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"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(r0, 0xfffffffffffffffe, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x2e9) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x341602, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2148c3, 0x40) fcntl$setstatus(r1, 0x4, 0x44000) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "334e696f49612fe527f9b713325ac105"}, 0x11, 0x3) sendfile(r1, r2, 0x0, 0xfdef) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = syz_open_dev$vcsa(&(0x7f0000000140), 0xffff, 0x0) lseek(r4, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x1, 0x4, 0x9, 0x0, 0xb44, 0x10888, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x380, 0x2, @perf_config_ext={0x8, 0x800}, 0x460, 0x1, 0x9, 0x9, 0x952, 0x236a, 0x102, 0x0, 0x7, 0x0, 0x40}, r4, 0x2, 0xffffffffffffffff, 0x8) 21:44:51 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:44:51 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0/file0\x00', 0x402) unlink(&(0x7f0000000080)='./file0/file0\x00') symlinkat(&(0x7f0000000000)='./file0/file0\x00', r0, &(0x7f0000000040)='./file1\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) openat(r2, &(0x7f00000000c0)='.\x00', 0x4200, 0x67) 21:44:51 executing program 6: r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x100000000, 0x1) 21:44:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = socket(0x10, 0x6, 0x400) fcntl$setstatus(r2, 0x4, 0x400) io_submit(r1, 0x0, &(0x7f0000000000)) 21:45:00 executing program 7: syz_emit_ethernet(0x72, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@lsrr={0x83, 0x7, 0x88, [@multicast1]}, @lsrr={0x83, 0x3, 0x56}]}}}}}}, 0x0) syz_emit_ethernet(0xf, &(0x7f0000000180)={@random="f1dbbebcc45c", @random="73b24432b517", @void, {@generic={0x80f3, "98"}}}, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000040)={@link_local, @multicast, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@x25={0x805, {0x3, 0x1f, 0x1b, "c51b97ee19bba78caceb0e02868de28af5fdd568fec715f633b1831b1c26871da72d84eea8517cc8c85107abeb3b0169b1da698d356f"}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x10e, 0xe18, 0x930, 0x574]}) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0x1ff) 21:45:00 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r2, &(0x7f0000000040), 0x0, 0x404bbe, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) 21:45:00 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x4840, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000000c0)) r2 = dup(r0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x2, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x81}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4df}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7f}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x3) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000380)) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000300)={'\x00', 0x1, 0x3, 0x7}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000180)) dup(r2) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000000)={0x0, 0x0, 0x11, &(0x7f0000000080)="14b71ef76332a04dfb1dbb98a0317db15c"}) 21:45:00 executing program 6: r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x100000000, 0x1) 21:45:00 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:45:00 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc01, 0x0, 0x0, 0x8}, 0x0, 0x40004, 0xffffffffffffffff, 0x3) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:45:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = socket(0x10, 0x6, 0x400) fcntl$setstatus(r2, 0x4, 0x400) io_submit(r1, 0x0, &(0x7f0000000000)) 21:45:00 executing program 5: getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x80, 0x7, 0x1, 0x0, 0x80, 0x20412, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfff80000, 0x0, @perf_config_ext={0x9, 0x5}, 0xa006, 0x800, 0xbd5a, 0x1, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x7, r0, 0x5) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x1f}) 21:45:00 executing program 6: syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(0xffffffffffffffff, 0x100000000, 0x1) 21:45:00 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x8001, 0x41) flock(r1, 0x4) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) close(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) socket(0x10, 0x800, 0x7) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r5, 0xf505, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000000c0)) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 21:45:00 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:45:00 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) close(r2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) bind$unix(r3, &(0x7f0000000100)=@file={0x0, './file1\x00'}, 0x6e) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x5, 0x3, 0x6, 0x0, 0x0, 0x400000000, 0x48004, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x4004, 0x4e98a897, 0x5, 0x6, 0x10001, 0x200, 0x3, 0x0, 0xffff, 0x0, 0x1}, r4, 0xf, r2, 0xe) bind$unix(r1, &(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e) 21:45:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) r2 = socket(0x10, 0x6, 0x400) fcntl$setstatus(r2, 0x4, 0x400) 21:45:01 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc01, 0x0, 0x0, 0x8}, 0x0, 0x40004, 0xffffffffffffffff, 0x3) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:45:01 executing program 6: syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(0xffffffffffffffff, 0x100000000, 0x1) 21:45:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x105500, 0x40) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = dup3(r2, r3, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 21:45:01 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x28, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0x1d, 0x6}, @eol, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @multicast, @val={@val={0x9100, 0x0, 0x0, 0x4}, {0x8100, 0x6, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @local, @local, @remote, @private1}}}}, &(0x7f00000001c0)={0x1, 0x4, [0x5c8, 0x732, 0xb14, 0xd31]}) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@empty, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @remote, @multicast, @remote}}}}, &(0x7f0000000100)={0x0, 0x4, [0x18f, 0xa7b, 0xda0, 0xf3a]}) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 21:45:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) finit_module(r1, &(0x7f00000000c0)='\x00', 0x5) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000001300)="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", 0x599}], 0x1}}], 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) [ 206.525651] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 21:45:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0/file0', [], 0xa, "e721992a548cd7e8c7fa997724dddef52f4ab23d8bda93d4fecbf3feeac3d963a8676d4b8f28ecb21093ef737af8c29c233cde512cb43209c20bb806255185336c695e6df1edac83"}, 0x59) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) [ 208.496135] Bluetooth: hci2: command 0x0406 tx timeout [ 208.499581] Bluetooth: hci4: command 0x0406 tx timeout [ 208.500651] Bluetooth: hci6: command 0x0406 tx timeout [ 208.500662] Bluetooth: hci1: command 0x0406 tx timeout [ 208.500704] Bluetooth: hci3: command 0x0406 tx timeout [ 208.501466] Bluetooth: hci0: command 0x0406 tx timeout [ 208.502939] Bluetooth: hci7: command 0x0406 tx timeout [ 208.503417] Bluetooth: hci5: command 0x0406 tx timeout 21:45:10 executing program 6: syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(0xffffffffffffffff, 0x100000000, 0x1) 21:45:10 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x9) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x8, 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/150, 0x96}, {&(0x7f0000000100)=""/131, 0x83}, {&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000480)=""/95, 0x5f}, {&(0x7f0000000500)=""/76, 0x4c}], 0x9, 0x0, 0x2) preadv(r1, &(0x7f0000001600)=[{&(0x7f0000000f40)=""/32, 0x20}], 0x1, 0x0, 0x0) 21:45:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) finit_module(r1, &(0x7f00000000c0)='\x00', 0x5) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000001300)="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", 0x599}], 0x1}}], 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) 21:45:10 executing program 2: r0 = clone3(&(0x7f0000005880)={0x63020180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) lseek(r4, 0x100000000, 0x0) r5 = getpid() pidfd_open(r5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) r7 = getpid() r8 = pidfd_open(r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x6}}, './file0\x00'}) clone3(&(0x7f00000006c0)={0x1000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x32}, &(0x7f0000000340)=""/201, 0xc9, &(0x7f0000000440)=""/187, &(0x7f0000000580)=[r0, r1, 0x0, r5, r6, r7], 0x6, {r3}}, 0x58) clone3(&(0x7f0000000200)={0x8000, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080), {0x1}, &(0x7f00000001c0)=""/16, 0x2e, &(0x7f0000000100)=""/149, &(0x7f00000001c0), 0x0, {r4}}, 0x58) 21:45:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) socket(0x10, 0x6, 0x400) 21:45:10 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc01, 0x0, 0x0, 0x8}, 0x0, 0x40004, 0xffffffffffffffff, 0x3) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:45:10 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:45:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x1b, 0x7f, [@ibss={0x6, 0x2, 0x6}, @ext_channel_switch={0x3c, 0x0, {0x1, 0xff, 0xc, 0x70}}, @mesh_chsw={0x76, 0x6, {0x2, 0x3f, 0x38, 0x7fff}}, @challenge={0x10, 0x1, 0xc6}]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x6}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x0, 0x115, "5edb31ebffe7d9935c642fa0b050b9f7431bb727be647ec26106ac7d80ecd75b7f786592031dd3fa477d8d29acc9d06ea0"}, @NL80211_ATTR_SAE_PASSWORD, @NL80211_ATTR_SOCKET_OWNER]]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 21:45:10 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x7ae}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xc, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61820100, 0x0, &(0x7f0000005700), 0x0, {0x3}, 0x0, 0x0, &(0x7f00000001c0)=""/30, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000006c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x100, 0x7, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000200)={{0x1f, 0x7}, {0x8, 0x3}, 0x3f, 0x4, 0x4}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700)=0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r2}}, 0x58) clone3(&(0x7f0000000600)={0x80080, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x1c}, &(0x7f0000000400)=""/174, 0xae, &(0x7f00000004c0)=""/249, &(0x7f00000005c0)=[r4], 0x1}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000003c0)=r2, 0x1) 21:45:10 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff4000/0x4000)=nil) 21:45:10 executing program 7: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000040)={0xfffffffffffffffa}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x3d983f79474f2b28, &(0x7f0000000000)="8365fda1", 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) 21:45:10 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc01, 0x0, 0x0, 0x8}, 0x0, 0x40004, 0xffffffffffffffff, 0x3) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:45:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x0, 0x1) 21:45:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) 21:45:10 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff4000/0x4000)=nil) 21:45:10 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000540)) recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000004940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, 0x0}}], 0x2, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="1601"]) 21:45:10 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) [ 216.416746] 9pnet_fd: Insufficient options for proto=fd 21:45:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x0, 0x1) [ 216.458852] 9pnet_fd: Insufficient options for proto=fd 21:45:11 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff4000/0x4000)=nil) 21:45:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000), 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) fcntl$setstatus(r1, 0x4, 0x800) 21:45:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x0, 0x1) 21:45:19 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 1) 21:45:19 executing program 1: io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x80000}]) 21:45:19 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448cb, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r3 = dup2(r2, r0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000040)={0x84f6, 0xfff, 0x5, 0x8, 0x9, 0x80, 0x85f}, 0xc) lseek(r2, 0x100000000, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0xca, 0x9, 0x6, 0x9, 0x0, 0x2000000000, 0x1214, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x8, 0x2, 0x3, 0x4, 0xdc1, 0x9c, 0xff, 0x0, 0x0, 0x0, 0x4236}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/228, 0xe4}], 0x1, 0x48, 0x3, 0x1) 21:45:19 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x42, 0x0}}], 0x1, 0x24044994) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r4, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, r4, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x4e}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004004}, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="26008000", @ANYRES16=r2, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r5, @ANYBLOB="0a001a00ffffffffffff00000a0006000802110000010000"], 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x347d}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000080)="f5142a979eff0e9f274fe77de08cd5274faf7085c308e4a3a97898c767bfec840f29dce9f717fb6f7150665442d0b809325a9344106c860f0abfab69ee76fcb455f370db0148aa59e5a928c9aece54874bf2d40d51edd542786b970d9422c65e935f56f9481de7412b5af2dc9575a0ed15b159f49ef2d3beffdbcaf908d1bedd62addf104bd3c2053853d9a5f11ae8b4", 0x90}, {&(0x7f0000000140)="f9b17ede6376512edea446e30c25b742aabb614c84cd687c8220fba40989a9763885af4f0cd1cf6026243aad08d2c48385a297a3ed2fbee708cc5b749013c18642", 0x41}, {&(0x7f00000001c0)="3c82e9395b4d56d8f705efded75c547f438695df994a8f8dd213e1bc3c4cfd799ed1130adc84d3734fc8f187def6607e67cd58570982148a9611e2498b", 0x3d}, {&(0x7f0000000200)="c1bf69eb3dcac59f926dc91f9cb9e4a89a53a02c63166060b39ffe826e4908e93d136cf75c25e9de2eac96cff9d4dd618031b008a352507d2d56fdae9518e33dfb58d74e631ead446f60dc7b450d29d4a882858dba872b9a5b4072b3b9073556b965a60e12d239ec5630e633c7aa35e6a529713aa62af3d1a5b7f50a443feb8312be3096f45d18d84c33291148a52fffca3bd2d0a644364a00e020febf38e40d16543b09700de98a6a1389767a54b92452eb24ff69d072712c37121a1795778c6640e2ec4b9304d6950b3d00d930f32cadcb5d5add3976dbd4218815d85d3c11b22502ad99a67b43b799f4f24789eefb373512234931d35a02819fc0eefc6e49509cf36bcc64aedeeddd882ea69f0343135d1df0b84bfac81b69f3bbd5eac9aa8882051091e8bb15a3e1812d200d5590cb9560bb706b2547cd94f8b05e144014971ef08d6fa974e0724280954c942783644b3f552ff0f4d4941fd0623e4ef2cd7d211b4cf57974afaa841c5babd103a4c809ccfb51e28b431eb0c42a43343145f065d4db291c27a7269828d10b8cea4568bce7fa45c3b19f233f073662357b717736d2e065c90a95dd5f371a47dc1f25397147189ee6add6a01c6c7d156d2778232eb51e073b8e50d4da162265ea587cc4ba1988dd657bb93d454d36b1570e56a2fefa3cfe241c83008c6433d03aa9c0df1aa184cd944b85cc60102d78f7d8facd0796394883dedc2dc7052462869f5b790f84fc3728d83ff1af63cb3064dc3fc5fc96793e0f23f2cd0a48ca18296a0d311d629f5a21768d29849ebd7a1e87f362df9f3c3f43de740fbe1bd6a6be93a7e2f076f91084330bf1548b0bff9934e842ce367c20f48f86425d3f6c1c23f68d211d4e7e6355d9274ea8068ba4b3bb40b8340128213bc0b9efb580befe2196b177a16d772d799955fe2447bdeaefc9e69d400b4a18f20721ff00ba4d448c0a23f4fdc48c67906466d54f13f0217c33d98be08059ebd7d30407874f34284a53cda195695c49fb0c3408c9e45a62516d6a3bf5510ee5f63dc8ec665795dce156d99275cfa180346e1c63218b236bb448c0151b231292b61fb69856d78b81311b2be6f106ff09bbf50b1340e11cbada12069c5bfbcf8f3cfe6d4b2faf3cfb23908a0b235673b2b4eaf81356202127543b1d3233cbfb45d6642e271d77e5476819be287502e86d139ee1f6af7f09d21507e444d55c435dbe6221e87a8232ab02dc474560bfefc71abcabf035191557e5ce7f0f262edf671e6b7d09cfd62799f94486d618f0719446828d4ee765ded23f352ed0672edc21a25a0b977fba945211722e31dd953a3a0cc79c40d062f99b375a87451049b906db400eeaf2abbec22421fce258dcd13c771af2b5ccb19368599044327670927870a333cc309aefe74c97d62722ef96d196966107f49dbacb5753ce0f6555346a8bca4c7c9a3bd3008bda81315d33c1f8408dc0d204d4ecf8a9aa3f5a9b100d3b970bc9e52a6347071257d7c0b6e3d9350af63cb2986660940a7a3388065f5597ce37eb847889f15bd1151b37d4b8988f915b318f384befdc1f63e6c5beae4b6b4cefcca8fbd3e290717181f3c9d2936b35fd54d04b46b3968742a243dbd9fdffeb0c8ab538ff313fc2f3ff9d72c58800ddac9402a78d504520eca76575552fb473bb914c69bd0c9c65e7181e47603f6155ad4c60238bba2e86f9b4fc6859b62eca9309fa803d7f1c92c47ba5938ead0fe0038fb6f17e4f727d65d931e481fd0dfc300aa7358ab0b5ff0a07e5a0ee9e0c11c5a15814ee84deb0333517326d0889d9b89661c142e246d57a47cbd3f1bdc5cff1a09c8f8a5d5034646661b2b61e99cb4494472239fd374b764cd4c3f8590847cb1392ca85c598747d92cc11c4c8cf73d2e2a3092e4242ebe30ca958a7e08a06eb9a0c109cf5a6a3912b365be64a4eaf47f38866c3cc21f84b49d8ccbeb7066058030c8a188ebca2770edcef9961d069a348837f8841d627114ec59a4f8cb2e9e420e0d65927867bdf2533686d0b5e650cd4b2798cd4b95fde151c685dc3425354b141cc738f22a44a2ced7a8abdfec37695c6e35536bd0bce3e14bc5821d0ea75833e13959465eb11d4a2d372f6cb7a5d0c5f8d191748b6033bf2215515448f8a7ff10d135defeb2ddb6e147c0f41661d5d2012a9409551df6412ad6ca8155075f866c4badd19a15dc057158cf89906dddc92474e4d81713147bf3e84f295b4bdf960f8b5a256c790a9c2455670c9ab7b98442cba6c122f4ba4b5bca7965f66d4dad740c3fa9995b9f371fe8d126b5453673448e39c818124c3886a1ddf8adb6f1af85c52bc75cc37a5e5e8d9f94f11293e2e6fd11fa0147937c4c0c8ce6cc6a555e1eae01c4c515b9a5425efe75be9d569986ac7b5f89c9617f9eb00fd9db9969b0cfd6969f41c46a4d4cbb3c90f321ffdad15ae030194253df5bf0ef5f3fb1746e10c97ebbeffad121aeeb9570cdc752bbb3e44d55758ebae46685c73d4780e5fb3ecde5f37355d69b147500a89ff21d7e9ae1ab0c2d6034c22ce53dd64eeb27e80acccd7c78f05dccd6b639a72a85a6f79a343d770dd1c0353e6c29bd89c9594ce1196c0cae74b622b403b91efc6be652eeba96ba161ce7549b1e362828f4dd3ad32b1991d456462d722c5316f17fc359b19220ad014dc85c663bb53e15df4eff7bfa533d1e6e786763f89b7abce70b63c31598a08ec190c69dd42e2411b25bc08b4356a941da64549888898413fa9485f0f2d22072f5d04f3fc0579ed4684e27934606e588ac7cd72e0354face5ad1e01d0c98b623f661f709383b92a68352b88c5a36ba679a2022c8e21df5f96449bc66a4e6d13cf4e72ac697a6c41f0fd56011565cb50367e1e17b374bad9e04dc0d940c097be164b7ad20e0b935ddeb062a35d3e3d550d03f1c7ac8c51a1db847961d5e289e295cd1a98268d3385e72b99830f38a8c381b2bfd6c6dc8e1635a8f421e728df77ce233d8381567f217946b07342489856ce3c3d89c6c025c89fed6ee5567247eafcaa770f43cada82e51063fa56f73cab2dd5349a535c5559bf398737450c27a5022da6c4fa321f6b69c8d1aff2d3b0519895dc52bf4d0c8ebcb369e9c220479adfc25b02f11ee7fe16198189230ac6b7c122cf02800f71ce40aeb92a5cd1e1ef7d4e503790c0c02b1bffa57b548c3f589ae54b074a8cd2cb54a6649b5ae5437f1fb166c2f45c8da504ec2685a6879abf6e6aa3989c50d556165995c0c9ca5d67e74e770918b11174707b59bd43aab5b405bb1f4586d81bc67ddc5d7751603fd17b4af8b1d5a27f4db8226686f8c1a08990a7e808527d9910fb12e7d7c8e49001ae30f827333ab00724955be0ff466015d538d485d48bdf7f42502f5e8df30b6f591b5f0bdda425137a1d6d1ab22d3ad6efd978e272de3c83dd5589073d2e671ac830291a5def34f1ee540798ce06d70ef06459e7008b22e62acef6bc585d7511200dde8d3621d09bdb8f619b9a5b3e8dfe42997ec7228efffa4cb49aac2ddadb9446e933bed3f0cec230a579d08fa3c8d704c490c1476b8e9cd13bd7d5de942b71a64e294a2dceedf110af18d0c57a612665faef4b8d9ecc4f4d4b36b2c98fca1d725d9f9d153d1cdaf9d3ca213723e82fb4c1583f675df6218e7d2a87ce0cf51a242cb2c8400283fca965231bbd07b8747d7686d2b401169254e8d0d466d470d703545183bebe8a0d5114fd3d9334c67fcc47ac9bed139054e56e9ca197057760500ae39168e9bd2fa5f48c9dca4818724be20c982f450098f37f43fd3c10d0a40a719e6fa66424af76d8983fe6f1e9cc8707eff7eb06699ae276efc0ae7ea5322ee8da3d80ac9b2cda413905f1b3434e5d97a44d5be96f894a75b70ee2453b387551dd48a2a4730f5e460b92e8d907b0c8e13d8f132db0084967eb86f734a5f57ec9bec2e0b3d4566d802dab85302cc04df80d7656bb8aa15af97139185f59248267eb0d338bb5e5d0d66f40798050eded75deae0fe37eca94232f9b0326a03680ec5118ff9378f6c60ad1b6c727a6da662c763f9b0b56296044bf095e3c2669da406be35f5a0603b8da8f586f2543da7b9bf0a15814d5e4a311ddc89bfb1b14f7d5605dad61830caea3b146564c0a32809690bbac2e679a8d1d45eddc9cc3626bfcb7ae187cfe22fe7978049dc6a0778c12c31b09b65f37964ea17ccfe8a019c4af3a2aa7f32afef5c3763521c354dd06b4bd661dffefec5b39cf2c10610d5eae697548736e648df66428e549b93514b058c4bc852681c99965843af902a138d9e33e2dc4041b040fe135f15d06250a4f65c94ae4c6dea34d2ad98b2097513a9fdb2e2e46f1971a03f694cd77a65e9cbe002f0d9c3286019a6b839c1a551597d72033b29fdda6af6f0df3bf3ecbfea4fa10ad99848d2f4a319edfb04bf2984d288f76a30d89fc67d878158483c0638c64c98bf9822caa534fee8d59e73a43b6381a3805df75efceb76d3314eb832bd0d54f15c7baa3821289d82a80534c672f5e335fd0bd2f2b10ffb13803f4951040d9f1ce6cb02e0f520bcf4eded90e9da3ccde9582da94c3b14b948b34b196676c61714b283e3847106d92650d3b9824a4e8e9452550db2f95e0e8d69a7428d45841ba01a48d7307580d396264f6195e40864ec86a21aad5f8a231a56b2ce2cf2940c9da2a332d9efe7afea2e370033854f32aa34af680f3b9e5872fca3f64e5afd243298a18b67be190ba057613b3ded3ed9b49d1b20f42e447a6fd6b762206dd7815b047df50e5f0165a93ebf4e4c17c6db8d38e4c59e49ccb5f4965e178b3e6463606cc5f982a57604ab22ee4dde5e5f34fd7be8437127a2abe2e06da3828302b16c947e95e3f83f2e708363b8bb9acbd2768145b339a491d5b8ff1a8fa26cd5bd573fadc14598c55bfba97401bffeb8045d52ec7b631c72c9b27be041ce9193fbc7fee97b07966c2295c2730cdab5e42c1cef88ac245f6b31fd8bb5a46caa53a79a4f154b775bdb226d5b336378b3f55f96919218c9606d2853e002a9691ea524a6ad22181e16c4643ae7553ccfc93d97bf4821e5e2c94c1f134c3a7c4e03e08b090c04ae66d4ff2b5b33f2b4cc39418478c9cf97c447146b8a04f2f49c78e2cb258cff734d9db49cce0f66e175be0c0b742744cfa54f5d24c4cf1f11aef10e23702b8552afc32c7a4ea69fc32b252c275644dbef6b22e4ef4182ad44279a3e5225c73f10b38ace5ae5b495cefcfff515fc86825900daf91e6a747013a30b4bc6bc0eda28a7dcbe8fd0cdae441474f5dd2798083d97b32046a443e58a3a763b50c3e575b720a80b6b9f40ff948d2213378c25f64867e31d4f63e47aa5c9e81ae5789889c0dd5cecedda02b07c17629d89a4a62217fc7746eea29ca494778653023661a4830dea2d62164170ec83a5dc9e8cc4467e4322d00d278600bbb385e0524a432bb656e9a2727fe705bcc69c9284dd5e19b7a7b4e37c94f2868ffa5044e1aec191000d451aba81d96688d894eddf51d7979cd2c7b0cee380cd93d419baa9be276a2ebf9cff4742fbdf4296ee23a8582f93848e4e2b9f66e29cde2e28496ebff7d0439d742e8546b2bddb316673f2ff40f8333ef8053e31ad16b62cd481401a6a7b80b80230a25d19b2cc2b69e6d8ff90d468627492a3162ed5398288e85639ed919ae31dc7db799281c3d889bb38ccbc38e6dec353fe4c0ce472178fe38fcc0acbda40a7119dd2c7ad364085ba8176be4bc3657f22a5ecf48252e8fd1ff4b", 0x1000}], 0x4, &(0x7f0000001240)=[@hopopts={{0x38, 0x29, 0x36, {0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x7, [0x6]}}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0xf9}, @enc_lim={0x4, 0x1, 0x20}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r6}}}, @hoplimit={{0x14, 0x29, 0x34, 0xe0}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xda}]}}}], 0x98}}], 0x1, 0x4040) 21:45:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:45:19 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x4000000000000000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 21:45:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) [ 225.302717] Unsupported ieee802154 address type: 0 [ 225.327399] FAULT_INJECTION: forcing a failure. [ 225.327399] name failslab, interval 1, probability 0, space 0, times 1 [ 225.329189] CPU: 1 UID: 0 PID: 4468 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 225.329218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 225.329231] Call Trace: [ 225.329238] [ 225.329247] dump_stack_lvl+0xfa/0x120 [ 225.329282] should_fail_ex+0x4d7/0x5e0 [ 225.329320] ? vm_area_dup+0x25/0x6f0 [ 225.329342] should_failslab+0xc2/0x120 [ 225.329366] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 225.329408] vm_area_dup+0x25/0x6f0 [ 225.329434] __split_vma+0x179/0xde0 [ 225.329469] ? __pfx___split_vma+0x10/0x10 [ 225.329498] ? find_held_lock+0x2b/0x80 [ 225.329530] ? get_page_from_freelist+0x484/0x24b0 [ 225.329561] ? lock_release+0xc8/0x290 [ 225.329586] ? do_raw_spin_unlock+0x53/0x220 [ 225.329613] ? kasan_unpoison+0x27/0x60 [ 225.329634] ? __kasan_unpoison_pages+0x2f/0x40 [ 225.329658] ? get_page_from_freelist+0x194a/0x24b0 [ 225.329695] vms_gather_munmap_vmas+0x16e/0xc60 [ 225.329735] do_vmi_align_munmap+0x25b/0x550 [ 225.329771] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 225.329816] ? mtree_range_walk+0x74a/0xb90 [ 225.329860] ? mas_walk+0x6ba/0x8c0 [ 225.329897] do_vmi_munmap+0x1eb/0x3c0 [ 225.329933] do_munmap+0xbd/0x100 [ 225.329969] ? __pfx_do_munmap+0x10/0x10 [ 225.330007] ? mas_walk+0x6ba/0x8c0 [ 225.330039] mremap_to+0x242/0x450 [ 225.330062] __do_sys_mremap+0xbfb/0x1490 [ 225.330093] ? __pfx___do_sys_mremap+0x10/0x10 [ 225.330115] ? __mutex_unlock_slowpath+0x155/0x7b0 [ 225.330141] ? kernel_write+0x5d3/0x660 [ 225.330166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.330228] do_syscall_64+0xbf/0x360 [ 225.330260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.330282] RIP: 0033:0x7ff3f9d60b19 [ 225.330299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 225.330319] RSP: 002b:00007ff3f72d6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 225.330340] RAX: ffffffffffffffda RBX: 00007ff3f9e73f60 RCX: 00007ff3f9d60b19 [ 225.330354] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 225.330367] RBP: 00007ff3f72d61d0 R08: 0000000020ff4000 R09: 0000000000000000 [ 225.330380] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 225.330393] R13: 00007ffc838fe1cf R14: 00007ff3f72d6300 R15: 0000000000022000 [ 225.330425] 21:45:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) 21:45:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:45:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) 21:45:20 executing program 1: io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x80000}]) 21:45:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:45:20 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xce03, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x802) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x1, &(0x7f0000000080)) 21:45:20 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 2) [ 226.185022] Bluetooth: hci0: Opcode 0x0c03 failed: -4 21:45:28 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 3) 21:45:28 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448cb, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r3 = dup2(r2, r0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000040)={0x84f6, 0xfff, 0x5, 0x8, 0x9, 0x80, 0x85f}, 0xc) lseek(r2, 0x100000000, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0xca, 0x9, 0x6, 0x9, 0x0, 0x2000000000, 0x1214, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x8, 0x2, 0x3, 0x4, 0xdc1, 0x9c, 0xff, 0x0, 0x0, 0x0, 0x4236}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/228, 0xe4}], 0x1, 0x48, 0x3, 0x1) 21:45:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x658}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x140}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8001}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3556}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, 0x3, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 21:45:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:45:28 executing program 1: io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x80000}]) 21:45:28 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3530725f}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x4000000000000000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 21:45:28 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x1d, 0x0, 0x0, 0x2}, {0x6, 0x1}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r1, 0x3, 0x80000}) 21:45:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) (fail_nth: 1) [ 234.333491] FAULT_INJECTION: forcing a failure. [ 234.333491] name failslab, interval 1, probability 0, space 0, times 0 [ 234.334443] CPU: 1 UID: 0 PID: 4519 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 234.334461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 234.334470] Call Trace: [ 234.334475] [ 234.334481] dump_stack_lvl+0xfa/0x120 [ 234.334503] should_fail_ex+0x4d7/0x5e0 [ 234.334525] should_failslab+0xc2/0x120 [ 234.334539] __kmalloc_node_noprof+0xba/0x490 [ 234.334558] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 234.334574] ? lock_is_held_type+0x9e/0x120 [ 234.334588] ? alloc_slab_obj_exts+0x35/0x90 [ 234.334607] alloc_slab_obj_exts+0x35/0x90 [ 234.334623] new_slab+0x108/0x2f0 [ 234.334640] ___slab_alloc+0x92e/0x1280 [ 234.334655] ? vm_area_dup+0x25/0x6f0 [ 234.334673] ? lock_is_held_type+0x9e/0x120 [ 234.334690] ? vm_area_dup+0x25/0x6f0 [ 234.334702] ? kmem_cache_alloc_noprof+0x226/0x3d0 [ 234.334719] kmem_cache_alloc_noprof+0x226/0x3d0 [ 234.334741] vm_area_dup+0x25/0x6f0 [ 234.334755] __split_vma+0x179/0xde0 [ 234.334774] ? __pfx___split_vma+0x10/0x10 [ 234.334789] ? find_held_lock+0x2b/0x80 [ 234.334808] ? get_page_from_freelist+0x484/0x24b0 [ 234.334825] ? lock_release+0xc8/0x290 [ 234.334839] ? do_raw_spin_unlock+0x53/0x220 [ 234.334854] ? kasan_unpoison+0x27/0x60 [ 234.334865] ? __kasan_unpoison_pages+0x2f/0x40 [ 234.334878] ? get_page_from_freelist+0x194a/0x24b0 [ 234.334897] vms_gather_munmap_vmas+0x16e/0xc60 [ 234.334919] do_vmi_align_munmap+0x25b/0x550 [ 234.334939] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 234.334967] ? mtree_range_walk+0x74a/0xb90 [ 234.334991] ? mas_walk+0x6ba/0x8c0 [ 234.335011] do_vmi_munmap+0x1eb/0x3c0 [ 234.335031] do_munmap+0xbd/0x100 [ 234.335046] ? __pfx_do_munmap+0x10/0x10 [ 234.335066] ? mas_walk+0x6ba/0x8c0 [ 234.335084] mremap_to+0x242/0x450 [ 234.335097] __do_sys_mremap+0xbfb/0x1490 [ 234.335113] ? __pfx___do_sys_mremap+0x10/0x10 [ 234.335125] ? __mutex_unlock_slowpath+0x155/0x7b0 [ 234.335140] ? kernel_write+0x5d3/0x660 [ 234.335154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 234.335187] do_syscall_64+0xbf/0x360 [ 234.335205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.335217] RIP: 0033:0x7ff3f9d60b19 [ 234.335227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 234.335238] RSP: 002b:00007ff3f72d6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 234.335250] RAX: ffffffffffffffda RBX: 00007ff3f9e73f60 RCX: 00007ff3f9d60b19 [ 234.335258] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 234.335265] RBP: 00007ff3f72d61d0 R08: 0000000020ff4000 R09: 0000000000000000 [ 234.335272] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 234.335279] R13: 00007ffc838fe1cf R14: 00007ff3f72d6300 R15: 0000000000022000 [ 234.335296] [ 234.395309] audit: type=1326 audit(1752875129.000:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4514 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f474c078b19 code=0x0 [ 234.402151] FAULT_INJECTION: forcing a failure. [ 234.402151] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 234.403268] CPU: 1 UID: 0 PID: 4529 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 234.403284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 234.403292] Call Trace: [ 234.403296] [ 234.403301] dump_stack_lvl+0xfa/0x120 [ 234.403321] should_fail_ex+0x4d7/0x5e0 [ 234.403342] _copy_to_user+0x32/0xd0 [ 234.403356] simple_read_from_buffer+0xe0/0x180 [ 234.403376] proc_fail_nth_read+0x18a/0x240 [ 234.403397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.403417] ? security_file_permission+0x22/0x90 [ 234.403435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.403454] vfs_read+0x1eb/0xbe0 [ 234.403476] ? __pfx_vfs_read+0x10/0x10 [ 234.403495] ? lock_release+0xc8/0x290 [ 234.403511] ? __fget_files+0x20d/0x3b0 [ 234.403536] ksys_read+0x121/0x240 [ 234.403546] ? __pfx_ksys_read+0x10/0x10 [ 234.403558] ? fput+0x6a/0x100 [ 234.403574] do_syscall_64+0xbf/0x360 [ 234.403593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.403619] RIP: 0033:0x7f0f5ec0069c [ 234.403628] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 234.403640] RSP: 002b:00007f0f5c1c3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.403652] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f0f5ec0069c [ 234.403660] RDX: 000000000000000f RSI: 00007f0f5c1c31e0 RDI: 0000000000000004 [ 234.403666] RBP: 00007f0f5c1c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 234.403673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.403680] R13: 00007ffce91f7e8f R14: 00007f0f5c1c3300 R15: 0000000000022000 [ 234.403698] 21:45:29 executing program 4: r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x1, 0x81, 0x1, 0x3, 0x0, 0x100000000, 0x1, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7f, 0x9fc0}, 0x411a, 0xfffffffffffffffb, 0x8000, 0x2, 0x8, 0x7, 0xdf7, 0x0, 0x0, 0x0, 0x4}, r0, 0x6, 0xffffffffffffffff, 0x8) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x82481, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) ioctl$SNAPSHOT_S2RAM(r1, 0x3314) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="6530d7ac4294e964993727805839c5"]) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000000)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {0xfff}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r7, 0x100000000, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r6, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x480d1}, 0x40000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r6, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xc3c4, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 21:45:29 executing program 1: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:45:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) 21:45:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) [ 234.525814] random: crng reseeded on system resumption 21:45:29 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 4) 21:45:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x1ffffff7f, 0x1) 21:45:29 executing program 1: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) [ 234.674464] random: crng reseeded on system resumption [ 235.129588] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 235.158362] audit: type=1326 audit(1752875129.762:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4514 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f474c078b19 code=0x0 [ 237.495439] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.499816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.501143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.510399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.512781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.537147] Bluetooth: hci0: command tx timeout [ 241.584118] Bluetooth: hci0: command tx timeout [ 243.633092] Bluetooth: hci0: command tx timeout [ 245.680260] Bluetooth: hci0: command tx timeout [ 255.482418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.483546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.517349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.518695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:45:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) 21:45:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x4b66, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x101, 0x9, 0x8, 0x287e}) 21:45:59 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 5) 21:45:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x2) 21:45:59 executing program 1: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:45:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x52}}}, 0x5) 21:45:59 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000180)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2040}, 0x18) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) 21:45:59 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000cb80)=[{{&(0x7f0000006bc0)=@abs, 0x6e, &(0x7f0000006d40)=[{&(0x7f0000006c40)=""/221, 0xdd}], 0x1, &(0x7f0000006d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000006dc0), 0x6e, &(0x7f0000006fc0)=[{&(0x7f0000006e40)=""/3, 0x3}, {&(0x7f0000006e80)=""/31, 0x1f}, {&(0x7f0000006ec0)=""/142, 0x8e}, {&(0x7f0000006f80)=""/2, 0x2}], 0x4, &(0x7f0000007000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{0x0, 0x0, &(0x7f0000007240)=[{&(0x7f0000007140)=""/30, 0x1e}, {&(0x7f0000007180)=""/41, 0x29}, {&(0x7f00000071c0)=""/80, 0x50}, {&(0x7f0000008d40)=""/4096, 0x1000}], 0x4, &(0x7f0000007280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f00000073c0), 0x6e, &(0x7f0000007440)=[{&(0x7f0000008a00)=""/107, 0x6b}, {&(0x7f0000009d40)=""/4096, 0x1000}, {&(0x7f0000008a80)=""/166, 0xa6}, {&(0x7f0000008b40)=""/222, 0xde}], 0x4, &(0x7f0000008c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f000000ad40), 0x6e, &(0x7f000000adc0)=[{&(0x7f0000008cc0)=""/50, 0x32}], 0x1}}, {{0x0, 0x0, &(0x7f000000b300)=[{&(0x7f000000ae00)=""/77, 0x4d}, {&(0x7f000000ae80)=""/222, 0xde}, {&(0x7f000000af80)=""/139, 0x8b}, {&(0x7f000000b040)=""/162, 0xa2}, {&(0x7f000000b100)=""/139, 0x8b}, {&(0x7f000000b1c0)=""/193, 0xc1}, {&(0x7f000000b2c0)=""/28, 0x1c}], 0x7}}, {{&(0x7f000000b380)=@abs, 0x6e, &(0x7f000000c840)=[{&(0x7f000000b400)=""/42, 0x2a}, {&(0x7f000000b440)=""/45, 0x2d}, {&(0x7f000000b480)=""/177, 0xb1}, {&(0x7f000000b540)=""/177, 0xb1}, {&(0x7f000000b600)=""/56, 0x38}, {&(0x7f000000b640)=""/213, 0xd5}, {&(0x7f000000b740)=""/236, 0xec}, {&(0x7f000000b840)=""/4096, 0x1000}], 0x8, &(0x7f000000c8c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f000000cb00)=[{&(0x7f000000ca00)=""/207, 0xcf}], 0x1, &(0x7f000000cb40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x1, &(0x7f000000cd80)={0x77359400}) newfstatat(0xffffffffffffff9c, &(0x7f000000cdc0)='./file0\x00', &(0x7f000000ce00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r3 = getpid() pidfd_open(r3, 0x0) r4 = getegid() r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setfsgid(r6) r7 = getpid() pidfd_open(r7, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f000000d300)={&(0x7f000000ce80), 0x6e, &(0x7f000000d180)=[{&(0x7f000000cf00)=""/50, 0x32}, {&(0x7f000000cf40)=""/17, 0x11}, {&(0x7f000000cf80)=""/65, 0x41}, {&(0x7f000000d000)=""/174, 0xae}, {&(0x7f000000d0c0)=""/9, 0x9}, {&(0x7f000000d100)=""/52, 0x34}, {&(0x7f000000d140)=""/39, 0x27}], 0x7, &(0x7f000000d200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x40000040) r10 = getpid() pidfd_open(r10, 0x0) fstat(r0, &(0x7f000000d340)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setfsgid(r13) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000d500)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc, &(0x7f0000006b00)=[{&(0x7f0000000100)={0x6b8, 0x3d, 0x100, 0x70bd29, 0x25dfdbfc, "", [@generic="a9bf2f2b89c47a35507f836ceffe2be10038ef976443f59bfffc401936821a1030bae071626ddc01c303798ea51e4070276183afbe509dbcee32c2576ed6e5ddc433099f85a883092408e1a1f74e63df9c1c862c974112e957ed8cfe021ce83c3c3e165e814a9496872a2e502f81b81939a5e78e3325c0f01787556653fd754e028dc6482fc9d1d5961d2fbc02632cf3b899ecdecab5761086bd60c174d270ab", @nested={0x446, 0x5f, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@multicast1}, @generic="1cf7a0c18618e18e1a44f34ddad40ea1ecdd950a37186905e2948889f33635f2b2446f7c0b32eb916d42cf2832ce1aeb33981d9629ac7ae64bef4f6837f1a9f63582", @generic="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", @generic="357032fddd3f6ddb72912dc775a24c2683f422252954c0fe8585cda831690f190545473541590e5a1fa4779931a176ab3b1f340eef3e8c", @generic="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", @typed={0xc, 0x39, 0x0, 0x0, @u64=0x4f}, @generic="1393e5a80b06227fb14c6206fbce71f6abbefc8a0b8f3c6a1a039ed846c936c1e78d32e5f54aea438ba3a446db644e03f39dd32476c425e1b539cb1b1b3e4371ecfbfdf07bac676d121d99a37265da6d58009c87fff4aa7b9020ebb05c2f635bd6f3", @generic="50e6d95942b8505cdda591a75fdabcf93fbdea6f3c1b869e1ad180da1c08fcd9c81971cf62d71557cefc48775a307043707b293f71546c9f8d5f49dd29bfa5395d5e612bb9e495292a178a55678bd6717f3c73eecb7e6d841e4250d5b7506f385fff71034cd1a599c6e69f61ba243f2905d6cb5f05cd819181844d90f2e3ca43e744c38ab549", @generic="f0527392366f18a775f9bc3c9ed0cdb95470ee3a92f00f9c039e9f5f048884ef6b5894b4813918433b93b1ae29a273d740032473349fd73212318c402cf398444ebb8e8fbf9bf40f4f2f8ac0e5fd553583f37b8dce759a21ff4515c32809a8921e3f39ffdd58981412c480b0e2776b72db1722330d5509031cc09c15bfae9797b41e6753475290a2215506efc82d2c9348c67f79dc87ae47997e66c45c87d014b8717b22194666c60e31877ee83f1a92463603a9f85cf5dee1db371aac2a2cc0dee7281cc4acbe90df4ad029a4d14d1f807e2311"]}, @nested={0x1bf, 0x5d, 0x0, 0x1, [@generic="339d26ec81c43bbd5276d50368eb0f1c32f28063cc6bcb8ff8c9d4a715ea51d4778aaca319fa471c5aed92a25bd4778e6d64e3c77fe1125c33f37d419a92b329224d04fe6fda6cde9c02f217cf19ea8d8e781d7970f1dd5a14d20c9ac6aff5cf8cf2fc305a05e8b169a1b32f1c67e4c01ef142281d6d2e37095a7f1b8d998154db62a30c4afc5ea8a719fb4b1650f532d21fa7e85fba93c310e2b6dd45dc6987d61fbd", @typed={0x7c, 0x62, 0x0, 0x0, @binary="cd599bac99393c9c7ae5adf8aa36a3917b973c64529d524cd3284eb731e078c61485a56c791294f2cd33214e21225ba4f4009f379f31f850a05a72fb23cb095a901bb5db03f04afca56a398c887a01aff2b127ddfece0cdd70cc4285d616d60a0d8a88bf3b99ffb49a350b202a8c2cd1653387776263c4d3"}, @generic="733574342efd3630e500785c73d63f82bccd735eccf5f83b5546bb550128b2610260dde288e073bc3c5d6f4c702b6da78cdeb6b84b47", @generic="7f47bd3c60e2549d1b4afd86c270bd40189fc97266b24272040db9585354615bd09367ea74a82a4dd4e209708f6e53b2a94d9afe07aca2803a81a88ae65458c02b9a4e44713a", @typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0xc, 0x8, 0x0, 0x0, @str='%!