: 0 UID: 0 PID: 11487 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1270.152329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1270.152343] Call Trace: [ 1270.152351] [ 1270.152360] dump_stack_lvl+0xfa/0x120 [ 1270.152405] should_fail_ex+0x4d7/0x5e0 [ 1270.152444] ? security_inode_alloc+0x3e/0x130 [ 1270.152479] should_failslab+0xc2/0x120 [ 1270.152503] kmem_cache_alloc_noprof+0x5f/0x470 [ 1270.152537] ? lockdep_init_map_type+0x4b/0x240 [ 1270.152570] security_inode_alloc+0x3e/0x130 [ 1270.152607] inode_init_always_gfp+0xc94/0xff0 [ 1270.152646] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1270.152669] alloc_inode+0x8d/0x250 [ 1270.152694] new_inode+0x1e/0x160 [ 1270.152720] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1270.152742] mqueue_get_inode+0x2e/0xdf0 [ 1270.152762] ? sget_fc+0x766/0xb80 [ 1270.152797] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1270.152819] mqueue_fill_super+0x14e/0x260 [ 1270.152842] get_tree_nodev+0xdc/0x190 [ 1270.152876] mqueue_get_tree+0xf6/0x140 [ 1270.152899] vfs_get_tree+0x93/0x340 [ 1270.152929] fc_mount+0x18/0x110 [ 1270.152955] mq_init_ns+0x42e/0x630 [ 1270.152985] copy_ipcs+0x38d/0x630 [ 1270.153009] ? copy_utsname+0xae/0x470 [ 1270.153035] create_new_namespaces+0x210/0xab0 [ 1270.153067] ? security_capable+0x2f/0x90 [ 1270.153103] copy_namespaces+0x45c/0x580 [ 1270.153136] copy_process+0x26d5/0x73e0 [ 1270.153173] ? __pfx__kstrtoull+0x10/0x10 [ 1270.153226] ? __pfx_copy_process+0x10/0x10 [ 1270.153263] ? __might_fault+0xe0/0x190 [ 1270.153293] ? _copy_from_user+0x5b/0xd0 [ 1270.153324] kernel_clone+0xea/0x820 [ 1270.153344] ? get_pid_task+0xfd/0x250 [ 1270.153380] ? __pfx_kernel_clone+0x10/0x10 [ 1270.153409] ? find_held_lock+0x2b/0x80 [ 1270.153441] ? ksys_write+0x121/0x240 [ 1270.153475] ? lock_is_held_type+0x9e/0x120 [ 1270.153514] __do_sys_clone3+0x1f5/0x280 [ 1270.153535] ? __pfx___do_sys_clone3+0x10/0x10 [ 1270.153576] ? perf_trace_preemptirq_template+0x259/0x430 [ 1270.153617] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1270.153655] ? ksys_write+0x1a3/0x240 [ 1270.153688] ? __pfx_ksys_write+0x10/0x10 [ 1270.153732] do_syscall_64+0xbf/0x360 [ 1270.153757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.153781] RIP: 0033:0x7f27ed07cb19 [ 1270.153800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1270.153824] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1270.153847] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1270.153863] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1270.153877] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1270.153891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1270.153905] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1270.153937] 04:59:46 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 44) 04:59:46 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x400200, 0x0) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="b91d2aa377ab040aff4437bab98d265984485e9a91898e5ab53fcdeb1116fd51d162e9a9eae952a84b7e30ba2135abbdda2bef0ad38ad11eeb5d3190c028e67088ad33cdb8f61481a50488535ea30f9980b57cc7e8eb19d8ce3dad8fe9b794011a5e9b01a0ddee51f356dc1ff4d88d12048f5b626151d777ac1fbbad1b7c02a038be5ac766b3a933bf798a9e30776316b8c9965adb4e339266d817a35c46796ab2448895666652e12b8347b97ec30f6b4a196827201723b763d55ef5cc245b8bbc908dbb1f48745123b4bf9131060e0186ba358c", 0xd4}, {&(0x7f0000000240)="df5356a7a628e965a4791816b903ed8c9dbb5488528be07e93da30d321014f592c16", 0x22}, {&(0x7f0000000280)="2a090f923454471acd105ddbc436797679deb0733c6aa3f81de9cf877a0809e63c913f6eb2e0c53030cac51cdd986beba8a9fbd219e5", 0x36}, {&(0x7f0000000440)="5acdab1118b3bdd1b68395cadc88e72aa396810156afe70de94624e0dd185162b6be2843dd0e495c4f73a6635e119194ffb2c02bfe2f75949d6b15ec2a50ffb2f578be8716934a2f989fed1fc2eba05ef90c56d8a62ccc7986d86ab10fd8a9b1f4d0af667d23f0418a382ddef4d4dc1a914e721b2645c00af7590ccafe53570f1e09b841dd138a92a0f877244d6192165d4823d8ca9f561b2bae445c7a4c4df03e0f5daa6fdff1ab029f127aada08fea373ec9cb3e8fd2926c541885f2dec962397c5132e4dfed8631eeeba4af30b186f14cd7cdfc0db91be93212e32f9f0b81ecee90e6a5c1ad2565d42fa0b2d3f3", 0xef}, {&(0x7f0000000540)="23cffd66e7f2ad0017c203f0e3619bce99b57c7458c6a9c72a32b03aa04263cd47b71427488151c9cba68ca0cdcb582a80b93ace6418bcbeff420a808ffc66c0bd6d7b97c8d683a8f8eec1f8a21a235968fff8ea408b91ef3c77d5d33ae8059ec33cb7d0b580da5679180fccbe2a3018f8b40a36edf460f66117e5dd919fc57575b4eed182935124b9e35abcbdc8346a1cafc9b52e779ef9746b65fff435fd6ffd0e1dfd07621fb2fd0780b0c2e4eed4", 0xb0}, {&(0x7f0000000600)="77bbd21dcce602b741b3019a72cfd7350e0f690f1857db11077cdd1ec9a5a1e3e2eb190bd7065d0d87442fb41aa8d5799e5eb1959c38040cd750c8aaa8b0ac2bf1d9dd7774efa270eabe54f63d1245a637f2b433675bead53eabcdecc6037a76a38ed158517a2fd8bcf4d1ed398aed3ece0038453da15a05d13cef9b90e4f2574b525290e4fe20eda76dde2833efb632b14742", 0x93}], 0x6, 0xe, 0xa3e, 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file0', [{}], 0xa, "5f65a7ebea382beb446ab3e178c6b2a8358fc595288b6433a50d6c10d500dd65effd7da0e56119e5be290250fa4bc4671fdd330ae18a33aeecf67f2c766950d0c9c65447825dde0c706ed85350101d306b03d4989edbedda001d2f609655"}, 0x6a) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 04:59:46 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0xfeffffff) 04:59:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x0, 0x3, 0x5, 0x0, 0x3, 0x82, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x5, 0x2000000000000000}, 0x40100, 0x5f, 0x1ff, 0x7, 0x1, 0x8, 0x3, 0x0, 0xe1c, 0x0, 0x2}, r0, 0xa, r1, 0x8) 04:59:46 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:46 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 49) 04:59:46 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x26) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:59:46 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) r5 = socket$inet6(0xa, 0x4, 0xffffffff) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r7 = accept(r5, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000300)=0x80) sendmsg$netlink(r4, &(0x7f0000003400)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002980)=[{&(0x7f0000000440)={0x150, 0x1d, 0x20, 0x70bd29, 0x25dfdbfd, "", [@nested={0x8, 0x52, 0x0, 0x1, [@typed={0x4, 0xa}]}, @typed={0x8, 0x16, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x2b, 0x0, 0x0, @uid=0xee01}, @generic="3b159a6e94c76a356b3e783c17e82657e03b429a8e4ca77421a6e9e087c4c648528107b05057c16985c62ad9bce6f27be142edcb0267a4e27b95", @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @generic="e87101a2bb1f64ef7b0f9808799b59bcabba1e3309660db1009ce6538d3b8e13b50a635801639d36db5126", @generic="f15e95112ec0c8f1246c3744bd54fac4c8ae61dbc55212cbedcfc5bcd017c1dbbd36785681ab4f7e20ab6086e1afc158082477e75ee77d32afa054d0616381957f70f1c41c0ee64cefd891f062d59b5ecda6739d937eb33ebc707998b74792daf194a709bb841efbac58f366f70618a37b7fb680274709dde977103cbc1a484d6fddca1c54f90a6991f44c82edce90b4eb02d8dffb66cad5e41de53ad6", @generic="ce51e554ccea75a42c9aae", @typed={0x4, 0x1e}]}, 0x150}, {&(0x7f00000015c0)={0x35c, 0x3b, 0x10, 0x70bd28, 0x25dfdbfb, "", [@nested={0x10, 0x16, 0x0, 0x1, [@typed={0xc, 0x1f, 0x0, 0x0, @u64=0xfffffffffffffff9}]}, @generic="50909f937a57cc85dfc2b8a426d8182924b422835a57d4e7ea976a7aa09f74f7fe82be4e", @generic="e2f1f0f9b3621a942dae900f0598dee84894fd77e823449435c2d0bfb975fa40ed69e2a822de2211", @typed={0x8, 0x50, 0x0, 0x0, @ipv4=@remote}, @generic="fad845494528ec744a47e77eeb080fefe472e3a474de772ba0c43f4bcf25a5f84283f1cbb48e591ed0bdcd238d021882fe039dc3d1435768e33ae30cf1c10a0f54ba4d4955a85a47e7d55497926936626bc9a742f22a396be8d4f9e50b2109c5ad1c01a03520d899908dcf2489efe8f3ee9fc657c76905b6757501e4ec6174159a589d87f6aa7b5fa95a9ae6196eea65868c3d630744eaecfaf272735cd36eb8e30c58d566dfc4cd73ba8865fa5c7447d42faad00af0c6cffeb6845e3eca539f01b1528bd14944aa8c25c1350d1f5e8b8c73797697a00787756a4e1cd86bb504d6", @typed={0x8, 0x31, 0x0, 0x0, @uid}, @generic="b564aea1c6b1cfebe3e63679d51b758404949b29430de5464d5f9cfdaf8f97aecc65126de1927fbf36c0dd5e54aca84ecc357b7ba87a1fb3e558369049661c605145c8ef5f4f4ec503dd88bbdf06b7064cf8490042cb5e38d9590dacb58601d2c449f1e7ed27371a4de82550c028c88896962f10b2ed4b0f79a30f016f85e1a03944b7da88b56442afa7b8db175e4605ae7e8c3065b41495c4d31ddec35b65a449df8987e48a7a8d7563e03bc2acba2dd05d84d4674db316bd5d59eda47f0b51c936f174d9436531e8f3a3606d76d55ee636704ed0885e", @nested={0x118, 0x3d, 0x0, 0x1, [@generic="22fedc029bd1aa25ea19bc228140b175aceff8680727e5babd71c3b346b8", @generic="0dd2c744fbde6ccaee1e037534ac5763d5958b73c85962c8046d2adad5e613640a10dc89569d678ddfd8e444014247ec343146667b8795d910771d0b6d18eef9bda06c3ad0eaaf3b9e0b1d8a1897c23d7681637b89ef2960682e32e2d80dd2927427d3d28cee2d683d9d88bac24a476288401e81ea76f449217bf34436d20c9cba67810c019e1979c37bba9c775e53a9f7a268fcec7108c48889f42074201218e45ed1583e92bc71a91d88c8e25e0a188d94ab8ae2936af673b7b671ad5eb984dbffdc3a532cc8284927c6915e13a3a67d5fb41038803d91d7b1451b6ad2117f88abee311df61f1ac38d45119cc9c589c643", @typed={0x4, 0x3}, @generic]}, @generic="3b12f4407c45630427514e5f6f26a3"]}, 0x35c}, {&(0x7f00000045c0)={0x2238, 0x25, 0x4, 0x70bd2b, 0x7, "", [@nested={0x10f4, 0x2f, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @pid}, @generic="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", @generic="ad1f6d4ce6f53ed75d6ef67990299e4bb75ed46ae45c5801c7b923132f0b602ea843b8f1a76adcac593351d74d81c999e0bfea2eebef0c22b82087b7", @generic="795f1ad0495cb777fd9c0ac0cc4d45d6ff5ac88927ba20b61d44451d2b4bf8a647888b79faf328bddebc03fcf5710b3abb24556129401a70acaa144c325b2bb061df52f6faa12b11be23a270f27c3775ca886732363869bc6ec3424d4d86cfe04b4760ce51a83c7a7da704bd7ec7a1acb3ee0d7c9c7e22bf565c191d87f3d8a7b1f3145cfe5c6f339a76e6f585048cee334745d07749454451964dd5057045c055a52d93d043c5e6873fc3df"]}, @nested={0x28, 