$}}@@\x00'}]}]}, 0x6b8}, {&(0x7f00000007c0)=ANY=[@ANYBLOB="9c110000220002002dbd7000fedbdf25fa702855b6a795f8b930a0b9857c5376ef3307e15ee7eac37e06aad882000c00408008008800", @ANYRES32=r0, @ANYBLOB="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"/4179, @ANYRES32=0x0, @ANYBLOB="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"], 0x119c}, {&(0x7f0000001980)={0x50, 0x1d, 0x200, 0x70bd25, 0x25dfdbfc, "", [@typed={0xc, 0x60, 0x0, 0x0, @u64=0x6}, @typed={0x2c, 0x37, 0x0, 0x0, @binary="6e3d7792f806726aa0863004370f4610375ba8933a9165e49a1b5b8158e7f7d34f1cd2e67dd004b3"}, @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@multicast1}]}, 0x50}, {&(0x7f0000001cc0)={0x1504, 0x18, 0x3b, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0x89, 0x0, 0x0, @str='\x15{+\x00'}, @nested={0x116, 0x81, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @u32=0x2}, @generic="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", @typed={0x8, 0x68, 0x0, 0x0, @pid}, @typed={0x8, 0x5b, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @nested={0x231, 0x4d, 0x0, 0x1, [@generic="36db7f6706ab15", @generic="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", @typed={0x8, 0x80, 0x0, 0x0, @pid}, @generic="edb21c4de93ad5763bc03bc1dee5a8ca80560c7feb21428b6f9b91d73f190d24589630d6a34b02e44983792ec005db16d77703fe25ea47213bd2deb7d473dce0985a69a0d657aecbb8ca3d1c0429b9540710bf3ef60a4b770d5aacd32edcd3e3c221ce5ef0b0e85677a07cd36dbd5149b2c4ad9995a5096bb07d14e84eccee5da191d654d3449667d5f450712411b1a9eeeca8d8c8609cf5f42914b1c069ea945a8c3e6b699268437270cc76ed2a2edb2f2a158dba8b32c90c24cc5e", @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@mcast1}, @generic="935ff0ff75b378a11d0d22c10c64518f24874b5735f7158bd4e371a3632372fee7fcdc2935d0ebd357b5de0f3006e85b1220df0d4851a74cf47cd2b1c032b1ca9e856f8777b2d217fb602953ba37ad4cbb5814"]}, @generic="66edbfff174e910284033975613cc5336304d1f5b864149fdb53ad2a91caac10c1f16d7d5a241b43a20213c38ac608d31ac7ec574e34e2b87cb866253b1680eb31a8e126b4b46cf0a357b2ed0242fc83395fd09cfea0f6d99d4d537f85683a2090aeb4daf32385c7e0fdf752f539452f256e880d9a2e2631211faf3f866395ad91b6443df0b52e55d435ff700b2e80b039c142405e79774d7e268b05028666ef776aa4f82ed136d1b31c949247fd32db15ee4723c0f84a71d6", @nested={0x10c5, 0x67, 0x0, 0x1, [@generic="61179678cfe1a5fed38eaaebe1aef957c8969051c8539777b272602ce503768ad423c67b0f049274d75491665fcce48410b84315f9", @generic="b4f6cf88c53bbec177191a09b2dd476beec3d94432575168e6caeb7625d1603610358d1ac4d32b48a394193f95a16610952197826309335c390a60566bc5dfd8b043ad9102ac930f13c8644739bd52bb02a22ebc177db88bf485fdc8b0491dd9e6476ce32b5f41054052712aac073f8c8d2568b2e987b8aaf8f9a4c09551bc95109dddf126534ab6334f0000", @generic="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"]}, @typed={0x8, 0x3f, 0x0, 0x0, @pid}, @nested={0xc, 0x6d, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x8, 0x49, 0x0, 0x0, @pid}]}, 0x1504}, {&(0x7f0000003200)={0xdc, 0x39, 0x2, 0x70bd25, 0x25dfdbff, "", [@nested={0x18, 0x8e, 0x0, 0x1, [@typed={0x14, 0x28, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @nested={0x14, 0x38, 0x0, 0x1, [@generic="8bd36636", @typed={0xc, 0x2b, 0x0, 0x0, @u64=0x800}]}, @generic="8e7b912e3264711629ad7f9175030e1db854fe01c99074df", @generic="38a9429eaae0a3f5c22b9f672df55730a10b54d7e5bb1536905d8e065dd85fd1d5330143bca0be675f3c410132c532920959509d067163ad46bac84b0026f035e474ea036978a779f7caf58d0bb246aa417bfd726ab7f56ffb08ea9c4c1ce619efbce8078b151f0606a0fd3966b98e2b9c5e9478d77bcadcd882f7bb253665ea56e7ab41a56a"]}, 0xdc}, {&(0x7f0000003300)={0x24c8, 0x3a, 0x501, 0x70bd2d, 0x25dfdbff, "", [@nested={0x22b1, 0x42, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @u32=0x3e56}, @generic="47861cbccbd1e3a1ed7f74570232ec216fbf0ffa2e8f893242289b28c87ab9cc76a3bcca9c0e8f66b9ae64e818ae365cba20c5e0b09dee77fab68a6dfef2995d2fe4464632d6a8b62b877e1bd85762a0b38bde970267d4504d74bda99101d4dab54e4ed73c78ca8146add4", @generic="e7c04afac43c3c9245fbccd82c2ab5661eaae22fe0fcded5e7bdf7e23e9f7e00d227adb1b2cb0d4efb19a6a44b5d0972e1af52a0626bf923238a19a7e3fc7351de028651911ec0c1e06aa760ec01d6d61dd8ff9e10fb27016ee94669682d00116e58e479c871ca9625228b60351bd247e01c99320be5a8286dc1e0c500258257edd7fd197c742ecad1ecf6ccedccf2bba6f87248b4a79ea9b43a2a636cba2e2779ce503579ae29403a905d90085a746b3ea2b68f07108fb61d25740f331a4cbfa588a124739fcdcfb1b0e1d28f1ad9f701f5e2eeec85d250da2d3c67e2f3d5027d6dc365fa4a401683b99130439a06d223a57e9075be3893a00668dbf04fd7c36546f1defccd69b17bd99ffe01d2adc8e55ba001534a75e6d5e4a6ac7b21ece00685d7d887119ee92abea2b3f77530db8ed884861184a041503ed54663b3bc46b3e3e218d3f5745373c1908a0b90432d1a2a03ad41c70335abe3d31f0866f9a1cbabe3b1e5ba3da3ffe153fd5fd72909fc0ba50160e160877e2dada0803c2273451a8253c1368107bce6995c90ddfe054fa8fc347e66cb15761391617ca109bdf9a32f4842eacb5e85cd7cb195dd8d1e938b2c777b2f3ea5d64f44e4bf089b2bde17ea9ff9436d4db98f916cbc70f0b6bea42345623373741d62c7bef42218ac1632d283323c93e3858fd9e128da9d946dc4f3df21c61b23b77138058845ccf3f393658e8aa34dc2c6e22f0304b8c99090dce9aea998dbf818348704e71980e4259f7c66e103e7635ed09b301a7a14863d356a1e1ebae746a0564621cfcfcd927b4163631d13eb74919db393eff4b49120693230f00f6d3ed5ba6e65360ae52aee6425c7ea7e5a483178bcff49bdcc174caedac4aec3902560f6c3929cddd7fb30a9bc58cc6d305ca025d1f9fe89af042398bae4beba5aa592d58d7c59032edd07d6fa8e523f27ab801d737e6252772796f84240446aec3947cb37e4de96effc777705f4e845c564c862af7900924f7c47784af684a26bda0f9a5592923fc8dd8dbcbd9fba91fe4560142eb48ae7ddbea4887b872ad1e5481db0f3459c57021763befa6d8e4b0656b31502415ffcb10b95aa226c9f1a5a6be73af1621e50776f1832015d4e77688da8f907171ec01082d9088d68ecb454c2909a377e23f07c91f3019b65695ed06b0031868abbd6a2f038fad2d82156a78c7af979a3e2c7b81ad711482efe59c1e91874b97037e4d3ca868e6578125f652f2dd7243821369ed29d248662d54cacbae303aaba07cdb966d3b530cedd6caf809a766b35acbbcf62e805b08dda320ece662260990c9c3049070a843c565574d38f543d7be45bf343d27aaa28fb820deb1b9bc896bb079fec071c7965d649cd4491760230b623069596c9cc0b2d06a927c0a8f6e56f9144188689f03c0686a67458f275ab5594a5d662d4d1be71f62f6a1699618823297595a28f36759ccdf1dda5f7f9c249fb288f237f491baf0c6813fb79a7aed30f0736133b786391c1ec85ef6fb8fb3a376d26b5ac8bc0a47f97d9526a7c6058c184ea56e7e1bd2b858288dd38360fcf88c995849d895c7c6f186d6eaafd7e5bab5749f6c0bff1c6d952d91e9f78a089b8c8f86902f4477cfac2c300c8073fb236bddc080742a41cbd934c102a25798ad46034a836184de1c8e0401e4d095b2a614cf0cb1a36a09d4771e388d58796a3f2c71ead2cd26ebab09ea54b4c548739b07240f1ad3e59eb8ba76ee2de2d65749303d095c47445d306a56d69637000b96528292d51ae8bc687ab3bfd4e2550e99e6f4cee8018437c2d322791cc70d7fecdbb3bcfa51415285d3077364d7d401f1325ec0da7831ebb6231b93f5571fa54997770086e76cebd1ae677ad510c3aed9bec94f2d0db33f58f074c9a1e2443e317f511af3133b6928ac8b58a45b018b75ad8e7a95054700831db369ddf79960b81945e40a6092877d7db00a8600d1cced31b6f7bf71e0e682e66fad325b797619a3ba101f76be0fcd0bc535e37462b2f2fc8b0dda36cac03ed28937e97b4e14f2cc5982f7a0f3aa388555b3a98f1ec23e27b2302134834f95e3089574245bf7b77bc4ead13a5e4ce20e0cc7c708475bdd7831064771014a598458b718c9935332dfad685c69251b1828740e3d5981dbb89c8102fdddf88bdd456125e5ee731ed19e7765772bc6e99f001c17bcf485433f2118eb679cd109836494b13fee43948beff2c09860d596888a6c3304285281d5b2e0d3ad47aa3d56742a720a4367ccb32b4731ee30de1b99b035f3f0fc97ad788ee58e680efa4acc2f5de4eecced3422cf07b77dfc6f13df90e802e97a1c3913411b7de8ac2b934dfead67a4f0ee02bd5092eabf45bafcf55b4566a8b21f1cecfc1f04e8db8106094aa0ebddb979fecb3191e98be619731857605cbb4a6846918c24935b8d78ca9bcf6c40538164c987a2c71e4c2050e0e4c384e29d0e3cf7843702651a15b21de91e3e09484af37ab7bb38b17a61c2cd239e555b59706240a9362a20d9e13741a92c3a68eed31c27e087a942a667e7cd02fb8dfe8e6f48b24b43894a329e1771f38964c0dcf568105a632033cf5d2b89b3fa42b29416458cc4b8e95f17ecbe1600ef50f26a0433e8e46855c5ee85f402b80a240f645f41f1a3a7ea2f33626890febc3952bafe7c74893c3bdfdfb961702dc3a2b2ccc2cede76719fd23fafe81536fb24ed6a092f65d08a4192554587fd41b5798288689fc7c186afbff8627503fd7a14e758fce0409c4e1712182434a9b284934546ef34ffac59bc36fed2e69c90cbc14e5454ab105fe7702f03fe04e6385bc9e241254e520b3eaa86902d06e3d74460b74e067456ab3e5711dbc8257f29be44218dbafde66742b912f84531f1afbcc63ed6a785551d02b911d1dd9b7fc70edfd3f7fd954a5f92b7ca8739a78da00b90f212da56f03e003e5a8490eb097ff0413bd9245145988b6967b4c097850e1ca16b8c2769785c721145b83d07d64e84fd9e5bfbdffc85656b4393e711d158293019ede77e13902b1d515b0a5c07a10ad3e6573041bb959217937ca0b2e4d4b274d2a100574ace69422833154660af932e3905bc8b0518c16deee9ff82de717c2773c5e03552e308b88de0c67e0ec4236e15e3f09a68cf71cc7f21026f00c900797212341367bea4012a236de6c62d88deaac8608dce516b5558cb2f9152d4e5c37ee33f380bb2ae1959cc4b2a0c3f1cbb19795d236142ca333fed5cde3eb9ca9a21db07b9c928092c450911c84a59000981793eee26e13196149f4aa8373f334f33656cc71ced16b0f3ead82a8c4124fe2df04fd1db373065487036aec417be099976cc9f18f0c14ce3d9779dbb2353780adbee7812be8692fb36ef7ea0f278fddc616813c0742ea811ab8ba424dcd617be793699b96729755fff728c4f8105dba0dbbf509c1ec5c5e6e0a83a76ef176518e8f69d2bf3b7c86a04f12b57500095984d39a57f6d6e875c74de024ae8a57b8bd317e1d90add37fbf059576ccafd862914507523950b51ac2892829cc46bc33634d11299d94e8640da0b831db1526638a3e7d66e58a2fdbaae532cd3085e684be78306f982625e01bc315f17765404040669adbfaf59dc5b54220680b35d1fe1011ff76612e4302b17efae69161a4e6de6245f3e0e5160aa12a420d08309159058b3bed25b879d4120e1cc01d0b1ec3c3474968d198e524110a5a5d8826bdf974474b2f65bb9e445390b793d67e9924ea261438515679864c8c26f45afd25ce5da06a273532be93f5b530954306dd82a98d036d7c9a583f9e0da7c0c4fc231a4d53d04e927882d8aa7883d48838082e140526ef99e14fd70970cc769ec4d9ee1841d362ad4d8b22b3396bf6a6428bf6973412b8204282e83064c50f8779ee3dd69560c1ab5bc9ede4ceb87574f494e64469c2bd1032b76b956206c22b0ef9b7bf53eecef2fb681d7aa21319e4f3fc23e2c1cd5fa024ae04ed83a40234ae469e7f4a0c26d317bd90d6dc322df813ccf22152477b61a241e5388feb5dbe1f4b506ce73f2b0a963ba3bc9a3f705c6467808cf90bf717064d1699c4afdfb1e9bcb559957d5e9475cce4fadeed46fa31c8dba9f0e3deb0f87feed56f155c24d717b1b7d809824c6bb8c37bf60f99e78ff05b242a1239f8a142fd40775df4a892e8bd87a7abb6e183eedf4309fae83ba595bb8616445f5aa647bf6f2354350ac0b9b5edfb8651d703110346015bdc9d2da1a0059a7ddaa598cfa6da6e7bb8c307be738a00cfa92ab89881e05829be20e434fcf9cb9e22ad08b938f768752667eb452275ad3b82f98cb858baa7187bc235677d8b59aae5a5da71306b5bc7c1a33cacb95461df5d0c73a36e0a82fa71b10d10d7e4879c467689317f19fe05ff73b4463040337ce51049064e85f0c1c672e583d68fea4d24b53a71e589ee6770f643e825f8bd68a41d3de769daafb62645f229fd1bf3717853323a82261b46f97bcb30d9eca966450cf4fa316ccf56a6bec9bef513fdcce968627559eebe0417c979e8f6e6601737f27276540c5c377bffc656ab04d10f7c4fc6a7ffe99d67820ef99e0a02d246a91bf9eb9a4f27b72bb4a3e4a3dc0133d7a8508a5d8f6cf5b6d9c3fcff4170c1b30d642bc45b0a03bebea18a67008e6e4c4382f7378f8718edbb43fe814fc919319b2fe064b17a3cfe5f6f1a5a279c9cd5644864c2c8871eb6409c2480be5ebc583231fc2569d7516d042f3343ee671affa08f5cd3d3d09281eaa04ae66d444848a14076164ed1747af4079b8a9a02f18c18c7b59cb18cb3ecd46b9d42297eb83f201e58ec889c074c63f266cbe6c51c09c8cc42d4ed7eb1ead48b90a948281a459010c2105e59483e0c48be522c3424c7e74dd933c0572c14c60a192bdc5228d780a30631f32e2f607b31fa75eff2582e3e40891019bb3ce964bc7cb041822fa3f11baaa2ddd7e461b4d7d447fae6b0f7a19ae7c00a6484dc03cb549c7ce5837f42611405549f06dd45c91e202953a9ba554f616c3cb9ffab51a75e120fac444fcf32623a408970539250ff8598932874d7e2ee508805b046be18250755adee73d8754cabc32463bbe3e13d291b3c3961f102d7d693e58f1575c2a2bd44be1045b738103c2cfc8eb2661e9c44b10c67f5515b796d7ec3f7dc653a2a1038d684ea18d11f7043c90876213ce8299bd4635e19914fc4474f5eab8910acbb2dc523297c6c3a4c57e8ef63f8e5637430e56e91cec290db0f6458bbf35379ff85a81a3411ee9c5f24811e9ffa49e0a9152a77de11f2888f1f5b9e25a36456f2325896756b25aa63bfd0e281db8eb998a4b3fb82d52c9dd1bd24d0602de4b0c1f1602bbdeb9ccb5390600b42a5c1c1689949cfebe2b7ba02c358b7d0572dc00581408b9b2dcba46ec97334fe72a85263e31e28941577314cd8a80b7f4d305a0257de3c436dc27c3e773f3164eaa2bb0208898597c462d2dc18b9da3c7fdfe07f99ddf046c61dc633e197a44eb6002aa34cb20a54c8af6fa0c444e949f664a0eb0dcb3d022431bf2ae8bbc1564b809451add4abe8337d93e8f7617f481345bca788582c969016b7b89b99bd62dbbc539b2247c5c3b8d8400d1de96ada0343ccd0b9782d10d244d8deac83df4dc38ede1401763432fcc68a4decd86ef30b988b0a27ce6997fc69de112c27a802180a2f3db74e615f42aefa97e270bab60d6c3702c0bff88c93973cfc2a0562dca9eb36ddf61528130ac5d08cabbd75d14dbfec9ebbc2204f8ee9e9ae", @typed={0xcd, 0x81, 0x0, 0x0, @binary="dcb6dbbe29065d99baee5894e612c21ab0c0190f23bd09bf56217855e808d5dede548387a3fb1b34303e3f38e78b08c8f8d868277b1e9720069e0009d343974596288902ede042f5f51512394f9102d9862beab02935987c9af5ea387e363f14e5138147309802806f7187e9ff9b48845e7f28570c5a1d632a506fd7e4c1ba1d9868ed4b9e2aae33247d7a9859338c7dfcc9156c0aac9cd0f99f877edd216e7f6b4cb257a2a45f4587ed9f16ea86604d031c36ce16f44e8f2ff4c127de8b2d83294b2e26608ad33113"}, @typed={0x1004, 0x10, 0x0, 0x0, @binary="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"}, @generic="28322edf4a45492fe58a8e133b6d39858ba200f48ff52f0a4f78ae301dde68e742f216b5276111916b3be8b44cc66826e9bd8bd1fafae775d19f3e3e43b7ffc43cade3a425c22d63fe34593f08c1e70edd869c887520d2fe25e951d196c938046510fd9fa2aee5b83b5135f1dc6f2e00bcddd2e37502bfb7f673ce50b63f96f0731953539a0c29aae8fec8bf66f2750e5ccbcff0249ad8f21c7f8b8ddc50d8168adf4f842831f6b6992ad157103979184f1d6cc6d130", @generic="70f338bf42e245990e81232443e961c5896e60c4d427b2b1984ee932374a0ff5f7f3b7334f2257c6eb1bb76d44a4dcbb0dd474557c7b7d7ffc5245c5c28920e8e7efd972f3639a7345bdceaa4f4aa394cde0987b3592df6864cb022a0cd4bcd9141e62a4df6b7f2a010606c2f7cc354015d678a6f47f319b822a6eb039c9e9a130bbba731c418bd1a33f8d5d427ed313b693dd487c04a7f52598d85069da7a81f9ed74e31ca49dfd0f2e24f610f753ff"]}, @generic="8043cbb20e64c58a988acf8b9b8334955e2d0360706ce55fb715378b83a160b801d6873755e419fd0bc399e5c1c0364805068da69d6e7a5dcdf867ff2f560f4e8b2796939c713f75091ee5f582cd77227ff970025540b12a294fd556f144cf3a67f70e64a13a3ae880f19ba5beeb55da4e977926e441689293e5958c6d2d3395d8daeae4803828803aa2d936fd32395047efdb2032a30bb2f1fdd7d569bf9bb560a05a40caa5b59dfeae09fbbf127eb87229e6227c11e5de399cb3e9dbd8c7e995931ca215866272335d3cd4e26f78dac107e03f95f9e44aed976c07117526af61d8ccd30568349a12238544997972332cd92304e2", @typed={0x8, 0x8b, 0x0, 0x0, @pid}, @typed={0x8, 0x36, 0x0, 0x0, @pid}, @nested={0xfc, 0x4b, 0x0, 0x1, [@generic="d7ba1e17752f1be838100dc228203d056f0d6b90ba93c3a915bab89e18dcbb6a189a717a3b14515dc8a4d77bd92bf3adeb3c8a95c5020e14f797db6bc1cd615a3e9bcc1c2c13a1e9c790350ce133e0138c89c24cce4d789db505af432f619793766fda498975e57809b553c6d553bcbf9413b414ec36ae5bb4de35f6f4669344fae2362b9cd20d988ea0f6ef645c2648befb59cdbed0eda47d2f705d3696734345bfc4661db8d1e5bdc8195daf382f4d9959ea7af4306e4621348ae70b178d4dc0b71690ea1f4f257e5de8c3721dd8d7dd743bbd88b1910a848df0bffcc5d161f4a16e9e4b42a650ad1bf3adea8bf3464c51653647af4217"]}]}, 0x24c8}, {&(0x7f0000005800)={0x129c, 0x12, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x11e4, 0x30, 0x0, 0x1, [@typed={0x8, 0x90, 0x0, 0x0, @pid}, @typed={0x8, 0x80, 0x0, 0x0, @pid}, @generic="22aa8e791f18cfd17d2034b81f4698d0588b01581e3149c3989343bbaa54c1d67fc1ac52b1", @typed={0x103, 0xa, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x3a, 0x0, 0x0, @u32=0x9226}, @generic="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", @generic="0e1da5d6de6c9067e96a31014a022fd57fd94e6d73859b428a1f8a967154840d8e85762d96217626c5fe8d0393182af93b208db9f5372af3b47d094f7004ac922e69da46549bf4b3be98362dc878af5cbf78d92c82a8f3e782949502a3305611d4e2278e96d1d50e1ff5b604dd7d8a89930a5ae375128139a1e56ee228914e58e0af9fb31968e90a7bfbae005bf0f5e9e959317a5c8bc0", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x9c, 0x4e, 0x0, 0x1, [@typed={0xc, 0x5d, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee01}, @generic="f093b84ceea6eb727715178534012276153773d379a08f2add14e47e59b24ea866e0ba166d0c7ac0dfac99e71af64a3a3ffb411617adb1f23fe76d95299c6c0a9b7a7c3348973cc24f5266e70f4350794a7477da4ee4f3c1ada4af54b61ea4118b2f19141f7d82afaba05afd875f9590"]}, @typed={0xc, 0x26, 0x0, 0x0, @u64=0x5c87}]}, 0x129c}, {&(0x7f00000074c0)={0x1508, 0x23, 0x200, 0x70bd27, 0x25dfdbfc, "", [@nested={0x1da, 0x4b, 0x0, 0x1, [@typed={0x8, 0x79, 0x0, 0x0, @u32}, @generic="2bba4b726b6acae1e05cbfeac25fe2266869e155e62b2364da21b05f77ac3ffaa11c7c38cb08e773bc01ed82bff9c0c7dc9aa322c73dec9b70654085da28eb76e90fab5fbbcd5cdbe27540cfe04cc0edd93d2cb3fe6ec859e47f30ad2313d4f8726ae82086c36518b14587867cdfebe8df142f3219f45c476b43e9236966b83d5560fa34c2322a46f8ee4eb378e4529b6bbe2385276825483d487e947abda45cbaebe092bd6cceb33e444f0904314b8b10e13a2cdd924b1590cd5177386918c77efa6a42", @generic="b1b8af5ae06560b4b458c17e00cd192d19c2412ea396035ffaee23f8dcc76c23ae8de74489103cca86edff4b9f8d6ea90975dc6adb3bbcfe75118298f969d9d8", @typed={0x8, 0x1a, 0x0, 0x0, @fd}, @typed={0x8, 0x92, 0x0, 0x0, @u32}, @generic="718fb9620f6ee54d37f9ef6328c26999c12bac995dba8351a3903ac17055f81a0b9921c27e050db0009d63ce5ff06f090e29fc7809afaba34ddc00431ffb19ad3ac0f428ff2d1e17e7f7a352792feb1d1ca50e8fbdcd7030c09a921c62be15b945a55a128eadcdfc5099cb41778bf5190e2f3c50d60e42e74f0a1041e838a044ea2a84a7dddb0c231af7afb1f91ffe37a8daea2390c02e1dff15a636ab9be5b0cbf66e204ef72194df5f5aca4554e42e8d6e", @typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}}]}, @typed={0x11, 0x48, 0x0, 0x0, @str=')-\xb6(@./\\%}\'\x17\x00'}, @generic="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", @nested={0xfb, 0x7f, 0x0, 0x1, [@generic="0600453978aeb22e4e59460f1913582b58f18714dd71fea061460095ec3816cf23b177364bc0ccc9801d6097a5836182c6978d718a9c0799e0b4d8f1ec234d05fdcdf00c", @typed={0xc, 0x5f, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@multicast1}, @generic="d4f3e72a3f698e9d1cf7778bc2ae5833ec3d881440d4040ec5fd8f7ecf92e56043dea3fdc96b04bc98939100b6a2cfc81d52eb017298f653ee279c823fd89a296ef113d5f5b102ac6bca2a8d99f4c75b145db9f8185ec2c3075ee67a7289a13ead84a04c124ba12f0cf61bb9ed8633e663e4f705f1b236ede7d67500d701c0648cddb7449f5eface067ed63aa0673b4745de90f10d0c53df316c033a4293e2"]}, @nested={0x103, 0x87, 0x0, 0x1, [@generic="a6c7408cc80d9024ef434399cbfc8e334b68cc0f3f4035ca272ac074cc7d4a05d22a2ed7004a9ecf9bf38fd316517aa4265585addaf1b858d5b64da16e06be3a5c2d8a9405ef64afb53f42bf0897ffa2d11cc3540e877cd4d0fe64b8ffdea8a50e283c859c7f6449b3403710884ad232b0f2bc45502c3ec8712fc8ee9119817e438ee5d26097747cd1da1943f98b7096949772c3421977bae445724ae3acd6652b653527fbdbdb465ee6424c4b6ae9edb4a37cc57fc8b587853c53b2d9c1d9951b3c90c6111a5823eb2ec7c87f1c25b08d3f37d23021b41b114af0218d4ad6", @typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@private0}, @typed={0xc, 0x27, 0x0, 0x0, @u64=0x80}]}, @typed={0xc, 0x37, 0x0, 0x0, @u64=0x3a5}, @typed={0x8, 0x2d, 0x0, 0x0, @str='\x15{+\x00'}, @typed={0x8, 0x12, 0x0, 0x0, @uid}, @nested={0xea, 0x8f, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x66, 0x0, 0x0, @u32=0x400}, @generic="f2410fd7217e6f586de14dcf36af7f74dbea020da4977c87cb04d334371ae80de634cee5c9f227f8c892a9daeff0d4a0e2d11b2e4a8e5b42248b53ecce43cf2bb5fcc967e69024ad34e6346011ace4cb80aab00bfb92d8f5c2bf4d7f15d562ae3090948c90c2454fc5410c3538b01acf31b2e4edb66c80c117ae9230398c5f68f6aaede798860b7902099fa91bd734faf9fde2059e5bded2b2fc20662db450392b6232bd49bb26922ef88d08b2a4cd8806e962e58aec69bdbbf86aa550d2b247b6508f9b8853974d6d0b"]}]}, 0x1508}, {&(0x7f0000006ac0)={0x1c, 0x17, 0x100, 0x70bd27, 0x25dfdbfb, "", [@nested={0xc, 0x4a, 0x0, 0x1, [@typed={0x8, 0x52, 0x0, 0x0, @str='\x15{+\x00'}]}]}, 0x1c}], 0x9, &(0x7f000000d3c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r9, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r13}}}], 0x110, 0x880}, 0x20000000) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000008d00)=[{&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x0, "", [@generic]}, 0x10}, {0x0}, {0x0}, {&(0x7f0000007480)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @str='\x15{+\x00'}]}]}, 0x24}], 0x4}, 0x0) 21:45:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01000059209fea7bf8a82300000004000180"], 0x18}}, 0x0) lstat(0x0, 0x0) 21:45:59 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) [ 265.218999] SELinux: Context task is not valid (left unmapped). [ 265.231642] FAULT_INJECTION: forcing a failure. [ 265.231642] name failslab, interval 1, probability 0, space 0, times 0 [ 265.233560] CPU: 0 UID: 0 PID: 5029 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 265.233592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 265.233606] Call Trace: [ 265.233613] [ 265.233622] dump_stack_lvl+0xfa/0x120 [ 265.233659] should_fail_ex+0x4d7/0x5e0 [ 265.233700] ? vm_area_dup+0x25/0x6f0 [ 265.233726] should_failslab+0xc2/0x120 [ 265.233751] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 265.233797] vm_area_dup+0x25/0x6f0 [ 265.233824] __split_vma+0x179/0xde0 [ 265.233862] ? __pfx___split_vma+0x10/0x10 [ 265.233904] ? __pfx_mas_prev+0x10/0x10 [ 265.233946] vms_gather_munmap_vmas+0x32c/0xc60 [ 265.233998] do_vmi_align_munmap+0x25b/0x550 [ 265.234037] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 265.234107] ? mas_walk+0x6ba/0x8c0 [ 265.234147] do_vmi_munmap+0x1eb/0x3c0 [ 265.234186] do_munmap+0xbd/0x100 [ 265.234216] ? __pfx_do_munmap+0x10/0x10 [ 265.234256] ? mas_walk+0x6ba/0x8c0 [ 265.234291] mremap_to+0x242/0x450 [ 265.234315] __do_sys_mremap+0xbfb/0x1490 [ 265.234349] ? __pfx___do_sys_mremap+0x10/0x10 [ 265.234372] ? __mutex_unlock_slowpath+0x155/0x7b0 [ 265.234400] ? kernel_write+0x5d3/0x660 [ 265.234426] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 265.234485] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 265.234515] do_syscall_64+0xbf/0x360 [ 265.234549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.234572] RIP: 0033:0x7ff3f9d60b19 [ 265.234590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 265.234611] RSP: 002b:00007ff3f72d6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 265.234633] RAX: ffffffffffffffda RBX: 00007ff3f9e73f60 RCX: 00007ff3f9d60b19 [ 265.234649] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 265.234663] RBP: 00007ff3f72d61d0 R08: 0000000020ff4000 R09: 0000000000000000 [ 265.234677] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 265.234690] R13: 00007ffc838fe1cf R14: 00007ff3f72d6300 R15: 0000000000022000 [ 265.234724] [ 265.270253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5031 comm=syz-executor.7 21:46:11 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:46:11 executing program 4: ioperm(0x7, 0x1e, 0x40) ioperm(0x7f, 0x6, 0x5) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 21:46:11 executing program 5: r0 = openat2(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x100, 0x8, 0x10}, 0x18) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001540)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, {0x2, 0x4e22, @local}, {0x2, 0x7, @private=0xa010102}, 0x12, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001500)='veth0_to_batadv\x00', 0x9, 0x8001, 0xfffc}) r1 = openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x501200, 0x1aa) openat2(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f00000015c0)={0x484000, 0x590de409b32fb88c}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x14}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x8090) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/98, 0x62, 0x1, &(0x7f0000001680)=""/168, 0xa7}, &(0x7f0000000100)=0xffffff97) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000012c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/4096, 0x1000, 0x1, &(0x7f0000001200)=""/183, 0xb7}, &(0x7f0000001300)=0x40) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001600), 0x44042, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000001640)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0xffb0}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) creat(&(0x7f0000000000)='./file0\x00', 0x100) 21:46:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x3) 21:46:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$HCIINQUIRY(r0, 0x400448de, 0x0) fcntl$dupfd(r0, 0x0, r0) 21:46:11 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7f, 0x0, &(0x7f0000000040)=0x1) sendfile(r0, r0, 0x0, 0x3) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 21:46:11 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 6) 21:46:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) 21:46:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x4) 21:46:11 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 7) 21:46:11 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x110, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') 21:46:11 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1881, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 21:46:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000300)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) 21:46:11 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) lseek(r2, 0x3, 0x1) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd) sendfile(r0, r1, 0x0, 0x68e146a1) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r3, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 21:46:11 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x81, 0x6, 0xfd, 0x9, 0x0, 0x1ff, 0x20004, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x43b, 0x4, @perf_config_ext={0x100000001, 0x5}, 0x40011, 0x8001, 0x9, 0x9, 0x4, 0xf2, 0x6, 0x0, 0x800, 0x0, 0x1f}, 0x0, 0x2, r0, 0x1) 21:46:11 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) [ 276.708700] FAULT_INJECTION: forcing a failure. [ 276.708700] name failslab, interval 1, probability 0, space 0, times 0 [ 276.710351] CPU: 0 UID: 0 PID: 5074 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 276.710379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 276.710391] Call Trace: [ 276.710398] [ 276.710407] dump_stack_lvl+0xfa/0x120 [ 276.710441] should_fail_ex+0x4d7/0x5e0 [ 276.710478] ? mas_alloc_nodes+0x432/0x8f0 [ 276.710501] should_failslab+0xc2/0x120 [ 276.710525] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 276.710556] ? lock_is_held_type+0x9e/0x120 [ 276.710588] mas_alloc_nodes+0x432/0x8f0 [ 276.710620] mas_node_count_gfp+0x106/0x140 [ 276.710648] mas_preallocate+0x2af/0x690 [ 276.710682] ? __pfx_mas_preallocate+0x10/0x10 [ 276.710712] ? __create_object+0x59/0x80 [ 276.710749] ? lockdep_init_map_type+0x4b/0x240 [ 276.710782] __split_vma+0x304/0xde0 [ 276.710816] ? __pfx___split_vma+0x10/0x10 [ 276.710854] ? __pfx_mas_prev+0x10/0x10 [ 276.710892] vms_gather_munmap_vmas+0x32c/0xc60 [ 276.710931] do_vmi_align_munmap+0x25b/0x550 [ 276.710973] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 276.711036] ? mas_walk+0x6ba/0x8c0 [ 276.711072] do_vmi_munmap+0x1eb/0x3c0 [ 276.711106] do_munmap+0xbd/0x100 [ 276.711134] ? __pfx_do_munmap+0x10/0x10 [ 276.711170] ? mas_walk+0x6ba/0x8c0 [ 276.711201] mremap_to+0x242/0x450 [ 276.711223] __do_sys_mremap+0xbfb/0x1490 [ 276.711254] ? __pfx___do_sys_mremap+0x10/0x10 [ 276.711275] ? __mutex_unlock_slowpath+0x155/0x7b0 [ 276.711300] ? kernel_write+0x5d3/0x660 [ 276.711322] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.711375] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 276.711402] do_syscall_64+0xbf/0x360 [ 276.711432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.711453] RIP: 0033:0x7ff3f9d60b19 [ 276.711469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 276.711489] RSP: 002b:00007ff3f72d6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 276.711509] RAX: ffffffffffffffda RBX: 00007ff3f9e73f60 RCX: 00007ff3f9d60b19 [ 276.711523] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 276.711535] RBP: 00007ff3f72d61d0 R08: 0000000020ff4000 R09: 0000000000000000 [ 276.711548] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 276.711560] R13: 00007ffc838fe1cf R14: 00007ff3f72d6300 R15: 0000000000022000 [ 276.711591] [ 276.742110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.752688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.770243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 21:46:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0xc, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40011) [ 276.780559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 21:46:11 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(r0, 0xfffffffffffffffe, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x2e9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x341602, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "334e696f49612fe527f9b713325ac105"}, 0x11, 0x3) sendfile(r1, r3, 0x0, 0xfdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = syz_open_dev$vcsa(&(0x7f0000000140), 0xffff, 0x0) close(r3) lseek(r5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x1, 0x4, 0x9, 0x0, 0xb44, 0x10888, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x8, 0xc6d}, 0x460, 0x9, 0x80000001, 0x9, 0x10001, 0x236a, 0x6, 0x0, 0x7, 0x0, 0x40}, r5, 0x2, r2, 0x8) [ 276.851810] audit: type=1326 audit(1752875171.457:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5079 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc92247eb19 code=0x0 [ 276.863800] audit: type=1326 audit(1752875171.466:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5079 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc92247eb19 code=0x0 [ 277.290843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.292828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.293609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.296582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.505139] syz-executor.7 (5087) used greatest stack depth: 24304 bytes left 21:46:23 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00}\'', 0x30, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "887b00", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0) 21:46:23 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(r0, 0xfffffffffffffffe, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x2e9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x341602, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "334e696f49612fe527f9b713325ac105"}, 0x11, 0x3) sendfile(r1, r3, 0x0, 0xfdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = syz_open_dev$vcsa(&(0x7f0000000140), 0xffff, 0x0) close(r3) lseek(r5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x1, 0x4, 0x9, 0x0, 0xb44, 0x10888, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x8, 0xc6d}, 0x460, 0x9, 0x80000001, 0x9, 0x10001, 0x236a, 0x6, 0x0, 0x7, 0x0, 0x40}, r5, 0x2, r2, 0x8) 21:46:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:46:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) lseek(r0, 0x100000000, 0x1) 21:46:23 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 8) 21:46:23 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:46:23 executing program 5: setns(0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000480)={0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0x31}, &(0x7f0000001280)=""/4096, 0x1000, &(0x7f00000003c0)=""/87, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x5, 0x7, 0xd7, 0x9, 0x0, 0x3, 0x20102, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x4, @perf_config_ext={0x8, 0x3f}, 0x10, 0xffffffffffffff39, 0x1, 0x4, 0x5, 0x9, 0x81, 0x0, 0x8, 0x0, 0x7}, r1, 0x2, r0, 0x2) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0xc, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2880) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c204993", @ANYRES16=r3, @ANYBLOB="050000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) 21:46:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup2(r0, r1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x2, 0x1, 0x3, 0x0, 0x7f, 0x881, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0xffff}, 0x41100, 0x4, 0xfffffffd, 0x1, 0x9, 0x7, 0x5, 0x0, 0x7fffffff, 0x0, 0x1}, 0x0, 0xf, r4, 0x8) 21:46:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0x0, 0x2, 'client0\x00', 0xffffffff80000001, "6d11565f4efc9418", "cd7d4a46b8337dfb8bee02ba9ded4b37a773768ad7bcb9f39a6ffaa4eb1eb2c0", 0x6, 0x7fffffff}) 21:46:23 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 9) 21:46:24 executing program 2: syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004010}, 0x20001811) openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) 21:46:24 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:46:24 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:46:24 executing program 4: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x48afcfed}, 0x16, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000540)={0x3ff, 0xfd3}) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xd7}) 21:46:24 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 10) 21:46:24 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:46:24 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:46:36 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) readahead(r0, 0xfffffffffffffffe, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x2e9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x341602, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "334e696f49612fe527f9b713325ac105"}, 0x11, 0x3) sendfile(r1, r3, 0x0, 0xfdef) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = syz_open_dev$vcsa(&(0x7f0000000140), 0xffff, 0x0) close(r3) lseek(r5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x1, 0x4, 0x9, 0x0, 0xb44, 0x10888, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x8, 0xc6d}, 0x460, 0x9, 0x80000001, 0x9, 0x10001, 0x236a, 0x6, 0x0, 0x7, 0x0, 0x40}, r5, 0x2, r2, 0x8) 21:46:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="06", 0x1}], 0x1}, 0x40011) 21:46:36 executing program 4: getitimer(0x0, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0xffffffffffbffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) fcntl$dupfd(r1, 0x0, r0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x8, 0x60, 0x5, 0x22, 0x0, 0x8, 0x40100, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp, 0x0, 0x5, 0x6, 0x7, 0x1, 0x6e8, 0x0, 0x0, 0xb67, 0x0, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) unshare(0xc040000) 21:46:36 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180), 0xfffffffffffffffc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/16]) 21:46:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) r1 = socket$inet6(0xa, 0x0, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="737907026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adaf5d0bbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac51830000000000"], 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd1, 0x2, 0x8, 0x0, 0x365, 0x104, r5}) accept4$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000580)=0x1c, 0x80000) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r7, 0x100000000, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f00000000c0)={0x8, 'syz_tun\x00', {'ip6gretap0\x00'}, 0x112}) 21:46:36 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 11) 21:46:36 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:46:36 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:46:36 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4044841) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x10}) r1 = dup(r0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x100) [ 301.758902] FAULT_INJECTION: forcing a failure. [ 301.758902] name failslab, interval 1, probability 0, space 0, times 0 [ 301.761313] CPU: 1 UID: 0 PID: 5167 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 301.761344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 301.761357] Call Trace: [ 301.761365] [ 301.761374] dump_stack_lvl+0xfa/0x120 [ 301.761410] should_fail_ex+0x4d7/0x5e0 [ 301.761447] ? vm_area_dup+0x25/0x6f0 [ 301.761470] should_failslab+0xc2/0x120 [ 301.761494] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 301.761536] vm_area_dup+0x25/0x6f0 [ 301.761562] copy_vma+0x4a7/0xa00 [ 301.761601] ? __pfx_copy_vma+0x10/0x10 [ 301.761632] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 301.761671] ? __mt_destroy+0xa8/0x3f0 [ 301.761699] ? register_lock_class+0x41/0x560 [ 301.761738] ? do_vmi_align_munmap+0x1f0/0x550 [ 301.761779] copy_vma_and_data+0x1d2/0x7f0 [ 301.761803] ? perf_trace_lock+0xb5/0x5d0 [ 301.761829] ? __pfx_copy_vma_and_data+0x10/0x10 [ 301.761865] ? find_held_lock+0x2b/0x80 [ 301.761895] ? move_vma+0x59f/0x1930 [ 301.761915] ? lock_release+0xc8/0x290 [ 301.761955] move_vma+0x5b1/0x1930 [ 301.761982] ? __pfx_move_vma+0x10/0x10 [ 301.762006] ? shmem_get_unmapped_area+0xf0/0x180 [ 301.762035] ? cap_mmap_addr+0x4e/0x130 [ 301.762059] ? selinux_mmap_addr+0x2d/0x110 [ 301.762080] ? security_mmap_addr+0x6e/0x80 [ 301.762109] ? __get_unmapped_area+0x1a0/0x3e0 [ 301.762142] ? vrm_set_new_addr+0x210/0x2a0 [ 301.762166] mremap_to+0x1c3/0x450 [ 301.762189] __do_sys_mremap+0xbfb/0x1490 [ 301.762221] ? __pfx___do_sys_mremap+0x10/0x10 [ 301.762243] ? __mutex_unlock_slowpath+0x155/0x7b0 [ 301.762269] ? kernel_write+0x5d3/0x660 [ 301.762294] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.762349] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 301.762377] do_syscall_64+0xbf/0x360 [ 301.762408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.762430] RIP: 0033:0x7ff3f9d60b19 [ 301.762447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 301.762467] RSP: 002b:00007ff3f72d6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 301.762488] RAX: ffffffffffffffda RBX: 00007ff3f9e73f60 RCX: 00007ff3f9d60b19 [ 301.762503] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 301.762516] RBP: 00007ff3f72d61d0 R08: 0000000020ff4000 R09: 0000000000000000 [ 301.762529] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000002 [ 301.762542] R13: 00007ffc838fe1cf R14: 00007ff3f72d6300 R15: 0000000000022000 [ 301.762576] 21:46:36 executing program 4: r0 = clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpid() r2 = pidfd_open(r1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001780)) r4 = getpid() pidfd_open(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000001880)) r6 = getpid() pidfd_open(r6, 0x0) r7 = getpid() pidfd_open(r7, 0x0) ioprio_get$pid(0x2, r7) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x7ffffffd, 0x2) clone3(&(0x7f0000001800)={0x10000, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), {0x32}, &(0x7f0000000680)=""/4096, 0x1000, &(0x7f0000001680)=""/217, &(0x7f0000001bc0)=[0x0, 0x0], 0x2, {r8}}, 0x58) clone3(&(0x7f0000000480)={0x81c2a80, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x18}, &(0x7f00000002c0)=""/133, 0x85, &(0x7f0000000380)=""/183, &(0x7f0000000440)=[r0, r0, r0, r0, r0], 0x5}, 0x58) clone3(&(0x7f0000000540)={0x100004000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x32}, &(0x7f00000000c0)=""/76, 0x4c, &(0x7f0000000140)=""/178, &(0x7f0000000500)=[r9, r0, r0], 0x3}, 0x58) [ 301.875363] EXT4-fs warning (device sda): verify_group_input:161: Bad blocks count 0 21:46:36 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:46:36 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:46:36 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = clone3(&(0x7f0000001bc0)={0x2000000, &(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)=0x0, {0x3c}, &(0x7f0000001a40)=""/61, 0x3d, &(0x7f0000001a80)=""/240, &(0x7f0000001b80)=[r0, r0], 0x2}, 0x58) tkill(r1, 0x4) fork() gettid() syz_open_procfs(r2, &(0x7f0000001c40)='totmaps\x00') process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) process_vm_readv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/85, 0x55}, {&(0x7f0000000240)=""/40, 0x28}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000001440)=""/218, 0xda}, {&(0x7f0000001540)=""/199, 0xc7}, {&(0x7f0000001640)=""/198, 0xc6}], 0x7, &(0x7f0000000300)=[{&(0x7f00000017c0)=""/140, 0x8c}, {&(0x7f0000001880)=""/247, 0xf7}], 0x2, 0x0) 21:46:36 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 12) [ 302.001401] EXT4-fs warning (device sda): verify_group_input:161: Bad blocks count 0 21:46:36 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x0, @fixed}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00'}) 21:46:36 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5412, &(0x7f0000000000)={0x7fc, 0x0, 0x2004}) 21:46:36 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:46:36 executing program 6: syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') 21:46:36 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 13) 21:46:36 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) [ 302.477538] FAULT_INJECTION: forcing a failure. [ 302.477538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.479333] CPU: 0 UID: 0 PID: 5212 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 302.479364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 302.479379] Call Trace: [ 302.479386] [ 302.479395] dump_stack_lvl+0xfa/0x120 [ 302.479433] should_fail_ex+0x4d7/0x5e0 [ 302.479474] _copy_to_user+0x32/0xd0 [ 302.479500] simple_read_from_buffer+0xe0/0x180 [ 302.479537] proc_fail_nth_read+0x18a/0x240 [ 302.479577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.479616] ? security_file_permission+0x22/0x90 [ 302.479651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.479689] vfs_read+0x1eb/0xbe0 [ 302.479731] ? __pfx_vfs_read+0x10/0x10 [ 302.479768] ? lock_release+0xc8/0x290 [ 302.479800] ? __fget_files+0x20d/0x3b0 [ 302.479847] ksys_read+0x121/0x240 [ 302.479867] ? __pfx_ksys_read+0x10/0x10 [ 302.479899] do_syscall_64+0xbf/0x360 [ 302.479932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.479964] RIP: 0033:0x7ff3f9d1369c [ 302.479981] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 302.480003] RSP: 002b:00007ff3f72d6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.480025] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007ff3f9d1369c [ 302.480041] RDX: 000000000000000f RSI: 00007ff3f72d61e0 RDI: 0000000000000003 [ 302.480055] RBP: 00007ff3f72d61d0 R08: 0000000000000000 R09: 0000000000000000 [ 302.480069] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000002 [ 302.480083] R13: 00007ffc838fe1cf R14: 00007ff3f72d6300 R15: 0000000000022000 [ 302.480116] 21:46:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000), &(0x7f00000000c0), 0xfffffffffffffd87, 0x1) lseek(r0, 0x100000000, 0x1) 21:46:37 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:46:37 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x11, 0xa, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000080)=""/25, &(0x7f00000000c0)=0x19) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1101) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8002, 0x20, 0xa}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) ftruncate(r4, 0x3) write(r3, &(0x7f00000001c0)="2711ceb5e54b65daaac5f6f4ceb2483e1fc30e5922a911700957", 0x1a) r5 = pidfd_getfd(r2, r3, 0x0) sendfile(r0, r5, &(0x7f0000000100)=0x7, 0x0) fcntl$dupfd(r2, 0x405, r2) 21:46:37 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:46:37 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:46:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:46:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x65b4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x41) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x4, 0x1, 0x8, 0x0, 0x0, 0x10084, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x4001, 0x1, 0x6, 0xc, 0x3, 0x5d5, 0x9, 0x0, 0x6, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 21:46:46 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/mcfilter\x00') setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='netdevsim0\x00', 0x10) lseek(r1, 0x100000000, 0x1) 21:46:46 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:46:46 executing program 7: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) sendfile(r3, r0, &(0x7f0000000200)=0x8000, 0xa16c) fremovexattr(r1, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00') ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000180)) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x10001}) 21:46:46 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:46:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000040), 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x28}}], 0x2, 0x0) 21:46:46 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xff, 0x7fff8000}]}) syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0) r2 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x2000c00) inotify_rm_watch(r0, r2) [ 312.275308] audit: type=1400 audit(1752875206.876:18): avc: denied { watch_reads } for pid=5242 comm="syz-executor.4" path="/syzkaller-testdir289252598/syzkaller.tuDUYT/29/file0" dev="sda" ino=15995 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 21:46:46 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4003, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:46:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x401}}, './file0\x00'}) 21:46:46 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8010a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) mount$9p_rdma(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) 21:46:55 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000013c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="ebafe58181ff732e66617400028001000440000004f8010ae500aa0a3b7a286d6e5294b89f06e08557306db829284eed49b00c7cada5b789ce219a80d8eae54826994cd5", 0x44}, {&(0x7f0000000080)="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", 0x139, 0xb00}], 0x1001, &(0x7f0000001440)=ANY=[]) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xfe, 0x0, 0x419}}}, 0x7) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = dup(r1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04040a25000000000061147300"], 0xd) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x40040) openat(r2, &(0x7f00000002c0)='./file0\x00', 0x404000, 0x94) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0xfa, 0xc8, 0x6}}}, 0x7) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x1, @any, 0x81}}}, 0xb) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BLKIOMIN(r3, 0x5452, &(0x7f00000029c0)) openat$incfs(r3, &(0x7f0000000300)='.pending_reads\x00', 0x10000, 0x3) futimesat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 21:46:55 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x31c40, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x42, 0x1) statx(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x1, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x7f}}, './file0\x00'}) r3 = fspick(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x0, 0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x129}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f00000009c0)={"4f71242019a7f6bd121210545a40b031", r10, 0x0, {0x3ff, 0x6}, {0x3, 0x7}, 0x2, [0x673, 0x92, 0x401, 0x1f, 0x800, 0x94c, 0x0, 0x101, 0x1, 0x1, 0x0, 0x40000000, 0xab6e, 0x1, 0x8000, 0x27dee80d]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000000ac0)={r5, r9, "96bdee612d918d2b0a3f26bf0ee36749e4688915b5da88ae52ade1834fc09a0247ff6b159b54df274e899a4be8a0e461f0601cbb3383c5688206f88bd98275fb18dba4df5e1058be0d4146b33e2092a598548286663790839015fe379a5e4b450dc6e87a8babfdcd73fe8e2b475cb2b58f5b8094288bb61f6c1484809786892f560769822cf7596bda0c72a3972f1d58faea84d77fc7bc18ecdc61b31fc86bc1e0f42c0bdf596af3bc6984b3800a765d0281a9accaefa9bb2b133729d771a9d9e6e8da37b54eff4e0d4bfa3b3660d8a9d23fb720a7431b48a120be29df871ccb9e9f44c0b3e474143481ac37d38bb58910d779c8cfeba140af0cabceb48f2083", "df520bb83c4525348c7c2fabeb409444a2ec6350452c846de9108d4ba747c7c649514c04702f16aeef870eed980f6a704c2d48c286b544bac15f09fc4fa78533029688950a50460c4711ceea948783248f63b3868dbc47f5ad0e3eab8db22915975172a0a09024cf864c5da918cd1ade1075f7a439a700a622996fd1f4a9460f724755dedcddceb585a7a68e727ec72c8a9cd4ed177ded1dc6fdd7e04f786d00aad01cab29dc07d24f7ed5539a64091652845845956b2ad1e3f6751648924769bbabafdb285cb4aeda1faff8ac29361d6b6862fee9ac87bec3a1f217e055feaaedd2a1ebe05e7d051ffba714bed654f1949999658be1f1f20a84e47273e3056d430448ad6841cfd940cedc50674f4f776d473b3ce9cabc21f9de852fc6872214db7ab2667d5cdb30e255217b4f7706b7afd683da2db22fdaaab3d966648a6ff2c467063cb22e48e17b0bdd363fe2b2c632de9e6cbb142111789073cf805175e55220f0de91cce206049076888ff63b3ecb71d921f24e72a81f47e760f117382f7964551ef2c3424b8fc27ed1c154c60142f50dbe61e2d65a8f081da2a74e22a78a9af492fa58c4a05ce78f7d78a4fbf466e261a03b3fda3f6dadca1a60614c84a2fd8225b994fa561840a92aa6a313dc914762cf483ce1344661a8de4eb492b84a63c2ced8f61e2a55f2bf4b11cadad52ab58ebad8bdc03125e86668f5b20260d0ee038c21f566a47215fa4274f48cb23732ae03d97c78f9b1b177b537502a872dbb468a4934c4f75759b62f01053e43bc1e95fa079d1b050f6971ec19efbcc66b944b980eaf5f66ae366963773c0438c1b00946ecbed917960b2b61ce0bb691193e96dab1e148ad8ea83c5e10149617d2b671350a163acb1792db1dd057bd85901776495009fc612f2e347f6f5b87855cc127dbd4377d03ab98bfce794788c898cb8a180ea7ef1d6b5df2b1292a73b20a3e21824f424e71af9b921d2fa2b99245d9830230600e618bca57e2e87a3f5cfa99a2bccdb93a1cef88119dd4edb28524e7253eac17f267dcecf01b5d15e11c551e50da4bc514e5282dd20fc47fca84a64660b896df8f0fb0fa3b01cdffc855e5283399f84cc7499ae72c42d5bc5e485ee70ed6608d2b531861a924de6d6d96f08fb93036d0f388994a71968500b02c155d0a765884a33a00b67e30c26ee0515f05f9d779ffa169ea92a8dc467da9473c095e7188bc9819e5725b93b11e8323d9557a80a46d02418c14d702e532297191841cee92e6461c20380d2b95d60f6d5c14f2a4fc7fe3a7150994990adf4d4cec62fdd9091d19f90f88cffeb02b0ebaa73637462c30b967aedf2d73029e10c5d2fa1db24e32485302252322136be085041ffa7650a2092ea8732b48f921a9b8c14fb8957f0f05c9df6d59d3f19aeff57a32a587218271826ff98e976a7fbc6cb649b14b33106670ccb8aa4ab3bf74316707e69cf7701ffdbd7a159c6219836a53674eec2df2a2df894412d2e6e898ef8fc0b6571241c271b4c040f7d87126b8f9b25d922755fb487a599583605fd5dae1a417e23319b6c823661f73e2c5ceb13f63911accdfa4137ee5d51cd1d22fe17aea0d37ee01b54aca5d2893e3dba5b0de1fdfc3b56964599b4244d9072476e590277e238caeeb55869225271b529c7b01a8ac01535ce591de7e6c0cd50e170efcf5a9ea98e334af043ae99e0a66bd28f93e11e92774de4810ea3e3d8899b6e27b443027c889fe5fe5de43f379d1f1719c7a694a7f4d04385cddf29aa381a6067ae92b8dccfd13b0629e3bd31b796387c1054ab32e10a0dddf61aab7c2dd32c7aad7cc018d8281150c5fd5daed6d52ba0aea0a17fd06d2abc8155cfe16a1767d04f5231ca6680e92689be1e6bf996ebdd6b5ff626e05a89e5ea5dc9d0dba8d7bd64a8da9583b3a23754c685a032be37b20415caec2c32866c35f67ec72ab1ab3da72fc8a6793293ffaab27aad92f1a8dc889c06dc51955cdab738107005171954098501694a8f1fea40dd9c9d9b8508b439a9dd7a82fe9ec0c04c2e895fba3fc80fa7f2601f4c5d024865ab2897f5654185a6732a630fc1a2260ce9abc8e8a967d73beb65729b66a5de7ec2370b10a48669733c30e0fa51f98f309d8c9893e4d858f1e66ca62f51942f176fd7af0cd936978c235aae5f72239319decfe2a340abef94c76e4e8784ebc0cd5ad56d2a304c1c78a1a33d5d6843a2f81e945cef256d905605aba06347a1ef35d561fc05a38cdbd8aa32bab32ee00c26fd281ae8fe9ef7c3d20e5df871898ed3c461dca2644c58895c0b9bfac06dc20971b19775d4b8307de541ee1c0e6e1d9fbc905f6166d1a285f2a7c0a73b2830d7d0e93721eaa4e7ee0d3af888b0a8eeb6b5a7827096a489e2b776b90f06c573a903a28af9231305b7cd0f05ef80c522b78a5ad63ade35f11154c06a50844b5f9a32c85b861d03f259255335b7bc6774af3b176623f69b65d377320bc8352ada1c0f448e6979b6fe4bbbf71fa642cb1be1a242b66043ff5329072c2aff4d398aefd4c0c92ffca8913625b18df94fc5d22cfa853bc522e49cfe274eac2308839fa495d460db41e49f2ef52a43135bb627e23fbba373f8ed04250e0a8bf3f9057108e01d8c6c7d421f84a57a13f5c958c3c958b4ce53550ee39306b3185bc677a42a5fe244f91d01c918923423bd4b866b1fb84886b3168358d1edc5af08c88fb3ed7126b7c741a633e4506928b9cdc4e64f33da7012ff5604ee14ed95827eaaf6a89781405a3e0b4d54783b3a5b466b8bf9493650c2bb3738c093e9419c5bb6cba17ea50c81688565b9b7ce02fe503efdda47d5ba0462a590093586f8828263af851f403e7f87f020773cb1b12ba275f866b9aac9872db350cbc63ef5ae6703074a6af20ce62843a755991678880185af36186cc62e61725f045088b14f9b75c2bbd8c36dd53cfa10786399da12c8e6f261eb90f51551ab67cb6fd614950ceaf6c57ed84f984c51defa91a429dd98181ce0d08f2a55a304ce42df43c986295c62a2894b581eff4493bb01454a9d379734ff0fbd0c7545398a6acbdf918bf0fe8e89b41527bc20b6d96e8d9e28e6baa7c5994f7d2c5b441d8ede271b2c5799d9ebd3775eb36ea1f719d6ec62e6170bfd7ebb1a6433a4969684a9601425fac908750dbae0bc257aeba52e028205400a69467841de0673631b1b586188653e269106deb37ef7a4b94a93ad442e0fa92b612a653ca1c0c52411e2d7ede5c0c7e1161f0c094493fc9a237b2ddacc2e767399ca8195412ceb2c1964fc15f376fcd3512fe1fe63f2d33263db746786307db700150dd33ef76470a2dd87ba7f521f3da2f301a669fa6ecc4ff713b27f8c676028dc991825388397af7ae616bca377171307f1b199bf270e343af3f45d3d194bfb896d37c5108af38c32caf9ad684310d74bdac370885e69d4687f951ee2ed4228d0be35578920a934ebd779098221fc3bb0a5b6cbd9a99d63a224583b00e5a06d93349845a2187d959a109a04bebc9eb027cead5f5d40b65fbf26dd83c1718134182d5641a3c2a8d3cd92e3a19acddfce46b79ef9a54829970f6bc18a4232f30ce04aa93391f70abe28a88ae9b07e441219b1f67cfc0ec071765b03284107237d1f68426a074f23d2e41f071c687a3d3f3b3936a1d2956081d32cca18f1d73bc13b67b7b8685578c26d010b6018c2d16695345e01be8f64911a0a497b9b04953609bcac7fe118222d1bbd52a82de37a7763479b251b50d73ef513fc9f34a4fcc649106e77c810995d488b7cb5acd88f1eb76230a5aa4d851404a654d3c0313a1339277bb885e9f9d19fc855b9b3ffd838ee4f8684ffc572882f7d7ba2e71a4a192c8134d1218cae6ba6716821c12a4203102c7fe064a15d01509b65d491f643c3af278bb9d4a28a30ca8af66f1fc2701fbdcc327dfdc47982424b210c985565a5579624cb44e965a8753676ede1dc0cdee067996ca233ee2495150b60f0cc6bc2dd24162a2192a5551ad67f39131a0fa87aca48fe9f822ad8f0f6910c6c62d373b77d174d1535b07bda34a53f57186842afeed6af6d11900c6fa13f0b193433fbcbd1d62ed6d291476907f00a338c1aa43212f1406c8b4b9d4ae689712ea17d34f90888c800377a3c3b0b07738c08061ca84784515afa8474d1b011bd2353e8a41c8a91280a1af052abcf15b6e2fdd43d24df8176275229f0e55247d2111418b4d20674cf188764fd6e462a2f19fe2d420ade2ae3f83fb0e95f9adea54b0d25cb7047e1906b583d9fcc4a48ce27b2cd9fae629814083e76e2a05f99d95c61fb40cdf323cbae96f95559bb54a33e8481164b0e620e64e25d07cccd6177d38249a01378ad4b851fd988453f19ca2d8f7c93818a83736ad7f2547bf86a30aaa44e27c5c11becc13865f86bd4a83bda4c212a3b4676bc853edcbfd7abcef7624a15588d592268a667dfc8b4fa8aef896d565dadb24ed22d974407a27c20410166f93a1c747cf88f905e3fac5202e1eb5be0b87e3fba5b5d70b95d58f524094ac7d93184500fecb6d3cce175ed102a7ff4ca7dd87a9c5fa76ebc1a5ce53ab0bb7823ede9d15f729e498f45be380a75b59b8b8bfc6d2b802fefb66a016ad55ec406b476626955f304919d0974dc508b7dda2bed2da0ed9bdde07c3246212e090f51d5f6b71a2b2dfe020016ab06094dd934aad99054782381212f28c2d55e4bbd789dbda77fef938b135df38934ef32a2159559dc936901ece2212a23ab13abc071531bcb0d345815f518ccef62577a031ab3fbf4084f09a14abaa8438ce140814fe178b06011bba5fad741e65e89a0c37f2905b026b5c4ac949c74ddc06b8babe5203371c3dc7074c2fc6eee11a5435b110f73f455730c8aba694f264d6e6f44cedf9825957ccf910dfc9391fe247b11b30a89206b0f6d0e56e03c92a4e8296eb3f0864fbe99632248b615225cff7e3cd62c65f0db11cc0dd9e6ca3c37a9291732c0849475253bb7aa1be16518de6166ca236ccde6cab0ed89067eb9868973ef567e4877cec8e7a6ce3318015be80106d39efad6488052801802f568f2d82a61f1e97ce0052380aaf61e8d6efcf46849eabaa89bd263e7c34bfcad9e67da2a4fd7d10591ce23c46a1a71ed746c794b6e8e00f18e53213c969cd7b91c794bb3ebfe6b81ef27c3fda0aaa01463a8301fd512562c87227e76ae02f2a40f57c66d331d1f4c7e5d624ae4861cd1b3e78a891b2888a1be053747486727685748524ff7a938d54510323444e0a2d513de8938ab65e91aee9c42020e6dcdc43f50e586c5370b97d242d3b5d4de1fa5272d846186c5019e389e80b70a76505891529df0d5360038ea7dd3a15c5c09932c3f29948507eb4eb44ed082bc70f76"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000003440)={r5, r8, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000040)={{r8, 0xfffffffffffff801, 0xff, 0x101, 0x1ff, 0xfff, 0x5, 0x8, 0x20, 0x1, 0x2, 0x0, 0x100000000, 0x8, 0x692}, 0x10, [0x0, 0x0]}) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x4e, 0x2d, 0x34]}}}}]}) 21:46:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x120) pread64(r1, &(0x7f0000000040)=""/39, 0x27, 0x400) lseek(r0, 0x100000000, 0x1) r2 = getpid() pidfd_open(r2, 0x0) kcmp(0x0, r2, 0x3, r1, r0) 21:46:55 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:46:55 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:46:55 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x1, 0x1, 0x3) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) 21:46:55 executing program 5: r0 = getpgid(0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) clone3(&(0x7f00000004c0)={0x800, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240), {0x20}, &(0x7f0000000280), 0x0, &(0x7f0000000400)=""/183, &(0x7f00000002c0)=[0x0, 0x0], 0x2}, 0x58) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) r5 = getpgid(0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setfsgid(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r8, 0x100000000, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r9, 0x100000000, 0x0) r10 = syz_open_pts(0xffffffffffffffff, 0x50d103) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)={0x118, 0x1b, 0x400, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x7a, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x21, 0x0, 0x0, @pid=r0}, @typed={0x4, 0x93}, @nested={0xf3, 0x17, 0x0, 0x1, [@generic="9c72ee273a72758ab4a6299fe67ad86506a5e68c02cdf2c00accdedb20044945846c1ca4c4c8864a8486e864a14c1e16c8a770f61afa1ceef9aa6a3389c86068403c4e25685b519b7a6e73ffcd11d2f4c0f2ee5032a81626d6255419505e168fefe9451253e4002ac4f5fbec63dfb8103bd7cba33e613cda3147685f902f34ed002ffe02d05ffa6e53", @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x7}, @generic="758e7954b3cc", @generic="fff9f7b967f4887726f640116605a9d028f3139e9ce83af623f9a831cd0766d18fab546d27c5b61eac78ad11aea7e9ad1fa992993f6e1adbc6cdc0f5967f7177732a852148bfc263bf169d15", @typed={0x8, 0x94, 0x0, 0x0, @fd=r1}]}]}, 0x118}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r7}}}, @rights={{0x2c, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, r10]}}], 0x70, 0x20000010}, 0x801) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@generic="80", @nested={0x5, 0x0, 0x0, 0x1, [@generic="9b"]}]}, 0x1c}], 0x1}, 0x0) 21:46:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) [ 320.985801] Bluetooth: hci7: unexpected event for opcode 0x0419 [ 320.987796] Bluetooth: hci7: connection err: -111 21:46:55 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4005, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:46:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) [ 321.016820] Bluetooth: hci7: unexpected event for opcode 0x0419 [ 321.027281] Bluetooth: hci7: connection err: -111 [ 321.038553] tmpfs: Bad value for 'mpol' 21:46:55 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) [ 321.081494] tmpfs: Bad value for 'mpol' 21:46:55 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000080)=[{0xa8, 0x3, 0x1, 0x1000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) fchown(r0, r2, 0xee01) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:46:55 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4006, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) [ 325.040823] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 325.042579] Bluetooth: hci7: Injecting HCI hardware error event [ 325.045176] Bluetooth: hci7: hardware error 0x00 [ 327.088066] Bluetooth: hci7: Opcode 0x0c03 failed: -110 21:47:05 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4007, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:47:05 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40003, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x16, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x21, 0x8ea, 0x73}, 0x2c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 21:47:05 executing program 2: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000004c0)=""/171) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)={0x0, 0x0}) clone3(&(0x7f0000000940)={0x2014000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000580), {0x25}, &(0x7f00000005c0)=""/70, 0x46, &(0x7f0000000640)=""/42, &(0x7f0000000900)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, r7, r8, r2], 0xa}, 0x58) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="050000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="f84bdcc09a5b57ca46a39e4356015b7ce2c30f669a5fc1803c73ecbb499286a8c3041058c3e636422c1c1e7691bcd6016e5640d1403f88eeb739d1101faa366b44ebde7c2eb280b8fc0d72be79f911444a51170743a803b1465e1a88c1767a652696c53b97047db10cfe9a"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESOCT, @ANYBLOB="00022bbd7000fedbdf25680000001200c70009015c010004df5f66ca4f0ec51d0000"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x850) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r10, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r10, 0xf502, 0x0) getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r3, r4]) 21:47:05 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='totmaps\x00') lseek(r0, 0x100000000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/34, 0x22}, {&(0x7f00000011c0)=""/97, 0x61}, {&(0x7f0000001240)=""/214, 0xd6}], 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) pread64(r2, &(0x7f00000013c0)=""/191, 0xbf, 0x400) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x6, 0x0, 0x3f, 0xff, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000, 0x7, @perf_bp={&(0x7f00000000c0), 0x1}, 0x4280, 0xca, 0x81, 0x6, 0x1, 0x9, 0x4, 0x0, 0x9b00}, 0xffffffffffffffff, 0xe, r1, 0xa) 21:47:05 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 21:47:05 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0xfd, 0xff, 0x20, 0x0, 0x9, 0x3000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x8}, 0x40000, 0x2c6b, 0x8001, 0x7, 0x0, 0x80000001, 0x1f, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x7, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 21:47:05 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x206, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "e9db0602", {0x3, 0x5, 0x0, 0x7c, 0x61, 0x4, 0x9}}) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000180)=""/124, 0x7c}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/95, 0x5f}, {&(0x7f0000001480)=""/174, 0xae}], 0x7) [ 330.677785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.701190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.719064] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 330.732710] random: crng reseeded on system resumption 21:47:05 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x400c, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:05 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_io_uring_complete(0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1012, r1, 0x9657f000) lseek(r0, 0x100000000, 0x1) 21:47:05 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 21:47:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) [ 330.803846] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 330.810540] random: crng reseeded on system resumption [ 330.839349] syz-executor.2 (5320) used greatest stack depth: 22640 bytes left 21:47:05 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x80000000000001, 0x6, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000340)={0x0, 0x1, 0x9, 0x7fff, 0xffffffffffffffff}) accept$unix(r2, &(0x7f0000000280), &(0x7f0000000300)=0x6e) syz_io_uring_complete(0x0) lseek(r1, 0x100000000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0xef, [0xa31b, 0x9, 0x100000000, 0x9, 0x9, 0x1], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)=""/239}, &(0x7f0000000240)=0x78) 21:47:14 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4021, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:14 executing program 2: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f00000004c0)=""/171) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)={0x0, 0x0}) clone3(&(0x7f0000000940)={0x2014000, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000580), {0x25}, &(0x7f00000005c0)=""/70, 0x46, &(0x7f0000000640)=""/42, &(0x7f0000000900)=[0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, r7, r8, r2], 0xa}, 0x58) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="050000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="f84bdcc09a5b57ca46a39e4356015b7ce2c30f669a5fc1803c73ecbb499286a8c3041058c3e636422c1c1e7691bcd6016e5640d1403f88eeb739d1101faa366b44ebde7c2eb280b8fc0d72be79f911444a51170743a803b1465e1a88c1767a652696c53b97047db10cfe9a"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESOCT, @ANYBLOB="00022bbd7000fedbdf25680000001200c70009015c010004df5f66ca4f0ec51d0000"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x850) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r10, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r10, 0xf502, 0x0) getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r3, r4]) 21:47:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:47:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) pread64(r1, &(0x7f0000000180)=""/4096, 0x1000, 0x0) lseek(r0, 0x100000000, 0x1) 21:47:14 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40003, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x16, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x21, 0x8ea, 0x73}, 0x2c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 21:47:14 executing program 4: getpid() sched_getparam(0x0, &(0x7f0000000480)) geteuid() gettid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0xc890) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7f, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) dup2(0xffffffffffffffff, r0) clone3(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 21:47:14 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="2f66696c508a03971abd86194c0653ae69c4653000"/30]) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0xd75, 0x1}) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3f, 0x5, 0x8, 0x0, 0x0, 0xc0000, 0x80, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x44, 0x1868, 0x0, 0x5, 0x81, 0xf7, 0x1ff, 0x0, 0x3ff, 0x0, 0x1}, 0x0, 0x4, r1, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8052, r1, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'y\'%[}[\\}:$!.'}], 0xa, "b94f25a22bce0d68e4ddb1e336aa848207a1333afbbd9ab8473d59f865a46d4f6a2b1c8402f5864b808a1d629ddccadc7cbfc2673b503bad31c2f2f9373614fc5ba00024938f1164df99530417634be07a837daa8b8583762a47c0e336f06f243bd5f8132b436481fe1ff7c5"}, 0x84) 21:47:14 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f00000003c0)) 21:47:14 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f00000001c0)=""/127, 0x7f}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x26, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x5, 0xd6, 0x3, 0x7, 0x0, 0x9, 0x20, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x1404, 0x1, 0x8, 0x1, 0x0, 0x401, 0x2, 0x0, 0x80, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r1, 0x1) 21:47:14 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x40b1, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) 21:47:14 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f00000003c0)) [ 340.070776] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 21:47:14 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_rdma(0x0, &(0x7f0000000000)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0xfffffffffffffffd}, 0x2c, {[{@sq={'sq', 0x3d, 0xffffffff}}, {@timeout={'timeout', 0x3d, 0x2}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) 21:47:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) [ 340.149245] random: crng reseeded on system resumption 21:47:14 executing program 7: mlockall(0x2) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x3000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 21:47:14 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf00b000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) r1 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x20000, 0xc) pread64(r1, &(0x7f0000000180)=""/4096, 0x1000, 0x100000000) 21:47:14 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x6611, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000001940)={{0x107, 0x3, 0x81, 0x147, 0x1b1, 0x3, 0x33d, 0x403}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1621) 21:47:14 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/163) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0xc]}}}}]}) 21:47:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) write(r0, &(0x7f0000000900)="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", 0x2b7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x341602, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r2, 0x0, 0xfdef) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x1, 0x4, 0x9, 0x0, 0x0, 0x10888, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x460, 0x0, 0x0, 0x0, 0x10001, 0x236a, 0x6, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0x2, r1, 0x8) 21:47:14 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) [ 340.343855] tmpfs: Bad value for 'mpol' 21:47:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:47:23 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f00000003c0)) 21:47:23 executing program 6: r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='task\x00') lseek(r1, 0x91, 0x1) 21:47:23 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r6, 0x100000000, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="6f2e089c1529ebe55efab883c45b999f607cb0574d4913c27b53be2b579dfb50988eab0455afe91b336140f92789c2e5d0a155d47b5b1e88e647a17a44d443cb64663423643c92c44b278838e88cf88a88b99d723464f1d883071ff503caff69a6d0fcce0a165030b145542a578db2330f8307e3d09783354f41c702aca1c624b57bd15c0f69e5cca92169cea062da5efbd498f3dd54622be11b085561166e215ff33cb05f74d9db8a5ca56fd1c1797400b5cfbb336022b0fac6e629f43ef67b48f9fd10aab9a409afcbd2c79d13e3a1fc0f9b7db9cf927bc84b776c2c19ec3e2a80d9c6", @ANYRES16=0x0, @ANYBLOB="0200000000060028000300000008003c000000010008000b00050000000000000000641beebaf1c929d708150c5c0000200056610b527f368ec2f9f4da7bcfc36c0293be779fb09c165f91edc412553eb8bee540a1cde4a0a1aae23953ddfba7f3b04537e4b42da30eff8fb165ce516510aa5a253476c11cd4ed85f737d11a68f5469458ceebb169de1a36af5b0b"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r7, 0x100000000, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000600), 0x401, 0x114402) io_submit(0x0, 0x5, &(0x7f0000000680)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0xfdf, r1, &(0x7f0000000800)="af9ad2e95e396de38beaee8ac676c4cfb1dc5e9777c480721519f3e77d7eb1347ef691537007bdc2bf7d1026e73bf7b5fbc8d7e92eb834b1cb60b46763aa3b4fdf8dae322579523c11c75dbd985a954f907e5577832606ed1fa5cfa0259f296e77f0ee55a360ebe20a02c6cbf15dba1b7450b761d367a64e218f287f026292e4a9e7facbf099fc63573a4d377732a5ba890dc9b42f7ff0ecdb751b3391644126622fcae203c46f64428552738eb1a44b92d29381012f9177c466f0b728b0fefd3b38a5533b71d0057bc010bb884da0bb3bd37587eacd602114a2897c440e4ca06418746f47c4ce32bc9a59e3d108c1fe259974b16ef818e778099d6a9bdd4a0b90def5140e4672f38da1c47f75e73ff2b13a539c4a785fbaa988a035f6ae9c1e1346ea966778ad08476192b59fe9ae258ef3585d562abd88cd1e3bf8707a5cbea92665dfd13e560bdaf7a3cd35e0533f628e1786db61adce0a94594d76f0164a197696740668f0f13389f7651b16444e5b7a6fa3a9ea01ebf7aaa348850fd6e336c9a2111681876660a957c8b66b587bacafa6387673fa7951eb33764504014de43fd96960653b4ad7cc39a51be77390ac27087a46982c47cde293d0d935a562450ed6c085bbc812e62faccefb7a316cfc20779a6bf24c9af070f6970b035c38f76b2d866b32187884a3897d56d2b4a06b2b9c519b7995c4e9af9d5110a622681fb29a52efec311b812de2eec98ba87938f3033bfbb77574f0f758ca9e6c886879a409c39e18c0c02fbce2cc0cc0531ceb22f3b102116d91559d70ebeaccd5bf4facb2df26773e8181ed125222387e4bc8cabb4eabef0064f996dfaa47532702d9357775bf494439b9f91e1fc43bc0c827770e0d3986da050b277074e4cc4bc344edcedfaa66acc16808d18a847cc5d2ab0db3d0c94b3252c71411bb73f1ba38085be2ccb2c8b00c40aea9ccd0da5492cc39b65c8f67535befa66d5f454456ea809b7dacdb327a364a94ad842e945019b3fd6faa282b0aeaa20faeaf318e5fdb54f6ec68336756a3d43da86ecab0bde545c01f5c065c1ef4ed9fd71ae197f917cf360ea0160bded84a3c222b02b5f2b53bb3339b818063f58171e40a9fc888e4b2dd463eaccbbdf13401b2e1173f28c43cef2cf391ff39d463b83826da5860b7345f923b75d1442a2caf8141f4accafa58c45d20d83e5fb78a1f58ad2f6d430e29bddfca951ee38e05bd1555918745d83c2dd1c2ed1e03edc15a2e15cd6159d30f110e7686e68e21679ddd105d92f2d9b69d4a240968ef7adfa4004205e13b6ff811ec850f1f560d4a6ae2469cc6311dc720e1be2d6097bba099fc1fbde7256d0963aebdc57f5986e5e60c89758992b265f03e2696dc1d71e1eddd3394057887e3550e862bb0926b93fad8641a8a090b8bfa2f62dc2ee1a78f08b4ed73cbfea1241e2a80c141a6f5c02745f2025428a53ed8b155384252acbadd0dfc61a71738c31273b9574a934a242e40df85d13585042977b131f965ad622b99bee473781f3069769825a977bd78ec368ff98ff9cce3d1b02eb50b962dd9c90091e81715eaadf3174c0c0959e0e46d0e2138d8e77b012cf9da810a92d3855e88b4c11aefbf7d46f16fdaaddf33aaa4263ad6207d44f502c21187f378e4bfd789c8dc32514285687d719c48e97067f1f7227a832c0339b36098740f834fa329152a99c3c90a523f95a007729950b4bfb9c05a7db04ce51770e7439f8564ae555af056c14cd79f33cfe88d439e8679b37861b059d724949626d8d15e025980a5b54c56d4c212666dc7e22b8c3a215638d485c8c75ecadadb7bb9e8149d969c2e878a37583fa840bb858c87b3799c4068613c90b2c1ca3533bc9be462343559d3dd716de4ac897bf191ab19879d3aeb0a99636ea159bde04fc57cf4449d655d4f071726f2a6c903f171c73a93e3e06afbf50347dacc509de18f98cd6ffedb51c878adeac1bc9958486ba6a63ffbc6d5383fa0f4e9de2baea93a826f138142ece2ca019337d8b2a4883e38e2cc1da59440197e75a72daa06e38955b0fbff7490bf9f268fbe9255c1197df5b6589e890db97fa6b1df9b0637230182bf0a605babe2d58721b450bf5ef38ef7ced2c1ed018b66b782489a0274ea58d9517cbd7d2b7af57d42ebc8d035811b35f7286b4dc462ec511287f18932472bf442c248dbbb5258926ced35672d89984039419b827ca9b8fd14c90aa5987ee21b69a5245b8a1d9bf5410839a41f44b9e84b77cdc82f3238f8fb77ef3784aa536edafa2f2d439ff80c2f6c427ddc0ad087be9b3a5e8da242096c4f97e4a2b446aa098c3f9dbe77f757ab5e139062109ae7e360b9230a92a8fd7f1f46c1c2d0f99ca00ced5ef26ef623136c090e9524425f2ce6d1fa2e2271c3918c03bb8354b6f34379faf66e94d201958a91da9e1d30955f09dbe3e29ee1d8fe76399481bbf4ffff492b24e7966e41c0a19f194c2993db2f9e3d0affd11daba79ef946c2210415ea47b680c48b5343ead48a206bf25bf4213aed256f229c70016eef0284961a90447b770f77d98c8614dc9243c9c7e83266dc13fc9a7413b30f1c391a7f9e70dce0bfa549d8d7990ebe60a1a9d968666f5f072c9e0e037f4b4f192cce3b451c8b474ed14d6ee57e8eccbe8a56a54b8d7efb141b85661825c0d48d371d5958c4b89b5c31d68d142d7962abf7d7a02741ce5d832980061fb388096c2948c41fac7f49189613f7e70316e12ba8c1b2547c12243e47d8688bd165c56c2aea5e5ba136a4ca4b2e4a353998b6375607acf51cf086275a64f2649819dc61db2fbb2db6fd055ee52dac5a4bcb99ba0f92dcec619a3efb10005c2736622b9fcd4ec386ab02efb1e029eccad3b1e280509dcf0059e7e208ec4ac1dd09c9ea187e9104f4480bf020af7de40f492c2e94c3b01c018bd0e8e30585c9f6803e65b0e2ca67ca4aa73dc638bedf6ffb346760dc970d0d963faea2aca7d53e8f1c56596316943141b8ec1d8557180480c13618ea6250577a14b3b39c95b05a369116be48bc9ed03fcf4143efd6d8bfaa91ad09f565a6f299fef937deae7f451141436c5190568243aa7382deb49da115f5914311488c7d08f8f617e1c6452fdfff8dd1632d6c06c2560d536b8a78619800d208ea07f52fe25fd2de28d9d18c3fa6e74d1cf8bbf3a0257dc6c518dceabb4378eff23e4056159a5ebf81efc05457caebdf7cd263d58902a72b59026f534a4acf34ae627305e6d7e9c0ab0e4c5e8d643ee53bd4f285f39d60dcfe5bdf93df9f547cf31caf3489a715cc04911bc6e747a36828456b10018b191407ec1c373740df05c92ef3faa679457bd03890fd1aa3d360a69eb8122380866523703329827af0e17ace08ef2662f2d942f57ab5758230251b6ef86ae8bf8f2bc2136f3ce04a6da80211848703a6ac54408a4beb72b9aee723750417ce7abd9f81b7851954d0a2e4162af9bdf2a2b29f21edb71dec640fbd114c8ea9085047c8654fabc4bdacbd18280878f985bd6b28d9d2a29d216c8e0a264460b9e77ebb03b5b6edfe05a152df25bc20fdc1fea9a746cb379072c5afa138b65eecd55fb2f5d378d7c36b39f694a12f27e0e8ad40ee04c28e41b910b7fa1f0dbd143c8aa134eef54486f7449c94ede8ca0e767ac5ba41f1c077adbb012facaf4a66318f05faf9b0eb67928002b3fa0432cdab408729156413529a62e0ac538cb49efd952b26a5bd0263aefc2324fe759f12fa068973b0e44e3df26c926e737ec250fb1683a2572704c3e1a316f4d63770843ad0a394b08b0aef7b46fa4f7369dbce2e416de41220f94620da1a8b7f31829a567d1c694657f61535aa2905faaa5b3a75debf38f73af238de237cfa2062a309bdbc03e35e15aae155d46b05d5c6d9b7c9c6015affb1914c2fcf75836fcc37f9b7e1b69ab134fcff40490ea3707b3f63a83580875be46c4d860309c0eac53466e5cc7693bb19a7b7c2f90a5ac10e35e936f601ac787d2426418b18a101143ca0740e68ca0dbf82842cdf91b88da9db6b33f4418ad31edb7cba26aaf36dec055f00904f87eaba0543327d607e855edabbd0536ce02c84b75e9c69978f0fc6919a76e655d734f11c90c8ece25ef9f0fb92b05ae387ce90782ddc46e9858b22b24cf810e2873373edeb0a840c3f394248710f54e5aa81cdc241305a4cc47d6664814874bc3e1ca31d14e9f33bc1293843a61bdce340da7980788f258ca3d3029a819d68b7022e72ef67bb0f49976818cc8bc94de7c5f6cd528b2cc27d6d165a4ddd5e751b41e54a9c0306deb799f874e4057475803752374e50cfe22d24cd693931065ad5a275130159b195c11b0d796e3db72c94dce367dd6564801133633908bba7a11fda7e1b1b4693d0963fe661cd231e2f121d80fbbe88257ebeb775ada69d69dc9b87550aae4d416ac8e2aaccd9dabeb2852200c27e707c291102aeac3ec369104170a3bac5716f5363b69ccddace25181b44cd797713d46581cf47c3fe720d751524798f0726e8dd769634d588e4dcfd0bdc381fda7f6c0d3706446c0ff4b1967efa0e951f5da411079f5032056117739a62fb1e07cc110d183937c84b3daca450932428b673e52294ff2196539598200a0e293235d10bd10320cfd89c075c6ce2975100bccdd22711f0d7f2287c1ecb5a2e61df91bcde206937ca7b0e3a8391dec78e484c83fbf8e727cf29a4ae10c593ccdc674be07c2e8fe17db1822bf9ba0ff2f28d49323acf85e6f93df1d282a8fc1e8c0f684a150954050c1d5b8505d4cac3527dfafed133222f33b4104ed2e964f76cc25734504b2bb2a7de32bea73546413ba779416a8784d210e49675b96abcbaedc7e007fc88f565cad86d4edc8ee229044ffea4f3651d0e79222e32664f00e842540bc24c93d1e4823a3589742b84f6963d620dfccd8cbd651e27e0471d77aa7fc6f4bcc63ca01765e2cd7c486d4bcf5418aecfb8f46b1129325bfc988f2c1f239d5693bacfa71f22d3e34ba57aa83e81161e405517113c62174aac5b421663651342ed281eeb8f563c7371f1db0976d17ff37bb019e1936f0e22291766d1b9410fc0dca9879bbb2a69ab4117c7c8c13fcbcf06efc6c5f8fa493d4c79e07f05c0441975f5b73d9b40471a4f479deae26928136e29cda24d7af023d0fb860c1cfba0cdc9e0fe58f0996ce616a9a78bda0b6e1b09ca1266392c161ce9ea3c1129a8180dddc17bbae70c199f3e17d9453bd6090d74d893c7dcc798fc8c7eeeab6324c2d72323b11d92bb1fbf980f01d756f3f1a14d2d15767bb05c14f33cfa4d84b814aedf370ecf3a6aa3e291f0898e1b64453763102af33ce440b1f29463b11849cc2c833439c4b3d528a46972aeb4a5ae2bc43f703165dcf5abb8bf49b157e05e5c968b4e8d1e55a8720bfb42da3d25f98471e7fe30bd3cc15c9e8be58b3d0595d84b0588c853195bbb4bcece68f9f6e1f883a6fe3d87bd517efe436221d6f1f4749ddbd8f2e695d0975099b85b78d0067d12eb9d07a7158d69c4381ba1cc4bc1fbe5f18f92046cc8882ba761d94d9b644724c8c1c72627193d1af6dc3c746842564e98375af3e3eaae4215a4f92f03b7f14b47ad4662b424feeb21e714f8d14a3e53237d2c98d3f9231e026149b2fee01fc0a85745e15047cb6d928273f943184b26f29859c71d59e31abc28823c882c31551966bbe1e01e01189cfcad447ce3454d34eb0690bd15528f8d80778cb56747701fe952473dd5045a0ab87297f7f9b9ee10d24115e7162a", 0x1000, 0x81, 0x0, 0x2, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xdad, r2, &(0x7f00000019c0)="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", 0xff, 0x106, 0x0, 0x2, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000340)="a863edc550a5b06ad3bb4b428b6f0e7f3a29adb07de37b2bfa07621c265c3c8d068278491ce7e883cf6d73fd20c710ce11f1fcaa54b5fd6da0d1e7f0610e013436e49b1c5bf09125f1c9dfd4fd025fc44ba6c70c8756e60e305a5a532b5b2f1c4bec6dff1fce9ba8da25cb4233ae72c6a52ac46da8d0c7914b19863d1b5f5382ef8e7e27465dd420886b0db298858f708266a6ddec2c46530ad003eb0154172d56db101e18323d26101308adbde789d0ef485ca1da49e3208f87032acd9d04519a44f5c33eb45f3502cf44e6a2cffdcfe0cf5b2152a408b93cf65d352c1c5bbf370065e8c14e92", 0xe7, 0x7, 0x0, 0x1, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, r5, &(0x7f0000001900)="b06763eea3e0160d9b669f1750116048343ce665e97a7586e3de85231cd76f1facb721c13bd2a4397654e7a72a7690bd282ec013325c607e7a8e81f3738ef0c1af6dfe0a1fa2d9ea5a3d099ed853e78052f9e735b3373762aea29eca72bbef9a86b320a6bafee2f876ef285f74411e3fa64cdc4aee8ad8e90ecb62fb88ccf1f1a9cf362f2e0848855d9e2b6c4a92d6a67f3f3c97c6eba4b16502", 0x9a, 0x1, 0x0, 0x0, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x401, r7, &(0x7f0000000500)="6df0636eebabe0d63bfcf88a2097bb147c4c0e324dd65475731fbc976a13eaabd767cd8560bb3b3e706b6c2de44e6fefb13126a6ac0c133b3854004d2999a2b30f2194e874f6ef0322f36fa2b357a638554f7ecb275ea8669af46f3680fe232f66d1ca56f5c44d6705ab5ac5ec6b64ae3eb4d797044a54f5dc24d43758168b9773805ecb76f43e22886fd02a997b4f9b37126f4b67215d925b935b05a548337ff4299934d5aab1e38aa2f843406500ba059eedf0698cb7513bdd542ab39cc8eb954c05fc1a", 0xc5, 0xffffffff, 0x0, 0x3, r8}]) io_setup(0x2, &(0x7f0000000080)=0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) io_submit(r9, 0x2, &(0x7f00000007c0)=[&(0x7f0000001800)={0x0, 0x0, 0x0, 0x6, 0x100, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r10, 0x0, 0x0, 0x10000000}]) 21:47:23 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:23 executing program 7: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffa000/0x3000)=nil) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5712, &(0x7f0000000040)={0x0, 0x7192, 0x10, 0x1, 0x2ce}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x10010, r5, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x5) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x9, 0x5, 0x6) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 21:47:23 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140), 0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)}, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)=0x1) syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x400) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r2, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x2e) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1, 0x4, &(0x7f00000007c0)=[{&(0x7f0000000380)="e0735a", 0x3}, {&(0x7f00000003c0)="535b8bd86d0ebede020961f67fa9d76222fadf657e1e1130d973cd1c4b", 0x1d}, {&(0x7f0000000400)}, {0x0, 0x0, 0x8}], 0x4000, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r3, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r6, 0x100000000, 0x0) ioctl$RTC_EPOCH_SET(r6, 0x4008700e, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) 21:47:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x20000) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x81) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x100000001000) 21:47:23 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) creat(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') getdents(r1, &(0x7f0000000000)=""/249, 0x18) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) 21:47:23 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, 0x7, &(0x7f0000ff4000/0x4000)=nil) [ 349.200251] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 349.201837] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 349.202976] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 349.204077] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 349.205339] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 349.208921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.209507] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.210217] Buffer I/O error on dev sr0, logical block 0, async page read [ 349.216124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.216583] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.217281] Buffer I/O error on dev sr0, logical block 1, async page read 21:47:23 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/167, 0xa7, 0x1, &(0x7f00000000c0)=""/54, 0x36}, &(0x7f0000000380)=0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x4000}, {r2, 0x22}, {r3, 0x100}, {r4, 0x1230}], 0x4, &(0x7f0000000240), &(0x7f0000000100)={[0x2]}, 0x8) fcntl$setlease(r2, 0x400, 0x3) lseek(r0, 0x100000000, 0x1) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_getparam(0x0, &(0x7f0000000000)) r5 = fork() ptrace$setsig(0x4203, r5, 0x9, &(0x7f0000000040)={0x26, 0x9, 0xffff}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) fork() [ 349.267379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.268571] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 6 prio class 0 [ 349.269891] Buffer I/O error on dev sr0, logical block 2, async page read [ 349.271331] Buffer I/O error on dev sr0, logical block 3, async page read [ 349.272572] Buffer I/O error on dev sr0, logical block 4, async page read [ 349.273769] Buffer I/O error on dev sr0, logical block 5, async page read [ 349.274983] Buffer I/O error on dev sr0, logical block 6, async page read [ 349.276170] Buffer I/O error on dev sr0, logical block 7, async page read [ 349.276838] audit: type=1400 audit(1752875243.880:19): avc: denied { map } for pid=5439 comm="syz-executor.7" path="/proc/5439/task" dev="proc" ino=9510 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 349.281487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.282263] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.283085] Buffer I/O error on dev sr0, logical block 0, async page read 21:47:23 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4004, 0x7, &(0x7f0000ff4000/0x4000)=nil) [ 349.300382] audit: type=1400 audit(1752875243.881:20): avc: denied { execute } for pid=5439 comm="syz-executor.7" path="/proc/5439/task" dev="proc" ino=9510 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 349.316371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.316873] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.317573] Buffer I/O error on dev sr0, logical block 1, async page read [ 349.338113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.338600] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 21:47:23 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[0x0]) 21:47:23 executing program 4: mq_unlink(&(0x7f0000000040)='+\x00') r0 = mq_open(&(0x7f00000001c0)='\xef\xcc\xbd\x94\xf4G\x13\xb0-7\x98\xca;\x90l:\x03\xce}\xdb\x02\x84#\xe5V\xc9\xa4{\xfc\x00\xc2\xf7\x0e\x84\xf2\x04\xbdS\x0f\xd4\xdb{\xab\xdc\x9b\xbb3C\xb4\xbdJ\x1dC\xc4\x88\x02-\xec!@odT1J\xcd\xa9/\x19,\x9b\xf0\xa8\xb2}@\xd8|\x0f%\x12\xbe\xc10\xe2\xef\xc6\x14\xbe\xe8\xc8\xd4\x9f\xb2\xbaR9\xebXx\x94)F\\\xbd\xac^\x95\xf8C\x9b\xb4\xf5\x14G4\n\xcb\x05-\xdf\x80{\xf8\xbf\xce\x14\x89\xf0s/\xcbp|\xb9Y\xfd\x96\xc5\x1b\xb4\x1e\xad\xf1\x18\xff\xb9P\xe9\xe3\x06z\xcaH\\\x8b^~\x11\xc4\x9e\x0f\xf6\xe0e\xb64]\xb4f\x89\xef+^\x9d\x9b\xf8\xac\xd5>\x9dE\x9a?\xd6\xd7\x94\x0e\xc9b\ty\xbb=6\xe6\xa0\xe1)\xc3:\x99h\xf2\x16\xf8\x00\xadS\xb8O\x9d\x00'/294, 0x40, 0x2f, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x8, 0x78d}) [ 349.352520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.353023] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.360607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.361249] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.368101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.368558] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 21:47:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) [ 349.377819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.381098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 21:47:23 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000019180), 0x1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x2010, r2, 0x6d563000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="23e663a04966695c65b52ec5b03945a20a"], 0xb) getdents64(r4, &(0x7f00000003c0)=""/4096, 0x1000) creat(&(0x7f0000000240)='./file0/file0\x00', 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001940)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x2, 0x3c, 0x80, 0x3000000000, 0x3, 0x3, 0x4, 0x1c8, 0x38, 0x393, 0x8000, 0x400, 0x20, 0x2, 0x3f, 0x8, 0x5}, [{0x7, 0x4e, 0xfffffffe, 0xff, 0x8, 0x10000, 0x3ff, 0x7}, {0x60000000, 0x6, 0x48, 0x10001, 0x2, 0x7, 0xb84f}], "f7e5217817d53ecd1e521185ade974b3c15412752771866a5808cdcc7619ba7795473a4137413e42b1b12fe66e3e8e1af486dfbb1c1c48e1deacacbc01491f41e56bc6fb47abf5a2f2d2bc8865f09b16856ef7f8be19c7086fb5c7e916b5b169cd0d574a8e5b78d6ea942bee4a30ee3e54fab7339f4ca95bc2b18c0950a5428f44238d23a1461c4c3bc56634a195a3ce1f99de0268740ab5daaf437a235fe180ffb690a8cc59a8ae5d36e931a4b00d633e2e5907b21112e9792c09bd19ee449668c3c3274e20156f7e6648944c1137495c415e8c395dcf7b0035936bf913863b606dde", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x95b) r5 = shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r5, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0/file0', [{0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {0x20, '%'}, {0x20, ':'}, {0x20, '(%'}, {0x20, '&\'+F--).'}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {0x20, '{*//{!