0x4f, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0xc, 0x24, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x34, 0x0, 0x0, @pid}, @typed={0x8, 0x56, 0x0, 0x0, @pid}]}, @typed={0x8, 0x56, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="2b49175c1ea9bf0864fa6fa73f30f354706aa444fabcbf1621f3ae7df31c994963e84ec19739b62429345d8ae6bc7b4694ea5019b71d1ae6363538205c713fb4ee8a9a971c455af964b3a2a16f6e235dddb19cd0d94ce16cec831559bad131d2768db24c13b03db6927dcd445264840171b64ced", @typed={0x8, 0x43, 0x0, 0x0, @pid}, @generic="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", @generic="1a3144ee048f1b7c741b706b7005cc8653e4311fd20344dcf40e7b5964d7660a11adb656dcdc5f77bd1166c1481a4c77811eafe550fd48ec71361240bd10bf6e1eec8a8f1f4c17369bc063c18861fd196a1ec40c0eafc8f5d43254fdf31098cde5d45424457ce478c224ed31b9d481e301b3d5cba8cb3b35ec48e4424d719ada33645cf70d0812"]}, 0x2238}], 0x3, &(0x7f0000003340)=[@rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r5, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}], 0xa0, 0x4000}, 0x8010) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r9 = dup(r8) copy_file_range(r9, &(0x7f0000000040), r6, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, &(0x7f0000000200)={0x8, 0x20, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) copy_file_range(r4, &(0x7f0000000040), r5, &(0x7f00000000c0)=0x20, 0x401, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f0000000140)=@ethtool_modinfo={0x42, 0x3f, 0xfffffff7}}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:59:46 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$eventfd(r2, &(0x7f0000000100)=0x80, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, 0x0, r1, 0x0, 0x401, 0x0) 04:59:55 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 50) 04:59:55 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 04:59:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0xffffffa1) 04:59:55 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:59:55 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:55 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00']) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r5 = dup(r4) copy_file_range(r5, &(0x7f0000000040), r3, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r5, 0xfff, 0x0, 0x1f, 0xff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockname(r6, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000280)=0x80) r7 = dup(r2) copy_file_range(r7, 0x0, r1, 0x0, 0x401, 0x0) 04:59:55 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="0135d5afbecfd61a3d4da10a", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xfffffffffffffffd) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:59:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 45) [ 1288.415801] FAULT_INJECTION: forcing a failure. [ 1288.415801] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.417752] CPU: 1 UID: 0 PID: 11553 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1288.417785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1288.417799] Call Trace: [ 1288.417807] [ 1288.417816] dump_stack_lvl+0xfa/0x120 [ 1288.417860] should_fail_ex+0x4d7/0x5e0 [ 1288.417894] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1288.417920] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1288.417942] should_failslab+0xc2/0x120 [ 1288.417966] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 1288.418002] ? __d_alloc+0x31/0xa10 [ 1288.418027] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1288.418049] __d_alloc+0x31/0xa10 [ 1288.418069] ? mqueue_get_inode+0x1f6/0xdf0 [ 1288.418092] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1288.418114] d_make_root+0x42/0x90 [ 1288.418136] mqueue_fill_super+0x176/0x260 [ 1288.418159] get_tree_nodev+0xdc/0x190 [ 1288.418195] mqueue_get_tree+0xf6/0x140 [ 1288.418225] vfs_get_tree+0x93/0x340 [ 1288.418255] fc_mount+0x18/0x110 [ 1288.418282] mq_init_ns+0x42e/0x630 [ 1288.418312] copy_ipcs+0x38d/0x630 [ 1288.418336] ? copy_utsname+0xae/0x470 [ 1288.418362] create_new_namespaces+0x210/0xab0 [ 1288.418394] ? security_capable+0x2f/0x90 [ 1288.418431] copy_namespaces+0x45c/0x580 [ 1288.418464] copy_process+0x26d5/0x73e0 [ 1288.418500] ? __pfx__kstrtoull+0x10/0x10 [ 1288.418547] ? __pfx_copy_process+0x10/0x10 [ 1288.418583] ? __might_fault+0xe0/0x190 [ 1288.418614] ? _copy_from_user+0x5b/0xd0 [ 1288.418645] kernel_clone+0xea/0x820 [ 1288.418665] ? get_pid_task+0xfd/0x250 [ 1288.418700] ? __pfx_kernel_clone+0x10/0x10 [ 1288.418730] ? find_held_lock+0x2b/0x80 [ 1288.418763] ? ksys_write+0x121/0x240 [ 1288.418796] ? lock_is_held_type+0x9e/0x120 [ 1288.418836] __do_sys_clone3+0x1f5/0x280 [ 1288.418857] ? __pfx___do_sys_clone3+0x10/0x10 [ 1288.418895] ? __fget_files+0x20d/0x3b0 [ 1288.418935] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1288.418974] ? ksys_write+0x1a3/0x240 [ 1288.419007] ? __pfx_ksys_write+0x10/0x10 [ 1288.419051] do_syscall_64+0xbf/0x360 [ 1288.419076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.419100] RIP: 0033:0x7f27ed07cb19 [ 1288.419118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.419141] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1288.419165] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1288.419181] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1288.419195] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.419210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1288.419224] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1288.419256] 04:59:55 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0xfffffffe) 04:59:55 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0478732d62ce85aab180e58feca8201e85c0e2923086d85b13a694808b7b15e0ce84a47c0f02383ba0b109a2feabdea2e34d1e685444507c5ce377263d451612460c5a03150e8516003eb31f4ce493192bd8c74f9bc7dd21ce8a01f948b972c6a75adcad1cb33d3d9971e7e0f71b5f574822935508000000b43a81"]) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 04:59:55 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) write$binfmt_script(r0, 0x0, 0x0) 04:59:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() r0 = getpid() tkill(r0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) clone3(&(0x7f00000002c0)={0x220085480, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0xc}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000140)=""/254, &(0x7f0000000280)=[r0, r1], 0x2}, 0x58) creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 04:59:55 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 51) 04:59:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:59:55 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$security_capability(r2, &(0x7f0000002b40), &(0x7f0000002b80)=@v1={0x1000000, [{0x50, 0x1000}]}, 0xc, 0x1) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = dup(r5) copy_file_range(r6, &(0x7f0000000040), r4, &(0x7f00000000c0)=0x401, 0x401, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003e80)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) lstat(&(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000003fc0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000140)={0x1010, 0x2f, 0x400, 0x70bd25, 0x25dfdbff, "", [@generic="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"]}, 0x1010}, {&(0x7f0000005340)=ANY=[@ANYBLOB="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"], 0x1200}, {&(0x7f0000002380)={0x370, 0x38, 0x400, 0x70bd2c, 0x25dfdbff, "", [@nested={0x16c, 0x92, 0x0, 0x1, [@typed={0xc, 0x61, 0x0, 0x0, @u64=0x8}, @generic="245cc4e8870ceaad50abfcb749de1187f787c9691d07ac50705949463f89938c9e28ea60c953ce081c131b5aa7fe2a09b3a1a1b64dea600768c8def764af273fdafb82828bdf80cb2c43cf2a33eee3629a7b28a72f6ffa8d58b5be49db85dbec38804104d1fb8c36f7248f72d50d5b1cc95c4ad2af72009f8baa86700d7a1bcbe081d6a56222c9d91aac63836c45", @typed={0x8, 0x64, 0x0, 0x0, @u32=0x100}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="8de6dfdf6d6f64654273edec55d0956b085e4a532e3bb3b226b1c6478b74e467537c69a6818f38bacbdbb0c7d8ce69202b7151e54349a11810ddfd2c3f79f3cbf4839610cb15d10ed006a2ef3515f756851a168aa766a8070f598e6f78a9ec63ec43c32a1289fffd9eac9c8a0421ac06bf87b99defa1cf3ff6f705619051dc79c6ff82631e66de40b1c426860c15dbb17a6fa8ebfd895a8c982b2b189cc7c9948f947b0a14adbd2c4b7a36f275420ce219af8c96f2d85e44cf958024de01"]}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="246fa0cfa8a6854cfb52171c327a10f608ef936e692c87d64df3e95bd07b72b19253904b6f5e7a1e7d31186a743b0c6b10af2fe6fa0be729304ff974bc9ca2b595791efc672117d446991901b2560ade9c2444b37f5d441efaf9ab9a53af7c3d4284e2e0fd2b9f86c742c2b28a0161ea74d86d372e", @nested={0xa3, 0x31, 0x0, 0x1, [@generic="e349b4cb5221a35cd4913f8d6c84fc51ded5b1c43022c1a6e102296a719df248f1ee3ac9727b7196556584bcb619f0e309b319106768d85fd59e12b3ebc9054a75c59c8794f4edee9f40308301adbc2acdad5b582288e9b1f5f014a0a9b277e53b903354f3be4424d244a00f7cee5c5372f8d2d67c6ceae3f8", @typed={0x9, 0x6c, 0x0, 0x0, @str='sit0\x00'}, @generic="5aa13e226c3d0267047fcfe560487ed5a3fcb3463d39d819c65c"]}, @typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@mcast1}, @generic="9fbe36e9660171048fa02205f45527b1857b21a8e7bd3c2e601ce92c7682ecf8551c3e7b237c2f248a00a8b0f85d7652c5d6da6572cbdf525534579371b5bb21dd1a990e689404cc5741e8a2e5fac87e566ef770ebb5130e58c2b6242fb7631649c0e70f23d88c5b9c3104ec78e249726d288d9d4ed8f16eb19770c9012d474c471d3e5225d7446135eef763b28078b55d01de8ca6b7bd89e18591b159a3c4f3908e75457a5832d7415855c2012997424064"]}, 0x370}, {&(0x7f0000002700)={0x2c4, 0x24, 0x300, 0x70bd26, 