\'^&**\n^\''}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}], 0xa, "7b680bcb846ffde5ced8852677e7a417dc3cddbedb1c200e94d6facf990bf5235795df3a20ba4b1173c447eab271bfe27bf92df4edd2608f"}, 0x114) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) r6 = getpid() sched_getattr(r6, &(0x7f0000001900)={0x38}, 0x38, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x3, 0x80000000, 0x2d81695e, r6}) [ 349.477859] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 349.479730] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 349.481144] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 349.482286] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 21:47:24 executing program 7: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x2, 0x3}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) getdents64(r0, &(0x7f0000000540)=""/103, 0x67) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) readv(r1, &(0x7f0000000900)=[{&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000680)=""/127, 0x7f}, {&(0x7f0000000700)=""/231, 0xe7}, {&(0x7f0000000800)=""/66, 0x42}, {&(0x7f0000000880)=""/69, 0x45}], 0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file1\x00'}) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0x1c, 0x6, 0x64, &(0x7f0000000100)}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000005c0)={0x8001, 0x3, 0x9, 0xfff, 0x906, 0xff}) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000080)) ioctl$TCXONC(r2, 0x4b45, 0x3) 21:47:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:47:24 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:24 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[0x0]) 21:47:34 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r3, 0x402, 0x8) lseek(r1, 0x100000000, 0x0) 21:47:34 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fallocate(r0, 0x5, 0x100000000, 0xe7ed) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000000)={0x0, 0x6, 0x1, 0x1000, 0x2, [{0x80, 0x7d, 0x5}, {0x2, 0xffffffff, 0x1000, '\x00', 0x168e}]}) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\x00'}, {}, {0x20, '/(]#~^][&%+*:,[(-'}, {}], 0xa, "893dfe095aa0d8dae4a8bdf6658c8cc7149b3fffed7d433ceed5b6ef3af64eb616480633106933a7d5fb53b3e6b149e1beb4077f0c765813442c3efb8e"}, 0x5e) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) 21:47:34 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[0x0]) 21:47:34 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r0, &(0x7f0000000640)={0x7}, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r1, 0x5, 0x0, 0x25dfdbfc, {{0x7}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x4) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000325bd7000fddbdffaff0000000800c400040000000800c300ff0300000800c400010000000800c400b10900000800c40001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x4010) 21:47:34 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendfile(r1, r0, &(0x7f0000000000), 0xdfc) setfsuid(0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x4, 0x4}, 0x8) 21:47:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:47:34 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4006, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [{}, {}, {}, {}, {}, {}, {}]}, 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200000, 0x40) 21:47:34 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4007, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x8) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) [ 360.048029] Bluetooth: hci0: command 0x0405 tx timeout [ 360.389621] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 360.390871] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 360.408641] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 360.409364] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 360.422351] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 360.422925] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 360.440883] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.441485] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 360.463631] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 360.464334] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 360.480495] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 360.481119] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 360.686658] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.687327] Bluetooth: hci0: Error when powering off device on rfkill (-4) 21:47:43 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x80000}]) 21:47:43 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x400900) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0xfffffffd, 0x1) 21:47:43 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendfile(r1, r0, &(0x7f0000000000), 0xdfc) setfsuid(0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x4, 0x4}, 0x8) 21:47:43 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x400c, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:47:43 executing program 5: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() pidfd_open(r6, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003cc0)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000540)=""/223, 0xdf}, {&(0x7f0000000640)=""/91, 0x5b}], 0x3, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/169, 0xa9}, {&(0x7f0000000980)=""/186, 0xba}, {&(0x7f0000000a40)=""/179, 0xb3}], 0x4, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000000c00), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/210, 0xd2}], 0x1, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/196, 0xc4}], 0x2, &(0x7f0000002000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002100)=@abs, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002180)=""/29, 0x1d}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f00000033c0)=[{&(0x7f00000032c0)=""/63, 0x3f}, {&(0x7f0000003300)=""/179, 0xb3}], 0x2, &(0x7f0000003400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003440), 0x6e, &(0x7f0000003600)=[{&(0x7f00000034c0)=""/3, 0x3}, {&(0x7f0000003500)=""/231, 0xe7}], 0x2}}, {{&(0x7f0000003640)=@abs, 0x6e, &(0x7f00000038c0)=[{&(0x7f00000036c0)=""/101, 0x65}, {&(0x7f0000003740)=""/47, 0x2f}, {&(0x7f0000003780)=""/220, 0xdc}, {&(0x7f0000003880)=""/47, 0x2f}], 0x4, &(0x7f0000003900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000003b80)=[{&(0x7f0000003a80)=""/245, 0xf5}], 0x1, &(0x7f0000003bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}], 0x9, 0x0, &(0x7f0000003f00)={0x77359400}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003f40)={0x0, 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setfsgid(r10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000004000)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x80000000}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)="bbe5c030e3025def03b36e6a7e167852a2", 0x11}, {&(0x7f00000000c0)="487f626b41266ee40263e900499850f0030fca0d4ce523a86b0209ca3c611f7cd219845a8da67427bce4cd2770d533caef1a011a5426c68acc48f57143e998d900233c38701df3065ba388a84fe1fc05ed0e281ca1c2876a4def961437adc53102f54ed0f9f89d4c3ad9b0e66aef5a16750e691145fb8e004a8232714aa6074bc2626aeb4fc12121ede4a5d4f7dde0e092385ec1da8b8f08418f55dae591e1d1df2549108453ec2087e03359f8a87bfffe00725f0b0a451c735abd1635c0cad01b1cf42bb1ebe39549b11de80cde36faf708f20d5cb885c8d4b6fde378dd13f37290eed94f17774456dc0bebd0a713fbb2c67e68", 0xf4}, {&(0x7f00000001c0)="5a5d4e8324484ef4f40540870436699f57bc6924f3fe70dca4fc78c8344e0e20f1696d2b33a15c699a5232f618ce70a4e14ace00c4cd1eee7ad9b546cbe5418d9f79f9764df3a2cf3643ff8cf5", 0x4d}, {&(0x7f0000000240)="9b94778795b79f30ec83567944e1389b26b0945f8f742b604131b9a5a417a5ed01b7404c5a9309759681654ff13abe09843a93dea9a32436befd694d358bee1f8b91be5f525b59d5cca38f98d076872612401e356d0b45407a38ea577ee88ec8", 0x60}], 0x4, &(0x7f0000003f80)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, r10}}}], 0x80, 0x40}, 0x24000801) 21:47:43 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x188) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x10) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r2, 0x0, 0xfdef) 21:47:43 executing program 7: mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), 0x40000, 0x0) open(&(0x7f0000001c40)='./file0\x00', 0x68240, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='iso9660\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x8) [ 369.486593] ./file0: Can't lookup blockdev [ 369.497901] ./file0: Can't lookup blockdev 21:47:44 executing program 6: syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) lseek(r0, 0x6, 0x1) 21:47:44 executing program 5: prctl$PR_GET_FP_MODE(0x2e) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x28020, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) 21:47:44 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7) close(r1) 21:47:44 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4021, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfffb, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 21:47:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:47:44 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x80000}]) 21:47:44 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) r2 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r0}}, 0x58) [ 369.708294] random: crng reseeded on system resumption [ 369.729010] random: crng reseeded on system resumption 21:47:44 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x40b1, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:44 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=0x0]) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x6000) unlink(&(0x7f00000002c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='erofs\x00', 0x2120048, 0x0) 21:47:53 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) r2 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r0}}, 0x58) 21:47:53 executing program 5: sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x100, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x35}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd0, 0x3, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xb7, 0x1, "5066f8d8bc12f00ffc6b43ceb3ae29f3373b4b3858158e19d4d9690f49714b7127adfbc46c67dbb3c20070517139ed36ebb6a28b0e58435501eaab7878c8495cae992f9fc4ec3fb2769e4223bf6290db64fc761fd0c239298770c0a5b63ef83ae87e112dd717386a9a8e93a0dbb562b72c6f96a90ef0e638a9aee0cd434e069d62d3f409240da813a520774a19547ae14adfd034d61b62326b802d7159833e333d1b6a7d45580276df4edfd6d4fe9a0f0c3ce8"}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc, 0x1, "18957d2046792418"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x69}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8924, &(0x7f0000000800)={'wpan0\x00'}) 21:47:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:47:53 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x48, r1, 0x200, 0x7, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c020}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xa7c0}, 0x0, 0xffffffffffffffff, r2, 0x8) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="d3", 0x1}]) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x1, r2, &(0x7f0000000240)="10326d4566e4c262b053a3aac18885b68242fd5c7a7f6334d7ffd8191a70b578c61445c842bc03cb551e29c6496742dbf153974d25abc8954cd719bcb1327aa051c8904ee5d2094a384f7b7c3230e063a8edfae409fd3714c4c90393dabf184b0b56ad17c75ea8c684f68f2a0362d86f26d9bf24771ba4fb0ce323e371bfffce8b79ae838410102694fe54937dc550949e8ad6", 0x93, 0x7, 0x0, 0x1, r5}]) sync() 21:47:53 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x80000}]) 21:47:53 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7fffdf00b000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:53 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b3a, &(0x7f00000000c0)) r2 = getpid() pidfd_open(r2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xc1, 0x0, 0x9c, 0x5, 0x0, 0x9, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x401}, 0x2022, 0xfffffffffffffffd, 0x6, 0x8, 0xfffffffffffffffc, 0x2, 0x8000, 0x0, 0x6, 0x0, 0x1}, r2, 0x0, r0, 0xa) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000003c0)={0x0, 0x10001, 0x4, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000007c0)={0x10, 0x6, {0x9, @struct={0x0, 0x1f}, 0x0, 0x1, 0xfffffffffffbfffa, 0x4, 0xb900000000000000, 0x0, 0x92, @struct={0x1}, 0xf423f73a, 0x3f, [0xc53d, 0x9, 0x6eb, 0x17f1, 0x2, 0x4c1]}, {0x234, @usage=0x73f1, 0x0, 0x7fffffff, 0x81, 0x7, 0x3800, 0x3, 0x81, @usage=0x3f, 0x1ca3, 0x599f, [0x8, 0x1, 0x0, 0x385, 0x80000001, 0x6]}, {0xbf20, @struct={0x7, 0x2}, r5, 0x10001, 0x401, 0x8, 0x1ff, 0x55568a32, 0x40, @struct={0x6, 0x5}, 0x401, 0x101, [0xfffffffffffffff8, 0x7f, 0x80000000, 0x0, 0x81]}, {0x4, 0x358b, 0x7fb}}) 21:47:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040)}, 0xa268, 0x3, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/121) chroot(&(0x7f0000000080)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0xa0) umount2(&(0x7f00000001c0)='./file0\x00', 0x8) 21:47:53 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7ffffffff000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:47:53 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, 0x0}]) 21:47:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:47:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000005000000e80c060064fc000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) close(r0) 21:47:53 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0xb, &(0x7f0000ff4000/0x4000)=nil) 21:48:02 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000240)) r3 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x7, &(0x7f0000001740)=[{&(0x7f0000000280)="38107406f60358632ce636419869c9911f5e7946fbe47399eee8296d4640b640a7b4acfd9f5715aa22d83b97bc2862db9f56d64fc3ac75f6f68af6fac9e09a42c19ff52c4acd48dce29ee52ce8aabde1be10d90b920fbda37aecd85e6c0edd1a7695042aaa020df8cba36cae54209bd3324d8e83b032d55089281ff7d635a5948b0d76bd041ebf3c8664773f102799c823aa254630c570cf7e5ec84a24d2b6485ce8dff17e011840d1e58ff870084b6a", 0xb0, 0xfffffffffffffffc}, {&(0x7f00000003c0)="a5b4ae2b76cf12b6feb31b9a2160c17362185eb5de3c3abd8dbaf5688df33a240d36c208c589bd3adfcf1e0e5c9a5bf2d66350f62ddbf8bd4d741e0070018e19a9ec2da0a2ed2bd43b2069f8a65b8ab8bfcd76e7aed454ba2db5643f15adde94585ae81d3b234b71a8ea78464ffe3065ab437138c840502c790d350477232c05865345dd584fa2a9ccda4c8bd0bdc0339ff5a063af7db766994a6ade0a710d7fd51c92d26f21570d24f8921bb48d00689f66e66ac93114ccd7da7cd41f13b8393aaa1648ca3ba1dfdbb534d008327ccff8b6b226fca7c6da838d98d2ac4126af3b160567de7388a0f79a10ca89502f662063cdff5f2b6b35", 0xf8, 0x1}, {&(0x7f00000000c0)="a1e97ff5", 0x4, 0xfff}, {&(0x7f00000004c0)="8a713ffc021596cd642edf69817ffabd40347ee1aefdafaff018e6aa208a20d2a5f95a3efe3020b42319c5fdb1906333b6ec3d4f4de5380f11fa02951cfa03fc403183a1c460b30b2411de3237bc952591ff510dc069b8918ff9eb00dcadb50218885010f314b8a8f95da9b8cea1ee791545f9d63331d4f093f701c04478de5d1205b954043c468c6f42930ba240f7d394", 0x91, 0x4}, {&(0x7f0000000580)="a2062eef760d5060e162d43a660b5d2a3c39b2776b9d3e8d002827ee51c9d32caa8072bb8083d71c2b35bdda117641d2712c164035b105f77c7d297359efb07c0797e9877979b9e29ff51e094d2043ee129c5447b0d1a6a2d946f4a953f9c13a0e3c45e2ca7091030c1726cf45562d4a0d32fee3b9b5d1c4c35fc1c925210c6c030ac26b76f83dffdcff710545263cc0d78ae00a5545d0519715c8d89dc67b4587da6121e59181e2", 0xa8, 0x1}, {&(0x7f0000000640)="a8175c6510a6167bc16984292856738c2adb37c8dde65356b6865372b3261f1f96cec9b778bbd21543f652ad5e46b61c7e32b6978888ecb04a137037d039842702cc8bb54f3563784e5ea01f624131dce97a9a17cf2b0c399e2e1fcdc45d3e0bd57cf6c15ba5db4c660ebff72d944e29994e87aa5a62e4e48e8b308dd332c2019c6cfbacebc8b6884e40583a432e56539a2214d5e31b823cd5b53db0c868f95360fabefe83d1e357c453ad74f326e0f3b20f6aa9783f42ec5a30d9af941039648b6c22081cbc4745b117c550617a5b9ff785ae11d998ee85d9f6402eba", 0xdd, 0x3883}, {&(0x7f0000000740)="e94102aeac1b4b8d1a34602ad8a5650f59a2c77ce93c6bc6da71f30fce883e9b8b0f3a70168d2ac975d3c8c88c5ebaa70533a8812b3dec40f158baa04a5de01096eb043421b0d6ce0faeb574d702dba4ba3d5091ac8f676b4097f7b44918eb20663751c084b5729339fcce20d2493860b87fe142e4c3f53d01fa58cd4e8cc031ca9d802c8e2e15d09acf67f79e085bde65ee5ecfea414cf722f6f74078fc505dfad38507c10407b294946ebbf163a6139b54f9ac3e7f74e3c2dcb61f77241356d1ebbacd79ec8fa1f56628ae74902244392628e7dbff840a2fecc1e115167dd0ed8357c8005de4650e0bdedd89a0936370e6d49f61d7bb2d10249cef478b9de6025620b388aa31544fa0fd505ebfb2f16ade5f0cfccc5e399fb689a7daa94b08e8a09670cfe2fea6d417b7d5d93e1a42a7a2350ab56cbb74d7a8d2ab8142307e6b65f572a64d495944fb1a2517429ae0ed965c097a47ed96a69a8fc0c91dd22c3ccf06292f730aadf21af91899da9ace56356460f560931aab9562dfc7e8c5fac93da90a99574f1f1838c236b3a2e277b71e103453ad4dac9e6486e0b2701e9ed4b89bbd16a15dcb29d98d80c865ac9a716b0a5541452b097f204abdf055dcf5713c745cee705c5d5d5cf3864b835db185f0b87f2ab7f7651eec27835350dd8852f81e567c29281d58b6961c43f9fb0b5c1d102bfac35e80d10ab8caa64029e2a3c82117cdb82a555025f97f0bc9c8739b4007e81c82fd914e0e9e80224217764518535232dcc01148096001e61d96a638c2502a8108468912f620d3912183cc596cf29784100bb3fa85baab436fc80975ab94b0f37e95536d0de0601e260d8421ef450825c5d408ca06c567652e2c2ccf034cef659a39e51fe629c7a1d87525dd90a57aee202a09ee735def3d8190ca2e72bed44886984178d3d90c9394b37963bc5231e5297c5c5b54d85de28e14d8db2449484c7e0c9d63208ed799b48612d2c32b8f0bb3d965054e411c0729b59575537f591fe3ad5d57b62a42120bb5284f051d47ad4088913485e4c58cae2e4277b1c80997c9214b1350f60f199357f5dfe124d12f0176f31540c6a92d4d53c4379d755f97429bed32074571a41e20995e560d80d5ac24f3f877bc13114586509d6e002f51b7e7effd0aeb761863ed8329908a5187666e5595f1d4aa742585f4b22e0c536e3f3e1cd796750137e155ca60955f1c5a24d3e5f36b5e3f20d018786381fc42d583ff74be53ada010b03715cc65741bd263410dfdd6bb0305bb1b1dc7139a5ae7a99501b1c01edf316dfffb2f23e4642292dfdc3c92f9f04f2e74a010bfc6cc78d2bf22f7ea14a17bb5bb51a8e14d79bb572cffb75c3827b23382dc47362320f09fce85fa682d0804cc247ed21e5e18b16f03c6961aecdde5f5836d465f3971f5faec27f5ba659636aa4d02fb126edfaaf4944a24a1d1bf75c52ec961ea3665175b0af5135ffdb6fe0a43c501acf963d0f39ff84a268e90f501cfa58a17d53738cc1142e020fa0f63efcdd849bbc47c597ad440a694272f6f146f49a039bb8414e5e740604dbb7bea9e0828bdd345da0c99958e42d11681cbff54f10a677e7b9e58b621f392ec818137465e90b7d42f1f9595477e1f5593bda7566fd71c8ff62419ed53041daa4d248988758abaaa1e6af35d8f876b6c624ff97774a6c3d3d8e2b7e54dea1df317175cb2969055c8eb924dda8a29bc5279d0a7e18a55f4d1b314f43c4be5e023da0027585f6cedb011401aa8bdf958576a8a959652f090f3a79e49b07b9970278071986ee62999901f9a7257487bce1848244a832826455abb5eb692f86ab2786a73fbd8018c8c794119f0c01043557b04e0b49fb819800519477e51f7af7469a09baa2a1eaba85e8278c05e46c8c4e687be9131448912c45b467ac5e7919ca340c3c70a4f2bc50beb868ad8fc8026f6e9c83e6340c63333dc1ca786c8968742ba9feb99b34717e85328c34caf98afa5fec60787e4cc91e625e6078592526a956ef7ab2a8000626d165c926e8245d9c71e73a97e3aa3960e195ea8103425fc6da344a4c4d80a06df2dfcb59cd9b9495c13e72fd415178d989e6f91c199ddd65c632a07bdaeefc90fa31655023921a1e429961b452073074798bad61b5a7d183888d88990c575d5f516397e26ed0e926176aee5397ea6ef6609f15a954e33906f93fddf9c2b0a74be16128bb64954a3da2a9df5d72037afad69e1e776bb78705e80d1043271d77798b6894a44e8119b514e951f17717ee519547c64e854002e5b1c320b942c57f8f16f50dac4ea89625c1806f2906b39612b2246917fec5b7eddf5f30b0464ecbf9704d0bba0d0ef241737bc6f9123ca1c4f201f39052cd093bf09ed94e0d09f910d3fa0ba472b277999058267f5cbb9bce681fc43d2cecf0054b2bd7bd23b0ee9711ab2f43752053b7d38a29996ce4088827e86b3d7906ba5cadd4a2e8e65ccebbcb73404d93fb8326a190a807794cb7ec033bc03a90757cbee08b31e91d0da1e26b28b1865a2c5ea7a87814ffe378948add8cd1fcb110a01aa78d3617cc9d46edbf856cce4be0a85093f3bdf69f120db27d20a4ed69b2a787edb52f655440de8c1ed8389a46f14d0dbe81567562302cb1f370039c5de58391cc2e70405410a0f04b3c6d4ad642219767f67b534ba71b2b35026e2d32f9c01cccf14def31df7b2a3441307a2c342d782bda993c41de4f1d9de8221b34f4458c4b3e2e68d3ccc299fc7e17e7fcdf1b61b7e9b1fd86ae264ed54b965a2d9c8caba5dcc8cb62091c5a76d0cd53f53f5c6e91df020bb986f42c68dc138bdcdd948f61d243b4cdde628dbaa41d263703f11a390e5d1125af6b211a3beb9972caa4ea061c5340077f638951cc62b86eee01eea61b231593567e837845a9b4c8a9f338dbf2c4628083d6976aa8e6af8845a671491a8a77693576c0c4b8a1866c19467e83347f88d59bb307e3e280d88f83d0ea114f79816c94b55807cc49fe322874c58b472a62dcbf9f7e158b52727d471b9b0cba82183ab317018f60e5b22e0f491ad745f03e13e2f30c8c5dbdc2c27d3772c6ac5ebfe2bcda41c842c8ac21a34a05853c2dc049b957da86228c709c5eb95a75ad2fa580c21e57e1c2ccad280fb4cd34d8a2f4c3063d4d43d2e7e4f2c3b24e3c0505df7ef81bce8eefe8cc19bd1d2bbdc28f484a758064696496208acf2f080b28cb55f17fa3649fbe447fe3304fe1a9125c6a2b2ec04f2b15e06e4bea6445323c9ba00ba34ddba915f99f955ee35d0a7dc856d671ed802e97991ee52c61d6c3058c2156891bfe7fc5e66fa642a24455fc0360d437f1323415064581ef4fe81f3b4be8d58d77b643b42d114dfc42b1755328868f1e771070c942941a90d02d3da0470ddb614a7cfaf78803831d51b32832c24eb571a0d696fc2f2192d65fed1e953c9f5011a5702d314b278569f51527e601a300c138e929f0ed1f9d6eb10896dbb18000767b4b4a89ceea562fe07588f5ed73b621b259944f0d92ef49a72cb3a02beeabee21625fa2002aeec2e08f4f79e447aefa22501fcf5a04f04725490656fec12689932e4c9b8fdb14d05b7a362991af22b4199fe2a796415f0ea1f7db6b0fd308517d958ac1601dfad8960a11faf7fda9180db4bc6669fecef1cd752c1c7981edcaae566c421365fc79bbd3a906ca59ffb906c6929cec1d63a75ceb52a31d39103f690b6e2fae790026d94604628b53684916d972a66c8c0f5feaf8cca878bbdcfd91ef661a8e1b4e1dc9bc1ff202c791a1f8a525d1a71059298eaaddb2ba3b842c42758f48728b4ad954e3218e1e122b03199962be09cabb5654165491777e37b61940a563ff1f4802243c4fb13e8e4fafe480d69cfc3c2171caed200b0e2836dd3341ba7a013ba228647e62b3ee4fd1aeeabdc00d64c2981635a73b9e39d6f4794beaa2e86b8bb84a5caa852427488a7e641950d90c1c29ce3ac11765cf1261311bfb62af54be4113cbd6c07e5fc2e935aeb17872a662d1bd16c21f27da76e5c4e68ca4a52283abec1d8b47bb54b4077e3f17baf262ae351b81b6fc746ccbc9932da684d71cdf4db39905fdaf1d3857d07e84214e8dfa63746c0b8290028706a624cfef7c3601eaf2acf56694ff4f3dca7dc0770f396337bff48cb19c135940ad90787b0c415d52fb7de496d1238e63755e868a858df47a8ac1641e7d76f3afa2c96d4d8fdf47c6fe17d9797d27f68cbed68a19f7f819b0182f61ec86cf09ff8a1cef786e908f598324e31fe259b399d7a3da3de9ab9411f2158313af534e51871f17ef0b34fa3c9d2b6d9d4d413a983d6265eb8007f8ea7942e38636a427bef5c9aea31fb3624c0a43b3c704e98544239ab03a60423407f8308f86fc6d0ba11aa7fe63789d8525b23c564c036f79610814f65bfeba22dad12513d2468c8b4d9a9c7ba33acd877e8085c7e09e139f8fe333005e1b186bedffab64610d821599d5760955915c88c3097e8e067a8dbb9f046ad136596b04f3a877d901e026dd19dc10da129a6535dcf383ad938be61312577423156729a4f4bfe6d087a40a33cddc80cca6290e9e1b43d0c5d699c0df3cc67c3c03aa1bdea7a1e6e471e238f4e42e9e3c949803462779c43f53ef5e60bbf83f32c11f7ef9a8e82df295da1dddefec4d2312b074e67d66e5371121c17e517b1071c5e8d5e04090b38fff04bb88e0a18e17d9daaf400b1ea582a4c4c4f3c7a386a03b9f5be4d406f763cec52d10528775553a3babe46c7c76a333753c4eaa8bc867fbd84b25ab5b5967e475da53f2bcf2b7deb78a626d278baa37f99f16f9a1b3ed44bf56f745a951ad2dafb084d09bde95bfa2d9698fa9c67be2c0c06b5b3896ee7bfbf43e35d9db9da5d0f1737075910f7668ed16e10133bf9466a42e4b48e3cbdc8548aa516eaa70120047bfa63ffdf90a224677689dc5e48f94ec62143c60a21b34137202775f5355d920d78561865bb849bc06c144a75d79713166bf61ef153bde0b4af61c0685db77489f1e4c60ba4f026cd1f526ccb4d3c95881534e62d7a8a0a4ef613edb03a4882561111ad85e019530acee686a2d0d16fb4837c73b980fd1e45f682a70821973deb47de482ff0edc1ea56808ea17561888c6f7f651b34ed5dfcde671ff8a5286b39dc5b9a3b77330c287c2d6c8f6a525a072915512de47e6b064dbb01b11e0ec214e0cc350570d082192f1996d18a2073504b86b5c1905f1d6d161c0295d784fcc61760326fa67098119e062301791055a628b857bed0e308bb7f81625060610e1f1c8e7c49706aa0cc72ae7268b1e359fc7a2e9405c14229e246713f226e201ba76479a45b63377bce67b80f555dde384cfdbf032bcb5235eafbf492da94da04e4b32c04c01bfa103e83e79b9aa11c18a5af6827f861168b76181dbf75458edfd165dd40b18f0a74ec03331f4a19d756762379d56ec081d73d85ed54cec0f361bef66c5f3d03003181bd93c69d47167d48aacbd27441e7dc5c78d860b8fe173e678a345197463b3bc4d34cba900bc14051518d63b69a0591113187656c7fb60be91241f7ceca8e726bb838142cfd6a5dff8e193638be658fd0599f8fd2beddf27878c2dc08654b1e6335dd8736cc2b48e76fd4e6b22c2b23f2c7549da149d7b694d1f7e4d5aa48892f8df73c06d0f9527eba37cc519566d9152707c84443adeba7063718efffeed9c2dce2d8fe4f7a27d15bede88b1a227a5e2b0571eab36cf5705457d0fb925924a3fb0e2f8b21fe1de99942", 0x1000, 0x1f}], 0x4, &(0x7f0000001800)={[{'@/'}, {',{U:'}, {}, {'@['}, {}, {}, {'-\xfa-$(/\'.'}, {',#(@-\'%,'}, {}], [{@hash}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsdef}, {@smackfsroot={'smackfsroot', 0x3d, '`#'}}]}) openat(r3, &(0x7f0000000200)='./file1\x00', 0x404080, 0x3e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="18ff010000298b4b9047067798001e1f3b9a96513a39aa7062fc66dd3c6c6704d923eaf11b533b3f77b09415a78fa3f45adb22866d5cf80301cef5fba6ce85910ed5be1bcd269c5eac8edd40c08213aab6c7de836ef007638074bb9858f68208aaea1ba74b17ac227fff9ed973a232", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) fcntl$dupfd(r2, 0x0, r4) 21:48:02 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x4b3a, &(0x7f00000000c0)) r2 = getpid() pidfd_open(r2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xc1, 0x0, 0x9c, 0x5, 0x0, 0x9, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x401}, 0x2022, 0xfffffffffffffffd, 0x6, 0x8, 0xfffffffffffffffc, 0x2, 0x8000, 0x0, 0x6, 0x0, 0x1}, r2, 0x0, r0, 0xa) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000003c0)={0x0, 0x10001, 0x4, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000007c0)={0x10, 0x6, {0x9, @struct={0x0, 0x1f}, 0x0, 0x1, 0xfffffffffffbfffa, 0x4, 0xb900000000000000, 0x0, 0x92, @struct={0x1}, 0xf423f73a, 0x3f, [0xc53d, 0x9, 0x6eb, 0x17f1, 0x2, 0x4c1]}, {0x234, @usage=0x73f1, 0x0, 0x7fffffff, 0x81, 0x7, 0x3800, 0x3, 0x81, @usage=0x3f, 0x1ca3, 0x599f, [0x8, 0x1, 0x0, 0x385, 0x80000001, 0x6]}, {0xbf20, @struct={0x7, 0x2}, r5, 0x10001, 0x401, 0x8, 0x1ff, 0x55568a32, 0x40, @struct={0x6, 0x5}, 0x401, 0x101, [0xfffffffffffffff8, 0x7f, 0x80000000, 0x0, 0x81]}, {0x4, 0x358b, 0x7fb}}) 21:48:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:48:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000001240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000080)) timer_delete(0x0) 21:48:02 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0xffffffff, 0x10001) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x13, 0x8, 0x18b, &(0x7f00000003c0)="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"}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{r1, r2/1000+60000}, {r4, r5/1000+10000}}, 0x0) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup2(r6, r6) socketpair(0x22, 0xa, 0x8000, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x800) recvfrom(r9, &(0x7f0000000240)=""/118, 0x76, 0x100, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 21:48:02 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, 0x0}]) 21:48:02 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0xb, &(0x7f0000ff4000/0x4000)=nil) 21:48:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={0x0, 0xfe2, 0x0, [0x80000001, 0xffffffffffffffff, 0x0, 0x3, 0x100000001], [0x0, 0x8, 0x8, 0x10001, 0x542, 0x7, 0x8, 0x6, 0x4, 0x1, 0x5, 0x5, 0x0, 0x1c, 0x4, 0x6, 0x7, 0x100000001, 0x80000000, 0xf4f2, 0x30ae, 0x5, 0x0, 0x9, 0x9, 0x101, 0x80, 0x8001, 0x8, 0x2, 0x10001, 0x800, 0x81, 0x9e8, 0x4, 0x8000, 0x400, 0x1, 0x100000000, 0x7a120b73, 0x9, 0x4, 0x7, 0x1, 0x100000000, 0x7, 0x5, 0x1, 0x5, 0xfffffffffffffffa, 0x8, 0x2, 0x7fffffff, 0x70, 0xfffffffffffffffd, 0x2, 0x400, 0xffffffff00000000, 0x87, 0x2, 0x7856, 0x10000, 0x7ff, 0x6, 0x3, 0x8c66, 0x1f, 0x1732, 0x5, 0x7, 0x40000, 0x7, 0x60d, 0xca8e, 0x6, 0x80, 0x0, 0x1, 0x100000000, 0x1, 0xfffffffffffffffb, 0x1ff, 0x10000, 0x1ff, 0x8, 0x5, 0x659, 0x7, 0x0, 0x8000, 0x0, 0x5, 0x969, 0x4, 0x7, 0xf0d, 0x401, 0x9, 0x2, 0x1, 0x8, 0x15, 0x2, 0x6, 0x8, 0xe40c, 0x9, 0x0, 0x10000, 0xdb, 0xf95f, 0x8, 0x1000, 0xfffffffffffffff8, 0x80000000, 0x7, 0x6, 0x6, 0x8, 0x1, 0x7fff]}) getpeername(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000100)=0x80) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000005c0)={{r1}, "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"}) lseek(r0, 0x100000000, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_sony', 0x40000, 0x10) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000040)=0x1) 21:48:02 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x80000, &(0x7f0000ff4000/0x4000)=nil) 21:48:02 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, 0x0}]) 21:48:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x1, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20044091}, 0x84) r1 = getpgid(0x0) r2 = fork() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x0, 0x3a, 0x4151, 0x2, 0xfffffffffffffffb, 0x8000, 0x401, 0x5, 0xc4e}, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000000)='net/fib_triestat\x00') r4 = getpid() pidfd_open(r4, 0x0) sched_setattr(r4, &(0x7f0000000200)={0x38, 0x3, 0x10000001, 0x249, 0x0, 0x1, 0xe8ef, 0x8d, 0x100, 0x2}, 0x0) lseek(r3, 0x100000000, 0x1) 21:48:02 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000240)) r3 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x7, &(0x7f0000001740)=[{&(0x7f0000000280)="38107406f60358632ce636419869c9911f5e7946fbe47399eee8296d4640b640a7b4acfd9f5715aa22d83b97bc2862db9f56d64fc3ac75f6f68af6fac9e09a42c19ff52c4acd48dce29ee52ce8aabde1be10d90b920fbda37aecd85e6c0edd1a7695042aaa020df8cba36cae54209bd3324d8e83b032d55089281ff7d635a5948b0d76bd041ebf3c8664773f102799c823aa254630c570cf7e5ec84a24d2b6485ce8dff17e011840d1e58ff870084b6a", 0xb0, 0xfffffffffffffffc}, {&(0x7f00000003c0)="a5b4ae2b76cf12b6feb31b9a2160c17362185eb5de3c3abd8dbaf5688df33a240d36c208c589bd3adfcf1e0e5c9a5bf2d66350f62ddbf8bd4d741e0070018e19a9ec2da0a2ed2bd43b2069f8a65b8ab8bfcd76e7aed454ba2db5643f15adde94585ae81d3b234b71a8ea78464ffe3065ab437138c840502c790d350477232c05865345dd584fa2a9ccda4c8bd0bdc0339ff5a063af7db766994a6ade0a710d7fd51c92d26f21570d24f8921bb48d00689f66e66ac93114ccd7da7cd41f13b8393aaa1648ca3ba1dfdbb534d008327ccff8b6b226fca7c6da838d98d2ac4126af3b160567de7388a0f79a10ca89502f662063cdff5f2b6b35", 0xf8, 0x1}, {&(0x7f00000000c0)="a1e97ff5", 0x4, 0xfff}, {&(0x7f00000004c0)="8a713ffc021596cd642edf69817ffabd40347ee1aefdafaff018e6aa208a20d2a5f95a3efe3020b42319c5fdb1906333b6ec3d4f4de5380f11fa02951cfa03fc403183a1c460b30b2411de3237bc952591ff510dc069b8918ff9eb00dcadb50218885010f314b8a8f95da9b8cea1ee791545f9d63331d4f093f701c04478de5d1205b954043c468c6f42930ba240f7d394", 0x91, 0x4}, {&(0x7f0000000580)="a2062eef760d5060e162d43a660b5d2a3c39b2776b9d3e8d002827ee51c9d32caa8072bb8083d71c2b35bdda117641d2712c164035b105f77c7d297359efb07c0797e9877979b9e29ff51e094d2043ee129c5447b0d1a6a2d946f4a953f9c13a0e3c45e2ca7091030c1726cf45562d4a0d32fee3b9b5d1c4c35fc1c925210c6c030ac26b76f83dffdcff710545263cc0d78ae00a5545d0519715c8d89dc67b4587da6121e59181e2", 0xa8, 0x1}, {&(0x7f0000000640)="a8175c6510a6167bc16984292856738c2adb37c8dde65356b6865372b3261f1f96cec9b778bbd21543f652ad5e46b61c7e32b6978888ecb04a137037d039842702cc8bb54f3563784e5ea01f624131dce97a9a17cf2b0c399e2e1fcdc45d3e0bd57cf6c15ba5db4c660ebff72d944e29994e87aa5a62e4e48e8b308dd332c2019c6cfbacebc8b6884e40583a432e56539a2214d5e31b823cd5b53db0c868f95360fabefe83d1e357c453ad74f326e0f3b20f6aa9783f42ec5a30d9af941039648b6c22081cbc4745b117c550617a5b9ff785ae11d998ee85d9f6402eba", 0xdd, 0x3883}, {&(0x7f0000000740)="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", 0x1000, 0x1f}], 0x4, &(0x7f0000001800)={[{'@/'}, {',{U:'}, {}, {'@['}, {}, {}, {'-\xfa-$(/\'.'}, {',#(@-\'%,'}, {}], [{@hash}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsdef}, {@smackfsroot={'smackfsroot', 0x3d, '`#'}}]}) openat(r3, &(0x7f0000000200)='./file1\x00', 0x404080, 0x3e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="18ff010000298b4b9047067798001e1f3b9a96513a39aa7062fc66dd3c6c6704d923eaf11b533b3f77b09415a78fa3f45adb22866d5cf80301cef5fba6ce85910ed5be1bcd269c5eac8edd40c08213aab6c7de836ef007638074bb9858f68208aaea1ba74b17ac227fff9ed973a232", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) fcntl$dupfd(r2, 0x0, r4) 21:48:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:48:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') lseek(r1, 0x100000000, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd97c3f43104662e1}, 0x4000000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x600, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}}, 0x4000020) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) fcntl$setlease(r3, 0x400, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x87}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48082}, 0x802) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x1, 0x4, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6c}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x400, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffff7}]}, 0x54}}, 0x40) 21:48:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000001240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000080)) timer_delete(0x0) 21:48:12 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) r1 = getpid() pidfd_open(r1, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_tables_targets\x00') getpid() lseek(r2, 0x100000000, 0x1) 21:48:12 executing program 4: r0 = io_uring_setup(0x5053, &(0x7f0000000080)) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x285e, 0x4, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = memfd_create(&(0x7f0000000140)='./-)^6\x00', 0x5a04c9632e4d2b7f) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) lseek(r3, 0x100000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) 21:48:12 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xa, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 21:48:12 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r0, 0x0, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000000)=0x6) getdents64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:48:12 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') io_setup(0x5, &(0x7f00000000c0)=0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x301400, 0x0) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x7, r4, &(0x7f0000000180)="aaed107d568e1bd9bc70b88c88c2954121047a8d275fa2b5fe4db541bdee19427d2fae2149d4f0d8c7ed8bea112d106bc408b8801c75d801a84329b7fef4b841fa3188b28e26c8681a3ef278aa16174c981b42462a4893730ab9153d05649b406e34ceb3f642aab885d2c0379d25d1b19f7a664b427aae341d211c61a27f5cadb7f0e838237c5df8c17c4501f3e4b1f4f83d8c7ddb6ea8ff3defe58a45741f0a4792a77cf79d83339f0c35b985197317c839e5d976f096e91ab300db9d842d5fcb", 0xc1, 0x7, 0x0, 0x2}]) lseek(r2, 0x100000000, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x6c) r6 = inotify_init1(0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, r2, &(0x7f0000000080)={r5, r6, 0x2}) fadvise64(r0, 0x1, 0xfff, 0x2) 21:48:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:48:12 executing program 3: r0 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r0, r1) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffa000/0x4000)=nil) keyctl$setperm(0x5, 0x0, 0x20) 21:48:12 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0}]) 21:48:12 executing program 6: ioperm(0x7fff, 0x1, 0x80000000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) 21:48:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) 21:48:12 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget(0x1, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 21:48:12 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='task\x00') pread64(r0, &(0x7f0000000000)=""/204, 0xcc, 0x4) lseek(r0, 0x100000000, 0x1) 21:48:12 executing program 7: r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 21:48:12 executing program 2: unshare(0x6000000) unshare(0x49000080) unshare(0x8000000) 21:48:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) 21:48:12 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) 21:48:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) r1 = epoll_create(0x1db0a946) fdatasync(r1) 21:48:12 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0}]) 21:48:12 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x4, 0x0, 0x20, 0xe9, 0x0, 0x1, 0x41001, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_bp={&(0x7f00000006c0), 0x9}, 0xc002, 0x4, 0x4, 0x0, 0x400000000000000, 0x0, 0x456, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x5, r1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x4) sendmmsg$unix(r2, &(0x7f0000005340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x228001) recvmmsg$unix(r3, &(0x7f0000000640)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f00000002c0)=""/185, 0xb9}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000500)=""/122, 0x7a}], 0x7, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x2040, &(0x7f0000000680)={0x0, 0x3938700}) 21:48:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') lseek(r0, 0x100000000, 0x1) 21:48:22 executing program 3: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000080)="a4", 0x1, r0) keyctl$link(0x8, 0x0, r0) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) shmdt(r1) 21:48:22 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x4, 0x0, 0x20, 0xe9, 0x0, 0x1, 0x41001, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_bp={&(0x7f00000006c0), 0x9}, 0xc002, 0x4, 0x4, 0x0, 0x400000000000000, 0x0, 0x456, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x5, r1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x4) sendmmsg$unix(r2, &(0x7f0000005340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x228001) recvmmsg$unix(r3, &(0x7f0000000640)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f00000002c0)=""/185, 0xb9}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000500)=""/122, 0x7a}], 0x7, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x2040, &(0x7f0000000680)={0x0, 0x3938700}) 21:48:22 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0}]) 21:48:22 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) 21:48:22 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x5, 0x3, 0x10, 0x700, 0xb6, "e44f6a815288051e49429f29431934df2d7d58b1f320528279919c4d7750677fb90d68efdfa0d6afbb5cd584c5a6cfca770fa7268b896c8ff230effc8e1b51eef4ed9cdea0e4e6bc2a98339870b47163534d8e264c9013d6b3b16e2929754ec764c37548f16c1ce3796eb187179d214b01dd86a2b535e045aba30d71e557d850bf0e86a29cd08dede8e98a7963a1383361f8daf1d81d719e3f8a14ac98b17570101a45436284e746cd42cdecc9210fccaefa1441babb"}, 0xbf, 0x3) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1) 21:48:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="a024030008021100000108021100000050505050505082"], 0x34) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) write(r0, &(0x7f0000000900)='^', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r1, 0x0, 0xfdef) 21:48:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) 21:48:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xc4, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x800, {0x8, 0x9, 0x9, 0x3f}}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x0, 0x2, 0x0, {0x6, 0x1f, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x8, 0xa0}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20000200, {0x4, 0x8, 0x50, 0x2}}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x43, 0x115, "3da81523f4195259c44b5dbc123376170b0b1fc33e40fe0b90b1d46570bb58b4792836ceb04f0f8b469e44ad9caaa9b8fa6f8de1f079b594d64082de97db3c"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x69fa}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) [ 408.345593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 21:48:22 executing program 7: dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "ee4d740a51349e24d4fc0207553ee739"}, 0x11, 0x7) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rf\x1d\xfbj'}}]}}) 21:48:23 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r1 = shmget(0x1, 0xe000, 0x1000, &(0x7f0000ff2000/0xe000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r0, 0xb) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_LOCK(r0, 0xb) 21:48:23 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 1) [ 408.469448] FAULT_INJECTION: forcing a failure. [ 408.469448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.470445] CPU: 0 UID: 0 PID: 5759 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 408.470461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 408.470468] Call Trace: [ 408.470473] [ 408.470477] dump_stack_lvl+0xfa/0x120 [ 408.470499] should_fail_ex+0x4d7/0x5e0 [ 408.470520] _copy_from_user+0x30/0xd0 [ 408.470533] io_submit_one+0x8e/0x1a90 [ 408.470548] ? perf_trace_lock+0xb5/0x5d0 [ 408.470567] ? __pfx_io_submit_one+0x10/0x10 [ 408.470581] ? lock_acquire+0x15e/0x2f0 [ 408.470594] ? __might_fault+0xe0/0x190 [ 408.470609] ? find_held_lock+0x2b/0x80 [ 408.470625] ? __might_fault+0x138/0x190 [ 408.470638] ? lock_release+0xc8/0x290 [ 408.470651] ? __might_fault+0xe0/0x190 [ 408.470667] __x64_sys_io_submit+0x182/0x2e0 [ 408.470681] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 408.470695] ? fput+0x6a/0x100 [ 408.470710] ? ksys_write+0x1a3/0x240 [ 408.470723] ? __pfx_ksys_write+0x10/0x10 [ 408.470739] do_syscall_64+0xbf/0x360 [ 408.470756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.470769] RIP: 0033:0x7f3246103b19 [ 408.470779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 408.470790] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 408.470802] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 408.470810] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 408.470817] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 408.470824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.470831] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 408.470848] [ 409.152238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.459556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.463868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 21:48:33 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 2) 21:48:33 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) read$char_usb(r0, &(0x7f0000000000)=""/117, 0x75) 21:48:33 executing program 7: dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "ee4d740a51349e24d4fc0207553ee739"}, 0x11, 0x7) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rf\x1d\xfbj'}}]}}) 21:48:33 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x96, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x100000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:48:33 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1f) r0 = shmget(0x3, 0x2000, 0x401, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) 21:48:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, 0x0, 0x8b) 21:48:33 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x25c, r0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1b7f7960}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xed}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff9d6}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x61, 0x3, "523f2b50d755300c455ee93eb678a154a36460ec6a999b208d1bdb35fabb0e5daa43ba30ed6806fea445b6cd0e296e20678d715951d3e8b6ee2027d27c5a7d924205733d9678646a34b8c1612a7b5c829188d071db9fefb3b01972701c"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "a889f9f165b4da806e295bcd1a7ddac9907fb527f60f9d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x40, 0x3, "a967229f368a7d257f30b55192691ed9f31c04e5fc9f3258a0590305e5e9ec96cd4091ed6b7a7568e0bdd8616b758be0318285386159e289198a17ad"}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x800}, 0x40000c4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="4dbfafe4914fe99afab91566d28bba", 0xf}], 0x1) 21:48:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000002a0a0000fcc6c27ec03ad97aa53ed8b302d105afc287ff2011581809ecaa288b50f023752ae8fede7b33715b0ac8a90aa4852fdcc19beccaaa73ae76b5044e55fb61c539947676391e103161caa643859e9056bcfa1aef1c79870026561fc325ab4077a8f2cb8b0cb5c737b800bab4430000e5b088e28af0fd4eeae6a6e022290f668095124e751c766d34434fda6ea4c00a9ede282622e4a6c0a088c3c66013f8bf3605bf7cb910d8778fe590e5638b92d908d18474da4371e72c599d5ca07d9b44fdf918634cc245003ef54cba586f13fe51371e6dbf6dc1"]) [ 419.369184] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 21:48:33 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@local, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0xfffd, 0x9, 0x0, 0x3, 0x80000a}) [ 419.399405] FAULT_INJECTION: forcing a failure. [ 419.399405] name failslab, interval 1, probability 0, space 0, times 0 [ 419.401099] CPU: 1 UID: 0 PID: 5791 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 419.401128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 419.401140] Call Trace: [ 419.401148] [ 419.401157] dump_stack_lvl+0xfa/0x120 [ 419.401193] should_fail_ex+0x4d7/0x5e0 [ 419.401230] ? io_submit_one+0xfa/0x1a90 [ 419.401252] should_failslab+0xc2/0x120 [ 419.401288] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 419.401332] io_submit_one+0xfa/0x1a90 [ 419.401358] ? perf_trace_lock+0xb5/0x5d0 [ 419.401391] ? __pfx_io_submit_one+0x10/0x10 [ 419.401417] ? lock_acquire+0x15e/0x2f0 [ 419.401440] ? __might_fault+0xe0/0x190 [ 419.401471] ? lock_release+0xc8/0x290 [ 419.401494] ? __might_fault+0xe0/0x190 [ 419.401524] __x64_sys_io_submit+0x182/0x2e0 [ 419.401551] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 419.401574] ? fput+0x6a/0x100 [ 419.401599] ? ksys_write+0x1a3/0x240 [ 419.401617] ? __pfx_ksys_write+0x10/0x10 [ 419.401648] do_syscall_64+0xbf/0x360 [ 419.401679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.401701] RIP: 0033:0x7f3246103b19 [ 419.401718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 419.401739] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 419.401760] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 419.401774] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 419.401787] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 419.401800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.401813] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 419.401844] 21:48:34 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) 21:48:34 executing program 6: clock_gettime(0x0, &(0x7f0000002e80)) semtimedop(0x0, &(0x7f00000032c0)=[{0x0, 0x40, 0x800}, {0x3, 0x20}, {0x3, 0x100, 0x1800}, {0x0, 0x3f, 0x800}, {0x3, 0x9, 0x1000}, {0x4, 0x9, 0x1800}, {0x3, 0xe6}], 0x7, &(0x7f0000003300)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000300)=""/177, 0xb1}, {&(0x7f00000003c0)=""/151, 0x97}, {&(0x7f0000000480)=""/218, 0xda}, {&(0x7f0000000580)=""/191, 0xbf}], 0x5}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)=""/184, 0xb8}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000140)=""/10, 0xa}], 0x3, &(0x7f00000017c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/182, 0xb6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001a00)=""/139, 0x8b}, {&(0x7f0000001ac0)=""/43, 0x2b}, {&(0x7f0000001b00)=""/64, 0x40}, {&(0x7f0000001b40)=""/67, 0x43}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/118, 0x76}, {&(0x7f0000002c40)=""/122, 0x7a}], 0x7, &(0x7f0000002d40)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x4, 0x100, &(0x7f0000002ec0)) r3 = syz_open_procfs(r0, &(0x7f0000002f00)='timerslack_ns\x00') lseek(r3, 0x100000000, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xcf63}}, './file0\x00'}) write$char_usb(r4, &(0x7f0000000040)="8f12f0ffc432dcbab545c658a7fe5529ea1d5f4ed1a84477208b7930b6c110cdbf542f89c3701d1747a8cd41be1a4ee094b10ff24558cd6a1f8d2e44824b450a0e855d7b6b15643b2da3d2f53dd3749543592cc43a048b0987a1ae3878f58977949cbaeae2e5266b233eb4dbf27d7c2d81b9a11470ea84c9fe5905e9ea329c1420988616e46e6432da6f67ced61a971c04ae0030f677dddfcf8b2388d2a4274c41f6dc8fe76f7be8542e8877df837f60fe0a42494fda91d0125edb27a1099cb3665208ed17f7bbdef5b0a9", 0xcb) clone3(&(0x7f0000003240)={0x18000, &(0x7f0000000180), &(0x7f0000002fc0), &(0x7f0000003000), {0x81}, &(0x7f0000003040)=""/228, 0xe4, &(0x7f0000003140)=""/189, &(0x7f0000003200)=[r2], 0x1, {r1}}, 0x58) read(r4, &(0x7f0000002bc0)=""/89, 0x59) 21:48:34 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3}]}}, {{}, {}, {}, {0x8, 0x88be, 0x4}}}}}}, 0x0) 21:48:34 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 3) 21:48:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, 0x0, 0x8b) 21:48:34 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 21:48:34 executing program 4: uname(&(0x7f0000000180)=""/111) uname(&(0x7f0000000000)=""/31) 21:48:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e347d97b50c0ddec5514020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000021000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:48:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, 0x0, 0x8b) 21:48:43 executing program 3: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff4000/0x4000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmdt(r0) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r2) shmdt(r2) mbind(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000), 0x9b5c, 0x5) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe) 21:48:43 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 4) 21:48:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x40012, r0, 0xb2d6c000) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @multicast}, 0x20, {0x2, 0x4e21, @multicast1}, 'veth1_to_team\x00'}) lseek(r0, 0x100000000, 0x1) 21:48:43 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x40181, 0x0) pwrite64(r0, &(0x7f0000000080)='\n', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)) lseek(r1, 0x100000000, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0xfffffbff, 0x40, "7c00b155b81c657e526a39d5baab389635c27088367ab96b3b8557c5f6814618aea0a71f8ff50434535d81891e44e5ae2da72d15fba0039d9c0ed2a78e73f089"}}) r2 = signalfd(r0, &(0x7f0000000180)={[0x2]}, 0x8) ppoll(&(0x7f00000001c0)=[{r1, 0x4200}, {r0, 0x2080}, {r1, 0x608}, {r2, 0x1430}, {r0}, {r0, 0x40}, {r0, 0x200}], 0x7, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x8) 21:48:43 executing program 7: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x104, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="06000000", @ANYRES16=r2, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r3, @ANYBLOB="0a006200ffffffffffff007f0009a5"], 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x11c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x44000012}, 0x400c000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a318bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa48219ae32b02c471116ad513de35eae336ac4983"], 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x104, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xd4, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@generic={0x44, 0x4, "c7e8"}]}}, @timestamp}}}}, 0x0) 21:48:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000005840)=[0x0], 0x1}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/sctp\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 21:48:43 executing program 2: fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r3, r4) inotify_rm_watch(r2, r4) mknodat$null(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2000, 0x103) setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={'0000000000000000000000000000000', 0x33}, 0x20, 0x0) 21:48:43 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 5) 21:48:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) 21:48:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300489830ddf23be, 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfffffdef) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x463a, 0x4000) writev(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="124bcef52ae70e62c5d0b6f1f06f71a549e9c40383ecf792e5f6a215cfb413b1e5c3571b9bf643b3be1a373dad3931ff75356b502d106c6f249ae80cde17cb50730d18500f134bf3f1e781ab98cf484615c24aed15fde3a0a8069e040a5f512c618ea269c1ca573fc2f9a0a1190b12db5fc98eaaa8ca137294a962e20cbc51a0f05d503a10f45e4fad29390cba9f5dc099f1115ade8904823c3e5f72b63b22d97ed0056e8dde0f5d4778d34a379f2d8b99778e2cd53cdada72324ab17b3b76ccd884532b5420a2cc831037ae3cfe12aa8d259d", 0xd3}, {&(0x7f00000002c0)="53c963e8bdb439a0394af89278ef913a5faa789229ae555f2a69c0f1cb78a5cf16ba9721a6d36bf2676d91f071464a626b72539955d4fc5630fcc45f11d82714b045efe0ff97506a421a508f1693793fb4c509f962715ca2d31063f6b2ed742e8d21df006f56e95e28d5c6916cef1808dec49178ebb86bf182b6b6446247eb10172e1f2f21ae136e6f43ebea49f0229ee1a3d4e8829eb660186d91dfe00ca297840377592f6212a2418c94cb0514016ec194b8ac58038a2b4b47a425b1adbc9a13a3355b56e139cf9bfdc3368d1f2d85187873c663895db98e8a16eaae43e31ad314b38f", 0xe4}, {&(0x7f00000000c0)="0898fe2ccbbb726f917495f38e043cec3e664d030261862170a37c555d3aab39c0ca4bafd6b0fce05b8755", 0x2b}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="8f69f54b9680633cc1318f86e4dec493dcecb22467d1db6d4c1742ea2629f817d3a89252196c153a3068786c4703cb967ecbb58628a30b46eb77d3fdf566f686ee77493fa4fa4d295d74f889ed600d0693247a43c5f0750f4fb3811461ab9607d68b958f47bf4fd948caf731808063e700874e049061025723c30183abe78059afa3e814714689f5135e61a1de4062bdfe6d717c609e64484344670b91df39c0fce95bf426da", 0xa6}, {&(0x7f0000000640)="d66fa990072a438c05803bc41968482fef333b0233705e1b5924289d0b3203b60461d1d835ad34ac651a5d20c5029b09ff4640feb4faa901b081ce011c77cff9c5f507913ed1ef3db644a8e5ca79c3cdcf78d2fe18bcb69759fb3c4586837c5c01f90b8e23f6abfd70a2c5e694439acae05e159e5c528af6664a6cb3f1e8c51b90fa5cbd3add87046bd49aeb1899e1f5a3d70ae1dcf75a9abbb8f3ec76a60da7719944a072bc53c19ab00909efaa23da5955541142dd87027d6873a063381dc45bca4dc500abf4628977760c0a628b7d7837208ae5b37d224a39253753f94ed600169bf6", 0xe4}, {&(0x7f0000000740)="66f03538d47505795bb9f8f84afc16d1fea2fa17f9de7528381c45682a068b16012c05b1830e57c746454034755660de279f2f74ac2ccae5ff502fa867c28d3f4ad99a6ded330db8", 0x48}, {&(0x7f0000000100)="5b43b5348354be839e71d8f1b289d6dc6071c54d72a853034bdfff4d61cb75c7db51d55b81851953884a9c8d79de00f3e7b1", 0x32}], 0x8) 21:48:43 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xe000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000) 21:48:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6aff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) clone3(&(0x7f0000001640)={0x30000000, &(0x7f0000000480), 0x0, 0x0, {0x33}, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x0}, 0x58) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) fcntl$getown(r5, 0x9) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x7f, 0x9, 0x1, 0x1, 0x0, 0x7, 0x1, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x40, 0xa6b}, 0x0, 0x0, 0x0, 0x9, 0x5, 0x5, 0x2, 0x0, 0x7fff, 0x0, 0xd4}, 0x0, 0x7, r4, 0x8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xb) sendfile(r0, r1, 0x0, 0x68e146a1) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"2aced23a738cfb3df892df78e895be09", 0x0, 0x0, {0x74aa, 0x1}, {0x5, 0x6}, 0x30, [0x10001, 0x4, 0x2, 0x9, 0xfb, 0x1, 0x401, 0x1, 0x8, 0x7e, 0x6, 0x2, 0x0, 0x5, 0x4, 0x5]}) 21:48:43 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 6) 21:48:43 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200, 0x0, 0x14}, 0x18) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r3 = fcntl$dupfd(r2, 0x0, r1) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x4, &(0x7f0000001480)=[{0x0}], 0x1) mmap$binder(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x95e) 21:48:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x80000) syncfs(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) fcntl$setlease(r2, 0x400, 0x2) 21:48:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000005840)=[0x0], 0x1}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/sctp\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 21:48:43 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 7) 21:48:43 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x3000) shmdt(r0) 21:48:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 1) 21:48:43 executing program 6: r0 = fcntl$getown(0xffffffffffffffff, 0x9) recvmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000080), 0x6e, &(0x7f0000002300)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000002240)=""/139, 0x8b}], 0x6, &(0x7f0000002380)=[@cred={{0x1c}}], 0x20}, 0x40012040) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/icmp\x00') lseek(r1, 0x100000000, 0x1) 21:48:44 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 8) [ 429.417917] FAULT_INJECTION: forcing a failure. [ 429.417917] name failslab, interval 1, probability 0, space 0, times 0 [ 429.420174] CPU: 1 UID: 0 PID: 5888 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 429.420203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 429.420216] Call Trace: [ 429.420224] [ 429.420232] dump_stack_lvl+0xfa/0x120 [ 429.420267] should_fail_ex+0x4d7/0x5e0 [ 429.420304] ? jbd2__journal_start+0x193/0x6b0 [ 429.420332] should_failslab+0xc2/0x120 [ 429.420356] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 429.420390] ? lock_is_held_type+0x9e/0x120 [ 429.420424] jbd2__journal_start+0x193/0x6b0 [ 429.420458] __ext4_journal_start_sb+0x325/0x5d0 [ 429.420481] ? ext4_dirty_inode+0xa5/0x130 [ 429.420511] ext4_dirty_inode+0xa5/0x130 [ 429.420535] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 429.420558] __mark_inode_dirty+0x1b7/0xd20 [ 429.420587] generic_update_time+0xcb/0xf0 [ 429.420613] file_modified+0x1f0/0x230 [ 429.420639] ext4_file_write_iter+0x1128/0x1990 [ 429.420686] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 429.420718] ? ksys_write+0x121/0x240 [ 429.420744] ? lock_is_held_type+0x9e/0x120 [ 429.420775] vfs_write+0xbe9/0x10c0 [ 429.420796] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 429.420832] ? __pfx_vfs_write+0x10/0x10 [ 429.420878] ksys_write+0x121/0x240 [ 429.420897] ? __pfx_ksys_write+0x10/0x10 [ 429.420929] do_syscall_64+0xbf/0x360 [ 429.420968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.420991] RIP: 0033:0x7fc68e2fdb19 [ 429.421007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 429.421027] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.421048] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 429.421063] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 429.421075] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 429.421088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.421101] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 429.421134] 21:48:44 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r2) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000880)={0x0, 0x584, &(0x7f0000000840)={&(0x7f0000000800)={0x32, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x8}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}}, 0x0) 21:48:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000000)={0x0, 0x3, 0x401}) lseek(r0, 0x100000000, 0x1) [ 429.562133] FAULT_INJECTION: forcing a failure. [ 429.562133] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 429.564372] CPU: 0 UID: 0 PID: 5893 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 429.564403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 429.564417] Call Trace: [ 429.564424] [ 429.564433] dump_stack_lvl+0xfa/0x120 [ 429.564472] should_fail_ex+0x4d7/0x5e0 [ 429.564513] should_fail_alloc_page+0xe0/0x110 [ 429.564542] prepare_alloc_pages+0x1af/0x500 [ 429.564577] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 429.564612] ? lock_release+0xc8/0x290 [ 429.564650] ? perf_trace_lock+0xb5/0x5d0 [ 429.564679] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 429.564727] ? perf_trace_lock+0xb5/0x5d0 [ 429.564751] ? __lock_acquire+0xc65/0x1b70 [ 429.564780] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 429.564811] ? policy_nodemask+0xeb/0x4e0 [ 429.564847] alloc_pages_mpol+0xed/0x340 [ 429.564879] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 429.564913] ? __pfx_perf_trace_lock+0x10/0x10 [ 429.564939] ? get_vma_policy+0x23b/0x350 [ 429.564984] vma_alloc_folio_noprof+0xe9/0x440 [ 429.565019] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 429.565052] ? find_held_lock+0x2b/0x80 [ 429.565085] ? __handle_mm_fault+0x7ed/0x30f0 [ 429.565118] ? lock_release+0xc8/0x290 [ 429.565148] __handle_mm_fault+0x142c/0x30f0 [ 429.565186] ? __pfx_perf_trace_lock+0x10/0x10 [ 429.565213] ? __pfx___handle_mm_fault+0x10/0x10 [ 429.565247] ? __pte_offset_map_lock+0x190/0x330 [ 429.565288] ? no_page_table+0xc7/0x220 [ 429.565321] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 429.565365] handle_mm_fault+0x2c3/0x900 [ 429.565418] __get_user_pages+0x58a/0x2f10 [ 429.565471] ? down_read_killable+0x1d4/0x4f0 [ 429.565507] ? __pfx___get_user_pages+0x10/0x10 [ 429.565548] ? __pfx_perf_trace_lock+0x10/0x10 [ 429.565579] __gup_longterm_locked+0xba7/0x1760 [ 429.565600] ? perf_trace_lock+0x1/0x5d0 [ 429.565624] ? try_get_folio+0xf1/0x730 [ 429.565662] ? lock_release+0xc8/0x290 [ 429.565688] ? __pfx___gup_longterm_locked+0x10/0x10 [ 429.565712] ? try_get_folio+0x235/0x730 [ 429.565747] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 429.565792] gup_fast_fallback+0x84e/0x2500 [ 429.565841] ? __pfx_gup_fast_fallback+0x10/0x10 [ 429.565867] ? kernel_text_address+0x5b/0xc0 [ 429.565893] ? __kernel_text_address+0xd/0x40 [ 429.565917] ? unwind_get_return_address+0x59/0xa0 [ 429.565951] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 429.565981] ? arch_stack_walk+0x9c/0xf0 [ 429.566009] pin_user_pages_fast+0xa7/0x100 [ 429.566031] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 429.566064] iov_iter_extract_pages+0x84d/0x1e00 [ 429.566097] ? lock_acquire+0x15e/0x2f0 [ 429.566123] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 429.566145] ? find_held_lock+0x2b/0x80 [ 429.566178] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 429.566205] ? __pfx_perf_trace_lock+0x10/0x10 [ 429.566237] ? bio_associate_blkg_from_css+0x508/0x1380 [ 429.566267] bio_iov_iter_get_pages+0x351/0xf90 [ 429.566297] ? bio_associate_blkg+0x139/0x2a0 [ 429.566321] ? lock_release+0xc8/0x290 [ 429.566351] ? bio_associate_blkg+0x143/0x2a0 [ 429.566385] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 429.566417] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 429.566442] ? __pfx_perf_trace_lock+0x10/0x10 [ 429.566472] ? iov_iter_is_aligned+0xf2/0x5a0 [ 429.566505] ? iov_iter_npages+0xfe/0x520 [ 429.566543] blkdev_direct_IO+0x753/0x1e70 [ 429.566575] ? __is_insn_slot_addr+0x140/0x290 [ 429.566615] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 429.566635] ? __kernel_text_address+0xd/0x40 [ 429.566659] ? unwind_get_return_address+0x59/0xa0 [ 429.566692] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 429.566720] ? arch_stack_walk+0x9c/0xf0 [ 429.566746] ? avc_policy_seqno+0x9/0x20 [ 429.566777] ? selinux_file_permission+0x99/0x600 [ 429.566809] blkdev_read_iter+0x27f/0x510 [ 429.566837] aio_read+0x2a3/0x450 [ 429.566862] ? __pfx_aio_read+0x10/0x10 [ 429.566886] ? perf_trace_lock+0xb5/0x5d0 [ 429.566917] ? __pfx_perf_trace_lock+0x10/0x10 [ 429.566949] ? lock_acquire+0x15e/0x2f0 [ 429.566973] ? __might_fault+0xe0/0x190 [ 429.566999] ? find_held_lock+0x2b/0x80 [ 429.567032] ? __might_fault+0x138/0x190 [ 429.567058] ? lock_release+0xc8/0x290 [ 429.567084] ? __might_fault+0xe0/0x190 [ 429.567116] io_submit_one+0x5a7/0x1a90 [ 429.567152] ? __pfx_io_submit_one+0x10/0x10 [ 429.567180] ? lock_acquire+0x15e/0x2f0 [ 429.567204] ? __might_fault+0xe0/0x190 [ 429.567235] ? lock_release+0xc8/0x290 [ 429.567261] ? __might_fault+0xe0/0x190 [ 429.567293] __x64_sys_io_submit+0x182/0x2e0 [ 429.567321] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 429.567346] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 429.567386] ? ksys_write+0x1a3/0x240 [ 429.567407] ? __pfx_ksys_write+0x10/0x10 [ 429.567440] do_syscall_64+0xbf/0x360 [ 429.567473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.567497] RIP: 0033:0x7f3246103b19 [ 429.567514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 429.567536] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 429.567558] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 429.567574] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 429.567588] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 429.567602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.567615] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 429.567649] [ 429.647807] Zero length message leads to an empty skb 21:48:44 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:48:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = eventfd2(0x7, 0x1) fcntl$setlease(r1, 0x400, 0x0) lseek(r0, 0x100000000, 0x1) 21:48:53 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 9) 21:48:53 executing program 7: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x150) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) truncate(&(0x7f0000000080)='./file0\x00', 0xffff) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 21:48:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 2) 21:48:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000e, 0x80012, r1, 0x7e28c000) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 21:48:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0x100000000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') close(r1) fsync(r0) syz_open_dev$vcsu(&(0x7f0000000000), 0xb0, 0x1a000) lseek(r1, 0x100000000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYBLOB="080000000000000005000000000000000703ef00000000000000000001000000060000000000000007000000000000000400000004000000d40000000500000040000000000000000004000000000000ff7f000000000000020000000000000020000000000000000000000000000000000000000000090000000000000000000000000000000000b6205a8f718f0f178ee61833aabdcc36a78270a936bf97a3680b5cf7d7eec918e91e19dc4bde8aa555156973bc4c24066ab2c052f3ed4f78456f48e11be14b6eaa6c0a462bfbe0304ba2dadaeb96bf9e768447f6f18946967649444116fb1111de28d71057f4374cddaa410000000000"]) read(r1, &(0x7f0000000180)=""/143, 0x8f) 21:48:53 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) 21:48:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x6aff, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) clone3(&(0x7f0000001640)={0x30000000, &(0x7f0000000480), 0x0, 0x0, {0x33}, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x0}, 0x58) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) fcntl$getown(r5, 0x9) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x7f, 0x9, 0x1, 0x1, 0x0, 0x7, 0x1, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x40, 0xa6b}, 0x0, 0x0, 0x0, 0x9, 0x5, 0x5, 0x2, 0x0, 0x7fff, 0x0, 0xd4}, 0x0, 0x7, r4, 0x8) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xb) sendfile(r0, r1, 0x0, 0x68e146a1) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"2aced23a738cfb3df892df78e895be09", 0x0, 0x0, {0x74aa, 0x1}, {0x5, 0x6}, 0x30, [0x10001, 0x4, 0x2, 0x9, 0xfb, 0x1, 0x401, 0x1, 0x8, 0x7e, 0x6, 0x2, 0x0, 0x5, 0x4, 0x5]}) 21:48:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x98100, 0x1ff) close(r0) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) execveat(r1, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)=',@&\xdd\x00', &(0x7f0000000140)='$^+*\x00', &(0x7f0000000180)='@./!&,/@$\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='$^+*\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='(\x00', &(0x7f00000002c0)='&+{\x00', &(0x7f0000000300)='\']!.\x00', &(0x7f0000000340)='&*,-,\x00', &(0x7f0000000380)=',#*\x00', &(0x7f00000003c0)='\x00'], 0x800) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000540)=[&(0x7f0000000480)='$^+*\x00', &(0x7f0000000500)=',#*\x00'], 0x0) 21:48:53 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0xa87e, 0x9, 0x2) 21:48:53 executing program 5: mlockall(0x0) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r0, 0x3a, &(0x7f0000000000)) io_destroy(r0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) io_pgetevents(r0, 0xc1, 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000140)={r1, r2+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0xffffffff, 0x0) [ 438.596507] FAULT_INJECTION: forcing a failure. [ 438.596507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.598505] CPU: 1 UID: 0 PID: 5940 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 438.598539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 438.598554] Call Trace: [ 438.598562] [ 438.598571] dump_stack_lvl+0xfa/0x120 [ 438.598609] should_fail_ex+0x4d7/0x5e0 [ 438.598652] should_fail_alloc_page+0xe0/0x110 [ 438.598683] prepare_alloc_pages+0x1af/0x500 [ 438.598719] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 438.598757] ? lock_release+0xc8/0x290 [ 438.598797] ? perf_trace_lock+0xb5/0x5d0 [ 438.598827] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 438.598877] ? __lock_acquire+0xc65/0x1b70 [ 438.598912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 438.598953] ? policy_nodemask+0xeb/0x4e0 [ 438.598991] alloc_pages_mpol+0xed/0x340 [ 438.599025] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 438.599062] ? __pfx_perf_trace_lock+0x10/0x10 [ 438.599089] ? get_vma_policy+0x23b/0x350 [ 438.599130] vma_alloc_folio_noprof+0xe9/0x440 [ 438.599167] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 438.599203] ? find_held_lock+0x2b/0x80 [ 438.599238] ? __handle_mm_fault+0x7ed/0x30f0 [ 438.599274] ? lock_release+0xc8/0x290 [ 438.599307] __handle_mm_fault+0x142c/0x30f0 [ 438.599348] ? __pfx_perf_trace_lock+0x10/0x10 [ 438.599377] ? __pfx___handle_mm_fault+0x10/0x10 [ 438.599413] ? __pte_offset_map_lock+0x190/0x330 [ 438.599457] ? no_page_table+0xc7/0x220 [ 438.599492] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 438.599540] handle_mm_fault+0x2c3/0x900 [ 438.599584] __get_user_pages+0x58a/0x2f10 [ 438.599641] ? down_read_killable+0x1d4/0x4f0 [ 438.599679] ? __pfx___get_user_pages+0x10/0x10 [ 438.599723] ? __pfx_perf_trace_lock+0x10/0x10 [ 438.599756] __gup_longterm_locked+0xba7/0x1760 [ 438.599779] ? perf_trace_lock+0x1/0x5d0 [ 438.599805] ? try_get_folio+0xf1/0x730 [ 438.599846] ? lock_release+0xc8/0x290 [ 438.599873] ? __pfx___gup_longterm_locked+0x10/0x10 [ 438.599900] ? try_get_folio+0x235/0x730 [ 438.599938] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 438.599986] gup_fast_fallback+0x84e/0x2500 [ 438.600039] ? __pfx_gup_fast_fallback+0x10/0x10 [ 438.600068] ? kernel_text_address+0x5b/0xc0 [ 438.600096] ? __kernel_text_address+0xd/0x40 [ 438.600121] ? unwind_get_return_address+0x59/0xa0 [ 438.600158] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 438.600190] ? arch_stack_walk+0x9c/0xf0 [ 438.600220] pin_user_pages_fast+0xa7/0x100 [ 438.600243] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 438.600279] iov_iter_extract_pages+0x84d/0x1e00 [ 438.600314] ? lock_acquire+0x15e/0x2f0 [ 438.600342] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 438.600367] ? find_held_lock+0x2b/0x80 [ 438.600402] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 438.600431] ? __pfx_perf_trace_lock+0x10/0x10 [ 438.600465] ? bio_associate_blkg_from_css+0x508/0x1380 [ 438.600497] bio_iov_iter_get_pages+0x351/0xf90 [ 438.600529] ? bio_associate_blkg+0x139/0x2a0 [ 438.600555] ? lock_release+0xc8/0x290 [ 438.600587] ? bio_associate_blkg+0x143/0x2a0 [ 438.600624] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 438.600657] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 438.600685] ? __pfx_perf_trace_lock+0x10/0x10 [ 438.600717] ? iov_iter_is_aligned+0xf2/0x5a0 [ 438.600754] ? iov_iter_npages+0xfe/0x520 [ 438.600795] blkdev_direct_IO+0x753/0x1e70 [ 438.600830] ? __is_insn_slot_addr+0x140/0x290 [ 438.600871] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 438.600894] ? __kernel_text_address+0xd/0x40 [ 438.600919] ? unwind_get_return_address+0x59/0xa0 [ 438.600954] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 438.600985] ? arch_stack_walk+0x9c/0xf0 [ 438.601013] ? avc_policy_seqno+0x9/0x20 [ 438.601046] ? selinux_file_permission+0x99/0x600 [ 438.601080] blkdev_read_iter+0x27f/0x510 [ 438.601111] aio_read+0x2a3/0x450 [ 438.601138] ? __pfx_aio_read+0x10/0x10 [ 438.601163] ? perf_trace_lock+0xb5/0x5d0 [ 438.601197] ? __pfx_perf_trace_lock+0x10/0x10 [ 438.601231] ? lock_acquire+0x15e/0x2f0 [ 438.601257] ? __might_fault+0xe0/0x190 [ 438.601286] ? find_held_lock+0x2b/0x80 [ 438.601321] ? __might_fault+0x138/0x190 [ 438.601349] ? lock_release+0xc8/0x290 [ 438.601377] ? __might_fault+0xe0/0x190 [ 438.601412] io_submit_one+0x5a7/0x1a90 [ 438.601450] ? __pfx_io_submit_one+0x10/0x10 [ 438.601495] ? lock_acquire+0x15e/0x2f0 [ 438.601521] ? __might_fault+0xe0/0x190 [ 438.601555] ? lock_release+0xc8/0x290 [ 438.601583] ? __might_fault+0xe0/0x190 [ 438.601617] __x64_sys_io_submit+0x182/0x2e0 [ 438.601648] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 438.601674] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 438.601718] ? ksys_write+0x1a3/0x240 [ 438.601741] ? __pfx_ksys_write+0x10/0x10 [ 438.601776] do_syscall_64+0xbf/0x360 [ 438.601812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.601837] RIP: 0033:0x7f3246103b19 [ 438.601856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 438.601879] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 438.601903] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 438.601919] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 438.601935] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 438.601950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.601964] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 438.602000] 21:48:53 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x7d32c300, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd57}, 0x58) 21:48:53 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:48:53 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x9) madvise(&(0x7f0000870000/0x4000)=nil, 0x4000, 0x17) mremap(&(0x7f0000871000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) r1 = fsmount(r0, 0x0, 0x70) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000872000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/220, 0xdc, 0x0, &(0x7f0000000100)=""/126, 0x7e}, &(0x7f00000001c0)=0x40) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 21:48:53 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0), 0x3, 0x0, 0x0, 0x40}, 0x4014) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 21:48:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 3) 21:48:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x3) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x1) [ 438.909977] FAULT_INJECTION: forcing a failure. [ 438.909977] name failslab, interval 1, probability 0, space 0, times 0 [ 438.911768] CPU: 1 UID: 0 PID: 5965 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 438.911804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 438.911821] Call Trace: [ 438.911831] [ 438.911843] dump_stack_lvl+0xfa/0x120 [ 438.911887] should_fail_ex+0x4d7/0x5e0 [ 438.911936] ? jbd2__journal_start+0x193/0x6b0 [ 438.911978] should_failslab+0xc2/0x120 [ 438.912004] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 438.912038] ? lock_is_held_type+0x9e/0x120 [ 438.912074] jbd2__journal_start+0x193/0x6b0 [ 438.912112] __ext4_journal_start_sb+0x325/0x5d0 [ 438.912138] ? ext4_file_write_iter+0xd74/0x1990 [ 438.912179] ext4_file_write_iter+0xd74/0x1990 [ 438.912230] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 438.912265] ? ksys_write+0x121/0x240 [ 438.912292] ? lock_is_held_type+0x9e/0x120 [ 438.912325] vfs_write+0xbe9/0x10c0 [ 438.912348] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 438.912387] ? __pfx_vfs_write+0x10/0x10 [ 438.912435] ksys_write+0x121/0x240 [ 438.912456] ? __pfx_ksys_write+0x10/0x10 [ 438.912490] do_syscall_64+0xbf/0x360 [ 438.912524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.912547] RIP: 0033:0x7fc68e2fdb19 [ 438.912565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 438.912587] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.912609] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 438.912625] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 438.912639] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 438.912652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.912666] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 438.912701] 21:49:04 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 10) 21:49:04 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0), 0x3, 0x0, 0x0, 0x40}, 0x4014) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x1a, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0) 21:49:04 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x7, 0x6, &(0x7f0000001540)=[{&(0x7f00000001c0)="0fe60a52ca96b9b6158e727665f080f030236eb8c28e3e56fd91456f46c9fed7ac301d425a2eb0b5", 0x28, 0x332}, {&(0x7f0000000200)="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", 0x1000, 0x1cc0000000000000}, {&(0x7f0000001200)="96ba2dbca32f6c8f94e086f3adeedeccbe9b1069dee46d1eac9ffa5d1a1021d1d524cfea5ae252d8757f119f1491b410dab2aa1a71cf5daafa456a4c7cc0aa6cd994046c886e54d3ec9907d1cd007aa2d8c4fc6cf24c8bed95b74302255c975f4c98fff634d806cad0b5f139525348a7fab05118420f23bf4e14efb7b5700d2a3010c6121540b88f8d81c846f84ee117d5afd2af8c2182a0d426d0c5ce78dc9f9968d008d8ba205b2b7a82b3392b6c34e9e03b77aa79ab0bf6791e9e0e9e68dd834e", 0xc2, 0xffffffff}, {&(0x7f0000001300)="c87665600c41f511c0f541cd219c", 0xe, 0x6}, {&(0x7f0000001340)="6a379363653ed412a274a32e5e168809909b0d34e7605a57caa66d9fbd3128c9ad4cf3c3346772307c46935f1d0042df0d10cbf2fcb617d0008c9547e59fc824c87a583087a841c89451ec4b56af01a525e65b7f88ca5dbf4097595b5c30015b20bbbb619ef911f81511ae58276380836962ccae9592d3cf2517cae649b14dfc14d8952ede55a4e53816e2503c629b0aa1a8a79e53eb328cd4404310435868bc3709c9fc5b209014ffa483a35cff55a3547bfbfd2885b6da1fecd2878e86e32a8df7fa99e41e8c42b0ad4e542dd9a0e1ea6059abea2605451ef18b3e00ac22c8f8c1e2", 0xe3, 0x4}, {&(0x7f0000001480)="4e0c16ce921333994693b5b9438ec541aa90e9381b3f19abfe030409d983704ea2176a9c301eb6d8643ce3196b756782b56fd1f6b3136b51b19497491396948652d42909334295b629b92877f143e17395c3897d6c98bf4f25f0f22de1ed625f954700fe3ef3afdda678c1bd366aeed9a2d278b3959ad66349781707889390036d63c2cbb0ac6e23375c96c0ede301996624211626173d97", 0x98, 0x14}], 0x5000, &(0x7f0000001600)=ANY=[@ANYBLOB='nr_inodes=\x005-,mode=00000000000000000000777,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',mpol=local,gid=', @ANYRESHEX, @ANYBLOB="2c7369ff653d3936396d35382c736d61636b66737472616e736d7574653d5e5bdd2f273a237d2c646f8c005f6d6561737572652c7569643c", @ANYRESDEC=0x0, @ANYBLOB=',dont_appraise,smackfstransmute=).{,dont_appraise,\x00']) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x86954e74afb6f202, 0x10, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, 0x0, 0x2) r2 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xc, 0x0, r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) getpid() syz_io_uring_submit(r0, r1, &(0x7f0000001b80)=@IORING_OP_WRITEV={0x2, 0x3, 0x6000, @fd_index=0xa, 0xbf4, &(0x7f0000001b00)=[{&(0x7f0000001700)="7b61bac3d4cc31acd81f76a5d7474b7835ddee5cb7d1664c36faf072f3b0b65f2b199ae92b715b906ef29f6d6039c7da54f6e336b0946a0787ffac798b7a539748991e50256ac5ef2f8264d8787b37f13a125e316870faa9bec61265bf33c59e03725fa3880c046fb59ca8d7447a324aebf7e6aad4f100c2ddba29a86346eb324aec61a23e777efcb679e955cf71133aa17bc3232f5927030f511e25f55c46af4b7a", 0xa2}, {&(0x7f00000017c0)="ea8569178e565ea00b69acbf876f702b6302a666c09eedd7fad48319e80f35178b8cc0ce9a2cb9a1019218a9f9bcc6e1314e90ef93fc4f513a6eac9e429219481aa91d852c59d814fe776912ab6ad14cab6e92c56fbf61681ecd12ebeaafab93f2ee4fd5e0fd905384e485a2cd8d474eb27e8bd0fbc30d4966605d425e0843c95e38473f0a0764915b71dbbd4800c5771f3c5a8e56955f2709f9583eb80254ad8fcdb8e1210921ec40bcac0372812a51d3142e114eb2c404951b06179b", 0xbd}, {&(0x7f0000001880)="2a353058b7f56d24ffa4f77e6ea392f047343b4bd2b58f2e5ca0c9561792e12f9bc464a6213fc2684d9ed7d5f2514f1be8f2095e30296be8dd7430a11b11cf8af95b278d19de080813ffc90b4af3236a6c4f631a768498cde8d12458f94ac17a160ef1d789c31c40237c4c7302ae2bad0bc41b8d1a", 0x75}, {&(0x7f0000001900)="fd0ee9b60ba1cd30fcd83174e89a71abacd4a9940a06ff03eff96eaf133630ee4ee9f21ef0e80ff3ac90eb500812a3e5b0a1881dd03e1b7f31d022751d184fae9108204737f37e6cfbd4bb9b13f360a10ab79249b8dd3b4db0723d9f9695b8c520e7e5e4d87bb2e409edd3279581ccd711580e519a6cc79aa526c76dd73143118f", 0x81}, {&(0x7f00000019c0)="bd3655f68280ec4d87f3890c4f", 0xd}, {&(0x7f0000001a00)="05f8fc80db776c2b4829e91dda5ecf101958ce034cd8a22eea4016c8f537f4c0394d43769aa24c63529aca3cbce5e770f34277b9e1d8218bc209a1e61fceaf42004d7a4084a21aeea07e9e3bceb1033b6bee7c2f6fdb0400c34ec9130033bd1c3ea41eb37bd9ecab013126632c55c638d4a5eda22c087b95766f94349537af657a2fd12658ffe883930d90cdf25b1f233a5ac4e9885910fd0671d73c58faa97a8e601372f552f7abeff5ea9db934bb712d0656a60bf29fbda2d6b95040aab11a04fed4afba8bc44f9863449b0fb755d4dbd22556f6cef86af96fa9b63c89fa904fa9c85e", 0xe4}], 0x6, 0x4, 0x0, {0x2, r3}}, 0x100) msgsnd(0x0, &(0x7f0000001440)={0x3}, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000001bc0)=r5, 0x1) r6 = msgget$private(0x0, 0x29) msgctl$MSG_STAT_ANY(r6, 0xd, &(0x7f0000000080)=""/222) 21:49:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 4) 21:49:04 executing program 7: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') setns(r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') 21:49:04 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) lseek(r1, 0xffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$KDSKBLED(r2, 0x4b65, 0xffffffffffff73d2) 21:49:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x2a9a2cb922cae65f, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8801}, 0x20000004) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:49:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40003, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x16, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x21, 0x8ea, 0x73}, 0x2c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) creat(&(0x7f0000000080)='./file0\x00', 0x2) [ 450.103913] FAULT_INJECTION: forcing a failure. [ 450.103913] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.105786] CPU: 1 UID: 0 PID: 5987 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 450.105815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 450.105828] Call Trace: [ 450.105836] [ 450.105845] dump_stack_lvl+0xfa/0x120 [ 450.105880] should_fail_ex+0x4d7/0x5e0 [ 450.105918] should_fail_alloc_page+0xe0/0x110 [ 450.105952] prepare_alloc_pages+0x1af/0x500 [ 450.105984] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 450.106017] ? lock_release+0xc8/0x290 [ 450.106052] ? perf_trace_lock+0xb5/0x5d0 [ 450.106079] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 450.106122] ? __lock_acquire+0xc65/0x1b70 [ 450.106153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 450.106182] ? policy_nodemask+0xeb/0x4e0 [ 450.106216] alloc_pages_mpol+0xed/0x340 [ 450.106245] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 450.106277] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.106301] ? get_vma_policy+0x23b/0x350 [ 450.106336] vma_alloc_folio_noprof+0xe9/0x440 [ 450.106368] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 450.106399] ? find_held_lock+0x2b/0x80 [ 450.106429] ? __handle_mm_fault+0x7ed/0x30f0 [ 450.106460] ? lock_release+0xc8/0x290 [ 450.106489] __handle_mm_fault+0x142c/0x30f0 [ 450.106524] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.106549] ? __pfx___handle_mm_fault+0x10/0x10 [ 450.106580] ? __pte_offset_map_lock+0x190/0x330 [ 450.106619] ? no_page_table+0xc7/0x220 [ 450.106650] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 450.106691] handle_mm_fault+0x2c3/0x900 [ 450.106730] __get_user_pages+0x58a/0x2f10 [ 450.106780] ? down_read_killable+0x1d4/0x4f0 [ 450.106813] ? __pfx___get_user_pages+0x10/0x10 [ 450.106851] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.106880] __gup_longterm_locked+0xba7/0x1760 [ 450.106900] ? perf_trace_lock+0x1/0x5d0 [ 450.106922] ? try_get_folio+0xf1/0x730 [ 450.106957] ? lock_release+0xc8/0x290 [ 450.106981] ? __pfx___gup_longterm_locked+0x10/0x10 [ 450.107004] ? try_get_folio+0x235/0x730 [ 450.107037] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 450.107079] gup_fast_fallback+0x84e/0x2500 [ 450.107126] ? __pfx_gup_fast_fallback+0x10/0x10 [ 450.107151] ? kernel_text_address+0x5b/0xc0 [ 450.107174] ? lock_acquire+0x15e/0x2f0 [ 450.107196] ? __kernel_text_address+0xd/0x40 [ 450.107219] ? unwind_get_return_address+0x59/0xa0 [ 450.107250] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 450.107278] ? arch_stack_walk+0x9c/0xf0 21:49:04 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x3}], "8098f60db56f3155859cec747ffae1b1147d7f28777ded350ed987cf791063c55ac509ddb4bbdec49b2a0f7613ff81f342bdaa6202f1b1894e4bd4b3e4e434a4c97200b4b608575eb73048fd50e9c536465a055b7997f087dc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6b1) [ 450.107304] pin_user_pages_fast+0xa7/0x100 [ 450.107324] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 450.107356] iov_iter_extract_pages+0x84d/0x1e00 [ 450.107387] ? lock_acquire+0x15e/0x2f0 [ 450.107411] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 450.107432] ? find_held_lock+0x2b/0x80 [ 450.107462] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 450.107488] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.107517] ? bio_associate_blkg_from_css+0x508/0x1380 [ 450.107545] bio_iov_iter_get_pages+0x351/0xf90 [ 450.107573] ? bio_associate_blkg+0x139/0x2a0 [ 450.107595] ? lock_release+0xc8/0x290 [ 450.107623] ? bio_associate_blkg+0x143/0x2a0 [ 450.107656] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 450.107685] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 450.107709] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.107736] ? iov_iter_is_aligned+0xf2/0x5a0 [ 450.107767] ? iov_iter_npages+0xfe/0x520 [ 450.107803] blkdev_direct_IO+0x753/0x1e70 [ 450.107833] ? __is_insn_slot_addr+0x140/0x290 [ 450.107870] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 450.107889] ? __kernel_text_address+0xd/0x40 [ 450.107911] ? unwind_get_return_address+0x59/0xa0 [ 450.107941] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 450.107967] ? arch_stack_walk+0x9c/0xf0 [ 450.107992] ? avc_policy_seqno+0x9/0x20 [ 450.108020] ? selinux_file_permission+0x99/0x600 [ 450.108050] blkdev_read_iter+0x27f/0x510 [ 450.108077] aio_read+0x2a3/0x450 [ 450.108101] ? __pfx_aio_read+0x10/0x10 [ 450.108123] ? perf_trace_lock+0xb5/0x5d0 [ 450.108152] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.108182] ? lock_acquire+0x15e/0x2f0 [ 450.108205] ? __might_fault+0xe0/0x190 [ 450.108229] ? find_held_lock+0x2b/0x80 [ 450.108259] ? __might_fault+0x138/0x190 [ 450.108283] ? lock_release+0xc8/0x290 [ 450.108307] ? __might_fault+0xe0/0x190 [ 450.108338] io_submit_one+0x5a7/0x1a90 [ 450.108372] ? __pfx_io_submit_one+0x10/0x10 [ 450.108398] ? lock_acquire+0x15e/0x2f0 [ 450.108420] ? __might_fault+0xe0/0x190 [ 450.108450] ? lock_release+0xc8/0x290 [ 450.108474] ? __might_fault+0xe0/0x190 [ 450.108504] __x64_sys_io_submit+0x182/0x2e0 [ 450.108530] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 450.108553] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 450.108591] ? ksys_write+0x1a3/0x240 [ 450.108611] ? __pfx_ksys_write+0x10/0x10 [ 450.108642] do_syscall_64+0xbf/0x360 [ 450.108673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.108695] RIP: 0033:0x7f3246103b19 [ 450.108712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 450.108732] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 450.108753] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 450.108767] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 450.108780] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 450.108793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.108805] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 450.108837] 21:49:04 executing program 3: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) pkey_mprotect(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x2000004, 0xffffffffffffffff) madvise(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0xf) 21:49:04 executing program 6: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x208000, 0x4) write$P9_RREMOVE(r0, &(0x7f0000000040)={0xfffffffffffffd36, 0x7b, 0x2}, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x1) 21:49:04 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='bdev\x00', 0x12000, &(0x7f00000001c0)='\x00') chmod(&(0x7f0000000200)='./file0\x00', 0x60) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x20, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0) 21:49:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 5) 21:49:04 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000001c0)="2fd36551f322b0f036c2c96ad6823049a5411d280ef112bbec3c28aa1535f5d5639b0caa14a41769abfe5053124540fcc5b48f7bf55ce807b179c4ecb8c7164dd0a7c0a66c558e617c68471e389eb7e6b28f057a4b5923a4b53d518d1dec7aa572d5957e66d333cd1137d9ec195883051bcc0217a09f2b80", 0x78}, {&(0x7f0000000240)="e373a2d140b574f779dbc880ef2df0df2fc58b9b2145d1ce61950a593a400849e47de272fbcbe2aafc9c14a8d4c1feadccf88c7f91db0b435a46af11b3a2", 0x3e}, {&(0x7f0000000400)="cab91b2de9e9bb5bedbd76fecaec7334f0ea4023ef8fcf1755c00de97cdc23e2933ed89a455866994647dfbfd302766d4c1045abc31368d732a302700fa9098f558fa4611a44a40331ed526351794f2c052c4458be1e1ee0b7fd2c1099fdf21701e2b31949cdc3016c027765492dfa1b3dedcff9f6f7453a668606a94f0f819aad030d95c79f423480d784e9125fc21aa9841f08ee9050b5dc83f2b9fd9c174ed73ba97eef2873b6674d942ca86ccbf31619db4f7dbc14530f4190e970312d1963a1f60b3954246b9f13dc", 0xcb}, {&(0x7f0000000500)="eca22fd1b16f6133aa4a52f5edcf0be127ee407f53c011bf0a13eeced56193d792489fff93a4c79eb3d683db7af27c1a5c1a12082bd7fffff33c58c81e89071370b1274502e346cbbd598257d2542ac0f0fe87a49e2951552d15d973446239ff1f50d962681964a37e6d543d66bc0539c5a88593c6df8214f2af0d2bd44cc61c98927806ce63cb9630b903021c557544061a3da7dbb65ef8ab0b5b6fe2927bb02282b822afa891032c02e07d063f1450acd2037673d24a736fcc3dd3a92114e0a5d4d8cda9d52f23b387e2db6a4e30143168642bfd4fdc53e144d88d73287cc606eed00785", 0xe5}], 0x4, 0x58, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x386c3378, 0x0, 0x0, 0x7}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r0, 0x3, 0x8, 0x3e9}) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x5, 0x40, 0xfd, 0x0, 0xcd5, 0x20, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x30, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0xc04, 0x7fff, 0x9, 0x3, 0x0, 0x2, 