0x25dfdbfb, "", [@generic="e85a0f32caab9654131f94ada93f251d9b8c9c2f3653b992142800f05f0b68118b611a9d6d9143dab844ecc6848999095845ebdd25aee4b856fd4375c9151be032c49d3835d9aacbf0b3a06b55b5b916159233ffc3ea32609d00eb91d3fccfe84a6d3971f6347238131e6e11dd8033c345ae32abe0e47d72a5e67fc7f1ebd43952f6840e4975ff147c8728e3adcd23f9cd4fe2b40d8e6ba98777be1e45478ba9af63c29a662db62980e0e5834abc01446b19c3e04dca1633f294786ef5a0b30f8f09cfc85387c1b83aa225257d807e4ca7c57dd413ce30a1d29651e3d2fc009885", @nested={0x162, 0x46, 0x0, 0x1, [@generic="c2d0784469ceda5b7e5590a9e22e1538c586b3554419ffdaac67b797262150dc7d1c387ffb0dfafbcff60c19afa628a1972ec45dcb0f9dddf27e863f6f81227948bd5e01a001c350e4767e6bec99df85c8ad6c4df85468cc820157b129d4c0e2b4f8135f13b2cf088a6a6641367e9edeae2ac0a630edd43de5576f6205056a61b95d1866201136243c71ac102de5ca5f6ba28639e0c7fd76eaaee4c3425250123b9d74f789e0eb10bb7a8fb49e8d1c38d57ea874eff8c97149bccbc571a435a03240e1c6eedee516955141292891dee0c00ec61a467e35ac2c1c6c684a27e923b0c2912929", @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x3}, @generic="8a26dc896389ba819b36124a596de03fba57d34542b0df95692e353ea1d2071cb34ded07271aac30437f12cdd093973fd61e0e9ca68e89d4d054337a3a5d87b4b2b958d791aa61ffcc668bbe52d2118af50fc9bfdf9532834b118afec26a5d8dcfef9f1ee30ea9edcf", @typed={0x4, 0x36}]}, @generic="6f457d7b9fde7d86d5e327de03cbc54c42602328f7776b9862f66576cacae87a80bd7ec768172af1fdf46954f874facb25beedab5aa205e206b81c662e1bd03894c116c5ba866a425409e2d2f2eb943ba8eebbb4a3aa5accb1037732701a8a4f0060d51a89ce655f973a6e5e14"]}, 0x2c4}, {&(0x7f0000001180)=ANY=[@ANYBLOB="080100002400000426bd7000fcdbdf25259d5243f7f5cf630122a700c927e0c2ad1b07466d7180532528342a526a72a15765b354e6c980e09b9f88a1d1f68e150a473a00bbe33611eb8ea2d6a05cebc698d7483fccb407554fa1da0600000082e25a2b6de38e34fcccff118f6eb5db029e2076b2fb1c17461b89cf679145b90c247f49001224e1b256960eb2e29594bd5432fd3489ea7af7987e15db7b6a414c71abf82c2cfe85be0cc829915cdf3d16a67eb7db1a856fad3428cc897b430d633ee683168add79310164c2f3208e8a6facb1532fb7c69bd05e417be4ea64c9a12f21c8a0c0f3e89008008f000000001400513a0000000000000000000000000000000100"/275], 0x108}, {&(0x7f0000000040)={0x10, 0x26, 0x300, 0x70bd26, 0x25dfdbfb}, 0x10}, {&(0x7f0000004000)={0x1340, 0x25, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@typed={0xc, 0x62, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x52, 0x0, 0x0, @fd=r4}, @generic="d52b51f4a168f10c908e2f77414c98a883fe1f5eefecf08a3ab248297a79b7c4cd37b824a509ae3ba3623c1da92af93c278e95ac5624bb9ff6268a1965e33373f46cf4471f5b4ce657ec6324856b2b1bd8f8b41c2e47f80ec8c4d2c035d6eb00052c4bbd533767a503200fa00069c43250fb3599b9d1f35335f07d13bba2d3ec385fc110128e05f5c7021bea0aa3c4d3694249695103e96e5b3da58dfed4e318c04b031e950d3236e80ddf20abe223c8b84176e631ba4c51f9867a55bffa55b4ad0d7f6782ef827805011ffe9f16f69b712b0a8e459bdc396afe3e5b96a8dd7d92a24e503981c0ba0dd6a874b6d2b0226f7785825da109171864b27e5afd98017635307791f480ec4ed760880fe7e383ad3ec68463079714cb0879bd95793a6f6e2bde6706fe7adb6b42bf32a260c13fb8feb122bf1dd4d4430bd5cdee922bbd5a6caa8f8d4c3439b2da6a55fe7073780b4f68e50e64667289a30a40555f1ee96e34fa15d85cda0c02f295f7d933ae8b1cc16a628607b78969e59ade7888dc829aba4e4911a1d8399972fcbe607acfd50e6c3bcdaadc7e9e22c453d489dd14e859edcafeb7cdfada15eb76723f81da3a293c43deee01e9a0b9d4694b6fcf124993a3156307618d79a892d710466a3e03197dd32c0b1c87305273e328b70e9c859cbb626c5658c20d174c67490bd5fcabf2c459ff7299d5ca4323b4c3f67241afbf07a474c1757dfea22973e79cdfc23afab300712cb8e1c58ee7ae0702f3ea64dc31fd45865a6988cd79160527036e712ea4f5594d2ffbe1d7c59ffabc63ff80e80560f0dab82e550701cb7d5cad34ac133cf33432a1ec7d60adb793ad30bd49a45d430a4dff70f601b91a4b8ded08a2e88d93ea01c8e714bf4b1c0f7091f77cc3d5e50f6c34435beba503440872c403102f66a56dcd40ce60248b61a293edc44102b45b28f6c3d58b86e8d840b4f9ece00d0af945afdbc39fe7acac482a82e06674fa971655a6ecc0c87469b534026345c93ccf34fbb5c36a26a593b21a567762db8ee5ba10124f336d5deecc7ce106c7e524b36f3fc61e4bbdd9651eeeeebcf6f6e3ef0da4cfbed7224460a6193af9f136eed52e0ec777841c7e33e2f1936f477a1a8361ae31e6c6ade64e1df88f5b90e7bf43e06294d3870bd4adad048101147df42edb0dea09b8803a56cc6d866ef76e88be91e3cf46b9ba80257af4aeaae144b48429b38d3b54c135c67a90b46b876ae1a611e5143cff7a76afc5c75d76cec6f499e87ba453567e7dbe7032d0b07b75f7a42d40088766c072f1d7332f1f6fbbbef3f2a207f3a9ca7989d1150bf913aae7c3bf8e694c7895c63e375f9e6720db22e2551fbcdeb534df86e0f7b69fa1d1d7819fcddf0fd25ba6edf291b79c1d94134e700c354f3566e5050d82f065e39da839c239af34138642e6cce0643bf492e3db806a19dc09c22f18e7f82917f93ad4d1f0f7458892406eb430b863ce9d0699f637bc886f095c2dc59d21f4aded1aa6269fe9de835aaad69e5dba7e2b16f253159ba270ab1fee54e082aaaf73c66e7d67c7b0d82e2d6c4331c90d1c46769be24a330fe271702da11c043d2fa95de1b5e03c0b781b2303c837b965f5909c85af67017a6de1b5167f9db333398c1bc32042c9e45c7b19f6793a226fb3b9b5db65d15d5c960f88313ecf9e0bdf425b63f0f095de1f67a0605d26ba8f5faf5656b435c230856a0693e1542b3f0186f5b4c523ab3d347b29d1444f18d874797487e144b5e228cab5d5a0ae5fb795c8cb8339811cb1db9573c0c88799fa46326798f8d130850e3abafc5e829bc5cd4548fe8b298b5c2db9c3b66f784369d98f8cf4d2eb2796e3055007aa23e9321ba898dad5cef1ed80f295afefe0e0f49857887b006136b23811f0b798a21a3fc046113ba5c35562c0bc68f95473ce7066a66aa95d8a0c976eaf5071cde94b04070e7c65711158fa87668eee60840d98ac76237865168e6df13ec80a51e63048c085785cc990ca954ef4ec8ac32da234354e090ff1fb4fb4ee14fc534d45a7a9deaa283d9af7b52ca350c90857b9c44db5c1870fe71aa3231a7328d627d8b76ffbe61a38fdc51ad76c85e47d43a61b88b6d04dea4dae9f4f908bfaa790b482e888f0ee6b2c0e85be698f8b27c677e28ed6058389772b2323a48560ed4a9a9da5f459dc4f5bb86099d287cf813a96e13a2ded206be1e149473ae3eda33c5070fa087a61647571b906a6b561f7f49db5a1ce393dab2845db273cb6587bb5fc62d05a7cf531b4c29ae5e74b98339e65827e7ab4d8f417262d6e3eca7f98123c6cf78860e13f7a4d82511f00f0bf26fda2aed3a515155ba8cde06a91c3bbb3fea502459a91c99e05006df14be99fa8afa1af74d777cb7265333b406de3416a46d752a8fbbc8677b9ac28e21b813f841653c4ef55460b87ce07979e137e6b255cf6f3f613a23cf024251c3f3e77f10ee13dac00976cca9fff4088b8219b641af6da5514d1936e2c1793fbcba98173e1b32435a23ecb543d896b1bcef2c1c9f76582c1d13168747a0c0a428b45e6bd130529fc554ab091851ee8e603d81ab1d565d5e3c122a2e68f8d1e7dc263b431f35428e4747c0142a82b54e1d15b8b01a654544b6999bc762c44f6b6bcb07620024ef7a802c114ee02e448a91fa247f6b53a2a4fc3c3b3641ea2825b270281ee1056a545871554b32aa1e4655770089be3102fbe576b7feae34d954ed30040b29b93f33d59ce16922bd5b7387fe1038241c2ee61f585121d8fc7c7f4f8a86738b439b73ef912a4191183501ad7338d4e29cf1b5bd36bbab81cdfc98ffe2c01dfef32f5a36a1a8c08537e92175a0848c9d83f29fe3278f4365a6a948e7ca5ac5f91bd2b0fa31ee1856a7ccb8110c7fdcfb9895c02e0cb7b664cf3b60e6c98fb1883bbb238825841508e1e3025b6b31c0d96cb7425e36f83ae569ff5546be8555d57f1ee8cb30e0def952edcaf08bd0b44e6753db1d463e82e512de9bd715c83517888e32a50ed2334a250689b3c1c9dc1baa0f3ec01de1170a6637e1b30ef23818d9774573de42e954667e9bd3f15a5bd3e8150aebfe879ca25e3a88a1bb868fc3898b1fef79417a830be74d2042b7bf6affd644dba4effcb55c5bb9e831715a2e7c3416816ce7a2943bd3606be7740797420313f9fda521f6793d5701bc8f2b34ccc7eee00e8801660eac03320c1e8b5de95353b3dfce42b0d53ec836344a7f07879ee9ed5aa44669b8da6d5fc60e617a56910d30b5fa5583e16a4ae9c920781e50d4e4b5827d60334548a5521ea03207579afa94b25953174b43a6f632da52aeed47775bc503a22ad9627ad76074c70543147025d477d3a06282aa8588a31ecf70aabe0f0a0b726b7bc49b7b032267ab6fb4ab55bb9619e41ad92f3e122dab0c7e49c4837b16f968e8e4981f44aa0f9e7627b357adfcabe2264e5ac20f34798116765c42ac12b21f579c579e5a6ba0e518ce41b97b40b44ed277530827b4c7e44a7a5660fce3d02b09d6edb41cb0ecbdd1113042bc93299ccc5185e08406651d01a66b955f48e7cc14bf92de12363d5c47c8ad65a80d36463f638933361748449d1d38e09548f0f00c48b6c6567c6e8b366dbe324e8c7d32d62819e7e63999b505da809e6b079b7dc8f317ce129e03151016821b612dff3e3fde3898223c9f3536a1c1ac3d72de8b007cb9577acf77e6a18d2a9edb186958d4225a4522366de2e7f41ea213fcce7b6d2a93a6f5659eb76540d8bab6c0604196ecab550ab4baa366933cd0e9d09efbc71d249a7fd2f707b3c0980b8ba60c63684e3b5694aa8f8ebd5ee2f4488cf5fecff14ee692b382d0e4f193a2713ef7c4fde3736d668f8339734b63408bbe9ad9456c3b14d1f3c071e3793a745213fe3652eb99eca644d9b62526950e95a5e7800b5825773aefda5d220c826a2cebeb4606ad615e649209c6e757a826a71290323d7c83cbfaf572482ad1f8ddd081fe4d4bb630f837a09adacf5cff1b29e120a9064694016bfdd0ebc829d47e438cfe04ab2004d44d4dd2dfdd0ef690a37283fdda330034b6ad8a78988a65a16a7023b3c9d8a2fd91e9d6ff759b6a7543117212233172105393a0c473e534c4ac6970bfe5b8045cd77d83ff8c59f65b2816f3b58a4c3ec9f53cbc023e5127ff3a3cf7ea3f7e036774d281d44f3b1c6d0f2dd0d5d5e3159bdb5bafd2932d84c76c1c2d58817a76c789a183037b92f09dbdf39a7389896e769fde3af2ee1e912ed69592a5b2749a4d327d003ecbb80ca59b5b8cd72afb0ade96b5e34fede87e430b31881dde561a34bbb470f0c38e5f3e7cdf0b42d25e4bbbca05771285290123775b5172b99084ab70c2e9bcb28142f5c1b0acf824396a4da9245e7bebffafabae437ded0a9c272807c10ad28223bf23c72b5912c44dfe171a8aaa1a988a64aeadd9c8b3616376465bfef22795c17afaea6b603ffc709f0969f0651d6d23dda901b054584a4d295849ed58b6af0483afcc37d749a30d7626fada9294160e75577917452383b2d460f69471f2b4000d656218c7f856f8d58e36ecb9236169d9e7856876a4f8202847d2494e97d6b1df98b42a978a8315217c3d2858f844545da75e2e45316034ee693b4a7191862aef8b0f659169c2e71f1a103984c40f63b3885b97cee51556519f792634a09ed0dcc6cff130480f1d3cacf83e8565e26730d07d7493f93655cba24b4d4efa6df8798cd20234a6dee4b566af4144cd35fcf59509bfe70fe3be26109272ea8392810e354195d3893530136207e21e3cef148ddc0fa2615fb025ac52a91441917230b11bb14e1bf63fe52f714bde371cf98eaf5b7cd8a8bbf63d78d6aa04db246a5c3ef79a22695a9ede5e95461ac910e07382c73cca3c8279a7d1c364ddba6fa31caf18da0d152f6683f79b0e810d1a7d19a177d595cc81c0f9e677680dec2ebecbef1d08f78aa9e67a307beb731dc28d1b767c0234ea7d428771f8e9b127e5423aaf75ce51d3cf8daefee3a5f75cbff2be1a29b7f74fc0e7d64e83ec921dc3ff1bd0b2b62c7d94d83af22cfb2908d7ce239848e2ed59b1c275e4c65e8b4200f8e304fec417f82d8294dc6b8076303d090f27502274b7e71b7931f7d3af80107542a290f09697020aee8cccd685b2c86c10d40976d9b3a1df4f74cf1688d2e1cb3e530abb0ae543bdfbd166682036c6ca8354287712b0d596c490a044259af99e4c84610c29d0dce5608b11fb0870c7240a07ed3b180f73e6c5f6665650fd5b449f9749f285dd00d067ceec4e0ef842fa07bb5cf292c07682ecda538a00a8a2dbe8149bd345d5c90250034077dd1b59529c74e0dd5d5fc4f71fc28a593439bcc700bb42b3d98e9d8ac8ae6cd38c453df3c792189d13755782620fe57827ea10bff0138c328fefa6c9cd54757095c57f3dc8f3562b3cc175c4f082c47649b0df99adcc4c737a77dcd6e3e211feb7839655468a632d09596852610e07b60217c657f88a26c5b3ee7ace2a83422158638f7438cafe38bf8bbc685c8df5f31b26519948d793fab711b2cf1bfc7d0dabeec558fc0ed08f4f041b9989ae2ca3a71a94cf3410363aabb98fca4c3b3fe198e2c0f693e19e20e339c49b1b712d94d59c0348224f59831e9144b3fa280e48748ddc7fc27ba6fc53e58d267cca67f08f906a83ab136c9b0e99006bb26e1621c12da2317b3391648bf1cbf68b26ad55430175b591840f1336b7fea355a518a522451a2059c7f80cf06bf8355c8c134a8dfbf85a92d07c25a", @nested={0x2c, 