0x1000, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000005640)=0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000008600)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r8 = pidfd_getfd(r2, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r8) setregid(r7, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r2}}, 0x58) 21:49:05 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) lseek(r0, 0x100000000, 0x1) 21:49:05 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 11) [ 450.439876] FAULT_INJECTION: forcing a failure. [ 450.439876] name failslab, interval 1, probability 0, space 0, times 0 [ 450.440989] CPU: 0 UID: 0 PID: 6018 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 450.441005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 450.441013] Call Trace: [ 450.441017] [ 450.441022] dump_stack_lvl+0xfa/0x120 [ 450.441044] should_fail_ex+0x4d7/0x5e0 [ 450.441065] should_failslab+0xc2/0x120 [ 450.441079] __kmalloc_cache_noprof+0x6a/0x3e0 [ 450.441097] ? perf_trace_lock+0xb5/0x5d0 [ 450.441111] ? __iomap_dio_rw+0x262/0x1cf0 [ 450.441134] __iomap_dio_rw+0x262/0x1cf0 [ 450.441153] ? lock_acquire+0x15e/0x2f0 [ 450.441165] ? __virt_addr_valid+0x1c6/0x5d0 [ 450.441184] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 450.441204] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 450.441223] ? lock_release+0xc8/0x290 [ 450.441238] ? __pfx___iomap_dio_rw+0x10/0x10 [ 450.441257] ? mark_held_locks+0x49/0x80 [ 450.441272] ? kasan_quarantine_put+0x84/0x1e0 [ 450.441298] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 450.441315] ? __pfx_ext4_orphan_add+0x10/0x10 [ 450.441333] iomap_dio_rw+0x40/0xa0 [ 450.441352] ext4_file_write_iter+0xe0b/0x1990 [ 450.441379] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 450.441397] ? ksys_write+0x121/0x240 [ 450.441412] ? lock_is_held_type+0x9e/0x120 [ 450.441429] vfs_write+0xbe9/0x10c0 [ 450.441440] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 450.441460] ? __pfx_vfs_write+0x10/0x10 [ 450.441484] ksys_write+0x121/0x240 [ 450.441495] ? __pfx_ksys_write+0x10/0x10 [ 450.441512] do_syscall_64+0xbf/0x360 [ 450.441529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.441542] RIP: 0033:0x7fc68e2fdb19 [ 450.441551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 450.441574] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.441586] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 450.441594] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 450.441601] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 450.441607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.441614] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 450.441632] [ 450.529391] FAULT_INJECTION: forcing a failure. [ 450.529391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.530475] CPU: 0 UID: 0 PID: 6025 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 450.530514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 450.530531] Call Trace: [ 450.530540] [ 450.530550] dump_stack_lvl+0xfa/0x120 [ 450.530595] should_fail_ex+0x4d7/0x5e0 [ 450.530646] should_fail_alloc_page+0xe0/0x110 [ 450.530683] prepare_alloc_pages+0x1af/0x500 [ 450.530725] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 450.530757] ? lock_release+0xc8/0x290 [ 450.530777] ? perf_trace_lock+0xb5/0x5d0 [ 450.530791] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 450.530815] ? __lock_acquire+0xc65/0x1b70 [ 450.530831] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 450.530848] ? policy_nodemask+0xeb/0x4e0 [ 450.530867] alloc_pages_mpol+0xed/0x340 [ 450.530883] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 450.530900] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.530913] ? get_vma_policy+0x23b/0x350 [ 450.530932] vma_alloc_folio_noprof+0xe9/0x440 [ 450.530954] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 450.530970] ? find_held_lock+0x2b/0x80 [ 450.530990] ? __handle_mm_fault+0x7ed/0x30f0 [ 450.531008] ? lock_release+0xc8/0x290 [ 450.531023] __handle_mm_fault+0x142c/0x30f0 [ 450.531042] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.531056] ? __pfx___handle_mm_fault+0x10/0x10 [ 450.531073] ? __pte_offset_map_lock+0x190/0x330 [ 450.531094] ? no_page_table+0xc7/0x220 [ 450.531111] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 450.531133] handle_mm_fault+0x2c3/0x900 [ 450.531154] __get_user_pages+0x58a/0x2f10 [ 450.531182] ? down_read_killable+0x1d4/0x4f0 [ 450.531200] ? __pfx___get_user_pages+0x10/0x10 [ 450.531220] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.531236] __gup_longterm_locked+0xba7/0x1760 [ 450.531247] ? perf_trace_lock+0x1/0x5d0 [ 450.531259] ? try_get_folio+0xf1/0x730 [ 450.531278] ? lock_release+0xc8/0x290 [ 450.531291] ? __pfx___gup_longterm_locked+0x10/0x10 [ 450.531303] ? try_get_folio+0x235/0x730 [ 450.531321] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 450.531343] gup_fast_fallback+0x84e/0x2500 [ 450.531369] ? __pfx_gup_fast_fallback+0x10/0x10 [ 450.531382] ? kernel_text_address+0x5b/0xc0 [ 450.531396] ? __kernel_text_address+0xd/0x40 [ 450.531408] ? unwind_get_return_address+0x59/0xa0 [ 450.531425] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 450.531440] ? arch_stack_walk+0x9c/0xf0 [ 450.531455] pin_user_pages_fast+0xa7/0x100 [ 450.531466] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 450.531483] iov_iter_extract_pages+0x84d/0x1e00 [ 450.531501] ? lock_acquire+0x15e/0x2f0 [ 450.531514] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 450.531525] ? find_held_lock+0x2b/0x80 [ 450.531542] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 450.531556] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.531572] ? bio_associate_blkg_from_css+0x508/0x1380 [ 450.531588] bio_iov_iter_get_pages+0x351/0xf90 [ 450.531603] ? bio_associate_blkg+0x139/0x2a0 [ 450.531615] ? lock_release+0xc8/0x290 [ 450.531630] ? bio_associate_blkg+0x143/0x2a0 [ 450.531648] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 450.531664] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 450.531677] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.531692] ? iov_iter_is_aligned+0xf2/0x5a0 [ 450.531709] ? iov_iter_npages+0xfe/0x520 [ 450.531729] blkdev_direct_IO+0x753/0x1e70 [ 450.531745] ? __is_insn_slot_addr+0x140/0x290 [ 450.531765] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 450.531775] ? __kernel_text_address+0xd/0x40 [ 450.531787] ? unwind_get_return_address+0x59/0xa0 [ 450.531803] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 450.531818] ? arch_stack_walk+0x9c/0xf0 [ 450.531831] ? avc_policy_seqno+0x9/0x20 [ 450.531846] ? selinux_file_permission+0x99/0x600 [ 450.531863] blkdev_read_iter+0x27f/0x510 [ 450.531877] aio_read+0x2a3/0x450 [ 450.531890] ? __pfx_aio_read+0x10/0x10 [ 450.531902] ? perf_trace_lock+0xb5/0x5d0 [ 450.531918] ? __pfx_perf_trace_lock+0x10/0x10 [ 450.531935] ? lock_acquire+0x15e/0x2f0 [ 450.531947] ? __might_fault+0xe0/0x190 [ 450.531960] ? find_held_lock+0x2b/0x80 [ 450.531977] ? __might_fault+0x138/0x190 [ 450.531990] ? lock_release+0xc8/0x290 [ 450.532003] ? __might_fault+0xe0/0x190 [ 450.532019] io_submit_one+0x5a7/0x1a90 [ 450.532037] ? __pfx_io_submit_one+0x10/0x10 [ 450.532051] ? lock_acquire+0x15e/0x2f0 [ 450.532064] ? __might_fault+0xe0/0x190 [ 450.532079] ? lock_release+0xc8/0x290 [ 450.532092] ? __might_fault+0xe0/0x190 [ 450.532109] __x64_sys_io_submit+0x182/0x2e0 [ 450.532123] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 450.532137] ? find_held_lock+0x2b/0x80 [ 450.532153] ? syscall_trace_enter+0x1cf/0x240 [ 450.532166] ? lock_release+0xc8/0x290 [ 450.532184] do_syscall_64+0xbf/0x360 [ 450.532201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.532214] RIP: 0033:0x7f3246103b19 [ 450.532223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 450.532235] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 450.532246] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 450.532254] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 450.532261] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 450.532268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.532275] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 450.532292] 21:49:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) write$binfmt_script(r1, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x9e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') lseek(r3, 0x100000000, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f00000013c0)={0x3, 0x80000000, 0x7, 0x3f, 0x0, 0xab1}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x50581, 0x0) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000100)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x200, 0x6, 0x6000000000, 0xd1}) lseek(r2, 0x100000000, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000003c0)={{r0}, 0x0, 0x1a, @inherit={0x90, &(0x7f0000000280)={0x1, 0x9, 0xff, 0x80000000, {0x0, 0x5, 0x0, 0xfffffffffffeffff, 0xfff}, [0x200, 0x0, 0xa41e, 0x7, 0x8, 0x1bcb, 0x9, 0x8, 0xb06d]}}, @subvolid=0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 21:49:16 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000001c0)="2fd36551f322b0f036c2c96ad6823049a5411d280ef112bbec3c28aa1535f5d5639b0caa14a41769abfe5053124540fcc5b48f7bf55ce807b179c4ecb8c7164dd0a7c0a66c558e617c68471e389eb7e6b28f057a4b5923a4b53d518d1dec7aa572d5957e66d333cd1137d9ec195883051bcc0217a09f2b80", 0x78}, {&(0x7f0000000240)="e373a2d140b574f779dbc880ef2df0df2fc58b9b2145d1ce61950a593a400849e47de272fbcbe2aafc9c14a8d4c1feadccf88c7f91db0b435a46af11b3a2", 0x3e}, {&(0x7f0000000400)="cab91b2de9e9bb5bedbd76fecaec7334f0ea4023ef8fcf1755c00de97cdc23e2933ed89a455866994647dfbfd302766d4c1045abc31368d732a302700fa9098f558fa4611a44a40331ed526351794f2c052c4458be1e1ee0b7fd2c1099fdf21701e2b31949cdc3016c027765492dfa1b3dedcff9f6f7453a668606a94f0f819aad030d95c79f423480d784e9125fc21aa9841f08ee9050b5dc83f2b9fd9c174ed73ba97eef2873b6674d942ca86ccbf31619db4f7dbc14530f4190e970312d1963a1f60b3954246b9f13dc", 0xcb}, {&(0x7f0000000500)="eca22fd1b16f6133aa4a52f5edcf0be127ee407f53c011bf0a13eeced56193d792489fff93a4c79eb3d683db7af27c1a5c1a12082bd7fffff33c58c81e89071370b1274502e346cbbd598257d2542ac0f0fe87a49e2951552d15d973446239ff1f50d962681964a37e6d543d66bc0539c5a88593c6df8214f2af0d2bd44cc61c98927806ce63cb9630b903021c557544061a3da7dbb65ef8ab0b5b6fe2927bb02282b822afa891032c02e07d063f1450acd2037673d24a736fcc3dd3a92114e0a5d4d8cda9d52f23b387e2db6a4e30143168642bfd4fdc53e144d88d73287cc606eed00785", 0xe5}], 0x4, 0x58, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x386c3378, 0x0, 0x0, 0x7}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r0, 0x3, 0x8, 0x3e9}) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x5, 0x40, 0xfd, 0x0, 0xcd5, 0x20, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x30, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0xc04, 0x7fff, 0x9, 0x3, 0x0, 0x2, 0x1000, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, r3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000005640)=0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000008600)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r8 = pidfd_getfd(r2, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r8) setregid(r7, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r2}}, 0x58) 21:49:16 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 12) 21:49:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 6) 21:49:16 executing program 7: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) pkey_mprotect(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x2000004, 0xffffffffffffffff) madvise(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0xf) 21:49:16 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) timerfd_gettime(r2, &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r1}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="cc0000001b0003000000000000000000e0000001000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0xcc}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x9, 0x2) 21:49:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x7e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, 0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf2513000000280001801400020069703667726530000000000000000000080003000200000008000300020000003c0001800800030001000000140002007465616d5f736c6176655f310000000014000200766c616e31000000000000000000000008000300000000003400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f3100001400020063616966300000000000000000000000340001801400020067656e6576653100000000000000000008000300020000001400020076657468305f746f5f7465616d00000030000180080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="14000200626f6eccfd65af1b9e0f4b645f736c61"], 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x198, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4}]}, 0x198}, 0x1, 0x0, 0x0, 0x20811}, 0x20000000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:49:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40003, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x16, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x21, 0x8ea, 0x73}, 0x2c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) creat(&(0x7f0000000080)='./file0\x00', 0x2) [ 461.954061] FAULT_INJECTION: forcing a failure. [ 461.954061] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 461.955855] CPU: 1 UID: 0 PID: 6037 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 461.955886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 461.955899] Call Trace: [ 461.955908] [ 461.955916] dump_stack_lvl+0xfa/0x120 [ 461.955961] should_fail_ex+0x4d7/0x5e0 [ 461.956002] should_fail_alloc_page+0xe0/0x110 [ 461.956030] prepare_alloc_pages+0x1af/0x500 [ 461.956065] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 461.956100] ? lock_release+0xc8/0x290 [ 461.956138] ? perf_trace_lock+0xb5/0x5d0 [ 461.956167] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 461.956213] ? __lock_acquire+0xc65/0x1b70 [ 461.956245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 461.956277] ? policy_nodemask+0xeb/0x4e0 [ 461.956312] alloc_pages_mpol+0xed/0x340 [ 461.956344] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 461.956378] ? __pfx_perf_trace_lock+0x10/0x10 [ 461.956404] ? get_vma_policy+0x23b/0x350 [ 461.956441] vma_alloc_folio_noprof+0xe9/0x440 [ 461.956476] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 461.956510] ? find_held_lock+0x2b/0x80 [ 461.956543] ? __handle_mm_fault+0x7ed/0x30f0 [ 461.956576] ? lock_release+0xc8/0x290 [ 461.956607] __handle_mm_fault+0x142c/0x30f0 [ 461.956645] ? __pfx_perf_trace_lock+0x10/0x10 [ 461.956672] ? __pfx___handle_mm_fault+0x10/0x10 [ 461.956705] ? __pte_offset_map_lock+0x190/0x330 [ 461.956746] ? no_page_table+0xc7/0x220 [ 461.956780] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 461.956824] handle_mm_fault+0x2c3/0x900 [ 461.956865] __get_user_pages+0x58a/0x2f10 [ 461.956918] ? down_read_killable+0x1d4/0x4f0 [ 461.956953] ? __pfx___get_user_pages+0x10/0x10 [ 461.956994] ? __pfx_perf_trace_lock+0x10/0x10 [ 461.957025] __gup_longterm_locked+0xba7/0x1760 [ 461.957047] ? perf_trace_lock+0x1/0x5d0 [ 461.957071] ? try_get_folio+0xf1/0x730 [ 461.957109] ? lock_release+0xc8/0x290 [ 461.957134] ? __pfx___gup_longterm_locked+0x10/0x10 [ 461.957159] ? try_get_folio+0x235/0x730 [ 461.957194] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 461.957239] gup_fast_fallback+0x84e/0x2500 [ 461.957288] ? __pfx_gup_fast_fallback+0x10/0x10 [ 461.957315] ? kernel_text_address+0x5b/0xc0 [ 461.957341] ? __kernel_text_address+0xd/0x40 [ 461.957364] ? unwind_get_return_address+0x59/0xa0 [ 461.957398] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.957428] ? arch_stack_walk+0x9c/0xf0 [ 461.957456] pin_user_pages_fast+0xa7/0x100 [ 461.957478] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 461.957511] iov_iter_extract_pages+0x84d/0x1e00 [ 461.957544] ? lock_acquire+0x15e/0x2f0 [ 461.957570] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 461.957593] ? find_held_lock+0x2b/0x80 [ 461.957625] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 461.957653] ? __pfx_perf_trace_lock+0x10/0x10 [ 461.957703] ? bio_associate_blkg_from_css+0x508/0x1380 [ 461.957733] bio_iov_iter_get_pages+0x351/0xf90 [ 461.957762] ? bio_associate_blkg+0x139/0x2a0 [ 461.957786] ? lock_release+0xc8/0x290 [ 461.957816] ? bio_associate_blkg+0x143/0x2a0 [ 461.957850] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 461.957882] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 461.957908] ? __pfx_perf_trace_lock+0x10/0x10 [ 461.957937] ? iov_iter_is_aligned+0xf2/0x5a0 [ 461.957970] ? iov_iter_npages+0xfe/0x520 [ 461.958009] blkdev_direct_IO+0x753/0x1e70 [ 461.958041] ? __is_insn_slot_addr+0x140/0x290 [ 461.958080] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 461.958101] ? __kernel_text_address+0xd/0x40 [ 461.958125] ? unwind_get_return_address+0x59/0xa0 [ 461.958157] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.958186] ? arch_stack_walk+0x9c/0xf0 [ 461.958212] ? avc_policy_seqno+0x9/0x20 [ 461.958243] ? selinux_file_permission+0x99/0x600 [ 461.958275] blkdev_read_iter+0x27f/0x510 [ 461.958303] aio_read+0x2a3/0x450 [ 461.958328] ? __pfx_aio_read+0x10/0x10 [ 461.958352] ? perf_trace_lock+0xb5/0x5d0 [ 461.958383] ? __pfx_perf_trace_lock+0x10/0x10 [ 461.958415] ? lock_acquire+0x15e/0x2f0 [ 461.958439] ? __might_fault+0xe0/0x190 [ 461.958466] ? find_held_lock+0x2b/0x80 [ 461.958498] ? __might_fault+0x138/0x190 [ 461.958525] ? lock_release+0xc8/0x290 [ 461.958550] ? __might_fault+0xe0/0x190 [ 461.958582] io_submit_one+0x5a7/0x1a90 [ 461.958618] ? __pfx_io_submit_one+0x10/0x10 [ 461.958646] ? lock_acquire+0x15e/0x2f0 [ 461.958671] ? __might_fault+0xe0/0x190 [ 461.958702] ? lock_release+0xc8/0x290 [ 461.958728] ? __might_fault+0xe0/0x190 [ 461.958760] __x64_sys_io_submit+0x182/0x2e0 [ 461.958788] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 461.958813] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 461.958853] ? ksys_write+0x1a3/0x240 [ 461.958875] ? __pfx_ksys_write+0x10/0x10 [ 461.958907] do_syscall_64+0xbf/0x360 [ 461.958941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.958964] RIP: 0033:0x7f3246103b19 [ 461.958982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 461.959004] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 461.959026] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 461.959042] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 461.959056] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 461.959070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.959083] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 461.959117] 21:49:30 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40003, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x16, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x21, 0x8ea, 0x73}, 0x2c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) creat(&(0x7f0000000080)='./file0\x00', 0x2) 21:49:30 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) 21:49:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/156, 0x9c, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x5, &(0x7f0000000680)=[{&(0x7f00000002c0)="602e92fbdc11431d34109d405d5459de7bfc0b26eabb395ca4dd0c07266d1311f752eb0a0d52a178fd4d8d2591ac99e7bac04251fd422aa28c86930f2d14234b952b2ab93506c29c82f7992c0d789abd385779f2d07b1d5977e3a5175eb7a112818b6526eccc4d7a6c60c1cdf98018", 0x6f, 0x7}, {&(0x7f0000000340)="1322d9b5b53cc392002939db031f67b5ba796feb6cece9febc4c9f1cd9d5564b2e9e4716c729ea1b7a866e24037035bd61f3ae2a86eae7cc6a03240d1cb105ae7098c07a146504737ab55d0a322753005eccfd13e9d1ed5c20d5b2bec260519eb3030f2cce6109e8e636a39643c7e0a1c1dd4919340df8b2851b6fc3e677dee99e35a1a0fc97869e5d7990d729c739a9a2e1841ffba72b44499742c7d46b9f4ea317f9d4575a9892bcee3cfcd8e573d8d9ace6258cd8ccdd3097", 0xba, 0x5}, {&(0x7f0000000400)="f95c400317d3073db0dbdb62c9b91b7ead0f4e074503842e73c461313c6d65e451aa7bf61bb8c0974b7fe36921f5d0b5815950f1a9c6cfa5a6c28265cb24b80db6dc866e1a26b0506a25f4698f3103956675b79df5a94363e9bb7e13d81396e1de9d6dbbea1404472e1f8d29245c3955663929130d4ea5d4abcdbf0d40d0267820a90c5188211530e398d9", 0x8b, 0x6dca9c67}, {&(0x7f00000004c0)="7da0baf48ee570dfaddc93a177cc2213a95d742c47418b53745df1a11f08862364d5924ee5e1a5d4c3fcc719ccfb48af8f97edabf181d301f3b720c82b30a0fa91eb758d2ef877c675d76c32061f5fa37a375a695597f509a00e13348273cf29a136d3cb6d24eee06bbba5ffc5191b8db9403b8fb791b1da81616d9f84f1b780edb2b6d2a2ab06d262e90d864b79cd5e29f48ea2565c0d4eb083186248bc5470119f12478b0954dc2f2c595f66581817d9e19cf9ae8d721ec6300b036aab00c6c0980a2b674567d25ba522ec08c6ca09cd8ff914e53749dfd533", 0xda, 0x1}, {&(0x7f00000005c0)="c180859980f99f7993cc4ade4072c5f0b8553732e5f90c1da1e5816bda4b0939ae30f84923f25607efedae80455f61dba7d996f8ae4d2699264b7f0d63b520cff6fd91051d98d68212a5086849f2a19eea44b75155166236b6aaf2a0b6e2151a93bcfac7a28782718b779bdc91341475474980bf564b782542d57f1cd80dbbc44fe9192cb5e893bca41d3f03e37db810d7d9690e34048fa14805be33d211cd13d4b0ff752e709b78b6030e9c1c7856", 0xaf, 0x4}], 0x2000, &(0x7f0000000700)={[{@dots}, {@nodots}, {@fat=@nfs}, {@dots}, {@fat=@sys_immutable}, {@nodots}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) splice(r2, &(0x7f0000000200)=0x3, r3, &(0x7f0000000780)=0x8, 0x101, 0x1) ioctl$TIOCNXCL(r2, 0x540d) r4 = open(&(0x7f0000000100)='./file0\x00', 0x50080, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000007c0)="fb0ea01a82fc118cbab305bd340524a2ea89bd08e57a01e741e978f6057dcacb452e060000000000000092b6c090bcf401f79d734abf3cda418abef8e3492137e5b34ba1704044b8fdf7b17dd77f4dc019d427e575343fbcc77f413794a983bb6efa339942049d0d256ede08d01de052ad63ec53ceec9705c2091d82bdfcd1fa4b6a5b32446c39645b02fe50f148712dedcc6b7b2afd4e0c1467d8be9a929b530650a1d79b3776552ec3cda1a3013e1b3093f59ac8106922c28fb12d5b3a3b4abd586f6a1769af479bc76db6a798b650963be825b50568e7eb0388978e0fd252e06cf93035dee30800") ioctl$KDSETLED(r0, 0x4b32, 0xfffffffffffffe01) 21:49:30 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 13) 21:49:30 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) pread64(r1, &(0x7f0000000000)=""/201, 0xc9, 0x7) lseek(r0, 0x100000000, 0x1) lseek(0xffffffffffffffff, 0x100000000, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000001800), 0x2800000400002, 0x111100) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001840)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001880)={0x0, 0x0}, &(0x7f00000018c0)=0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r6, 0x100000000, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000001900), 0x8000, 0x400840) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r8, 0x100000000, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r9, 0x100000000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000200)="ec36c6699a75a184f5a291e6dc51aef8d6a7c66e9d9a841594338b42", 0x1c}, {&(0x7f0000000240)="192cdb453f92c57601bcaa887f2144a2b0a82ad63c775d2ea0d7d7e3aad61b5af603bd0a241b49577c25166e5b6f0e804930637562732385317ac58433dbf072dab8536f5b3e8ef851ba0e", 0x4b}, {&(0x7f00000002c0)="ed65b565261c36fc8d964d12a8e23a271f8d2a23a2675503b15f932299e61e05", 0x20}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="6f8beb06e153c8b668daed316b5f254aaf4986149487f3baa9cc508a4b313e73ee517344ce030db7fee130a94d0a9824d5de9a6281e7a9b5875b61166dd24b865726e7096c76a14702dc7ce1e1d0a1934fa5a0bd3478e4c1e96f9678a899434d4e1fe271d0198d7cc24f3b6db31eb8c212cf9285b0f0b0d746ae32487dd42ce6633443c9b2a0bd23b534fb86aa4e6c1ac5d8611c2d80ac0225d58b8e85eabdf7df2a229dcbb617fc03bf", 0xaa}, {&(0x7f00000013c0)="b38059433aedb3627570a0063b759a6b46522b63c90d0c2ade17245a5fe2f593fe15e964bd09718320bdd2b15e0a2837a52ac20b54a7bc8e21573e2e2aa457bfaef1cd46c6e547f2e92ffa4e01990d696310b95e95cc", 0x56}, {&(0x7f0000001440)="f20135aaf0931ed1d86450df23cc2c071385202515d0cd26", 0x18}], 0x7, &(0x7f0000001940)=ANY=[@ANYBLOB="1c000000000000000100000002050000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001e7223c4626f15530000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="a65f467300000000300000000000000001000000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000010"], 0xe0, 0x4c9c80fac937a86e}}], 0x1, 0x0) [ 475.493522] FAULT_INJECTION: forcing a failure. [ 475.493522] name failslab, interval 1, probability 0, space 0, times 0 [ 475.494496] CPU: 0 UID: 0 PID: 6079 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 475.494512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 475.494520] Call Trace: [ 475.494525] [ 475.494530] dump_stack_lvl+0xfa/0x120 [ 475.494553] should_fail_ex+0x4d7/0x5e0 [ 475.494574] ? jbd2__journal_start+0x193/0x6b0 [ 475.494590] should_failslab+0xc2/0x120 [ 475.494604] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 475.494622] ? lock_is_held_type+0x9e/0x120 [ 475.494641] jbd2__journal_start+0x193/0x6b0 [ 475.494659] __ext4_journal_start_sb+0x325/0x5d0 [ 475.494672] ? ext4_iomap_begin+0x5b8/0xe80 [ 475.494683] ? ext4_meta_trans_blocks+0x256/0x310 [ 475.494697] ext4_iomap_begin+0x5b8/0xe80 [ 475.494710] ? __pfx_perf_trace_lock+0x10/0x10 [ 475.494732] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 475.494745] ? mark_held_locks+0x49/0x80 21:49:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x40003, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x16, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x21, 0x8ea, 0x73}, 0x2c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) creat(&(0x7f0000000080)='./file0\x00', 0x2) 21:49:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 7) 21:49:30 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x101840, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x7, 0x4, 0x5, 0xb1b, 0x8, [{0x0, 0x7a2, 0x4, '\x00', 0x1100}, {0x8, 0x7ff, 0x5, '\x00', 0x1002}, {0x42, 0x1, 0x100, '\x00', 0x1508}, {0x1, 0x401, 0x2, '\x00', 0x84}, {0x7, 0x8, 0x6, '\x00', 0x81}, {0x0, 0x0, 0x75, '\x00', 0x100}, {0xc5, 0x5, 0x3, '\x00', 0x204}, {0x324e, 0x3ff, 0x2, '\x00', 0x80b}]}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x51, 0x0, 0x9, 0x0, 0xffff, 0x802a8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x401, 0x3, 0x3, 0x3, 0x1e48, 0x0, 0x8001, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) [ 475.494760] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 475.494774] ? __create_object+0x59/0x80 [ 475.494790] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 475.494802] iomap_iter+0x544/0xdb0 [ 475.494824] __iomap_dio_rw+0x69e/0x1cf0 [ 475.494844] ? __virt_addr_valid+0x1c6/0x5d0 [ 475.494870] ? __pfx___iomap_dio_rw+0x10/0x10 [ 475.494893] ? kasan_quarantine_put+0x84/0x1e0 [ 475.494919] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 475.494935] ? __pfx_ext4_orphan_add+0x10/0x10 [ 475.494957] iomap_dio_rw+0x40/0xa0 [ 475.494976] ext4_file_write_iter+0xe0b/0x1990 [ 475.495002] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 475.495019] ? ksys_write+0x121/0x240 [ 475.495034] ? lock_is_held_type+0x9e/0x120 [ 475.495050] vfs_write+0xbe9/0x10c0 [ 475.495061] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 475.495081] ? __pfx_vfs_write+0x10/0x10 [ 475.495105] ksys_write+0x121/0x240 [ 475.495116] ? __pfx_ksys_write+0x10/0x10 [ 475.495133] do_syscall_64+0xbf/0x360 [ 475.495150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.495163] RIP: 0033:0x7fc68e2fdb19 [ 475.495172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 475.495183] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 475.495194] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 475.495202] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 475.495210] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 475.495217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.495223] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 475.495241] 21:49:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 8) 21:49:30 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x9}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xc7}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xfff}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008834}, 0x8000) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = dup3(r2, r2, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000200), 0x12041, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@nodevmap}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@version_9p2000}, {@noextend}, {@debug={'debug', 0x3d, 0xab95}}, {@access_uid={'access', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, 'trans=fd,'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'trans=fd,'}}]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000240)=0x5) [ 475.596513] FAULT_INJECTION: forcing a failure. [ 475.596513] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 475.597584] CPU: 0 UID: 0 PID: 6094 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 475.597601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 475.597610] Call Trace: [ 475.597614] [ 475.597619] dump_stack_lvl+0xfa/0x120 [ 475.597643] should_fail_ex+0x4d7/0x5e0 [ 475.597666] should_fail_alloc_page+0xe0/0x110 [ 475.597683] prepare_alloc_pages+0x1af/0x500 [ 475.597701] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 475.597720] ? lock_release+0xc8/0x290 [ 475.597742] ? perf_trace_lock+0xb5/0x5d0 [ 475.597757] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 475.597782] ? __lock_acquire+0xc65/0x1b70 [ 475.597809] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 475.597826] ? policy_nodemask+0xeb/0x4e0 [ 475.597852] alloc_pages_mpol+0xed/0x340 [ 475.597876] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 475.597902] ? __pfx_perf_trace_lock+0x10/0x10 [ 475.597921] ? get_vma_policy+0x23b/0x350 [ 475.597954] vma_alloc_folio_noprof+0xe9/0x440 [ 475.597981] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 21:49:30 executing program 3: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000001240)={{}, {0x3}, 0x88, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x108, 0x0, &(0x7f00000001c0)={0x2, 0x102a, {0x1, 0xc, 0x1d, "30088ba140e6f106e2b849e41ed014affe3f4a7878d853667534177151", 0x1000, "4d751cbd6caeceab87003f12dac2b8a64469f4b55026bf3d9cd8701c4cbe7051f0ed4ff8d2ef926a2b68391b73375ae35873505d11e72b6b697a8081080ef2027ed5a8961d7534cba1d7dd5b72b006a09154c258da0795bd150f2754433ac38b5c952dbd2969440db0f82907d713187f0ba8169ba39978592fdb7aa5112317c78e68581cc5e8c980740f7ad88067250e87a98c12ea4ec46f46a35fac4fe7df6e074c1bc6fd14a164d1c3af44038a18bf3e7b49ada45a16372d8d0d9b526f089b385f14a01c86eae271efb1a2ba47cf52ceebeaa0b05db05d0997f654251153d33ecc4fb39cc5afd5b867d993772e328fb37170265d2a8f3249f40085bfcdeb144e44ca5e16b5a22fd3624e4cddc45b49d094b0907193109b1cea1572bf210d234d5825dea88bc803c745fdff2726a9c8bbc07f871634362535fba65f5b38fc43a61fc0bb1d4146f87d4417f7e4bd89db630d27638131e3881bbf904f6b5f613a883508e2b2d560428c19257b4caa07cec151090fdee5a94eb4a88e1e8adaf81a048e99481de4cce1ce5bcb0ec5e5fc5eec36aefeb5b9f2e5347ab63bd737a79f0dd32ba4f1dc6c1acf8b00c2d00b9ca48aafa43b81ec95864e079b32921f303fd117ed4b0a68dc194dc5d9054a06b21d7ea3f9f966fbda0e77536a5d50d149fb229ab9a31f8fc461b24067b055cc5b4e0d51a99ecf9bf5e445b73fccf8bac921918d49cdd8e53c7e309a5a886ec38b6866c730f968ec156b71762732778f0c088c12bdac6869a9010458683510d9ed2d1949bf240a43146feb7652b60f843bc6f9c34c20c8fc253d08ee458a7d2c4dac42e66a3833f694ac6eb25b8948c081d7507fcb93124fdc6b885bd16a112406a5a47cea59087112fd1bfc36713abcfbf8bb1049dbff704fd4b7eec40155e4be518d55ebaa304950365b4fdcd41db8e77b3395cdcb74ea8493bd12d628ecddd839f4d02c05ac869a822af7df44fd9497f83ab76dcda5c6f9467e770f7245aa9e3ce7e8b391e583c20bf5c76aeb2962ce4186d7bfbfe12f7c4f1ef12ceac475dfd1a5aeada3f2e4fe0b0412ecb698343b639b2917a6b371ffc6a7f4fb43571179079ddb3bee27ef1c6a0c3d36acf7765ec3c87a684c7f52cf865b2218e27a46e1dbf477b26d0919c6b398faad8e4763ac2cf969fd5ceaba19cdd7c509cae54114ef386aeaaa4b572f6f310874055868409bf00c4480edd626680fbdff384da40a516b00103c2722ebf9559dce908b1f4853feca5b92e5d175d94218fb5d98e385b6b93a98600f359685d05d4d1f3a522865714e1009ec7742ce7a7346c192a7934a885af84efd5772a0524d6142884d18606ffdb2dedb0cc9269b50722bee0562584a43c64bb24f15aeee0d959a4d3ec5a3ca8031d075b1649167c1d62fd026c0ba7835d67578d415b0c9d42d04226c15eda5d0539e805fffce9605d5bcc234d9c5133f64999348f74ece43268d6288504a1e8a26465703086a2fe54380b2aa94dd67c273ce485a6146dac57f69b3c3420376ae1ad2fdce7a79f300ab025ba2b2ba7da308ccf7df9f5e8416920284ae63a57d8137c28f87d65f098b91e2c8e3d1a6622005ad6d034197df37f077c85aad966329ad78a5d023f052bed2de69794c619dbdef65d5fa41615095cf0be2d3aa7f7a055a605d34729e7316e8cb4c87fe6a4bdb8644008024b081d5fd8f81137ee3ca54ee0a9edac2fbfb24b773668ef2bddd5957bb50ed0ae423d2c2ace8e9fd1d69931ec6bc0224cc9db20feb7f0b8f52f8b62b621ac6e8c0e04495f4e7b8a1f44f45014a60fd67d2c2a0fd19e1faa60abdd1d6ff251ae129c57649d251592d137d800c0a5f8d8f76c5deb66c3801c43833d11b0bc91a0ffd3299d16de381ec1ab4268155fec4a9803807b044de9395e8b223520db7fcd97f8cdfb6433796064de49549bb3ef6a64653805ae913fdb50080b8705fb1acf1e29c3f38885927a79921cb6d85003c899cbaf8196abda936a20d1697b7916c83bceaff4d194216a646cb9a19d91feec718265a60b44df6c2e2e964afa5b88ca3a4a7e81b40338c22ef77905b741a26e9336e800e4b348c64eae4da90152c8ad31898cab44392aee1f18838ec3c8dc5c74dfd1e2f5a906ea0b65701f42dfb5287f429ead2493ea77001a009bf17d95c9462342705279c7b032a4f4794fea1d29dba1f23e28566fa5b150770b0b10cee417d7938a138d8b3b2775643cbbe59753b7d835b7803aafda48eb964a291bd2eab76be08c9a193a33b644f8b9cfa2913757355650bd2b0f4813ab905c2d36cb6ca7084619c7978115c1a8c492fdc043545748a790ebc716348d48ba7ffc762ba1620c8e0c0eb33ed040e5c9599b6e0618264623a61cd2e00adac5028e994850be576bc9601a8bcf4d123e9d36710b9be4d4c2fb85ce563b09c3f6420273e2d8eebad3038cae324053385107d3dc8775cbec86b5ef7d6a6e223c813915335e5507a25d76ba81ebddf107faf779dc236ce2617e2cd2a122d3bed1abcb26251626ef1fb0a11b51ed03d12bbdc274ec098fd0d153832b6863a1b5fcd7e3d5232d964cd99ded796491459b8386f5e2c019f16d3644f3be58922d5d11c0b750a87c07d41d9309347f70e3a509d45e4c7bc58a5ef8cbb53fdb15934988baa50d5fcf791e53813527eedcd57fe3f0c8f05e7ee4de090e6ce34edd3a524d99b98538f6a93ac0a5240e646be369b7ca6a6b3c9e272b748ba994da36c1f07b935ddea987b89e1ba6c127e3f61c3e85fd0a335a0915f8a725673da393fc342b5b9338ea5075f05a0cc89a270e318b01df8d57fd9eb1e7188ec68c0240bcc9e55507e023e0401f978c085c8b580dc8430dfaa48e4a1690d65252485ea356326dc19c850bdb1fee74d7243827709f01ed67f6b571ade061398e32552e9abf32c8a4c389c69e681317b96477dea139f0543a80e537ebcad7d6663931b29f7f64a40715c9bb9c76763d0837f9576f7c28c281effa306da48726ac303dc859f7f3bf0a705fca019ec0823b3c07b992c5d5ee7d33e4f77cf944b055bf6d8e5e8296c06afbd4111d52fca5ac987060ca1861d7b1d6757ac04a6112f66cb43914463c555e1483870f78de97651843be046a7845744d2d714acf0fd362077e52f34e2fea1659276a1575bcf0fd4f2ed524a9bddcefee81093da4dd38f1adb4614d32bed3bc4f89de293023f3968ac53f4110fdafaeaea34e29f87665bb22152f7b62e89d559c83fcef087e0c9fb26cd42df06870fb080d90a7bfe4a1706ce28e528a53082f7a6aa84a9c9b343d0ae0977eedf783d07890014c5a54a9cda8e1e23cd366819d4fb4439cf37d254d20cb2d8090875fab70e1ed288ee7e469eae91c3b1e5dc48da80510574cb437d7c7922adc2b13b1818f5c5959d270240566946b6b48c2adc25257128db9d2e2adcf23fed3fa062db64dcbee128a8941995ae1128e272a228f127ef172a457f41c3adc252cc94010a3aa8059016e619a4ca4f359514df322ea819cecea5922811899e65b38633210b316a7964ef37ecb6dd09e0c0f86f75796752777a26865726d00021054a6fa893e277c17f554b4bfad3b54fc01419c910d8d482b06c8142d26e3161b4bb9f8d59788e69d02d7bfa363dd5600c0522bc41433f25e169819f17a1a83e0bfed8c22958778095a31b529fab91d214438d34c8bb0ac80515be1d0a21a3439f00516647c41de0e6a2dc9cf77857f7e73c2fe58fc208ccd0d0703bf18920259ab4cfbb5cb4329b2f0b876327a2ce63cda0ef3b8750b45eac17cfa29988d3545955bacfd3eb78a42ed5590491bef81c37e38ae1d338009585488b7918992b2409eb6f9ac028942dc95f9daf43449f3361d10884a81036481f7d1e0acc6445e862f273c7056df7919e63f197840861844edcf239d1c8737c4f94b991b53ee316814615eb92e0befe7b2037b6bef1139266680fc489dc1be8b80c3ec29c7e0e96966799710ee2b0e92fa06ab8624a54609596b941f3ecef30c02cfd8ace292a28aaa8e3f1ba2953d2002e3d11b9f2e8bc1237eb148721f55a1498e354ba4bff85e4241d881eb3efec678d7c1ad02b749afacd8926c00f03ebd16e83a6971e469ad7eec43f95109c1248cf1a8842bfb2064d40e452b3025eb744f9bfcb34d5ac4552ad182c431151c82451616c7c27a6f7218fbdd3a4cf2fb27365a8add69e70d12540598498e256d21e73c7d217c62aefd5efc8b775407a99a295a31a2cbd674df6130d209d9ed5cce646805f6036abfb9dee1d50ec2bdf1f6c3b911b7477474fc3ee3fce9eae8654a4f728d327644f0cf8f3e83edcbacfd629c19f79796cb4665efa6a19fe32e1acfe9f26e28cebb3a3aa759ac71928b17f8ec1c97b4101b007e6c9b8c5725d65541ff818b367d70aeb21191d5d580da1cdf8878663e1ba14ed0682df7ff7ffe274af60e3de28709bbf9afeee2e61f3369f59e9cf4f89018c2856995be39f4f78d4184c68b9e36d7e52a0f9aa0582d4367e7cc96e3129eafebd0426030daa2b83f45b5f4b5e76c5a8c188e0e2e1e74dd957dee36f6b8d206b45f773f60497c1b015544f01a0262e95580d5525e946a1ae26a28eafb85c38ebc5a3a5ab246ca8dca9a52af9cabdfa2035ede54f947151fd82e3b6e919e7348b055157bef03b65cf0df5c53f23d96c937f324dcf12069e440c9d3071406c538859f7678ea96770e79935c671e2be199f1637667f1229357b01291caaf347d1d416951e3da03510b94fe280584e83a385fee4d9028a8de6d9b4e8d989cef14bee8b313705b03d170b1dee303e4555f44c7a561646695b13e79b81ee22805c37063127336ffc1011dc6540c4a13299dd6122bf10da4ecf8f7f390016d636e30d9629fb84ea652fd6a636acb9da272412a711f4f03b8b2f9f85978c3fb406aa764b8de5a6690094d73a40e45afd409702ba6512819ab7149bad8183d7f599bf6cc86c46d295baf9e3b4f6f6bd16f1780e3e390687f75e27ca6021a364f52da0694073e2061292a5c21921d4442266418d2bad950e2b62c06b1743739d7316c14a3db9bf8cd168f55d7062806402890697425e48bf1f04eae10a892ed9e09da02566952944871cb1ff016147aa7b0b29f3cd7204b36e29cc1430268a749ccdc6cbf249ed23a7a138143b7eac11acb1324158e67f1a76e16a0ced35df8ea9b8b1095aab74c030459b3dbfe63ba7d1ae6b10dab1a7c2fb8824c1906b260a3fe3334ae548eb77d54dac35e39f3119c93e0eedf8b74319e14372d1a49fbe331dbce23800ae93d46f338a111435f7701ddd764635e58bd3d4caf4cb77932ab4a98642232a10ff6d643a068d6fc6cdec91d9063ebf6865f0d8178e2f6131c064ef40dc77cc43600995a189aabfbc81eec36cf2492ac954c4e8fadf7e19f80444afb086add323208c13c22470806c92753e994457a24b0fe475180aa38413f12f1c5fc2f25de603f3e38badc68bb0b427a39d98c05a547a79d9f86eae81e41830c3633fb5f81ecac2a3aa8f9b2226ecca9875395a4a2596bd36ae3f7c21d8ae1e521904bb9a504e0ec3dd5252a523fb507167d2501f9211f3d35a7b163ee803e59a187f402670cfe5633199dd1073eb7f59c386b949c921ee02623386e9cc78bae8ba8afc792aee48ca1e5a7eef92cffd7873b12eb256c4da3dca4672ad95231af07a147c785d19facfe5dcd130b857cbe64364a446ea20d9bc34c985c670dca42375e79c67bbed4f5608ee35660eeb9b8c13528388c1339b94c441"}, 0x42, "4cfb36f56ee23dd6106fbdc57dd219bffe52028446b24013e6a4bb43285ed1f10444880efd060dc3e81ea49f6ffbbf9a7ad00820956d002c636dfb520b560ee72e14"}, 0x1078}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000012c0), 0x4000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x4c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x4c}}, 0x41) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) [ 475.598007] ? find_held_lock+0x2b/0x80 [ 475.598033] ? __handle_mm_fault+0x7ed/0x30f0 [ 475.598059] ? lock_release+0xc8/0x290 [ 475.598083] __handle_mm_fault+0x142c/0x30f0 [ 475.598113] ? __pfx_perf_trace_lock+0x10/0x10 [ 475.598133] ? __pfx___handle_mm_fault+0x10/0x10 [ 475.598158] ? __pte_offset_map_lock+0x190/0x330 [ 475.598191] ? no_page_table+0xc7/0x220 [ 475.598217] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 475.598250] handle_mm_fault+0x2c3/0x900 [ 475.598281] __get_user_pages+0x58a/0x2f10 [ 475.598321] ? down_read_killable+0x1d4/0x4f0 [ 475.598349] ? __pfx___get_user_pages+0x10/0x10 [ 475.598380] ? __pfx_perf_trace_lock+0x10/0x10 [ 475.598404] __gup_longterm_locked+0xba7/0x1760 [ 475.598420] ? perf_trace_lock+0x1/0x5d0 [ 475.598438] ? try_get_folio+0xf1/0x730 [ 475.598466] ? lock_release+0xc8/0x290 [ 475.598486] ? __pfx___gup_longterm_locked+0x10/0x10 [ 475.598504] ? try_get_folio+0x235/0x730 [ 475.598531] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 475.598566] gup_fast_fallback+0x84e/0x2500 [ 475.598605] ? __pfx_gup_fast_fallback+0x10/0x10 [ 475.598625] ? kernel_text_address+0x5b/0xc0 [ 475.598646] ? __kernel_text_address+0xd/0x40 [ 475.598663] ? unwind_get_return_address+0x59/0xa0 [ 475.598689] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 475.598713] ? arch_stack_walk+0x9c/0xf0 [ 475.598735] pin_user_pages_fast+0xa7/0x100 [ 475.598752] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 475.598776] iov_iter_extract_pages+0x84d/0x1e00 [ 475.598802] ? lock_acquire+0x15e/0x2f0 [ 475.598823] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 475.598839] ? find_held_lock+0x2b/0x80 [ 475.598864] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 475.598885] ? __pfx_perf_trace_lock+0x10/0x10 [ 475.598909] ? bio_associate_blkg_from_css+0x508/0x1380 [ 475.598932] bio_iov_iter_get_pages+0x351/0xf90 [ 475.598955] ? bio_associate_blkg+0x139/0x2a0 [ 475.598973] ? lock_release+0xc8/0x290 [ 475.598996] ? bio_associate_blkg+0x143/0x2a0 [ 475.599023] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 475.599047] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 475.599067] ? __pfx_perf_trace_lock+0x10/0x10 [ 475.599088] ? iov_iter_is_aligned+0xf2/0x5a0 [ 475.599114] ? iov_iter_npages+0xfe/0x520 [ 475.599143] blkdev_direct_IO+0x753/0x1e70 [ 475.599168] ? __is_insn_slot_addr+0x140/0x290 [ 475.599198] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 475.599213] ? __kernel_text_address+0xd/0x40 [ 475.599231] ? unwind_get_return_address+0x59/0xa0 [ 475.599257] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 475.599278] ? arch_stack_walk+0x9c/0xf0 [ 475.599297] ? avc_policy_seqno+0x9/0x20 [ 475.599321] ? selinux_file_permission+0x99/0x600 [ 475.599346] blkdev_read_iter+0x27f/0x510 [ 475.599368] aio_read+0x2a3/0x450 [ 475.599387] ? __pfx_aio_read+0x10/0x10 [ 475.599403] ? perf_trace_lock+0xb5/0x5d0 [ 475.599424] ? __pfx_perf_trace_lock+0x10/0x10 [ 475.599446] ? lock_acquire+0x15e/0x2f0 [ 475.599460] ? __might_fault+0xe0/0x190 [ 475.599475] ? find_held_lock+0x2b/0x80 [ 475.599497] ? __might_fault+0x138/0x190 [ 475.599511] ? lock_release+0xc8/0x290 [ 475.599525] ? __might_fault+0xe0/0x190 [ 475.599543] io_submit_one+0x5a7/0x1a90 [ 475.599563] ? __pfx_io_submit_one+0x10/0x10 [ 475.599578] ? lock_acquire+0x15e/0x2f0 [ 475.599591] ? __might_fault+0xe0/0x190 [ 475.599608] ? lock_release+0xc8/0x290 [ 475.599622] ? __might_fault+0xe0/0x190 [ 475.599640] __x64_sys_io_submit+0x182/0x2e0 [ 475.599655] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 475.599669] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 475.599692] ? ksys_write+0x1a3/0x240 [ 475.599704] ? __pfx_ksys_write+0x10/0x10 [ 475.599721] do_syscall_64+0xbf/0x360 [ 475.599741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.599754] RIP: 0033:0x7f3246103b19 [ 475.599764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 475.599776] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 475.599789] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 475.599798] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 475.599805] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 475.599813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.599820] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 475.599838] 21:49:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 9) 21:49:41 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 14) 21:49:41 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:49:41 executing program 5: r0 = syz_mount_image$msdos(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) dup2(r0, r2) lseek(r1, 0x100000000, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 21:49:41 executing program 4: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000100)={0x0, 0x6, 0x2, {0x2, 0x4}}, &(0x7f00000001c0)={0x0, 0x3, 0xa1, @string={0xa1, 0x3, "684e8bcc1784dbfd81cc2229d868f8bb71fdbbf7df369e3db178eb635c80602e3a1804cf06f13256e20d2a20a2dbac1be91efef0bb407f71d022b5817d45fc2b3b354fade32371457e516602164ea42e5b5df6e165e741c7891a448142e2a84bb3652e873e40bdf771187909bafb9a30276e918eaf41dccc329fdf3bb9a08bfbd6f3b683ed7a4518ff427068033427a06b31a599c4f121d91140440b3de1d5"}}, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "0d0aa9c9"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xfa, 0x1, {0x22, 0x249}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x18, 0x66, "739a27737528fbf86e6ba8cc03997145f6019e312a1d223fe65815d13434eb0f979bd303824b7582477187bc281297f88e236d3918e1d3414f4e267645d472a93d43c0a3a65d55ae181540108c77e474c2a5b7f63ddf079bf5a9fd5a2392ce52864a087d3374"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7c}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x1, 0x5b, "8475c615df864ad51c58a5946f625296a5a1656552d0e27a4143a1adf4373c462657ceb268df8ee1b14247d19b1236404d9238e9318f825f9afc40c93bd998e90c2f155e48b9be78dabee0403a00c9d51e934cdd0eeafb19e83df4"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x8}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 21:49:41 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00') readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/147, 0x93) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, 0x5, &(0x7f00000014c0)=[{&(0x7f0000000280)="106614f3657581cefd7cc2fb56de1e950bf17afdb4986a2f077bd9ffba7322743741328d94e505e1c4cc42f68496fc784ab43359975f1b561a5a0e00b3f3bbab4e35d23cd7be7fce8a2d2d6a195cc10231ed3d52fadad12aeb59d37414914b3f61e51a591a4056dd262be04d4364a215fa69b4c1cd6c119ba21a04570a", 0x7d, 0x6}, {&(0x7f0000000300)="b3b29f0dea73591ce4b9748a7894c7fcb9ae2fed24713c417651452063ce7ad8bd972fd7147c3a260567f1556eb005f3e8eedcdd5027364ca67847719dcfe9360ed4dc96858cd266c90978c82ef10fab0b42f76fb6736917f6bd840925732579e47151533852a9ae6760c836bc39a948e36f221f7bc309ef2c9e11d07c3b0f45d2768ddb6be7a01cfb9ea171c25d1ea1f324674b368c6ab893fe1d92eb8b7149b1b5749ea93bd9ae0ca916f3fd7dd7b6ab101fb3fecc2298792d6ed63873b091f2ea48bf372d5c45df26a908ab40cffcd17d20caab7a082bb4dcdbf294df4cd47d89a6b8a32aaf404a9074", 0xeb}, {&(0x7f0000000400)="4f1d9d733b9cfda18c67b7c667203a41d0", 0x11, 0xffffffff7fffffff}, {&(0x7f0000000440)="ed4a78e32afca7cd3e78b0e2a9e49fee6f9c556002ba22f8469c914b1e2beb06482d68a70d6a50c659bc9f73af30183c605bb7c560dbdbc651717c717f7a1299a25ffd9e55fc06ae4d006af9f59e6b948e7ce347aebf6e8b6da11ae35e9dbce969b889f9b1a1020f51f6e70346fecb5b8da8068a2d83252b7150bdca34a8be54e9631a37c0f400a000f2b6cbf12a97e17494c1544c76bc2b8c0214814f20f81ce76b4d08632bd0908f8c4ae630971b11131dfd970ff8539cc59e2671727ecbd81f7c877b2af6f9ba47117ca4ba6fc0333471524c1e476d765e0ad371e6e30fdd016ce8b8ae337d296ab46d04ab28d622ba4454d4c2dd9214220937144756bfc04e258376549bdf42f7ea0ca4087692b96facc9466d582a11e69b3ab3139721f2e94a6d7f4c5b8e960cd8e8d0ac04464520898345ce394b9e0abd5eb56d18e5da09cc6d53677adf32d00a83b5958594fd4d55ff0b88c95522920674f5728966684e3dacd16c20fcaf02bfe73a472d1894a601e8600e2ddc2815b9e83d72f703bf437c85e4db55ba72d2e9972e670391f563bd3fb0bd4dc66669096b7efae33a43ecb68c310bbfe0d3214a861ea6c345710159bda041b6d47ff7ef5580a36a4164f5823f1d13d20142c964b0f6edad8d10aa960a63e6119715b5e5b2ed66188e612758d89e82aab2260a5c27655c7154588eb7e18662e90d2b3614cb600128ff8cceca6307d38e002a8d4f780e4cbb0651b3396e43ae82f825221e94145048458f8aeccd94f2e76056c6c2772c47f2e4f66f73f02623760bcfe19d4cce744129a59314879495ecd6bed9a6bb0041d5d0ac422a06ae23a9bfd683cac3c375131c8248c63829082f96949b43e81ed91278d604a39eae8b8e18434c940a0666323361c20ea8f5cb5ef435e5b52c976d8b33631bfb42e6bfb61b0ce44e5b17a97a9d3454605b95adc3fb1367d403611d6677c9c0d0fe3bf0794b4e753b2de5bc62acae2a8a526f4243c52675dff39b7e6ec5cf0dfc0d6da039fe7392872ee49fab027774c5ceca57e7b297086bb1a418fef902f6e9ad25153ed53e281fdd7785558e3cc3dcbf45b2327a9cb880fafbf81d3a13aacb6273ff272bc5c9b3c0ea8c189326ce3bb59839a83c40369fc24e83107c7a00dd38ebdb5f5dbe6099345e0f56cfe563572c9e59a0a075834ea1f8f74a64e4eae7e949722700f9c711bb025601961fd2c6a15b4a03ecb6c08f6fcb3908cc8c2e120da58132417c30d5f6fbb5fa0461207223ea0a1a25251b3565b70aac7753ea4554772e16fcfef3446a9ab053663c30884ea9619fe9eb166704f19c3e77ea89546ce35e02e68e1adbc975ea83cec6066da16a5bed294e0d5d767412d5f753af12eb609c1e6cdbdf5d1c6592812d084b92e1e8c25babd15d2ab596e831a16534b4768b171e4e1ca174eaab875341e6b8821ab8e4f512f789af3e843acbc68f95817d00fb87b1718b0d009e6539823095eae87646016af52a79aaad9719293ebdd89e9ca9d1bdf125e98d28661171a3d3d97cbb968d86671b87fe90d064af5e9d44de8e8866ccd6894eafa320f6d732ae4eefbcd872518d483f1f08be5d534959400950dd42280ed455a4bf147f985779fba6ff8de188073fa7023dee9af074d41098466115e906c26804d9f933520a6771dae96405d4d6a4ae44ab6f8000a8673736725220756db6da2a7a04b9c0c0b1c27e7413f49781d102faa2886259d36aa41b2df8743076e21863dca64536b9625808b6bf915351900cf489f1c6e548048d78a09fdd678f20b9425f108565f5c69049234e1332b6f0a4d50711fe1d02b6b7be0b3230448733b695fae6e679f119e7f0bf44c1ad26507ea97f0c2a088f2ca35789af4574fc7c585d49599a919d038ba2f6845c69c65cd78da5265f13678d81ff91fa6bccaf86f8ff84e65ea0733b5c8a91c002038456844aa8c15b0a81fd11c1eee303381b41082aab20518421850ed843f819825fae96a328cf90f99935b1e7825feba0e9a073051294bd8053cc00aff2e7018b6c556460fb245d173cf250bb4d1064fe9be860b19aad06a0d26f089280753fd636fd25a56482d145efd2be6700a75571c757c7feaf9d8dc479468d8f26471e994cac47d06d891e9921ffb6d037ccbc8f4795faa7a5dd570315d15237d94088c97ef724aade9d8870ee4a3274a72635a14c91ba1abf8be0c5246f582119f85c7e51e5a92ba7d0dd3a290305488ddeb19c8d846ce43c013a3354220d8b1ae45b17d12732ef457afaffc5517a16ba14d2790a3a478214f96845cceaa73ae3870c63565ec57d394faded36f4b85d851872748e925722b0e1438b9f6be58708ef4ef86294ebb6c2c54a9041f923ab8214b50ba8483bbf0a394134cd72b16d7d10e553bb719f04d677431c1d98ab8f3759b3d714bb040781f2fb90c68ae10d93c062f247db076870f80050f912785870c39e4eab8ba1e4bae31b28beeb78bdf5e1305db16f5a05ec4a8e01998adfd4f03b30255cb5b020c9a1db280192da9f343ca19234f6daa61726dd006a4c08c48af9b5f67f58219faf985e4822b0c8a7879cbdb7724e8b5da222e4b32fc88b851a8d28d260694886d2ec07979c810cbb071e32022d9a79f6d502e68337e29bae2af84ceb378a699100cbe0f0c6559a9d65cd468869ae104e9313166bfc83a8b26c14cb94960cf3c06320c99e071ee478a246c699c40c3cd62fdbead3b842c36f364e644a74bbf2350f5c56e794cc9c192fdf7d7c687fd6e0e6694da8c14e724267e9dd94dab47024eb3418b6577a223c503a5c382e9906acc9dcfc7d8dd74cd0f197f87d334f06b389c27c21d508ebbb508a45fdfc422fc9b44addb45d70d2fb1ce08219fe25756c99a9cae2ce9a3ad1bcf1c69d7ac015ac4427b8171b524e27b0983b3d7a94a775531dc6b06f73df893ac9d0ecf3a4fe862280de4e1ae018c84edd0d850e3a4d3bfa30e65efabd58b1cd3827757ea739b50ff086289653524388c4ad799827411ed42c06fc548a1975eeb3c1cae25c35482f883ccf3af8c942c39b6e931a24c9cfd973d83ada54a5c1aac8921c7940389b90415af2a20c66715653e3531d31f178d76a0f3ff5c6cedd5391653672a7ab38b0095c1c390ee3572e025888b7af01eada4faf1a93688855ca744c33f29f31a97398224eaa10d7a855c2aeeacb85bcb68e0c689ce8735e55c03f905b121f05c879d352bd1bf8b36ed00695ed4537013903f57eab270ede500b01333d8a9d2a4be3ddc5e77a7929722b70c8db597fc8979e40b77ea2fc5fe1e7128b821882fc176d536dbfc3e7cb4f4cd8177b789489b86a3da99c39939d0eaa7e3abef4683f398589317fe9d99248edfe5d842a2fc80356ea1987bb70f286802956e26f73ce5844b22d70485d4fa46fa4a9412304fbe5e08ed15e8003a051de8152e1e2a6816cf2be27080366d9bf4fd39bf286c1c70b8897d9f774aec86e8f895610ed9628c67bbded47229175f9d5a07c9dc1dc38ab0490fa2371d4ac4924748ac237c7fd95fef1baab9e3b1bf5699508e340e65f95c93c36296c8e887aef1b5c73f7085ceb9279df20dface295a3248a051704551525d0bae689b812e24d4e83fd6c1c18e8a3519e40f99951453ae8950ef1fac1157ffb931d619db679ac87a8f775602b91739bbd4456eecd5179e08fbed21f3685d9e97542c7afa31cd991d613bda75e3e0348f1060d0c8fbaee2c9838e469d5d9e3506bff1a23aa4e3ab39cd74440db0d2a0f0234d90998a31fbb66d17617e821750b629ce328e6896d3f919de6218a1d65bedcec3f98cbee2eec06601b2fe27c9cd91d21c55c17a7f877481a9ac077d6fb0ebf6f4ac6f150323d02ef382fb4fcf381ba42d13c0663ad976b5ff9f7246834405f351c3b176fe49308a5e60097d709d72c950043fdc6bdfcb281247881efd6242ed936d300dfced26f79a5e9803355a1b8d5e6ad893627085afdacc23c061f82ecf4f56c0f40e4a6d63aac6e07f237526b31a981ef1bb9861b88ad22a435ada14a3e2d39460b3c5b72747c3117ba9edc37a6b8b4438d91093ba1ded8e8af592ca6913b7b1d74236e7f1c4abfe0613382f31815eb5c9abc226a22d60eb4b9b6a837e6794395d5be038ff5560cd77a4de18ea43138eb7fb5aa3d7f54732f5575e3cb2584af77326284bb09326fd9f55a0f5b157fdca7766d68abfac95b686805ce5806fb57a404a555fb734962c4cec115957ae03d4c7179891f72620687f9ae20f2039f20e0750857d88e63f5dc05f7059fdf38bc8cf5f13674ea4b686c899631df30fbd9034d9959ee3943eb830987af1ba287fe428f6824e25d0fcdaffbf143e8da665ba75fd6a3a61cd9e56d409619a55ec8a1b634b56f680d01aa0405e3f1fe0a6cc47659b1c26a5c6f0cb86d71e4cbb6ccb5b3352698ce6a7cd81ca9347efc16529b4ae7b11c0e52a634ed0e7f1313304a4d5d6bc2a66cec3862a783b2d2c2ecb16731968351305c1d972334b54ac698842fbd425d67fa0556829e4b150a26e493fe8a64604568109e8af9093feb2593d428cc50c4399878b090addc3d4c1569220e9795a305a18f639f354bb870cd732aa5a6deb8412d40b3256feeddc4496e8378e06b2cdf5b95894a27fc0511bcd62b86aa4db599f4beafee1342c4d3f1de7804abbbe1f7978f192ee40962b353a58c1280fbc4e27389fabac17f17461f6569784e74cc6b141a8cc4caa27dab86ba166dbf54f641039f13fd4da181f64ec199df119ac7bd154f0d98820edc1087fe4d6a8b345563438ed4f1fc8e92a0bd028acc95810796127353fd0c724bed53e3c4dcd171f00c19ba15e23a0c906b08089d598d421198e0195b3f55ded61e036b6ea083eb1d9fdade7ec1ccd1d6ff88f3d2ca3af99dd0db76366d3d3c274cb0de99d78b1b6d9be747e8873a5235e57c600ef29cefbf4355e23790f2e15e30642b557fa953b80d28779d1858ecf4ef5747b6c07b64e14837844d8b9fbdd06b687ba76ff896156a5fb009b9a09ddfd0374085a2b80dd170a3262e89e36e511fe971bb1f7a18248cf160eb8296ead7bbba4efd31172650c056bcecbe888394adc1ffa3b5e9c8feecdd762013be78c26fae25dbf6e3c8abcecf6695ef0345a720d6867e26d502d03ba760b77a22183fbc4082d850b7258d449c867958fb833ead434400cc5cfea6e9f3224102f9fdb634c7ba3f6c3ba8159628f29f8223d12636cad1aa538d42b27aa5e1c35f4539d0d4287030e5f934ad88fb4aea372f3eb5a2b655a985ff61926c3a584f531671ba24630379e3be3d377cee8d7cd595b9664916c6ad6c5d5e952b308d45df14a5b3211d169286152da5e969460ec04d0d36ba88db767302d9cbdc4d8d07ebd6b4c8f650fc7931d358db7e7afd3a03c2df8805640b6951f27d466ae953b7dc6620ba66890b8052b51d1ec51c550020ce4e5ba52ee4f4a310cf677e0009e25bad6547de1b4578832016a85a8267c14810c38a7f45d9ab86449862a08d7f54a831c71898ff4e8a29e2b7f967cbc18f9c8384cc9362cc95594b7c0801cd97413bd812ca5e13acbd4f41296aba0480e60ba576a93ceede27ffc031ea18363cf0ed24a5c775f864b1bbed5500c7c9b37a466d214957d376dabb1a4f97f016d03be6c6c1df73a440223e0706f7a4e08e555bc5625e0e0727df4b54af4950360370b6e225256e51b3203baf6ff675448bcd9bbdeac3b78d8bb7157133cc80c7e807db91230dbead5aa5b06da0a9a75283fa4427fe0178d4e9d3", 0x1000, 0x80000001}, {&(0x7f0000001440)="56f8c5046672fe0541b1c09c4d21e4a9bec4511f92de8b29a66e2a473cb96e590cc23eb2ece5a46f07f2179e024d9581197dd1b059c3b471193681070a8b2162e5f094c1c0cb7c6493160905c6bb08371782e70209ba6e05420644ebc8b74325865a4086e15ffdac7f9c3c5ebdb955c9bf6cc08b", 0x74, 0xb92}], 0x1001024, &(0x7f0000001540)={[{'&'}, {}, {':'}, {'%\'_),!'}, {}, {'j!{-}O$^'}, {}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) 21:49:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x1f, 0x5, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x65, 0x0, 0x7f, 0x29, 0x0, @multicast2, @private=0xa010101, {[@cipso={0x86, 0x40, 0xffffffffffffffff, [{0x6, 0xb, "056833bf129d67888a"}, {0x6, 0xa, "faf6f6e3093abe73"}, {0xd780932031a5cdc7, 0x7, "37c7d641a9"}, {0x5, 0x10, "f76035af6b23ae76a2ef2819ac82"}, {0x7, 0xe, "fea12f11f2e08276dd1bea13"}]}, @timestamp={0x44, 0x10, 0xa7, 0x0, 0xf, [0xd9a, 0xad3, 0x9]}, @rr={0x7, 0x1b, 0x2c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010100, @rand_addr=0x64010102, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xd3, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0xc8, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xd060}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7fffffff}, {@broadcast, 0x8000}, {@private=0xa010102, 0xffffffff}, {@loopback, 0x3}]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004010}, 0x44) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0) 21:49:41 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getgroups(0x1, &(0x7f00000004c0)=[r1]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r6, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xff}, @crypto_settings, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x804) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00:', @ANYRES16=r6, @ANYBLOB="00022bbd7000fedbdf25680000001200c70009015c010004df5f66ca4f0ec51d0000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r7, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3]) [ 487.279439] FAULT_INJECTION: forcing a failure. [ 487.279439] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 487.280525] CPU: 1 UID: 0 PID: 6121 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 487.280543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 487.280552] Call Trace: [ 487.280557] [ 487.280562] dump_stack_lvl+0xfa/0x120 [ 487.280588] should_fail_ex+0x4d7/0x5e0 [ 487.280612] should_fail_alloc_page+0xe0/0x110 [ 487.280629] prepare_alloc_pages+0x1af/0x500 [ 487.280648] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 487.280668] ? lock_release+0xc8/0x290 [ 487.280689] ? perf_trace_lock+0xb5/0x5d0 [ 487.280705] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 487.280731] ? __lock_acquire+0xc65/0x1b70 [ 487.280748] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 487.280767] ? policy_nodemask+0xeb/0x4e0 [ 487.280787] alloc_pages_mpol+0xed/0x340 [ 487.280804] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 487.280822] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.280836] ? get_vma_policy+0x23b/0x350 [ 487.280857] vma_alloc_folio_noprof+0xe9/0x440 [ 487.280876] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 487.280894] ? find_held_lock+0x2b/0x80 [ 487.280917] ? __handle_mm_fault+0x7ed/0x30f0 [ 487.280942] ? lock_release+0xc8/0x290 [ 487.280958] __handle_mm_fault+0x142c/0x30f0 [ 487.280979] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.280993] ? __pfx___handle_mm_fault+0x10/0x10 [ 487.281011] ? __pte_offset_map_lock+0x190/0x330 [ 487.281034] ? no_page_table+0xc7/0x220 [ 487.281053] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 487.281077] handle_mm_fault+0x2c3/0x900 [ 487.281101] __get_user_pages+0x58a/0x2f10 [ 487.281130] ? down_read_killable+0x1d4/0x4f0 [ 487.281150] ? __pfx___get_user_pages+0x10/0x10 [ 487.281171] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.281188] __gup_longterm_locked+0xba7/0x1760 [ 487.281200] ? perf_trace_lock+0x1/0x5d0 [ 487.281213] ? try_get_folio+0xf1/0x730 [ 487.281234] ? lock_release+0xc8/0x290 [ 487.281248] ? __pfx___gup_longterm_locked+0x10/0x10 [ 487.281261] ? try_get_folio+0x235/0x730 [ 487.281280] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 487.281305] gup_fast_fallback+0x84e/0x2500 [ 487.281331] ? __pfx_gup_fast_fallback+0x10/0x10 [ 487.281346] ? kernel_text_address+0x5b/0xc0 [ 487.281361] ? __kernel_text_address+0xd/0x40 [ 487.281374] ? unwind_get_return_address+0x59/0xa0 [ 487.281393] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.281411] ? arch_stack_walk+0x9c/0xf0 [ 487.281427] pin_user_pages_fast+0xa7/0x100 [ 487.281439] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 487.281457] iov_iter_extract_pages+0x84d/0x1e00 [ 487.281476] ? lock_acquire+0x15e/0x2f0 [ 487.281493] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 487.281510] ? find_held_lock+0x2b/0x80 [ 487.281531] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 487.281548] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.281565] ? bio_associate_blkg_from_css+0x508/0x1380 [ 487.281582] bio_iov_iter_get_pages+0x351/0xf90 [ 487.281599] ? bio_associate_blkg+0x139/0x2a0 [ 487.281613] ? lock_release+0xc8/0x290 [ 487.281629] ? bio_associate_blkg+0x143/0x2a0 [ 487.281648] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 487.281665] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 487.281679] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.281695] ? iov_iter_is_aligned+0xf2/0x5a0 [ 487.281714] ? iov_iter_npages+0xfe/0x520 [ 487.281735] blkdev_direct_IO+0x753/0x1e70 [ 487.281753] ? __is_insn_slot_addr+0x140/0x290 [ 487.281774] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 487.281785] ? __kernel_text_address+0xd/0x40 [ 487.281798] ? unwind_get_return_address+0x59/0xa0 [ 487.281820] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.281836] ? arch_stack_walk+0x9c/0xf0 [ 487.281850] ? avc_policy_seqno+0x9/0x20 [ 487.281868] ? selinux_file_permission+0x99/0x600 [ 487.281887] blkdev_read_iter+0x27f/0x510 [ 487.281914] aio_read+0x2a3/0x450 [ 487.281930] ? __pfx_aio_read+0x10/0x10 [ 487.281943] ? perf_trace_lock+0xb5/0x5d0 [ 487.281960] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.281978] ? lock_acquire+0x15e/0x2f0 [ 487.281991] ? __might_fault+0xe0/0x190 [ 487.282006] ? find_held_lock+0x2b/0x80 [ 487.282023] ? __might_fault+0x138/0x190 [ 487.282038] ? lock_release+0xc8/0x290 [ 487.282052] ? __might_fault+0xe0/0x190 [ 487.282070] io_submit_one+0x5a7/0x1a90 [ 487.282090] ? __pfx_io_submit_one+0x10/0x10 [ 487.282105] ? lock_acquire+0x15e/0x2f0 [ 487.282118] ? __might_fault+0xe0/0x190 [ 487.282136] ? lock_release+0xc8/0x290 [ 487.282150] ? __might_fault+0xe0/0x190 [ 487.282167] __x64_sys_io_submit+0x182/0x2e0 [ 487.282183] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 487.282196] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 487.282220] ? ksys_write+0x1a3/0x240 [ 487.282233] ? __pfx_ksys_write+0x10/0x10 [ 487.282251] do_syscall_64+0xbf/0x360 [ 487.282272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.282288] RIP: 0033:0x7f3246103b19 [ 487.282299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 487.282312] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 487.282324] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 487.282333] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 487.282341] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 487.282349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.282357] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 487.282375] 21:49:41 executing program 3: r0 = shmget(0x1, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) [ 487.377439] FAULT_INJECTION: forcing a failure. [ 487.377439] name failslab, interval 1, probability 0, space 0, times 0 [ 487.379483] CPU: 0 UID: 0 PID: 6130 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 487.379524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 487.379541] Call Trace: [ 487.379552] [ 487.379564] dump_stack_lvl+0xfa/0x120 [ 487.379619] should_fail_ex+0x4d7/0x5e0 [ 487.379677] ? ext4_find_extent+0x7f5/0xa00 [ 487.379718] should_failslab+0xc2/0x120 [ 487.379757] __kmalloc_noprof+0xb4/0x4b0 [ 487.379807] ? __is_insn_slot_addr+0x140/0x290 [ 487.379876] ext4_find_extent+0x7f5/0xa00 [ 487.379911] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.379976] ext4_ext_map_blocks+0x1cc/0x5f70 [ 487.380031] ? perf_trace_lock+0xb5/0x5d0 [ 487.380070] ? perf_trace_lock+0x2/0x5d0 [ 487.380112] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.380160] ? lock_acquire+0x15e/0x2f0 [ 487.380195] ? __is_insn_slot_addr+0x2e/0x290 [ 487.380244] ? find_held_lock+0x2b/0x80 [ 487.380294] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 487.380337] ? lock_release+0xc8/0x290 [ 487.380382] ? look_up_lock_class+0x56/0x150 [ 487.380425] ? register_lock_class+0x41/0x560 [ 487.380469] ? __lock_acquire+0xc65/0x1b70 [ 487.380529] ? lock_acquire+0x15e/0x2f0 [ 487.380563] ? ext4_map_blocks+0x49f/0x14a0 [ 487.380621] ext4_map_query_blocks+0x117/0x890 [ 487.380675] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 487.380720] ? __pfx_down_read+0x10/0x10 [ 487.380764] ? ext4_es_lookup_extent+0xc8/0xb30 [ 487.380828] ext4_map_blocks+0x4b3/0x14a0 [ 487.380888] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 487.380934] ? __pfx_ext4_map_blocks+0x10/0x10 [ 487.380980] ? lock_is_held_type+0x9e/0x120 [ 487.381033] ? jbd2__journal_start+0xf6/0x6b0 [ 487.381091] ? __ext4_journal_start_sb+0x325/0x5d0 [ 487.381121] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 487.381151] ? ext4_iomap_begin+0x5b8/0xe80 [ 487.381180] ? ext4_meta_trans_blocks+0x256/0x310 [ 487.381219] ext4_iomap_begin+0xa62/0xe80 [ 487.381253] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.381309] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 487.381348] ? mark_held_locks+0x49/0x80 [ 487.381390] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 487.381424] ? __create_object+0x59/0x80 [ 487.381468] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 487.381506] iomap_iter+0x544/0xdb0 [ 487.381573] __iomap_dio_rw+0x69e/0x1cf0 [ 487.381631] ? __virt_addr_valid+0x1c6/0x5d0 [ 487.381702] ? __pfx___iomap_dio_rw+0x10/0x10 [ 487.381766] ? kasan_quarantine_put+0x84/0x1e0 [ 487.381848] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 487.381886] ? __pfx_ext4_orphan_add+0x10/0x10 [ 487.381938] iomap_dio_rw+0x40/0xa0 [ 487.381977] ext4_file_write_iter+0xe0b/0x1990 [ 487.382028] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 487.382064] ? ksys_write+0x121/0x240 [ 487.382091] ? lock_is_held_type+0x9e/0x120 [ 487.382124] vfs_write+0xbe9/0x10c0 [ 487.382146] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 487.382185] ? __pfx_vfs_write+0x10/0x10 [ 487.382233] ksys_write+0x121/0x240 [ 487.382254] ? __pfx_ksys_write+0x10/0x10 21:49:42 executing program 3: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) [ 487.382287] do_syscall_64+0xbf/0x360 [ 487.382321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.382345] RIP: 0033:0x7fc68e2fdb19 [ 487.382363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 487.382385] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 487.382407] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 487.382423] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 487.382437] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 487.382452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.382471] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 487.382523] [ 487.496876] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 21:49:42 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 15) [ 487.534457] random: crng reseeded on system resumption 21:49:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) sendfile(r2, r0, &(0x7f0000000040)=0x8000000002, 0x3f) 21:49:42 executing program 2: process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) kcmp(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f00000001c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x1) pipe(&(0x7f00000001c0)) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8e}, &(0x7f00000000c0), 0x0) [ 487.577783] FAULT_INJECTION: forcing a failure. [ 487.577783] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 487.578922] CPU: 1 UID: 0 PID: 6145 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 487.578942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 487.578951] Call Trace: [ 487.578955] [ 487.578960] dump_stack_lvl+0xfa/0x120 [ 487.578983] should_fail_ex+0x4d7/0x5e0 [ 487.579010] should_fail_alloc_page+0xe0/0x110 [ 487.579025] prepare_alloc_pages+0x1af/0x500 [ 487.579043] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 487.579061] ? lock_release+0xc8/0x290 [ 487.579087] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 487.579110] ? __lock_acquire+0xc65/0x1b70 [ 487.579127] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 487.579144] ? policy_nodemask+0xeb/0x4e0 [ 487.579166] alloc_pages_mpol+0xed/0x340 [ 487.579182] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 487.579199] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.579213] ? get_vma_policy+0x23b/0x350 [ 487.579232] vma_alloc_folio_noprof+0xe9/0x440 [ 487.579250] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 487.579267] ? find_held_lock+0x2b/0x80 [ 487.579283] ? __handle_mm_fault+0x7ed/0x30f0 [ 487.579301] ? lock_release+0xc8/0x290 [ 487.579317] __handle_mm_fault+0x142c/0x30f0 [ 487.579336] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.579350] ? __pfx___handle_mm_fault+0x10/0x10 [ 487.579367] ? __pte_offset_map_lock+0x190/0x330 [ 487.579389] ? no_page_table+0xc7/0x220 [ 487.579407] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 487.579429] handle_mm_fault+0x2c3/0x900 [ 487.579450] __get_user_pages+0x58a/0x2f10 [ 487.579477] ? down_read_killable+0x1d4/0x4f0 [ 487.579496] ? __pfx___get_user_pages+0x10/0x10 [ 487.579517] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.579533] __gup_longterm_locked+0xba7/0x1760 [ 487.579543] ? perf_trace_lock+0x1/0x5d0 [ 487.579555] ? try_get_folio+0xf1/0x730 [ 487.579576] ? lock_release+0xc8/0x290 [ 487.579589] ? __pfx___gup_longterm_locked+0x10/0x10 [ 487.579601] ? try_get_folio+0x235/0x730 [ 487.579619] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 487.579642] gup_fast_fallback+0x84e/0x2500 [ 487.579668] ? __pfx_gup_fast_fallback+0x10/0x10 [ 487.579681] ? kernel_text_address+0x5b/0xc0 [ 487.579695] ? __kernel_text_address+0xd/0x40 [ 487.579707] ? unwind_get_return_address+0x59/0xa0 [ 487.579725] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.579742] ? arch_stack_walk+0x9c/0xf0 [ 487.579757] pin_user_pages_fast+0xa7/0x100 [ 487.579769] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 487.579786] iov_iter_extract_pages+0x84d/0x1e00 [ 487.579803] ? lock_acquire+0x15e/0x2f0 [ 487.579817] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 487.579828] ? find_held_lock+0x2b/0x80 [ 487.579844] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 487.579860] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.579879] ? bio_associate_blkg_from_css+0x508/0x1380 [ 487.579898] bio_iov_iter_get_pages+0x351/0xf90 [ 487.579914] ? bio_associate_blkg+0x139/0x2a0 [ 487.579926] ? lock_release+0xc8/0x290 [ 487.579942] ? bio_associate_blkg+0x143/0x2a0 [ 487.579959] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 487.579975] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 487.579989] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.580004] ? iov_iter_is_aligned+0xf2/0x5a0 [ 487.580022] ? iov_iter_npages+0xfe/0x520 [ 487.580041] blkdev_direct_IO+0x753/0x1e70 [ 487.580058] ? __is_insn_slot_addr+0x140/0x290 [ 487.580078] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 487.580089] ? __kernel_text_address+0xd/0x40 [ 487.580101] ? unwind_get_return_address+0x59/0xa0 [ 487.580117] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.580131] ? arch_stack_walk+0x9c/0xf0 [ 487.580145] ? avc_policy_seqno+0x9/0x20 [ 487.580162] ? selinux_file_permission+0x99/0x600 [ 487.580179] blkdev_read_iter+0x27f/0x510 [ 487.580194] aio_read+0x2a3/0x450 [ 487.580209] ? __pfx_aio_read+0x10/0x10 [ 487.580221] ? perf_trace_lock+0xb5/0x5d0 [ 487.580237] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.580253] ? lock_acquire+0x15e/0x2f0 [ 487.580266] ? __might_fault+0xe0/0x190 [ 487.580280] ? find_held_lock+0x2b/0x80 [ 487.580296] ? __might_fault+0x138/0x190 [ 487.580309] ? lock_release+0xc8/0x290 [ 487.580322] ? __might_fault+0xe0/0x190 [ 487.580339] io_submit_one+0x5a7/0x1a90 [ 487.580357] ? __pfx_io_submit_one+0x10/0x10 [ 487.580372] ? lock_acquire+0x15e/0x2f0 [ 487.580384] ? __might_fault+0xe0/0x190 [ 487.580400] ? lock_release+0xc8/0x290 [ 487.580413] ? __might_fault+0xe0/0x190 [ 487.580430] __x64_sys_io_submit+0x182/0x2e0 [ 487.580444] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 487.580457] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 487.580479] ? ksys_write+0x1a3/0x240 [ 487.580491] ? __pfx_ksys_write+0x10/0x10 [ 487.580508] do_syscall_64+0xbf/0x360 [ 487.580526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.580538] RIP: 0033:0x7f3246103b19 [ 487.580548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 487.580560] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 487.580572] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 487.580580] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 487.580588] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 487.580595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.580603] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 487.580622] 21:49:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 10) [ 487.669523] random: crng reseeded on system resumption [ 487.670324] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 21:49:42 executing program 6: mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) 21:49:42 executing program 3: prctl$PR_SET_KEEPCAPS(0x8, 0x1) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) prctl$PR_SET_KEEPCAPS(0x8, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 21:49:42 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 16) 21:49:42 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getgroups(0x1, &(0x7f00000004c0)=[r1]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r6, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xff}, @crypto_settings, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x804) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00:', @ANYRES16=r6, @ANYBLOB="00022bbd7000fedbdf25680000001200c70009015c010004df5f66ca4f0ec51d0000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r7, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3]) [ 487.792886] FAULT_INJECTION: forcing a failure. 21:49:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') lseek(r0, 0x100000000, 0x1) [ 487.792886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 487.795570] CPU: 0 UID: 0 PID: 6164 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 487.795623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 487.795645] Call Trace: [ 487.795657] [ 487.795671] dump_stack_lvl+0xfa/0x120 [ 487.795729] should_fail_ex+0x4d7/0x5e0 [ 487.795797] should_fail_alloc_page+0xe0/0x110 [ 487.795845] prepare_alloc_pages+0x1af/0x500 [ 487.795896] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 487.795933] ? lock_release+0xc8/0x290 [ 487.795983] ? perf_trace_lock+0xb5/0x5d0 [ 487.796013] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 487.796062] ? __lock_acquire+0xc65/0x1b70 [ 487.796097] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 487.796131] ? policy_nodemask+0xeb/0x4e0 [ 487.796168] alloc_pages_mpol+0xed/0x340 [ 487.796202] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 487.796241] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.796269] ? get_vma_policy+0x23b/0x350 [ 487.796310] vma_alloc_folio_noprof+0xe9/0x440 [ 487.796349] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 487.796384] ? find_held_lock+0x2b/0x80 [ 487.796422] ? __handle_mm_fault+0x7ed/0x30f0 [ 487.796462] ? lock_release+0xc8/0x290 [ 487.796494] __handle_mm_fault+0x142c/0x30f0 [ 487.796534] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.796563] ? __pfx___handle_mm_fault+0x10/0x10 [ 487.796598] ? __pte_offset_map_lock+0x190/0x330 [ 487.796642] ? no_page_table+0xc7/0x220 [ 487.796677] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 487.796724] handle_mm_fault+0x2c3/0x900 [ 487.796769] __get_user_pages+0x58a/0x2f10 [ 487.796828] ? down_read_killable+0x1d4/0x4f0 [ 487.796866] ? __pfx___get_user_pages+0x10/0x10 [ 487.796910] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.796942] __gup_longterm_locked+0xba7/0x1760 [ 487.796966] ? perf_trace_lock+0x1/0x5d0 [ 487.796991] ? try_get_folio+0xf1/0x730 [ 487.797035] ? lock_release+0xc8/0x290 [ 487.797065] ? __pfx___gup_longterm_locked+0x10/0x10 [ 487.797091] ? try_get_folio+0x235/0x730 [ 487.797129] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 487.797178] gup_fast_fallback+0x84e/0x2500 [ 487.797232] ? __pfx_gup_fast_fallback+0x10/0x10 [ 487.797260] ? kernel_text_address+0x5b/0xc0 [ 487.797288] ? __kernel_text_address+0xd/0x40 [ 487.797313] ? unwind_get_return_address+0x59/0xa0 [ 487.797348] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.797379] ? arch_stack_walk+0x9c/0xf0 [ 487.797409] pin_user_pages_fast+0xa7/0x100 [ 487.797432] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 487.797468] iov_iter_extract_pages+0x84d/0x1e00 [ 487.797503] ? lock_acquire+0x15e/0x2f0 [ 487.797530] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 487.797554] ? find_held_lock+0x2b/0x80 [ 487.797588] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 487.797618] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.797652] ? bio_associate_blkg_from_css+0x508/0x1380 [ 487.797686] bio_iov_iter_get_pages+0x351/0xf90 [ 487.797719] ? bio_associate_blkg+0x139/0x2a0 [ 487.797744] ? lock_release+0xc8/0x290 [ 487.797778] ? bio_associate_blkg+0x143/0x2a0 [ 487.797816] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 487.797849] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 487.797877] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.797926] ? iov_iter_is_aligned+0xf2/0x5a0 [ 487.797962] ? iov_iter_npages+0xfe/0x520 [ 487.798003] blkdev_direct_IO+0x753/0x1e70 [ 487.798037] ? __is_insn_slot_addr+0x140/0x290 [ 487.798078] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 487.798099] ? __kernel_text_address+0xd/0x40 [ 487.798124] ? unwind_get_return_address+0x59/0xa0 [ 487.798158] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.798188] ? arch_stack_walk+0x9c/0xf0 [ 487.798215] ? avc_policy_seqno+0x9/0x20 [ 487.798248] ? selinux_file_permission+0x99/0x600 [ 487.798281] blkdev_read_iter+0x27f/0x510 [ 487.798312] aio_read+0x2a3/0x450 [ 487.798339] ? __pfx_aio_read+0x10/0x10 [ 487.798364] ? perf_trace_lock+0xb5/0x5d0 [ 487.798397] ? __pfx_perf_trace_lock+0x10/0x10 [ 487.798431] ? lock_acquire+0x15e/0x2f0 [ 487.798457] ? __might_fault+0xe0/0x190 [ 487.798486] ? find_held_lock+0x2b/0x80 [ 487.798521] ? __might_fault+0x138/0x190 [ 487.798550] ? lock_release+0xc8/0x290 [ 487.798579] ? __might_fault+0xe0/0x190 [ 487.798614] io_submit_one+0x5a7/0x1a90 [ 487.798653] ? __pfx_io_submit_one+0x10/0x10 [ 487.798683] ? lock_acquire+0x15e/0x2f0 [ 487.798709] ? __might_fault+0xe0/0x190 [ 487.798742] ? lock_release+0xc8/0x290 [ 487.798769] ? __might_fault+0xe0/0x190 [ 487.798803] __x64_sys_io_submit+0x182/0x2e0 [ 487.798832] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 487.798858] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 487.798902] ? ksys_write+0x1a3/0x240 [ 487.798926] ? __pfx_ksys_write+0x10/0x10 [ 487.798961] do_syscall_64+0xbf/0x360 [ 487.798997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.799023] RIP: 0033:0x7f3246103b19 [ 487.799043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 487.799067] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 487.799091] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 487.799107] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 487.799122] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 487.799137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.799152] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 487.799189] [ 487.807314] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 21:49:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001080)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="14ff0ce4ffa200000000000000010000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}], 0x2, 0x0) [ 487.871208] random: crng reseeded on system resumption 21:49:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 11) 21:49:50 executing program 4: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0x101}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:49:50 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getgroups(0x1, &(0x7f00000004c0)=[r1]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r6, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xff}, @crypto_settings, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x804) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00:', @ANYRES16=r6, @ANYBLOB="00022bbd7000fedbdf25680000001200c70009015c010004df5f66ca4f0ec51d0000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r7, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3]) 21:49:50 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 17) 21:49:50 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file1', [{0x20, '-}.['}, {0x20, '}'}, {}], 0xa, "6258a749d3ce652b09396b36e17322acd3f588c9f5b5fb05448fe4416df6f8cd291d6ee1da80f2587d986e58d2e9700e8a0d232261cc6041c8d81174e2ff6f6ad5030d7ce71a3d68a015022f064bdcd1d73a83bdc09997aff26da4690ee72b310d5019a3290c8d39d3745dba4b63c5ec879f6d3eb7255d69b71db0212b4040566f04130ee8a860ccb8cb00493463"}, 0xa1) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file1\x00') mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0xa010, &(0x7f0000000240)={[{}, {@memory_localevents}, {@memory_recursiveprot}, {}, {@subsystem='rdma'}], [{@appraise_type}, {@measure}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_type={'obj_type', 0x3d, '#-@,}'}}]}) 21:49:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]}) 21:49:50 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 21:49:50 executing program 5: sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2a9a2cb922cae65f, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() kcmp(r1, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x2, 0x0, 0xd0, 0x2, 0x0, 0x1ff, 0x10, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x4, 0x1f, 0x8, 0x1, 0x0, 0x5a51, 0x101, 0x0, 0x0, 0x0, 0xad}, r1, 0xf, 0xffffffffffffffff, 0xb) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000001) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000180)="89c48eb30bd80fcfd4d24c2f2413986857cfd9578fed92fde63964e01ebd05e0") sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9e9) ptrace$peek(0x2, 0x0, &(0x7f0000000100)) r3 = fork() kcmp(r3, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) capset(&(0x7f0000000140)={0x19971634}, &(0x7f00000001c0)={0x0, 0x400, 0x2720, 0xffffffff, 0xc001}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = getpid() pidfd_open(r5, 0x0) capset(&(0x7f0000000200)={0x20071026, r5}, &(0x7f0000000240)={0x1, 0x1, 0x200, 0x7fffffff, 0x3, 0x8}) getsockopt$inet6_int(r4, 0x6, 0x1, 0x0, &(0x7f0000000040)) kcmp(0x0, r3, 0x4, r4, r0) [ 496.423515] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 496.437015] random: crng reseeded on system resumption [ 496.448111] FAULT_INJECTION: forcing a failure. [ 496.448111] name failslab, interval 1, probability 0, space 0, times 0 [ 496.450185] CPU: 0 UID: 0 PID: 6192 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 496.450216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 496.450230] Call Trace: [ 496.450238] [ 496.450247] dump_stack_lvl+0xfa/0x120 [ 496.450284] should_fail_ex+0x4d7/0x5e0 [ 496.450322] ? __es_insert_extent+0xed2/0x1370 [ 496.450351] should_failslab+0xc2/0x120 [ 496.450376] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 496.450410] ? __pfx___es_remove_extent+0x10/0x10 [ 496.450439] ? vfs_write+0xbe9/0x10c0 [ 496.450457] ? ksys_write+0x121/0x240 [ 496.450483] __es_insert_extent+0xed2/0x1370 [ 496.450516] ? __pfx_do_raw_write_lock+0x10/0x10 [ 496.450561] ext4_es_insert_extent+0x4d0/0x1100 [ 496.450606] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 496.450637] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.450669] ? lock_acquire+0x15e/0x2f0 [ 496.450696] ? find_held_lock+0x2b/0x80 [ 496.450726] ? ext4_es_find_extent_range+0x1cf/0x510 [ 496.450758] ? lock_release+0xc8/0x290 [ 496.450785] ? do_raw_read_unlock+0x44/0xe0 [ 496.450823] ext4_ext_map_blocks+0x178d/0x5f70 [ 496.450858] ? perf_trace_lock+0xb5/0x5d0 [ 496.450883] ? perf_trace_lock+0x2/0x5d0 [ 496.450911] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.450950] ? lock_acquire+0x15e/0x2f0 [ 496.450973] ? __is_insn_slot_addr+0x2e/0x290 [ 496.451007] ? find_held_lock+0x2b/0x80 [ 496.451037] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 496.451068] ? lock_release+0xc8/0x290 [ 496.451098] ? look_up_lock_class+0x56/0x150 [ 496.451125] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.451150] ? register_lock_class+0x41/0x560 [ 496.451180] ? __lock_acquire+0xc65/0x1b70 [ 496.451222] ? lock_acquire+0x15e/0x2f0 [ 496.451245] ? ext4_map_blocks+0x49f/0x14a0 [ 496.451285] ext4_map_query_blocks+0x117/0x890 [ 496.451319] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 496.451350] ? __pfx_down_read+0x10/0x10 [ 496.451379] ? ext4_es_lookup_extent+0xc8/0xb30 [ 496.451416] FAULT_INJECTION: forcing a failure. [ 496.451416] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 496.451422] ext4_map_blocks+0x4b3/0x14a0 [ 496.451463] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 496.451492] ? __pfx_ext4_map_blocks+0x10/0x10 [ 496.451525] ? lock_is_held_type+0x9e/0x120 [ 496.451567] ? jbd2__journal_start+0xf6/0x6b0 [ 496.451605] ? __ext4_journal_start_sb+0x325/0x5d0 [ 496.451633] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 496.451653] ? ext4_iomap_begin+0x5b8/0xe80 [ 496.451673] ? ext4_meta_trans_blocks+0x256/0x310 [ 496.451708] ext4_iomap_begin+0xa62/0xe80 [ 496.451731] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.451773] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 496.451802] ? mark_held_locks+0x49/0x80 [ 496.451830] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 496.451859] ? __create_object+0x59/0x80 [ 496.451889] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 496.451914] iomap_iter+0x544/0xdb0 [ 496.451962] __iomap_dio_rw+0x69e/0x1cf0 [ 496.452003] ? __virt_addr_valid+0x1c6/0x5d0 [ 496.452058] ? __pfx___iomap_dio_rw+0x10/0x10 [ 496.452109] ? kasan_quarantine_put+0x84/0x1e0 [ 496.452164] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 496.452201] ? __pfx_ext4_orphan_add+0x10/0x10 [ 496.452235] iomap_dio_rw+0x40/0xa0 [ 496.452285] ext4_file_write_iter+0xe0b/0x1990 [ 496.452337] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 496.452377] ? ksys_write+0x121/0x240 [ 496.452403] ? lock_is_held_type+0x9e/0x120 [ 496.452437] vfs_write+0xbe9/0x10c0 [ 496.452464] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 496.452501] ? __pfx_vfs_write+0x10/0x10 [ 496.452559] ksys_write+0x121/0x240 [ 496.452579] ? __pfx_ksys_write+0x10/0x10 [ 496.452621] do_syscall_64+0xbf/0x360 [ 496.452654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.452676] RIP: 0033:0x7fc68e2fdb19 [ 496.452699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 496.452719] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 496.452740] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 496.452754] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 496.452769] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 496.452786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 496.452798] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 496.452836] [ 496.484103] CPU: 1 UID: 0 PID: 6191 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 496.484122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 496.484130] Call Trace: [ 496.484136] [ 496.484141] dump_stack_lvl+0xfa/0x120 [ 496.484165] should_fail_ex+0x4d7/0x5e0 [ 496.484190] should_fail_alloc_page+0xe0/0x110 [ 496.484207] prepare_alloc_pages+0x1af/0x500 [ 496.484227] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 496.484249] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.484270] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.484288] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 496.484307] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.484322] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.484340] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.484357] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.484375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 496.484393] ? policy_nodemask+0xeb/0x4e0 [ 496.484414] alloc_pages_mpol+0xed/0x340 [ 496.484432] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 496.484451] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.484465] ? get_vma_policy+0x23b/0x350 [ 496.484486] vma_alloc_folio_noprof+0xe9/0x440 [ 496.484505] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 496.484523] ? find_held_lock+0x2b/0x80 [ 496.484542] ? __handle_mm_fault+0x7ed/0x30f0 [ 496.484561] ? lock_release+0xc8/0x290 [ 496.484578] __handle_mm_fault+0x142c/0x30f0 [ 