0x29, 0x0, 0x1, [@typed={0x1f, 0x34, 0x0, 0x0, @binary="090a034cc836cc4844b2ce60c5da5e6b7e0057c6e47840c3deb102"}, @typed={0x8, 0x3d, 0x0, 0x0, @uid=r7}]}, @typed={0x8, 0x74, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x4c, 0x0, 0x0, @pid}, @nested={0x271, 0x7b, 0x0, 0x1, [@generic="b5a723a9d8cb727bfb29a8fb7f68bccf3f23740194204a122d2ffd7ba0164c851a6e73c50dd41681e908f340ef6bfc94de875df660d87301596aa2dfff694a303ee38e160883467c81be67435ee93e83c2865efa4f44eec381ab8786f6cf508ab76cb540ddf016b71087d01eaaed11df569f2bb331f3c063c7ee54267a6760660e36e8cc42b0ca3c5e866df9976c40b64e6f073f8e07f2dcca728aba371c68bca32535aeb8e7516607be429cf3f8ee", @generic="1aadb2bbb22bddb188", @generic="6240c67875ec2015963ef968ffafc9e2f41abea2fa6274d4fcbb30fff8f2eec5cf1d2ef139a6cacd6ae72ecb150ddd8e5cbebf3e4d5717341e6604bff14074f43df04cfee585acc99da9a901ae41400b544cb38a980421c4dc44781e85f3c09786747fce773ce5af19cb2853c5c3fd587238387ccf7414e7b4a85689bb02ae4ca88954690c3db07690a67acf7fcb06a9fa0971e342a1bb8bb0056d74e7538a621c2fd7bc4006628730c05e46dec86466f1e4a8e2ca019488f9498d2036f5ad8ce773b903", @generic="2ed8b4eea62c124fee7ec01b68310ab632012110a52b7fe6ce9281989cb55089b9fcb82068ca60e1d71483252e31a669fe55a8688cdebf94582ecd3b4dbbd7d6bf231a5b904ca79ea8e39186c160ede85f7b5e2932c4aca08bb4231ae57a595072d68b4bfa84ae403106521f31b489a08d9a775c72c6ed30f0b122921c5fad0e84c1acf27eb998eebb4d3cee9069e07e921c8023aa0a3d301bd6cfb497c2a22a8fd326a649615e1102c830e27f192ac5fd82158e2065968d4d4b5326fe12cf903d1f865089d8a4493dd65703d6b6369a0b46198ffb4df61c3462fcb8b07166c96772c5fd9e234bc3afab9f50fd6ccb46ed"]}, @generic="2dd2a13b373cd055747465087309c13eae78a73902e0ffa9db6475ea82be7b6d952747b990cf2f8cdfbf364b1e54506a8c8c23113bceb63cb0451fdbb8c51353bd55e12d9533622d8fcc05d7ffab01758e713450d92d2ee7be890bc1d39d79f37559a239c957bda1fb9a"]}, 0x1340}, {&(0x7f0000003dc0)={0x84, 0x18, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x4, 0x24}, @generic="6199a26271ba2dc83717396460e64eebc0461f0bd25065e9fce3943d4340dc594114bd276be5194a1aea735a1a30f917f4157d5cf666c14cad90a1f1cefa8850c53317eeaccd8352d8c13df9948449cadc155a47466023257e6338f75c99b7fc7d6a536428b3c562b0d7ce8b7633ffff"]}, 0x84}], 0x8, &(0x7f0000003f80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}], 0x20, 0x410}, 0x20010870) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r10, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 04:59:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 46) [ 1288.601919] tmpfs: Unknown parameter 'xs-bÎ…ª±€åì¨ …Àâ’0†Ø[¦”€‹{à΄¤|8; ± ¢þ«Þ¢ãMhTDP|\ãw&' [ 1288.622575] tmpfs: Unknown parameter 'xs-bÎ…ª±€åì¨ …Àâ’0†Ø[¦”€‹{à΄¤|8; ± ¢þ«Þ¢ãMhTDP|\ãw&' [ 1288.623976] FAULT_INJECTION: forcing a failure. [ 1288.623976] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.625907] CPU: 1 UID: 0 PID: 11570 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1288.625939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1288.625953] Call Trace: [ 1288.625961] [ 1288.625970] dump_stack_lvl+0xfa/0x120 [ 1288.626014] should_fail_ex+0x4d7/0x5e0 [ 1288.626053] ? alloc_vfsmnt+0x23/0x770 [ 1288.626076] should_failslab+0xc2/0x120 [ 1288.626100] kmem_cache_alloc_noprof+0x5f/0x470 [ 1288.626133] ? find_held_lock+0x2b/0x80 [ 1288.626167] ? fc_mount+0x9c/0x110 [ 1288.626196] alloc_vfsmnt+0x23/0x770 [ 1288.626229] vfs_create_mount.part.0+0x40/0x440 [ 1288.626260] fc_mount+0xd5/0x110 [ 1288.626286] mq_init_ns+0x42e/0x630 [ 1288.626317] copy_ipcs+0x38d/0x630 [ 1288.626341] ? copy_utsname+0xae/0x470 [ 1288.626367] create_new_namespaces+0x210/0xab0 [ 1288.626398] ? security_capable+0x2f/0x90 [ 1288.626435] copy_namespaces+0x45c/0x580 [ 1288.626467] copy_process+0x26d5/0x73e0 [ 1288.626503] ? __pfx__kstrtoull+0x10/0x10 [ 1288.626548] ? __pfx_copy_process+0x10/0x10 [ 1288.626585] ? __might_fault+0xe0/0x190 [ 1288.626615] ? _copy_from_user+0x5b/0xd0 [ 1288.626645] kernel_clone+0xea/0x820 [ 1288.626665] ? get_pid_task+0xfd/0x250 [ 1288.626701] ? __pfx_kernel_clone+0x10/0x10 [ 1288.626729] ? find_held_lock+0x2b/0x80 [ 1288.626760] ? ksys_write+0x121/0x240 [ 1288.626794] ? lock_is_held_type+0x9e/0x120 [ 1288.626834] __do_sys_clone3+0x1f5/0x280 [ 1288.626855] ? __pfx___do_sys_clone3+0x10/0x10 [ 1288.626892] ? __fget_files+0x20d/0x3b0 [ 1288.626931] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1288.626970] ? ksys_write+0x1a3/0x240 [ 1288.627004] ? __pfx_ksys_write+0x10/0x10 [ 1288.627047] do_syscall_64+0xbf/0x360 [ 1288.627071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.627096] RIP: 0033:0x7f4a9ce31b19 [ 1288.627114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.627136] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1288.627159] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1288.627175] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1288.627190] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.627204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1288.627218] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1288.627248] 04:59:55 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 05:00:04 executing program 6: chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 05:00:04 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() tkill(r1, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x9, 0x9b, 0x0, 0x80, 0x0, 0x200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x8015, 0x7}, 0x9062, 0x101, 0x9, 0x5, 0x20, 0x8, 0xf0f, 0x0, 0x200, 0x0, 0x1000}, r1, 0x0, 0xffffffffffffffff, 0x8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 05:00:04 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1c1) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 05:00:04 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0'}, 0xb) dup(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0xa, &(0x7f0000000380)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0x0]) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x5, 0x3, &(0x7f0000000300)=[{&(0x7f00000001c0)="3f581cc80a82757832c0141753284b780735f1e2f24442a1c08f3c6a67c14b217754fbc8cab274134007f7eac4d9cb56737fb7619429f30199b06a9fd68e152acfa7efc8c257f16123a464ebb8be473bce5dd8260f65a170c76dca", 0x5b, 0x1}, {&(0x7f0000000240)="fa1751080154a98c72bfda74fa5d8d0d5769037345a282f10f5e24fc8bd0c5a16db6027d645cd4c8d8aa34c81a0f80e8464af0393f2da76bdedc4f17afa02f6afca03cfa43b75b4bfc0b6aeb70", 0x4d, 0x3ff}, {&(0x7f00000002c0)="914c9080dab6", 0x6, 0x4}], 0x800000, &(0x7f0000000440)={[{}, {@mode={'mode', 0x3d, 0x2}}, {@huge_within_size}, {@gid={'gid', 0x3d, r2}}], [{@subj_user={'subj_user', 0x3d, '!'}}, {@smackfsfloor}]}) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x401, 0x0) 05:00:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 47) 05:00:04 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 52) 05:00:04 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}], 0x1, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 05:00:04 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x40000000000) [ 1297.887861] FAULT_INJECTION: forcing a failure. [ 1297.887861] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.888944] CPU: 0 UID: 0 PID: 11598 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1297.888961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1297.888969] Call Trace: [ 1297.888973] [ 1297.888978] dump_stack_lvl+0xfa/0x120 [ 1297.889003] should_fail_ex+0x4d7/0x5e0 [ 1297.889024] ? memcg_list_lru_alloc+0x4da/0x760 [ 1297.889039] should_failslab+0xc2/0x120 [ 1297.889051] __kmalloc_noprof+0xb4/0x4b0 [ 1297.889067] ? __lock_acquire+0x694/0x1b70 [ 1297.889083] memcg_list_lru_alloc+0x4da/0x760 [ 1297.889102] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1297.889121] ? get_mem_cgroup_from_objcg+0xf8/0x430 [ 1297.889137] __memcg_slab_post_alloc_hook+0x130/0x9d0 [ 1297.889155] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1297.889173] ? __create_object+0x59/0x80 [ 1297.889189] kmem_cache_alloc_lru_noprof+0x3c1/0x460 [ 1297.889211] ? __d_alloc+0x31/0xa10 [ 1297.889223] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1297.889236] __d_alloc+0x31/0xa10 [ 1297.889246] ? mqueue_get_inode+0x1f6/0xdf0 [ 1297.889258] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1297.889269] d_make_root+0x42/0x90 [ 1297.889280] mqueue_fill_super+0x176/0x260 [ 1297.889291] get_tree_nodev+0xdc/0x190 [ 1297.889310] mqueue_get_tree+0xf6/0x140 [ 1297.889321] vfs_get_tree+0x93/0x340 [ 1297.889336] fc_mount+0x18/0x110 [ 1297.889351] mq_init_ns+0x42e/0x630 [ 1297.889365] copy_ipcs+0x38d/0x630 [ 1297.889378] ? copy_utsname+0xae/0x470 [ 1297.889392] create_new_namespaces+0x210/0xab0 [ 1297.889408] ? security_capable+0x2f/0x90 [ 1297.889427] copy_namespaces+0x45c/0x580 [ 1297.889443] copy_process+0x26d5/0x73e0 [ 1297.889462] ? __pfx__kstrtoull+0x10/0x10 [ 1297.889486] ? __pfx_copy_process+0x10/0x10 [ 1297.889504] ? __might_fault+0xe0/0x190 [ 1297.889520] ? _copy_from_user+0x5b/0xd0 [ 1297.889535] kernel_clone+0xea/0x820 [ 1297.889545] ? get_pid_task+0xfd/0x250 [ 1297.889564] ? __pfx_kernel_clone+0x10/0x10 [ 1297.889579] ? find_held_lock+0x2b/0x80 [ 1297.889595] ? ksys_write+0x121/0x240 [ 1297.889613] ? lock_is_held_type+0x9e/0x120 [ 1297.889633] __do_sys_clone3+0x1f5/0x280 [ 1297.889644] ? __pfx___do_sys_clone3+0x10/0x10 [ 1297.889664] ? perf_trace_preemptirq_template+0x259/0x430 [ 1297.889685] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1297.889704] ? ksys_write+0x1a3/0x240 [ 1297.889721] ? __pfx_ksys_write+0x10/0x10 [ 1297.889743] do_syscall_64+0xbf/0x360 [ 1297.889756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.889769] RIP: 0033:0x7f27ed07cb19 [ 1297.889778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1297.889790] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1297.889802] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1297.889810] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1297.889818] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1297.889825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1297.889832] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1297.889848] [ 1297.928422] loop5: detected capacity change from 0 to 3 [ 1297.941971] tmpfs: Unsupported parameter 'huge' 05:00:04 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 53) 05:00:05 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x3f, 0x40, 0x40, 0x0, 0x6, 0x800, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x40, 0x10000, 0x9, 0x800, 0x7f, 0x3f, 0x0, 0x5, 0x0, 0x6}, 0x0, 0x2, r1, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 05:00:05 executing program 6: chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 05:00:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x3000000000000) 05:00:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 48) 05:00:05 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 54) [ 1298.087352] FAULT_INJECTION: forcing a failure. [ 1298.087352] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.088444] CPU: 0 UID: 0 PID: 11617 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1298.088461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1298.088469] Call Trace: [ 1298.088473] [ 1298.088478] dump_stack_lvl+0xfa/0x120 [ 1298.088504] should_fail_ex+0x4d7/0x5e0 [ 1298.088525] should_failslab+0xc2/0x120 [ 1298.088537] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1298.088556] ? setup_mq_sysctls+0x5d/0x240 [ 1298.088575] kmemdup_noprof+0x2b/0x60 [ 1298.088593] setup_mq_sysctls+0x5d/0x240 [ 1298.088609] copy_ipcs+0x489/0x630 [ 1298.088621] ? copy_utsname+0xae/0x470 [ 1298.088634] create_new_namespaces+0x210/0xab0 [ 1298.088652] ? security_capable+0x2f/0x90 [ 1298.088671] copy_namespaces+0x45c/0x580 [ 1298.088687] copy_process+0x26d5/0x73e0 [ 1298.088706] ? __pfx__kstrtoull+0x10/0x10 [ 1298.088730] ? __pfx_copy_process+0x10/0x10 [ 1298.088748] ? __might_fault+0xe0/0x190 [ 1298.088764] ? _copy_from_user+0x5b/0xd0 [ 1298.088780] kernel_clone+0xea/0x820 [ 1298.088790] ? get_pid_task+0xfd/0x250 [ 1298.088808] ? __pfx_kernel_clone+0x10/0x10 [ 1298.088822] ? find_held_lock+0x2b/0x80 [ 1298.088840] ? ksys_write+0x121/0x240 05:00:05 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0033889f3019a35b6e87caa8f0f5a0081ccfb45a41528cabbb2d9df530fd7b7149d988feac"]) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_io_uring_complete(0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x4, 0x3, 0x926b}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x640182, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x9e) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00455d870309a66bb3ef83d4c02a3e"], 0xb) r4 = dup(r3) readv(r3, &(0x7f0000000300), 0x0) copy_file_range(r4, 0x0, r0, 0x0, 0x401, 0x0) syncfs(r3) [ 1298.088858] ? lock_is_held_type+0x9e/0x120 [ 1298.088878] __do_sys_clone3+0x1f5/0x280 [ 1298.088888] ? __pfx___do_sys_clone3+0x10/0x10 [ 1298.088907] ? __fget_files+0x20d/0x3b0 [ 1298.088927] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1298.088948] ? ksys_write+0x1a3/0x240 [ 1298.088964] ? __pfx_ksys_write+0x10/0x10 [ 1298.088986] do_syscall_64+0xbf/0x360 [ 1298.088998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.089011] RIP: 0033:0x7f4a9ce31b19 [ 1298.089020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1298.089032] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1298.089044] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1298.089052] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1298.089059] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1298.089067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1298.089074] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1298.089089] 05:00:05 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = getpid() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = getpid() tkill(r3, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6, 0x81, 0x0, 0x0, 0x0, 0x2, 0x10100, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x4, 0xfffffffffffffffd}, 0x4000, 0x6, 0x6, 0x0, 0xa237, 0xfffeffff, 0x81, 0x0, 0x8, 0x0, 0xffffffff}, r3, 0xe, r4, 0x9) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="00f3ffffff000000", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x7, 0x8, 0x8, 0x14, 0x0, 0x1, 0xe1204, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x2, 0x6c7, 0x4, 0x0, 0x5, 0x8, 0x269b, 0x0, 0x8, 0x0, 0x7}, r1, 0x3, r6, 0x2) 05:00:05 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 55) 05:00:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 49) 05:00:14 executing program 6: chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 05:00:14 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 50) 05:00:14 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 56) 05:00:14 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000100)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x2000000, [{0x2, 0x8001}, {0x1f, 0x1}]}, 0x14, 0x3) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file1\x00', 0x80, 0x1) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, 0x0, r1, 0x0, 0x401, 0x0) 05:00:14 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r0, @ANYBLOB="00042dbd7000fddbdf253f00000008000300", @ANYRES32=r1, @ANYBLOB="0c00990000000000010100004c000080080009000000000008000500230000000800020008000000080005006200000008000200ffffffff08000300080000001000010000000080030000003700000008000200ff0300004000c762be250200ffffffff1c000100ff0f0000e60800000800000059230000030000000400000008000700300400000800050034000000080005005600000014005e800800060008000000080003001f0000002c005e8008000700080600000812060002000000080005000600000008000700120600000800020001800000"], 0xf4}, 0x1, 0x0, 0x0, 0xc4}, 0x20000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r4 = dup(r3) copy_file_range(r4, &(0x7f0000000040), r2, &(0x7f00000000c0)=0x401, 0x401, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) pwritev2(r5, &(0x7f0000000600)=[{&(0x7f0000000440)="c35292ce91d29fe07ab4784bc6ca1db2282949ace23a1a736595eb132ba5c2867e86ce2f6b3d653c1387793c4bc17c0a00452186291ca1ba097d34b2bc01552b0e11888e0ff95ffbdea98a899f182c9137d59c262964e302de5f27d4e54808987c1e29ef1c450a24a7ced1b31238df860d521462916fc4458cd162fef4e052ba7dc2d85e86a1b41ce3e482894242f877431bda", 0x93}, {&(0x7f00000003c0)="a5e31e8c2c8ec7f9f41fedf0895187dbacb01e8f291e751e6d9bbf95b322bcec7de266a19e1811a46ced27f41c6636b4dc7c6c8d83f9", 0x36}, {&(0x7f0000000500)="42fc63308e9c62324ad5a4d95c989acbe97b111b49d03354dbc89884e2733829bd0c409c8b7ab2249f95a6227d2cbd8c351098574f740bccafc7800245ede67f8945f1b0c392738eb4ca6f60463b4b155b2a6e62a1b2c01aaac2be6661c0b4da99f5a3703462c9dc7aac5ece3fed34", 0x6f}, {&(0x7f0000000580)="d93aeccb1b10677aece8586be51b8061be374939dc1025e8649d83aa887f93e924ee5d3d60f4f1b5dc5ffef5ede8b2acfd540a1192e8f5fe83a4a72edb8d29445f2a82a6267928c35b6b5863266c03c83378", 0x52}, {&(0x7f00000012c0)="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", 0x1000}], 0x5, 0xc9db, 0xfa, 0x3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000dc0)={0x4d8, r6, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2c}, @NL80211_ATTR_BSS_BASIC_RATES={0x1b, 0x24, [{0x36, 0x1}, {0x24, 0x1}, {0x24}, {0x60}, {0x24, 0x1}, {0x18}, {0x48, 0x1}, {0x60, 0x1}, {0x36, 0x1}, {0x5}, {0x6}, {0xc}, {0x1}, {0x5, 0x1}, {0x12, 0x1}, {0xc}, {0x12}, {0x36, 0x1}, {0x24}, {0x3, 0x1}, {0x16, 0x1}, {0x12}, {0x9}]}, @NL80211_ATTR_TX_RATES={0x470, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0xc, 0x48, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x81, 0x2, 0x0, 0x5, 0x0, 0x5, 0x5]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0xb, 0x9, 0x2, 0xc, 0x48, 0x12, 0x30, 0x60, 0x60, 0xb, 0x36, 0x48]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x16, 0x4, 0x24, 0x3, 0x2, 0x1b, 0x9, 0x5, 0x2, 0x6c, 0x1b, 0x3, 0x12, 0xc, 0x36, 0x2, 0x3, 0x18, 0x3, 0x1b, 0x1b, 0xc, 0x4, 0x48, 0x1b, 0x3, 0x5, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x12, 0x6, 0x60, 0xc, 0x24, 0x6, 0x9, 0x3, 0x282ec576c1d188c4, 0x48, 0x4, 0x16, 0x30, 0x4, 0x24, 0x16, 0x12, 0x5, 0x4, 0x16, 0x36, 0x1c, 0x12, 0x24, 0x2, 0x48]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x8}, {0x6, 0x9}, {0x4}, {0x3, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x8}, {0x0, 0x6}, {0x3, 0x6}, {0x2, 0x6}, {0x0, 0x4}, {0x7, 0x3}, {0x2, 0x4}, {0x7, 0x8}, {0x1, 0x4}, {0x7, 0x9}, {0x0, 0x7}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x1, 0x849, 0x100, 0x1, 0xfffd, 0xa57, 0x7]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x3, 0x5}, {0x7}, {0x1, 0x5}, {0x7}, {0x3, 0x3}, {0x5, 0x1}, {0x7, 0x8}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0xa}, {0x4, 0x6}, {0x3, 0x7}, {0x5, 0x1}, {0x7, 0x4}, {0x7, 0x8}, {0x0, 0x3}, {0x4}, {0x4, 0x4}, {0x0, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0xa}, {0x2, 0x5}, {0x7, 0x7}, {0x6, 0x7}, {0x6, 0x5}, {0x3, 0x6}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x9}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x9}, {0x4, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x5}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x2}, {0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x2, 0x4}, {0x4, 0x7}, {0x4, 0xa}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x40, 0x3cd, 0xfff9, 0x400, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0x4}, {0x2, 0x6}, {0x3, 0x8}, {0x4, 0x9}, {0x5, 0xa}, {0x3, 0x6}, {0x2, 0x5}, {0x6, 0x7}, {0x4, 0x3}, {0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x8}, {0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x2, 0xa}, {0x3, 0x6}, {0x2, 0x1}, {0x7}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x6}, {0x4, 0x7}, {0x6, 0x1}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x16, 0x24, 0x16, 0x5, 0x9, 0x60, 0x5, 0xb, 0x18, 0xb, 0x4e, 0x1b, 0x12, 0x24, 0x6, 0x6c, 0x24, 0x27, 0x12, 0x9, 0x5, 0x1b, 0x1, 0x4]}]}, @NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x8}, {0x3, 0x7}, {0x5, 0x9}, {0x3, 0xa}, {0x7, 0x3}, {0x6, 0x6}, {0x6, 0x4}, {0x4, 0x7}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {}, {0x6, 0xa}, {0x6, 0x4}, {0x6, 0x5}, {0x3, 0x3}, {0x0, 0x7}, {0x4, 0x5}, {0x5, 0x7}, {0x4, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0x2}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x6}, {0x5, 0x7}, {0x4, 0x3}, {0x6, 0x3}, {0x2, 0x3}, {0x1, 0x1}, {0x6, 0xa}, {0x6, 0x3}, {0x7, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {0x3, 0x1}, {0x2, 0x9}, {0x5, 0x8}, {0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x7, 0xa}, {0x0, 0x4}, {0x5, 0x5}, {0x7, 0x3}, {0x2, 0x2}, {0x6, 0x8}, {0x3, 0x8}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x7}, {0x4, 0x6}, {0x7, 0xa}, {0x6, 0x3}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0xa}, {0x6}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x1}, {0x1}, {0x3, 0x9}, {0x3, 0x4}, {0x0, 0x8}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0x9}, {0x4, 0xa}, {0x7, 0x2}, {0x5, 0x4}, {0x2, 0x9}, {0x7, 0x5}, {0x7, 0xa}, {0x3}, {0x2, 0x3}, {0x4, 0x7}, {0x1, 0x6}, {0x7, 0x7}, {}, {0x6}, {0x3, 0xa}, {0x6, 0x7}, {0x2, 0x5}, {0x4, 0x8}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0xb, 0x12, 0x12, 0x6, 0x30, 0xc, 0x30, 0x12, 0x6c, 0x18, 0x12, 0x24, 0x12, 0x24, 0x48, 0x471aa92b56c38558, 0x12, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x7, 0x4, 0x489a, 0x600, 0x6, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4681, 0x40, 0x7f, 0x0, 0x5, 0x4a0, 0x0, 0x1ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x2}, {0x0, 0x3}, {0x4, 0x7}, {0x5}, {0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x5, 0x2}, {0x4, 0x6}, {0x7, 0xa}, {0x3}, {0x2, 0x3}, {0x7, 0x7}, {0x0, 0xa}, {0x4}, {0x6}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x5}, {0x1, 0x7}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x0, 0x8}, {0x2, 0x2}, {0x1}, {}, {0x2, 0x9}, {0x2, 0x9}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x16, 0xb, 0x30, 0x3, 0x2, 0x24, 0x16, 0x1, 0x1b, 0x30, 0x48, 0x5, 0x3, 0x3, 0x2, 0x6c, 0x1, 0x2, 0x6c, 0x6c, 0x16, 0x4, 0x9, 0x1b, 0x4, 0xb, 0xb, 0x18, 0xe]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0x81, 0xfc8, 0x8, 0x6, 0x0, 0xef]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x6, 0x4, 0x1, 0x3, 0xc, 0x1b, 0x3, 0x1, 0x1, 0x60, 0x30, 0x2, 0x6c, 0xfa06e66d66dd8a85, 0x30, 0x2a, 0x48, 0x18, 0x9, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7667, 0x8, 0x8, 0x6, 0x8, 0x2, 0x575, 0xe2]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x3}, {0x2, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x1}, {0x3, 0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x5}, {0x4, 0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x4}, {0x1}, {0x7, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x2}, {0x7, 0x1}, {}, {0x0, 0x4}, {0x5, 0x9}, {0x0, 0x5}, {0x1}, {0x2}, {0x0, 0x4}, {0x4, 0xa}, {0x3, 0x1}, {0x4, 0x3}, {0x2, 0x9}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x2}, {0x3, 0xa}, {0x4, 0x4}, {0x7, 0x6}, {0x5, 0x7}, {0x5, 0x2}, {}, {0x7, 0x9}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x9}, {0x6, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x9}, {0x6, 0x5}, {0x6, 0x9}, {0x7, 0x7}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x4}, {0x2, 0x3}, {0x6, 0xa}, {0x3, 0x7}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x7}, {0x2}, {0x7, 0x5}, {0x7, 0x9}, {0x1, 0xa}, {0x4, 0x4}, {}]}]}, @NL80211_BAND_60GHZ={0x130, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x5}, {0x3, 0x1}, {0x1, 0x9}, {0x5}, {0x4, 0x9}, {0x1, 0x4}, {0x2, 0x4}, {0x4, 0x7}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0x1e}, {0x2, 0x8}, {0x3, 0x9}, {0x6, 0xa}, {0x6, 0x8}, {0x6, 0x9}, {0x1, 0x7}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x9}, {0x6}, {0x4, 0x3}, {0x7, 0x9}, {0x0, 0x4}, {0x1, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x3, 0x7}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x6}, {0x7, 0x3}, {0x1}, {0x2, 0x1}, {0x6, 0x6}, {0x3, 0x6}, {0x3, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0x2}, {0x2}, {0x1, 0x6}, {0x4, 0xa}, {0x5}, {0x6}, {0x5, 0x7}, {0x5, 0x6}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x4}, {0x2, 0x3}, {0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x4}, {}, {0x2, 0x9}, {0x4, 0xa}, {0x1, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x2}, {0x3, 0x4}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x1}, {0x5, 0x2}, {0x4, 0x7}, {0x4, 0x2}, {0x1}, {0x3, 0xa}, {0x7, 0x2}, {0x1, 0x7}, {0x1}, {0x6, 0x3}, {0x3, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x5}, {0x4, 0x3}, {0x5, 0x7}, {0x1}, {0x1, 0x8}, {0x5, 0x5}, {0x2, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0x1}, {0x4, 0x3}, {0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0xa}, {0x6, 0x2}, {0x4, 0x9}, {0x3, 0x7}, {}, {0x6, 0xa}, {0x2, 0x4}, {0x4, 0x6}, {0x3, 0x8}, {0x7, 0x4}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0x6}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x6, 0xa}, {0x2}, {0x4, 0x7}, {0x1, 0x7}, {0x5, 0x6}, {0x6, 0x4}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x6}, {0x2, 0x2}, {0x3}, {0x0, 0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0xa}, {0x4, 0x5}, {0x6, 0x2}, {0x4, 0x3}, {0x7, 0x6}, {0x6, 0x9}, {0x3, 0xa}, {0x2, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x5, 0x9}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x2}, {0x4, 0x8}, {0x6, 0x9}, {0x2, 0x8}, {0x6, 0x9}, {0x7, 0x8}, {0x5, 0x8}, {0x3, 0x7}, {0x4, 0x3}, {0x1}, {0x6}, {0x3, 0x9}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x4}, {0x3, 0x9}, {0x2, 0x4}, {0x7, 0x7}, {0x1, 0x6}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x7}, {0x6, 0x4}, {0x6, 0x6}, {0x2, 0x3}, {0x0, 0x4}, {0x7, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x3}, {0x4, 0x2}, {0x2, 0x5}, {0x6, 0x9}, {}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {0x2, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x6}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x4, 0xa}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0x2}, {0x3, 0x4}, {0x2, 0x5}, {0x4, 0x7}, {0x1}, {0x2, 0x8}, {0x5, 0x4}, {0x6, 0x7}, {0x6}, {0x5}, {0x5, 0x6}, {0x7, 0x3}, {0x4, 0x7}, {0x7, 0x5}, {0x3, 0x3}, {0x5, 0x2}, {0x2, 0x8}, {0x1, 0x5}]}]}]}]}, 0x4d8}}, 0x800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r8, 0x0, 0x0) 05:00:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) futex(0x0, 0x80, 0x0, &(0x7f0000003740), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={0x0, 0x0, 0x8424}) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) 05:00:14 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x8000000000000) 05:00:14 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@ng={0x4, 0x10, "f5311c61ac717596835ba96466026df725017b"}, 0x15, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001a40)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000001b40)=0xe8) setresuid(r1, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev, @rand_addr, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x3a}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x9, 0x4e20, 0x0, 0x0, 0xa0, 0x10, 0x87, r3, r0}, {0xc1b7, 0x9, 0x8, 0x136, 0x800000000000000, 0xfffffffffffffff9, 0x2, 0x23fa}, {0x9, 0x6, 0xfffffffffffffff9, 0xb7e}, 0x8, 0x6e6bb0, 0x2, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x4d4}, 0xa, @in6=@private0, 0x3502, 0x4, 0x0, 0x8, 0x0, 0x6, 0x1}}, 0xe8) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r4) fcntl$dupfd(r2, 0x0, r2) [ 1307.744461] FAULT_INJECTION: forcing a failure. [ 1307.744461] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.746492] CPU: 1 UID: 0 PID: 11658 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 05:00:14 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x112}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) [ 1307.746523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1307.746536] Call Trace: 05:00:14 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 51) [ 1307.746543] [ 1307.746552] dump_stack_lvl+0xfa/0x120 [ 1307.746593] should_fail_ex+0x4d7/0x5e0 [ 1307.746629] ? __register_sysctl_table+0xb5/0x16a0 [ 1307.746654] should_failslab+0xc2/0x120 [ 1307.746677] __kmalloc_noprof+0xb4/0x4b0 [ 1307.746714] __register_sysctl_table+0xb5/0x16a0 [ 1307.746737] ? kasan_save_track+0x14/0x30 [ 1307.746758] ? __kasan_kmalloc+0x7f/0x90 [ 1307.746783] ? __pfx___register_sysctl_table+0x10/0x10 [ 1307.746808] ? setup_mq_sysctls+0x5d/0x240 [ 1307.746837] ? __asan_memcpy+0x3d/0x60 [ 1307.746872] setup_mq_sysctls+0x145/0x240 [ 1307.746902] copy_ipcs+0x489/0x630 [ 1307.746925] ? copy_utsname+0xae/0x470 [ 1307.746949] create_new_namespaces+0x210/0xab0 [ 1307.746980] ? security_capable+0x2f/0x90 [ 1307.747014] copy_namespaces+0x45c/0x580 [ 1307.747044] copy_process+0x26d5/0x73e0 [ 1307.747078] ? __pfx__kstrtoull+0x10/0x10 05:00:14 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x100000000000000) [ 1307.747121] ? __pfx_copy_process+0x10/0x10 [ 1307.747155] ? __might_fault+0xe0/0x190 [ 1307.747183] ? _copy_from_user+0x5b/0xd0 [ 1307.747219] kernel_clone+0xea/0x820 [ 1307.747238] ? get_pid_task+0xfd/0x250 [ 1307.747271] ? __pfx_kernel_clone+0x10/0x10 [ 1307.747297] ? find_held_lock+0x2b/0x80 [ 1307.747328] ? ksys_write+0x121/0x240 [ 1307.747360] ? lock_is_held_type+0x9e/0x120 [ 1307.747397] __do_sys_clone3+0x1f5/0x280 [ 1307.747417] ? __pfx___do_sys_clone3+0x10/0x10 [ 1307.747451] ? __fget_files+0x20d/0x3b0 [ 1307.747488] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1307.747524] ? ksys_write+0x1a3/0x240 [ 1307.747555] ? __pfx_ksys_write+0x10/0x10 [ 1307.747595] do_syscall_64+0xbf/0x360 [ 1307.747618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.747640] RIP: 0033:0x7f4a9ce31b19 [ 1307.747657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 05:00:14 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'syztnl2\x00', 0x0}) [ 1307.747678] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1307.747699] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1307.747714] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1307.747728] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1307.747741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1307.747754] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1307.747782] [ 1307.784331] ================================================================== [ 1307.785464] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x24d/0x560 [ 1307.786531] Write of size 8 at addr ffff888015b39e00 by task syz-executor.4/11658 [ 1307.787586] [ 1307.787842] CPU: 1 UID: 0 PID: 11658 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1307.787872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1307.787885] Call Trace: [ 1307.787895] [ 1307.787905] dump_stack_lvl+0xca/0x120 [ 1307.787942] print_report+0xcb/0x670 [ 1307.787967] ? __virt_addr_valid+0x100/0x5d0 [ 1307.787998] ? flush_tlb_func+0x24d/0x560 [ 1307.788030] ? flush_tlb_func+0x24d/0x560 [ 1307.788063] kasan_report+0xca/0x100 [ 1307.788088] ? flush_tlb_func+0x24d/0x560 [ 1307.788123] kasan_check_range+0x39/0x1b0 [ 1307.788153] flush_tlb_func+0x24d/0x560 [ 1307.788186] ? lock_acquire+0x15e/0x2f0 [ 1307.788210] ? __pfx_flush_tlb_func+0x10/0x10 [ 1307.788243] __flush_smp_call_function_queue+0x20d/0x740 [ 1307.788284] __sysvec_call_function_single+0x6d/0x360 [ 1307.788319] sysvec_call_function_single+0x5f/0xc0 [ 1307.788351] asm_sysvec_call_function_single+0x1a/0x20 [ 1307.788376] RIP: 0010:handle_softirqs+0x174/0x770 [ 1307.788409] Code: c8 83 83 3c 0a 00 00 01 c7 44 24 20 0a 00 00 00 48 89 44 24 18 65 66 c7 05 cf 84 47 06 00 00 e8 22 65 40 00 fb bb ff ff ff ff <48> c7 c5 c0 c0 a0 85 41 0f bc de 83 c3 01 0f 85 9b 00 00 00 e9 8d [ 1307.788432] RSP: 0018:ffff88806cf08f78 EFLAGS: 00000206 [ 1307.788461] RAX: 0000000000000218 RBX: 00000000ffffffff RCX: ffffffff817bbfa6 [ 1307.788477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff813b5b6e [ 1307.788491] RBP: ffff8880155a7718 R08: 0000000000000001 R09: 0000000000000001 [ 1307.788505] R10: ffffffff86438657 R11: 0000000000000001 R12: 0000000000000000 [ 1307.788519] R13: 0000000000000000 R14: 0000000000000200 R15: 0000000000000000 [ 1307.788536] ? trace_irq_enable.constprop.0+0x26/0x100 [ 1307.788570] ? handle_softirqs+0x16e/0x770 [ 1307.788601] ? handle_softirqs+0x16e/0x770 [ 1307.788633] __irq_exit_rcu+0xc4/0x100 [ 1307.788661] irq_exit_rcu+0x9/0x20 [ 1307.788690] sysvec_apic_timer_interrupt+0x70/0x80 [ 1307.788721] [ 1307.788728] [ 1307.788736] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1307.788759] RIP: 0010:dump_stack_lvl+0x115/0x120 [ 1307.788792] Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 e6 40 7b fc e8 e1 f7 a4 fc 48 89 ee 31 ff e8 d7 95 c4 fc e8 72 9a c4 fc e8 7d c4 cc fc fb 5b <5d> 41 5c e9 63 9a c4 fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 1307.788814] RSP: 0018:ffff8880155a77c0 EFLAGS: 00000202 [ 1307.788830] RAX: 0000000000000215 RBX: ffffffff85d01e20 RCX: ffffffff817bbfa6 [ 1307.788845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84aefc13 [ 1307.788859] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 [ 1307.788873] R10: ffffffff86438657 R11: 0000000000000001 R12: ffffffff8530f500 [ 1307.788887] R13: ffffffff85d01e30 R14: 0000000000000000 R15: 0000000000000000 [ 1307.788905] ? trace_irq_enable.constprop.0+0x26/0x100 [ 1307.788938] ? dump_stack_lvl+0x113/0x120 [ 1307.788972] should_fail_ex+0x4d7/0x5e0 [ 1307.789005] ? __register_sysctl_table+0xb5/0x16a0 [ 1307.789030] should_failslab+0xc2/0x120 [ 1307.789049] __kmalloc_noprof+0xb4/0x4b0 [ 1307.789082] __register_sysctl_table+0xb5/0x16a0 [ 1307.789106] ? kasan_save_track+0x14/0x30 [ 1307.789128] ? __kasan_kmalloc+0x7f/0x90 [ 1307.789150] ? __pfx___register_sysctl_table+0x10/0x10 [ 1307.789175] ? setup_mq_sysctls+0x5d/0x240 [ 1307.789203] ? __asan_memcpy+0x3d/0x60 [ 1307.789236] setup_mq_sysctls+0x145/0x240 [ 1307.789265] copy_ipcs+0x489/0x630 [ 1307.789288] ? copy_utsname+0xae/0x470 [ 1307.789309] create_new_namespaces+0x210/0xab0 [ 1307.789339] ? security_capable+0x2f/0x90 [ 1307.789370] copy_namespaces+0x45c/0x580 [ 1307.789398] copy_process+0x26d5/0x73e0 [ 1307.789432] ? __pfx__kstrtoull+0x10/0x10 [ 1307.789468] ? __pfx_copy_process+0x10/0x10 [ 1307.789501] ? __might_fault+0xe0/0x190 [ 1307.789526] ? _copy_from_user+0x5b/0xd0 [ 1307.789551] kernel_clone+0xea/0x820 [ 1307.789569] ? get_pid_task+0xfd/0x250 [ 1307.789601] ? __pfx_kernel_clone+0x10/0x10 [ 1307.789624] ? find_held_lock+0x2b/0x80 [ 1307.789653] ? ksys_write+0x121/0x240 [ 1307.789684] ? lock_is_held_type+0x9e/0x120 [ 1307.789717] __do_sys_clone3+0x1f5/0x280 [ 1307.789736] ? __pfx___do_sys_clone3+0x10/0x10 [ 1307.789763] ? __fget_files+0x20d/0x3b0 [ 1307.789796] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1307.789830] ? ksys_write+0x1a3/0x240 [ 1307.789861] ? __pfx_ksys_write+0x10/0x10 [ 1307.789896] do_syscall_64+0xbf/0x360 [ 1307.789918] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:00:14 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 52) 05:00:14 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @private=0xa010102}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @loopback}, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x5, 0x3}) [ 1307.789940] RIP: 0033:0x7f4a9ce31b19 [ 1307.789957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1307.789978] RSP: 002b:00007f4a9a3a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1307.789999] RAX: ffffffffffffffda RBX: 00007f4a9cf44f60 RCX: 00007f4a9ce31b19 [ 1307.790013] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1307.790027] RBP: 00007f4a9a3a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1307.790041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1307.790054] R13: 00007fff5a974f5f R14: 00007f4a9a3a7300 R15: 0000000000022000 [ 1307.790076] [ 1307.790083] [ 1307.810726] FAULT_INJECTION: forcing a failure. [ 1307.810726] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.812205] Allocated by task 7084: [ 1307.812221] kasan_save_stack+0x24/0x50 [ 1307.812719] CPU: 0 UID: 0 PID: 11665 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1307.812738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1307.812746] Call Trace: [ 1307.812752] [ 1307.812757] dump_stack_lvl+0xfa/0x120 [ 1307.812784] should_fail_ex+0x4d7/0x5e0 [ 1307.812806] ? alloc_vfsmnt+0x23/0x770 [ 1307.812819] should_failslab+0xc2/0x120 [ 1307.812833] kmem_cache_alloc_noprof+0x5f/0x470 [ 1307.812850] ? find_held_lock+0x2b/0x80 [ 1307.812869] ? fc_mount+0x9c/0x110 [ 1307.812884] alloc_vfsmnt+0x23/0x770 [ 1307.812897] vfs_create_mount.part.0+0x40/0x440 [ 1307.812913] fc_mount+0xd5/0x110 [ 1307.812926] mq_init_ns+0x42e/0x630 [ 1307.812943] copy_ipcs+0x38d/0x630 [ 1307.812955] ? copy_utsname+0xae/0x470 [ 1307.812969] create_new_namespaces+0x210/0xab0 [ 1307.812986] ? security_capable+0x2f/0x90 [ 1307.813005] copy_namespaces+0x45c/0x580 [ 1307.813021] copy_process+0x26d5/0x73e0 [ 1307.813041] ? __pfx__kstrtoull+0x10/0x10 [ 1307.813065] ? __pfx_copy_process+0x10/0x10 [ 1307.813083] ? __might_fault+0xe0/0x190 [ 1307.813100] ? _copy_from_user+0x5b/0xd0 [ 1307.813115] kernel_clone+0xea/0x820 [ 1307.813125] ? get_pid_task+0xfd/0x250 [ 1307.813144] ? __pfx_kernel_clone+0x10/0x10 [ 1307.813158] ? find_held_lock+0x2b/0x80 [ 1307.813174] ? ksys_write+0x121/0x240 [ 1307.813191] ? lock_is_held_type+0x9e/0x120 [ 1307.813218] __do_sys_clone3+0x1f5/0x280 [ 1307.813228] ? __pfx___do_sys_clone3+0x10/0x10 [ 1307.813248] ? perf_trace_preemptirq_template+0x259/0x430 [ 1307.813270] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1307.813289] ? ksys_write+0x1a3/0x240 [ 1307.813305] ? __pfx_ksys_write+0x10/0x10 [ 1307.813326] do_syscall_64+0xbf/0x360 [ 1307.813339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.813352] RIP: 0033:0x7f27ed07cb19 [ 1307.813362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1307.813373] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1307.813386] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1307.813394] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1307.813401] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1307.813408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1307.813416] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1307.813431] [ 1307.900628] kasan_save_track+0x14/0x30 [ 1307.901221] __kasan_slab_alloc+0x59/0x70 [ 1307.901825] kmem_cache_alloc_noprof+0x13c/0x470 [ 1307.902519] copy_process+0x6f3a/0x73e0 [ 1307.903104] kernel_clone+0xea/0x820 [ 1307.903649] __do_sys_clone+0xce/0x120 [ 1307.904219] do_syscall_64+0xbf/0x360 [ 1307.904790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.905534] [ 1307.905787] Freed by task 11643: [ 1307.906278] kasan_save_stack+0x24/0x50 [ 1307.906856] kasan_save_track+0x14/0x30 [ 1307.907439] kasan_save_free_info+0x3a/0x60 [ 1307.908067] __kasan_slab_free+0x38/0x50 [ 1307.908672] kmem_cache_free+0x2a1/0x460 05:00:14 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 53) [ 1307.909281] mmput+0x305/0x390 [ 1307.909953] do_exit+0x79d/0x2970 [ 1307.910463] do_group_exit+0xd3/0x2a0 [ 1307.911025] __x64_sys_exit_group+0x3e/0x50 [ 1307.911645] x64_sys_call+0xf76/0x18a0 [ 1307.912217] do_syscall_64+0xbf/0x360 [ 1307.912838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.913598] [ 1307.913853] The buggy address belongs to the object at ffff888015b39480 [ 1307.913853] which belongs to the cache mm_struct of size 2456 [ 1307.915604] The buggy address is located 2432 bytes inside of 05:00:14 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'syztnl1\x00', 0x0}) [ 1307.915604] freed 2456-byte region [ffff888015b39480, ffff888015b39e18) [ 1307.917488] [ 1307.917744] The buggy address belongs to the physical page: [ 1307.918540] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15b38 [ 1307.919677] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1307.920783] memcg:ffff888009f9a181 [ 1307.921289] flags: 0x100000000000040(head|node=0|zone=1) [ 1307.922067] page_type: f5(slab) [ 1307.922555] raw: 0100000000000040 ffff888008c4bc80 ffffea0000557000 dead000000000004 [ 1307.923650] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888009f9a181 [ 1307.924768] head: 0100000000000040 ffff888008c4bc80 ffffea0000557000 dead000000000004 [ 1307.925880] head: 0000000000000000 00000000000c000c 00000000f5000000 ffff888009f9a181 [ 1307.927001] head: 0100000000000003 ffffea000056ce01 00000000ffffffff 00000000ffffffff [ 1307.928129] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1307.929255] page dumped because: kasan: bad access detected [ 1307.930060] [ 1307.930313] Memory state around the buggy address: [ 1307.931016] ffff888015b39d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1307.932043] ffff888015b39d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1307.933101] >ffff888015b39e00: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1307.934149] ^ [ 1307.934638] ffff888015b39e80: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 1307.935685] ffff888015b39f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1307.936719] ================================================================== [ 1307.937747] Disabling lock debugging due to kernel taint 05:00:14 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 05:00:23 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 54) 05:00:23 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="b544e4d519a548c29f3ccf44a743c7d04e80b777d2988baa2027ddf3e1be3f625445be94a83225e835854b22c41372564ec452a1d27311442f26461257f0badca3be090802a5ccbc4f6041f02728f730472043d821cbb62b5ba51614098c27d8b0305706e2587a2a8b94f316a8023acf6623a62bf1a45c8b21d3f9f1f5135a039062c71f", 0x84, 0xc7}], 0xc0, &(0x7f0000000200)={[{'sit0\x00'}, {'-&'}], [{@subj_user={'subj_user', 0x3d, '['}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) 05:00:23 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696c65010a"], 0xb) r2 = dup(r1) copy_file_range(r2, 0x0, r0, 0x0, 0x401, 0x0) 05:00:23 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 05:00:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x200000000000000) 05:00:23 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 05:00:23 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 57) 05:00:23 executing program 1: sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x24000095}, 0x4000010) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getpid() r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000400000000000000ff00"], 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3ff, 0x4a8180) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x48, "eeb7c1880abafc785030419188f8b8b448e28651c5109a18232fe5a7d173a4a9f9b57a1340fb6bd38b0ee0737cd0e8703c5a397f28e0f2a326188e7561d4ae3dd88d79e2d8566d2d"}, &(0x7f0000000200)=0x6c) creat(&(0x7f0000000300)='./file1\x00', 0xa7) futimesat(r3, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='syz1\x00') [ 1316.488132] FAULT_INJECTION: forcing a failure. [ 1316.488132] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.489072] CPU: 0 UID: 0 PID: 11698 Comm: syz-executor.0 Tainted: G B 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1316.489093] Tainted: [B]=BAD_PAGE [ 1316.489101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1316.489109] Call Trace: [ 1316.489113] [ 1316.489118] dump_stack_lvl+0xfa/0x120 [ 1316.489147] should_fail_ex+0x4d7/0x5e0 [ 1316.489167] should_failslab+0xc2/0x120 [ 1316.489180] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1316.489199] ? setup_mq_sysctls+0x5d/0x240 [ 1316.489216] kmemdup_noprof+0x2b/0x60 [ 1316.489235] setup_mq_sysctls+0x5d/0x240 [ 1316.489249] copy_ipcs+0x489/0x630 [ 1316.489261] ? copy_utsname+0xae/0x470 [ 1316.489274] create_new_namespaces+0x210/0xab0 [ 1316.489291] ? security_capable+0x2f/0x90 [ 1316.489309] copy_namespaces+0x45c/0x580 [ 1316.489324] copy_process+0x26d5/0x73e0 [ 1316.489343] ? __pfx__kstrtoull+0x10/0x10 [ 1316.489359] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 1316.489382] ? __pfx_copy_process+0x10/0x10 [ 1316.489400] ? __might_fault+0xe0/0x190 [ 1316.489414] ? _copy_from_user+0x5b/0xd0 [ 1316.489427] kernel_clone+0xea/0x820 [ 1316.489437] ? __pfx_kernel_clone+0x10/0x10 [ 1316.489450] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1316.489470] ? lock_release+0x1c7/0x290 [ 1316.489484] __do_sys_clone3+0x1f5/0x280 [ 1316.489495] ? __pfx___do_sys_clone3+0x10/0x10 [ 1316.489509] ? perf_trace_preemptirq_template+0x259/0x430 [ 1316.489529] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1316.489547] ? ksys_write+0x1a3/0x240 [ 1316.489566] ? __pfx_ksys_write+0x10/0x10 [ 1316.489584] do_syscall_64+0xbf/0x360 [ 1316.489596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.489609] RIP: 0033:0x7f27ed07cb19 [ 1316.489618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1316.489630] RSP: 002b:00007f27ea5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1316.489642] RAX: ffffffffffffffda RBX: 00007f27ed18ff60 RCX: 00007f27ed07cb19 [ 1316.489650] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000400 [ 1316.489657] RBP: 00007f27ea5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1316.489665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1316.489672] R13: 00007ffc9eed857f R14: 00007f27ea5f2300 R15: 0000000000022000 [ 1316.489684] [ 1316.511906] nfs4: Unknown parameter 'sit0' 05:00:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x300000000000000) 05:00:23 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$dupfd(r0, 0x406, r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r3 = dup(r2) copy_file_range(r3, &(0x7f0000000040), r1, &(0x7f00000000c0)=0x401, 0x401, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 05:00:23 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) creat(&(0x7f0000000080)='./file0\x00', 0x0) 05:00:23 executing program 4: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086607, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 58) 05:00:23 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000400)={0x8094900, 0x0, &(0x7f0000000100), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 55) 05:00:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x400000000000000) 05:00:23 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(r1) r2 = syz_open_procfs$userns(0x0, &(0x7f0000001b00)) r3 = fcntl$dupfd(r2, 0x0, r0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x1, 0x6}]}, 0xc, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r6 = dup(r5) copy_file_range(r6, &(0x7f0000000040), r4, &(0x7f00000000c0)=0x401, 0x401, 0x0) setsockopt$sock_int(r6, 0x1, 0x13, &(0x7f00000000c0)=0x1e, 0x4) VM DIAGNOSIS: 05:00:14 Registers: info registers vcpu 0 RAX=ffffffff8687d461 RBX=0000000000000001 RCX=ffffffff8687d45c RDX=0000000000000002 RSI=0000000000000001 RDI=ffffffff864fd7c8 RBP=ffff88803f43f940 RSP=ffff88803f43f878 R8 =ffffffff8687d45c R9 =0000000000000000 R10=000000000003baf4 R11=0000000000021770 R12=ffff88803f43f948 R13=ffff88803f43f930 R14=ffff88803f43f929 R15=ffff88803f43f8e8 RIP=ffffffff813540a5 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055558025ec18 CR3=000000003c6e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f27ed1637c000007f27ed1637c8 XMM02=00007f27ed1637e000007f27ed1637c0 XMM03=00007f27ed1637c800007f27ed1637c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b97f5 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff88806cf08838 R8 =0000000000000000 R9 =ffffed100141d046 R10=0000000000000062 R11=303178302f303120 R12=0000000000000062 R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b97e0 RIP=ffffffff828b984d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4a9a3a7700 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc6824f5fe8 CR3=000000003f434000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000