496.484599] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.484614] ? __pfx___handle_mm_fault+0x10/0x10 [ 496.484633] ? __pte_offset_map_lock+0x190/0x330 [ 496.484657] ? no_page_table+0xc7/0x220 [ 496.484675] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 496.484700] handle_mm_fault+0x2c3/0x900 [ 496.484723] __get_user_pages+0x58a/0x2f10 [ 496.484754] ? down_read_killable+0x1d4/0x4f0 [ 496.484774] ? __pfx___get_user_pages+0x10/0x10 [ 496.484797] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.484814] __gup_longterm_locked+0xba7/0x1760 [ 496.484826] ? perf_trace_lock+0x1/0x5d0 [ 496.484839] ? try_get_folio+0xf1/0x730 [ 496.484860] ? lock_release+0xc8/0x290 [ 496.484875] ? __pfx___gup_longterm_locked+0x10/0x10 [ 496.484888] ? try_get_folio+0x235/0x730 [ 496.484908] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 496.484938] gup_fast_fallback+0x84e/0x2500 [ 496.484967] ? __pfx_gup_fast_fallback+0x10/0x10 [ 496.484982] ? kernel_text_address+0x5b/0xc0 [ 496.484997] ? __kernel_text_address+0xd/0x40 [ 496.485010] ? unwind_get_return_address+0x59/0xa0 [ 496.485029] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 496.485046] ? arch_stack_walk+0x9c/0xf0 [ 496.485062] pin_user_pages_fast+0xa7/0x100 [ 496.485077] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 496.485097] iov_iter_extract_pages+0x84d/0x1e00 [ 496.485116] ? lock_acquire+0x15e/0x2f0 [ 496.485131] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 496.485143] ? find_held_lock+0x2b/0x80 [ 496.485161] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 496.485176] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.485193] ? bio_associate_blkg_from_css+0x508/0x1380 [ 496.485210] bio_iov_iter_get_pages+0x351/0xf90 [ 496.485227] ? bio_associate_blkg+0x139/0x2a0 [ 496.485240] ? lock_release+0xc8/0x290 [ 496.485257] ? bio_associate_blkg+0x143/0x2a0 [ 496.485277] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 496.485294] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 496.485309] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.485325] ? iov_iter_is_aligned+0xf2/0x5a0 [ 496.485344] ? iov_iter_npages+0xfe/0x520 [ 496.485365] blkdev_direct_IO+0x753/0x1e70 [ 496.485384] ? __is_insn_slot_addr+0x140/0x290 [ 496.485406] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 496.485417] ? __kernel_text_address+0xd/0x40 [ 496.485430] ? unwind_get_return_address+0x59/0xa0 [ 496.485447] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 496.485462] ? arch_stack_walk+0x9c/0xf0 [ 496.485477] ? avc_policy_seqno+0x9/0x20 [ 496.485494] ? selinux_file_permission+0x99/0x600 [ 496.485512] blkdev_read_iter+0x27f/0x510 [ 496.485528] aio_read+0x2a3/0x450 [ 496.485543] ? __pfx_aio_read+0x10/0x10 [ 496.485556] ? perf_trace_lock+0xb5/0x5d0 [ 496.485574] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.485592] ? lock_acquire+0x15e/0x2f0 [ 496.485605] ? __might_fault+0xe0/0x190 [ 496.485622] ? find_held_lock+0x2b/0x80 [ 496.485642] ? __might_fault+0x138/0x190 [ 496.485656] ? lock_release+0xc8/0x290 [ 496.485670] ? __might_fault+0xe0/0x190 [ 496.485689] io_submit_one+0x5a7/0x1a90 [ 496.485709] ? __pfx_io_submit_one+0x10/0x10 [ 496.485725] ? lock_acquire+0x15e/0x2f0 [ 496.485738] ? __might_fault+0xe0/0x190 [ 496.485757] ? lock_release+0xc8/0x290 [ 496.485772] ? __might_fault+0xe0/0x190 [ 496.485790] __x64_sys_io_submit+0x182/0x2e0 [ 496.485805] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 496.485818] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 496.485839] ? ksys_write+0x1a3/0x240 [ 496.485851] ? __pfx_ksys_write+0x10/0x10 [ 496.485869] do_syscall_64+0xbf/0x360 [ 496.485888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.485901] RIP: 0033:0x7f3246103b19 [ 496.485911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 496.485923] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 496.485935] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 496.485943] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 496.485951] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 496.485958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 496.485965] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 496.485994] 21:49:51 executing program 6: syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x101000) lseek(r0, 0x800000000007, 0x1) 21:49:51 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000440)={0x0, 0x80, 0x5, 0x7, 0x2, 0x7, 0x0, 0x7fff, 0x1, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x8022, 0x4, 0x7fff, 0x5, 0x2, 0x400, 0x3, 0x0, 0x2, 0x0, 0x9}) r1 = clone3(&(0x7f00000002c0)={0x157281100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syslog(0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) clone3(&(0x7f00000003c0)={0x9000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x10}, &(0x7f00000000c0)=""/84, 0x54, &(0x7f0000000140)=""/143, &(0x7f0000000240)=[r1, r1, r1, r2], 0x4}, 0x58) 21:49:51 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000240)=[r0, r0]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) getgroups(0x1, &(0x7f00000004c0)=[r1]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r6, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xff}, @crypto_settings, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x804) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00:', @ANYRES16=r6, @ANYBLOB="00022bbd7000fedbdf25680000001200c70009015c010004df5f66ca4f0ec51d0000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r7, 0x80083313, &(0x7f0000000000)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) getgroups(0x6, &(0x7f0000000480)=[r0, r0, r1, 0xee01, r2, r3]) 21:49:51 executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xfff) shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ff5000/0x2000)=nil) 21:49:51 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x8000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) shutdown(r1, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) clone3(&(0x7f0000005880)={0x61820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x40, 0x7f, 0x40, 0x4, 0x0, 0x1ff, 0x20200, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2d, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x2200, 0x100000001, 0x4, 0x9, 0x9, 0x7, 0x0, 0x0, 0xb0b, 0x0, 0x8}, r2, 0x6, r0, 0x9) [ 496.648184] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure [ 496.669494] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 496.678167] random: crng reseeded on system resumption 21:49:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 12) 21:49:51 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@loopback, @dev={0xfe, 0x80, '\x00', 0x17}, @empty, 0xfffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0xf409ddac55202424}) 21:49:51 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x16) 21:49:51 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 18) 21:49:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x401, 0xde5}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) pread64(r1, &(0x7f0000000040)=""/20, 0x14, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x440800, 0x8) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000180)={0xa, 0x5, {0xff, @struct={0x1f, 0x5}, 0x0, 0xba, 0x80, 0x8, 0xec, 0x7, 0x10, @usage=0x6, 0x134b, 0x7, [0x6, 0x4, 0x5, 0x6, 0x4, 0x7fffffff]}, {0x8, @struct={0xfff, 0x7}, 0x0, 0x80, 0x3, 0x400, 0x100000000, 0x0, 0x28, @usage=0x1, 0x1000, 0x6, [0x3, 0x4, 0x18602000000000, 0x20, 0x80000001, 0x800]}, {0x0, @usage=0x9, 0x0, 0x4, 0x1, 0x8000, 0x2a15d397, 0x2, 0x8a, @struct={0x3, 0xcc}, 0x10000, 0xa89e, [0x7, 0x0, 0x3, 0x401, 0x1, 0x3]}, {0x6, 0x5, 0x353}}) 21:49:51 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10000, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x1}, 0x20) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0xe, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x18001}, 0x4000810) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000000c0)='bond_slave_0\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000240)=0x7, 0x4) [ 496.878852] FAULT_INJECTION: forcing a failure. [ 496.878852] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 496.879818] CPU: 1 UID: 0 PID: 6225 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 496.879835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 496.879843] Call Trace: [ 496.879847] [ 496.879853] dump_stack_lvl+0xfa/0x120 [ 496.879877] should_fail_ex+0x4d7/0x5e0 [ 496.879900] should_fail_alloc_page+0xe0/0x110 [ 496.879916] prepare_alloc_pages+0x1af/0x500 [ 496.879935] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 496.879958] ? lock_release+0xc8/0x290 [ 496.879973] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.879992] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.880005] ? perf_trace_lock+0xb5/0x5d0 [ 496.880020] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 496.880036] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.880051] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.880068] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.880083] ? perf_trace_lock_acquire+0xc9/0x700 [ 496.880100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 496.880116] ? policy_nodemask+0xeb/0x4e0 [ 496.880136] alloc_pages_mpol+0xed/0x340 [ 496.880152] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 496.880169] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.880182] ? get_vma_policy+0x23b/0x350 [ 496.880202] vma_alloc_folio_noprof+0xe9/0x440 [ 496.880220] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 496.880236] ? find_held_lock+0x2b/0x80 [ 496.880253] ? __handle_mm_fault+0x7ed/0x30f0 [ 496.880270] ? lock_release+0xc8/0x290 [ 496.880286] __handle_mm_fault+0x142c/0x30f0 [ 496.880306] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.880320] ? __pfx___handle_mm_fault+0x10/0x10 [ 496.880336] ? __pte_offset_map_lock+0x190/0x330 [ 496.880359] ? no_page_table+0xc7/0x220 [ 496.880377] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 496.880400] handle_mm_fault+0x2c3/0x900 [ 496.880422] __get_user_pages+0x58a/0x2f10 [ 496.880452] ? down_read_killable+0x1d4/0x4f0 [ 496.880470] ? __pfx___get_user_pages+0x10/0x10 [ 496.880491] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.880508] __gup_longterm_locked+0xba7/0x1760 [ 496.880519] ? perf_trace_lock+0x1/0x5d0 [ 496.880531] ? try_get_folio+0xf1/0x730 [ 496.880551] ? lock_release+0xc8/0x290 [ 496.880564] ? __pfx___gup_longterm_locked+0x10/0x10 [ 496.880577] ? try_get_folio+0x235/0x730 [ 496.880596] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 496.880619] gup_fast_fallback+0x84e/0x2500 [ 496.880648] ? __pfx_gup_fast_fallback+0x10/0x10 [ 496.880662] ? kernel_text_address+0x5b/0xc0 [ 496.880676] ? __kernel_text_address+0xd/0x40 [ 496.880688] ? unwind_get_return_address+0x59/0xa0 [ 496.880706] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 496.880722] ? arch_stack_walk+0x9c/0xf0 [ 496.880737] pin_user_pages_fast+0xa7/0x100 [ 496.880748] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 496.880767] iov_iter_extract_pages+0x84d/0x1e00 [ 496.880785] ? lock_acquire+0x15e/0x2f0 [ 496.880799] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 496.880810] ? find_held_lock+0x2b/0x80 [ 496.880826] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 496.880841] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.880857] ? bio_associate_blkg_from_css+0x508/0x1380 [ 496.880873] bio_iov_iter_get_pages+0x351/0xf90 [ 496.880889] ? bio_associate_blkg+0x139/0x2a0 [ 496.880901] ? lock_release+0xc8/0x290 [ 496.880917] ? bio_associate_blkg+0x143/0x2a0 [ 496.880936] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 496.880952] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 496.880965] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.880980] ? iov_iter_is_aligned+0xf2/0x5a0 [ 496.880997] ? iov_iter_npages+0xfe/0x520 [ 496.881017] blkdev_direct_IO+0x753/0x1e70 [ 496.881035] ? __is_insn_slot_addr+0x140/0x290 [ 496.881055] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 496.881065] ? __kernel_text_address+0xd/0x40 [ 496.881077] ? unwind_get_return_address+0x59/0xa0 [ 496.881093] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 496.881108] ? arch_stack_walk+0x9c/0xf0 [ 496.881121] ? avc_policy_seqno+0x9/0x20 [ 496.881137] ? selinux_file_permission+0x99/0x600 [ 496.881155] blkdev_read_iter+0x27f/0x510 [ 496.881170] aio_read+0x2a3/0x450 [ 496.881184] ? __pfx_aio_read+0x10/0x10 [ 496.881196] ? perf_trace_lock+0xb5/0x5d0 [ 496.881213] ? __pfx_perf_trace_lock+0x10/0x10 [ 496.881229] ? lock_acquire+0x15e/0x2f0 [ 496.881242] ? __might_fault+0xe0/0x190 [ 496.881255] ? find_held_lock+0x2b/0x80 [ 496.881272] ? __might_fault+0x138/0x190 [ 496.881285] ? lock_release+0xc8/0x290 [ 496.881299] ? __might_fault+0xe0/0x190 [ 496.881316] io_submit_one+0x5a7/0x1a90 [ 496.881336] ? __pfx_io_submit_one+0x10/0x10 [ 496.881350] ? lock_acquire+0x15e/0x2f0 [ 496.881363] ? __might_fault+0xe0/0x190 [ 496.881379] ? lock_release+0xc8/0x290 [ 496.881393] ? __might_fault+0xe0/0x190 [ 496.881410] __x64_sys_io_submit+0x182/0x2e0 [ 496.881424] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 496.881437] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 496.881458] ? ksys_write+0x1a3/0x240 [ 496.881470] ? __pfx_ksys_write+0x10/0x10 [ 496.881488] do_syscall_64+0xbf/0x360 [ 496.881505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.881518] RIP: 0033:0x7f3246103b19 [ 496.881528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 496.881539] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 496.881551] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 496.881559] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 496.881566] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 496.881573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 496.881580] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 496.881599] 21:49:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00') ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) lseek(r0, 0x100000000, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f00000000c0)=""/187, &(0x7f0000000180)=0xbb) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0, 0x0) 21:49:51 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1) utime(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 21:49:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 13) 21:49:51 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = getpid() pidfd_open(r1, 0x0) r2 = clone3(&(0x7f0000001280)={0x20000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x31}, &(0x7f0000000140)=""/229, 0xe5, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=[r0, r1], 0x2}, 0x58) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/icmp\x00') lseek(r3, 0x100000000, 0x3) 21:49:51 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ff4000/0x1000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:49:51 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0) close(r2) io_uring_setup(0x2764, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[r2], 0x1) r4 = getpid() pidfd_open(r4, 0x0) clock_gettime(0x0, &(0x7f0000006380)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000006180)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000001840)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000280)=""/247, 0xf7}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000001580)=""/199, 0xc7}, {&(0x7f0000001680)=""/148, 0x94}, {&(0x7f0000001740)=""/213, 0xd5}], 0x9, &(0x7f0000001900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/47, 0x2f}], 0x2, &(0x7f0000002ac0)=[@rights={{0x10}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000002bc0), 0x0, &(0x7f0000002c00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002c80), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d00)=""/51, 0x33}, {&(0x7f0000002d40)=""/181, 0xb5}, {&(0x7f0000002e00)=""/108, 0x6c}, {&(0x7f0000002e80)=""/161, 0xa1}], 0x4}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002f80)=""/229, 0xe5}, {&(0x7f0000003080)=""/189, 0xbd}, {&(0x7f0000003140)=""/191, 0xbf}, {&(0x7f0000003200)=""/3, 0x3}, {&(0x7f0000003240)=""/163, 0xa3}, {&(0x7f0000003300)=""/108, 0x6c}], 0x6, &(0x7f0000003400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000003440)=@abs, 0x6e, &(0x7f0000003640)=[{&(0x7f00000034c0)=""/10, 0xa}, {&(0x7f0000003500)=""/98, 0x62}, {&(0x7f0000003580)=""/171, 0xab}], 0x3, &(0x7f0000003680)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004a80)=[{&(0x7f0000003740)=""/222, 0xde}, {&(0x7f0000003840)=""/244, 0xf4}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/136, 0x88}, {&(0x7f0000004a00)=""/110, 0x6e}], 0x5, &(0x7f0000004b00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000004c80), 0x6e, &(0x7f0000006000)=[{&(0x7f0000004d00)=""/226, 0xe2}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/71, 0x47}, {&(0x7f0000005e80)=""/31, 0x1f}, {&(0x7f0000005ec0)=""/139, 0x8b}, {&(0x7f0000005f80)=""/96, 0x60}], 0x6, &(0x7f0000006080)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x8, 0x100, &(0x7f00000063c0)={r5, r6+60000000}) sendmmsg$unix(r1, &(0x7f0000000480), 0x0, 0x0) [ 497.161239] FAULT_INJECTION: forcing a failure. [ 497.161239] name failslab, interval 1, probability 0, space 0, times 0 [ 497.164679] CPU: 0 UID: 0 PID: 6244 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 497.164712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 497.164727] Call Trace: [ 497.164736] [ 497.164746] dump_stack_lvl+0xfa/0x120 [ 497.164787] should_fail_ex+0x4d7/0x5e0 [ 497.164829] ? ext4_find_extent+0x7f5/0xa00 [ 497.164857] should_failslab+0xc2/0x120 [ 497.164884] __kmalloc_noprof+0xb4/0x4b0 [ 497.164923] ? perf_trace_lock+0xb5/0x5d0 [ 497.164964] ext4_find_extent+0x7f5/0xa00 [ 497.165002] ext4_ext_map_blocks+0x1cc/0x5f70 [ 497.165044] ? look_up_lock_class+0x66/0x150 [ 497.165075] ? register_lock_class+0x41/0x560 [ 497.165106] ? perf_trace_lock_acquire+0xc9/0x700 [ 497.165135] ? perf_trace_lock_acquire+0xc9/0x700 [ 497.165170] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 497.165218] ? lock_acquire+0x15e/0x2f0 [ 497.165243] ? ext4_map_blocks+0x55b/0x14a0 [ 497.165295] ? down_write+0x119/0x1f0 [ 497.165327] ? __pfx_down_write+0x10/0x10 [ 497.165358] ? lock_release+0xc8/0x290 [ 497.165392] ext4_map_blocks+0x624/0x14a0 [ 497.165435] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 497.165464] ? __pfx_ext4_map_blocks+0x10/0x10 [ 497.165497] ? lock_is_held_type+0x9e/0x120 [ 497.165533] ? jbd2__journal_start+0xf6/0x6b0 [ 497.165571] ? __ext4_journal_start_sb+0x325/0x5d0 [ 497.165595] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 497.165617] ? ext4_iomap_begin+0x5b8/0xe80 [ 497.165638] ? ext4_meta_trans_blocks+0x256/0x310 [ 497.165668] ext4_iomap_begin+0xa62/0xe80 [ 497.165691] ? mark_held_locks+0x49/0x80 [ 497.165731] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 497.165762] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 497.165793] ? __create_object+0x59/0x80 [ 497.165823] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 497.165850] iomap_iter+0x544/0xdb0 [ 497.165893] __iomap_dio_rw+0x69e/0x1cf0 [ 497.165935] ? __virt_addr_valid+0x1c6/0x5d0 [ 497.166007] ? __pfx___iomap_dio_rw+0x10/0x10 [ 497.166055] ? kasan_quarantine_put+0x84/0x1e0 [ 497.166112] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 497.166144] ? __pfx_ext4_orphan_add+0x10/0x10 [ 497.166180] iomap_dio_rw+0x40/0xa0 [ 497.166221] ext4_file_write_iter+0xe0b/0x1990 [ 497.166274] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 497.166310] ? ksys_write+0x121/0x240 [ 497.166338] ? lock_is_held_type+0x9e/0x120 [ 497.166373] vfs_write+0xbe9/0x10c0 [ 497.166395] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 497.166436] ? __pfx_vfs_write+0x10/0x10 [ 497.166488] ksys_write+0x121/0x240 [ 497.166510] ? __pfx_ksys_write+0x10/0x10 [ 497.166546] do_syscall_64+0xbf/0x360 [ 497.166581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.166605] RIP: 0033:0x7fc68e2fdb19 [ 497.166624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.166646] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 497.166668] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 497.166684] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 497.166698] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.166712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.166726] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 497.166765] 21:50:01 executing program 3: getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/136, 0x88, 0x20, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) r0 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) shmget(0x1, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) r3 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0xffffffff) shmat(r3, &(0x7f0000fff000/0x1000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x78000808, &(0x7f0000ffd000/0x1000)=nil) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0xffffffffffffffc0, 0x8000) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x6000) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'raw\x00', 0x70, "fda4d59219b2ad8870ce877b61e0e598ce01925306bbbf2d843ec82b94447f6e9c91922eed57f97bfeccd7a563e5d4fb07f554b1a45f1d26adbed7868bdb81b73ad0244a463e7d387104123958ec530c5f0a43c531a98a8a1859c105f16aa8203c33d9d46698fde226515fb39fc1ff0e"}, &(0x7f0000000240)=0x94) 21:50:01 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 19) 21:50:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 14) 21:50:01 executing program 4: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) r3 = geteuid() syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="0dadd5b5d1ef18f8251b47efae4fb6cb87e716549b4219425838e39b", 0x1c, 0xfffffffffffff730}], 0x90800, &(0x7f0000000480)={[{'\x00'}, {'task\x00'}, {'\x95.,+'}, {'task\x00'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@hash}, {@euid_eq={'euid', 0x3d, r2}}, {@dont_appraise}, {@permit_directio}, {@appraise_type}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xee01}}, {@uid_lt={'uid<', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x401}}]}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x4000000002, 0x7}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xfff}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r4, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) lseek(r5, 0x100000000, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) 21:50:01 executing program 7: r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0xd) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1, 0x101) sendfile(r1, r2, 0x0, 0x68e146a1) fcntl$setstatus(r1, 0x4, 0x44000) r3 = getpid() pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_secret(0x80000) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f00000000c0)=0x6) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x68e146a1) truncate(&(0x7f0000000140)='./file0\x00', 0x34) 21:50:01 executing program 6: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000180)={0x0, 0x0, @start={0x0, 0x1, "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", "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"}, [0x0, 0xfff, 0x6, 0x9, 0x0, 0x5, 0x8, 0x0, 0x5, 0xf3, 0xfd43, 0x41, 0xffffffffffffff80, 0x2, 0x0, 0x4, 0xbbb0, 0x1000, 0xd48, 0x9, 0x0, 0x4, 0x5, 0x7, 0x9, 0x40, 0x5, 0x7, 0x4, 0xdc, 0x1, 0x7d58, 0x0, 0xfff, 0x7f, 0x4, 0x9, 0x1ff, 0x1, 0x1f, 0x9, 0xa5, 0x400, 0x3f, 0x6, 0x7, 0x7ff, 0x5, 0x80, 0x7fffffff, 0x3ff, 0x81, 0x800, 0x6, 0x1000, 0x100000000, 0xb6, 0x80000001, 0x8907, 0xfffffffffffffffa, 0x800, 0x9, 0x6, 0x2]}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0xc3, 0x8}, 0x2) 21:50:01 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r9, r7) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000005680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ffffff7f000000002e2f6659f8696c65"]) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r3}}, 0x58) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x141) [ 506.528315] mmap: syz-executor.3 (6270) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 21:50:01 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000440)={0x0, 0x80, 0x5, 0x7, 0x2, 0x7, 0x0, 0x7fff, 0x1, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x8022, 0x4, 0x7fff, 0x5, 0x2, 0x400, 0x3, 0x0, 0x2, 0x0, 0x9}) r1 = clone3(&(0x7f00000002c0)={0x157281100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syslog(0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) clone3(&(0x7f00000003c0)={0x9000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x10}, &(0x7f00000000c0)=""/84, 0x54, &(0x7f0000000140)=""/143, &(0x7f0000000240)=[r1, r1, r1, r2], 0x4}, 0x58) 21:50:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 15) [ 506.612647] FAULT_INJECTION: forcing a failure. [ 506.612647] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 506.613657] CPU: 0 UID: 0 PID: 6285 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 506.613674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 506.613682] Call Trace: [ 506.613687] [ 506.613691] dump_stack_lvl+0xfa/0x120 [ 506.613716] should_fail_ex+0x4d7/0x5e0 [ 506.613739] should_fail_alloc_page+0xe0/0x110 [ 506.613755] prepare_alloc_pages+0x1af/0x500 [ 506.613774] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 506.613793] ? lock_release+0xc8/0x290 [ 506.613808] ? perf_trace_lock_acquire+0xc9/0x700 [ 506.613827] ? perf_trace_lock_acquire+0xc9/0x700 [ 506.613841] ? perf_trace_lock+0xb5/0x5d0 [ 506.613856] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 506.613873] ? perf_trace_lock_acquire+0xc9/0x700 [ 506.613888] ? perf_trace_lock_acquire+0xc9/0x700 [ 506.613904] ? perf_trace_lock_acquire+0xc9/0x700 [ 506.613920] ? perf_trace_lock_acquire+0xc9/0x700 [ 506.613942] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 506.613959] ? policy_nodemask+0xeb/0x4e0 [ 506.613979] alloc_pages_mpol+0xed/0x340 [ 506.613995] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 506.614013] ? __pfx_perf_trace_lock+0x10/0x10 [ 506.614026] ? get_vma_policy+0x23b/0x350 [ 506.614046] vma_alloc_folio_noprof+0xe9/0x440 [ 506.614063] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 506.614092] ? find_held_lock+0x2b/0x80 [ 506.614109] ? __handle_mm_fault+0x7ed/0x30f0 [ 506.614127] ? lock_release+0xc8/0x290 [ 506.614143] __handle_mm_fault+0x142c/0x30f0 [ 506.614163] ? __pfx_perf_trace_lock+0x10/0x10 [ 506.614176] ? __pfx___handle_mm_fault+0x10/0x10 [ 506.614193] ? __pte_offset_map_lock+0x190/0x330 [ 506.614216] ? no_page_table+0xc7/0x220 [ 506.614235] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 506.614259] handle_mm_fault+0x2c3/0x900 [ 506.614281] __get_user_pages+0x58a/0x2f10 [ 506.614310] ? down_read_killable+0x1d4/0x4f0 [ 506.614329] ? __pfx___get_user_pages+0x10/0x10 [ 506.614350] ? __pfx_perf_trace_lock+0x10/0x10 [ 506.614366] __gup_longterm_locked+0xba7/0x1760 [ 506.614377] ? perf_trace_lock+0x1/0x5d0 [ 506.614390] ? try_get_folio+0xf1/0x730 [ 506.614409] ? lock_release+0xc8/0x290 [ 506.614423] ? __pfx___gup_longterm_locked+0x10/0x10 [ 506.614435] ? try_get_folio+0x235/0x730 [ 506.614457] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 506.614493] gup_fast_fallback+0x84e/0x2500 [ 506.614528] ? __pfx_gup_fast_fallback+0x10/0x10 [ 506.614542] ? kernel_text_address+0x5b/0xc0 [ 506.614557] ? __kernel_text_address+0xd/0x40 [ 506.614570] ? unwind_get_return_address+0x59/0xa0 [ 506.614588] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 506.614605] ? arch_stack_walk+0x9c/0xf0 [ 506.614620] pin_user_pages_fast+0xa7/0x100 [ 506.614632] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 506.614650] iov_iter_extract_pages+0x84d/0x1e00 [ 506.614669] ? lock_acquire+0x15e/0x2f0 [ 506.614683] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 506.614694] ? find_held_lock+0x2b/0x80 [ 506.614710] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 506.614726] ? __pfx_perf_trace_lock+0x10/0x10 [ 506.614742] ? bio_associate_blkg_from_css+0x508/0x1380 [ 506.614758] bio_iov_iter_get_pages+0x351/0xf90 [ 506.614774] ? bio_associate_blkg+0x139/0x2a0 [ 506.614786] ? lock_release+0xc8/0x290 [ 506.614802] ? bio_associate_blkg+0x143/0x2a0 [ 506.614821] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 506.614837] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 506.614850] ? __pfx_perf_trace_lock+0x10/0x10 [ 506.614866] ? iov_iter_is_aligned+0xf2/0x5a0 [ 506.614883] ? iov_iter_npages+0xfe/0x520 [ 506.614903] blkdev_direct_IO+0x753/0x1e70 [ 506.614922] ? __is_insn_slot_addr+0x140/0x290 [ 506.614943] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 506.614953] ? __kernel_text_address+0xd/0x40 [ 506.614966] ? unwind_get_return_address+0x59/0xa0 [ 506.614982] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 506.614996] ? arch_stack_walk+0x9c/0xf0 [ 506.615010] ? avc_policy_seqno+0x9/0x20 [ 506.615027] ? selinux_file_permission+0x99/0x600 [ 506.615044] blkdev_read_iter+0x27f/0x510 [ 506.615060] aio_read+0x2a3/0x450 [ 506.615074] ? __pfx_aio_read+0x10/0x10 [ 506.615087] ? perf_trace_lock+0xb5/0x5d0 [ 506.615103] ? __pfx_perf_trace_lock+0x10/0x10 [ 506.615122] ? lock_acquire+0x15e/0x2f0 [ 506.615134] ? __might_fault+0xe0/0x190 [ 506.615148] ? find_held_lock+0x2b/0x80 [ 506.615165] ? __might_fault+0x138/0x190 [ 506.615178] ? lock_release+0xc8/0x290 [ 506.615192] ? __might_fault+0xe0/0x190 [ 506.615209] io_submit_one+0x5a7/0x1a90 [ 506.615229] ? __pfx_io_submit_one+0x10/0x10 [ 506.615244] ? lock_acquire+0x15e/0x2f0 [ 506.615256] ? __might_fault+0xe0/0x190 [ 506.615273] ? lock_release+0xc8/0x290 [ 506.615286] ? __might_fault+0xe0/0x190 [ 506.615303] __x64_sys_io_submit+0x182/0x2e0 [ 506.615318] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 506.615331] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 506.615353] ? ksys_write+0x1a3/0x240 [ 506.615365] ? __pfx_ksys_write+0x10/0x10 [ 506.615383] do_syscall_64+0xbf/0x360 [ 506.615401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.615414] RIP: 0033:0x7f3246103b19 [ 506.615424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 506.615437] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 506.615450] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 506.615461] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 506.615471] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 506.615482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.615490] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 506.615510] [ 506.679768] FAULT_INJECTION: forcing a failure. [ 506.679768] name failslab, interval 1, probability 0, space 0, times 0 [ 506.680732] CPU: 0 UID: 0 PID: 6290 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 506.680748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 506.680754] Call Trace: [ 506.680759] [ 506.680764] dump_stack_lvl+0xfa/0x120 [ 506.680782] should_fail_ex+0x4d7/0x5e0 [ 506.680804] ? ext4_mb_new_blocks+0x64e/0x45a0 [ 506.680823] should_failslab+0xc2/0x120 [ 506.680836] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 506.680856] ? _raw_spin_unlock+0x1e/0x40 [ 506.680872] ext4_mb_new_blocks+0x64e/0x45a0 [ 506.680899] ? kasan_save_track+0x14/0x30 [ 506.680913] ? __kasan_kmalloc+0x7f/0x90 [ 506.680926] ? trace_kmalloc+0x1f/0xb0 [ 506.680943] ? __kmalloc_noprof+0x215/0x4b0 [ 506.680962] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 506.680982] ? ext4_ext_search_right+0x2e8/0xbd0 [ 506.680998] ? ext4_inode_to_goal_block+0x323/0x430 [ 506.681023] ext4_ext_map_blocks+0x1c4b/0x5f70 [ 506.681047] ? look_up_lock_class+0x56/0x150 [ 506.681062] ? perf_trace_lock_acquire+0xc9/0x700 [ 506.681077] ? perf_trace_lock_acquire+0xc9/0x700 [ 506.681095] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 506.681119] ? lock_acquire+0x15e/0x2f0 [ 506.681132] ? ext4_map_blocks+0x55b/0x14a0 [ 506.681162] ? __pfx_down_write+0x10/0x10 [ 506.681178] ? lock_release+0xc8/0x290 [ 506.681195] ext4_map_blocks+0x624/0x14a0 [ 506.681217] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 506.681232] ? __pfx_ext4_map_blocks+0x10/0x10 [ 506.681248] ? lock_is_held_type+0x9e/0x120 [ 506.681266] ? jbd2__journal_start+0xf6/0x6b0 [ 506.681287] ? __ext4_journal_start_sb+0x325/0x5d0 [ 506.681298] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 506.681310] ? ext4_iomap_begin+0x5b8/0xe80 [ 506.681320] ? ext4_meta_trans_blocks+0x256/0x310 [ 506.681335] ext4_iomap_begin+0xa62/0xe80 [ 506.681347] ? __pfx_perf_trace_lock+0x10/0x10 [ 506.681370] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 506.681383] ? mark_held_locks+0x49/0x80 [ 506.681399] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 506.681412] ? __create_object+0x59/0x80 [ 506.681427] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 506.681441] iomap_iter+0x544/0xdb0 [ 506.681473] __iomap_dio_rw+0x69e/0x1cf0 [ 506.681498] ? __virt_addr_valid+0x1c6/0x5d0 [ 506.681524] ? __pfx___iomap_dio_rw+0x10/0x10 [ 506.681548] ? kasan_quarantine_put+0x84/0x1e0 [ 506.681578] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 506.681594] ? __pfx_ext4_orphan_add+0x10/0x10 [ 506.681613] iomap_dio_rw+0x40/0xa0 [ 506.681634] ext4_file_write_iter+0xe0b/0x1990 [ 506.681663] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 506.681680] ? ksys_write+0x121/0x240 [ 506.681695] ? lock_is_held_type+0x9e/0x120 [ 506.681712] vfs_write+0xbe9/0x10c0 [ 506.681724] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 506.681744] ? __pfx_vfs_write+0x10/0x10 [ 506.681772] ksys_write+0x121/0x240 [ 506.681782] ? __pfx_ksys_write+0x10/0x10 [ 506.681801] do_syscall_64+0xbf/0x360 [ 506.681819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.681833] RIP: 0033:0x7fc68e2fdb19 [ 506.681843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 506.681856] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 506.681867] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 506.681876] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 506.681883] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 506.681890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.681897] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 506.681917] 21:50:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'batadv0\x00', 0xe000}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000040)=0xc) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x1, 0x5, 0x1f, r2}) r3 = inotify_init() pread64(r3, &(0x7f00000001c0)=""/136, 0x88, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000100)=""/19, &(0x7f0000000180)=0x13) lseek(r0, 0x0, 0x1) 21:50:12 executing program 4: r0 = io_uring_setup(0x1c02, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[r0, r0], 0x2) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x0) getegid() syz_open_dev$loop(0x0, 0x0, 0x0) 21:50:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 16) 21:50:12 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 20) 21:50:12 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000400)=""/4096) ioctl$KDSKBLED(r1, 0x4b65, 0x6018) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8537}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}]}, 0x70}}, 0x8001) dup2(r1, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) pread64(r2, &(0x7f0000000180)=""/178, 0xb2, 0x8) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x80, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="3510de80e75b", &(0x7f0000001580)=""/182, 0x0, 0x0, 0x0, 0x0}) 21:50:12 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000005540)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r9, r7) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000005680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ffffff7f000000002e2f6659f8696c65"]) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000380)={{0x0, 0x9}}) clone3(&(0x7f0000005880)={0x61020100, &(0x7f00000056c0), &(0x7f0000005700), &(0x7f0000005740), {0x34}, &(0x7f0000005780)=""/85, 0x55, &(0x7f0000005800)=""/32, &(0x7f0000005840)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r3}}, 0x58) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x141) 21:50:12 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/scsi_generic', 0x2101, 0x122) r2 = dup3(r1, r1, 0x80000) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4003, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000001300)="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", 0x599}], 0x1}}], 0x2, 0x0) 21:50:12 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000fff000/0x1000)=nil) 21:50:13 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000400)=""/4096) ioctl$KDSKBLED(r1, 0x4b65, 0x6018) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8537}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}]}, 0x70}}, 0x8001) dup2(r1, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) pread64(r2, &(0x7f0000000180)=""/178, 0xb2, 0x8) r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x6, 0x80, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="3510de80e75b", &(0x7f0000001580)=""/182, 0x0, 0x0, 0x0, 0x0}) [ 518.421180] FAULT_INJECTION: forcing a failure. [ 518.421180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 518.423231] CPU: 1 UID: 0 PID: 6314 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 518.423262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 518.423276] Call Trace: [ 518.423284] [ 518.423293] dump_stack_lvl+0xfa/0x120 [ 518.423332] should_fail_ex+0x4d7/0x5e0 [ 518.423374] should_fail_alloc_page+0xe0/0x110 [ 518.423403] prepare_alloc_pages+0x1af/0x500 [ 518.423439] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 518.423480] ? mark_held_locks+0x49/0x80 [ 518.423512] ? perf_trace_lock_acquire+0xc9/0x700 [ 518.423546] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 518.423579] ? perf_trace_lock_acquire+0xc9/0x700 [ 518.423608] ? perf_trace_lock_acquire+0xc9/0x700 [ 518.423641] ? perf_trace_lock_acquire+0xc9/0x700 [ 518.423671] ? perf_trace_lock_acquire+0xc9/0x700 [ 518.423705] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 518.423737] ? policy_nodemask+0xeb/0x4e0 [ 518.423774] alloc_pages_mpol+0xed/0x340 [ 518.423806] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 518.423841] ? __pfx_perf_trace_lock+0x10/0x10 [ 518.423867] ? get_vma_policy+0x23b/0x350 [ 518.423906] vma_alloc_folio_noprof+0xe9/0x440 [ 518.423949] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 518.423987] ? find_held_lock+0x2b/0x80 [ 518.424020] ? __handle_mm_fault+0x7ed/0x30f0 [ 518.424054] ? lock_release+0xc8/0x290 [ 518.424086] __handle_mm_fault+0x142c/0x30f0 [ 518.424125] ? __pfx_perf_trace_lock+0x10/0x10 [ 518.424152] ? __pfx___handle_mm_fault+0x10/0x10 [ 518.424186] ? __pte_offset_map_lock+0x190/0x330 [ 518.424231] ? no_page_table+0xc7/0x220 [ 518.424265] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 518.424310] handle_mm_fault+0x2c3/0x900 [ 518.424353] __get_user_pages+0x58a/0x2f10 [ 518.424411] ? down_read_killable+0x1d4/0x4f0 [ 518.424446] ? __pfx___get_user_pages+0x10/0x10 [ 518.424488] ? __pfx_perf_trace_lock+0x10/0x10 [ 518.424521] __gup_longterm_locked+0xba7/0x1760 [ 518.424543] ? perf_trace_lock+0x1/0x5d0 [ 518.424567] ? try_get_folio+0xf1/0x730 [ 518.424606] ? lock_release+0xc8/0x290 [ 518.424632] ? __pfx___gup_longterm_locked+0x10/0x10 [ 518.424657] ? try_get_folio+0x235/0x730 [ 518.424694] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 518.424741] gup_fast_fallback+0x84e/0x2500 [ 518.424795] ? __pfx_gup_fast_fallback+0x10/0x10 [ 518.424823] ? kernel_text_address+0x5b/0xc0 [ 518.424850] ? __kernel_text_address+0xd/0x40 [ 518.424874] ? unwind_get_return_address+0x59/0xa0 [ 518.424908] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 518.424938] ? arch_stack_walk+0x9c/0xf0 [ 518.424967] pin_user_pages_fast+0xa7/0x100 [ 518.424990] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 518.425025] iov_iter_extract_pages+0x84d/0x1e00 [ 518.425061] ? lock_acquire+0x15e/0x2f0 [ 518.425087] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 518.425110] ? find_held_lock+0x2b/0x80 [ 518.425143] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 518.425171] ? __pfx_perf_trace_lock+0x10/0x10 [ 518.425204] ? bio_associate_blkg_from_css+0x508/0x1380 [ 518.425235] bio_iov_iter_get_pages+0x351/0xf90 [ 518.425264] ? bio_associate_blkg+0x139/0x2a0 [ 518.425289] ? lock_release+0xc8/0x290 [ 518.425320] ? bio_associate_blkg+0x143/0x2a0 [ 518.425357] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 518.425389] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 518.425415] ? __pfx_perf_trace_lock+0x10/0x10 [ 518.425445] ? iov_iter_is_aligned+0xf2/0x5a0 [ 518.425479] ? iov_iter_npages+0xfe/0x520 [ 518.425519] blkdev_direct_IO+0x753/0x1e70 [ 518.425553] ? __is_insn_slot_addr+0x140/0x290 [ 518.425594] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 518.425614] ? __kernel_text_address+0xd/0x40 [ 518.425639] ? unwind_get_return_address+0x59/0xa0 [ 518.425672] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 518.425700] ? arch_stack_walk+0x9c/0xf0 [ 518.425727] ? avc_policy_seqno+0x9/0x20 [ 518.425758] ? selinux_file_permission+0x99/0x600 [ 518.425792] blkdev_read_iter+0x27f/0x510 [ 518.425822] aio_read+0x2a3/0x450 [ 518.425848] ? __pfx_aio_read+0x10/0x10 [ 518.425872] ? perf_trace_lock+0xb5/0x5d0 [ 518.425905] ? __pfx_perf_trace_lock+0x10/0x10 [ 518.425938] ? lock_acquire+0x15e/0x2f0 [ 518.425965] ? __might_fault+0xe0/0x190 [ 518.425994] ? find_held_lock+0x2b/0x80 [ 518.426032] ? __might_fault+0x138/0x190 [ 518.426058] ? lock_release+0xc8/0x290 [ 518.426085] ? __might_fault+0xe0/0x190 [ 518.426119] io_submit_one+0x5a7/0x1a90 [ 518.426157] ? __pfx_io_submit_one+0x10/0x10 [ 518.426199] ? lock_acquire+0x15e/0x2f0 [ 518.426223] ? __might_fault+0xe0/0x190 [ 518.426256] ? lock_release+0xc8/0x290 [ 518.426282] ? __might_fault+0xe0/0x190 [ 518.426316] __x64_sys_io_submit+0x182/0x2e0 [ 518.426345] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 518.426370] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 518.426411] ? ksys_write+0x1a3/0x240 [ 518.426433] ? __pfx_ksys_write+0x10/0x10 [ 518.426468] do_syscall_64+0xbf/0x360 [ 518.426502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.426526] RIP: 0033:0x7f3246103b19 [ 518.426544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 518.426567] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 518.426589] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 518.426605] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 518.426619] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 518.426633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.426646] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 518.426683] [ 518.515781] FAULT_INJECTION: forcing a failure. [ 518.515781] name failslab, interval 1, probability 0, space 0, times 0 [ 518.517707] CPU: 0 UID: 0 PID: 6323 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 518.517735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 518.517748] Call Trace: [ 518.517756] [ 518.517764] dump_stack_lvl+0xfa/0x120 [ 518.517798] should_fail_ex+0x4d7/0x5e0 [ 518.517835] ? __es_insert_extent+0xed2/0x1370 [ 518.517864] should_failslab+0xc2/0x120 [ 518.517889] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 518.517922] ? __pfx___es_remove_extent+0x10/0x10 [ 518.517957] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 518.517996] __es_insert_extent+0xed2/0x1370 [ 518.518045] ext4_es_insert_extent+0x4d0/0x1100 [ 518.518091] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 518.518123] ? lock_acquire+0x15e/0x2f0 [ 518.518146] ? ext4_map_blocks+0x55b/0x14a0 [ 518.518209] ? __pfx_down_write+0x10/0x10 [ 518.518239] ? lock_release+0xc8/0x290 [ 518.518271] ext4_map_blocks+0x7ff/0x14a0 [ 518.518311] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 518.518338] ? __pfx_ext4_map_blocks+0x10/0x10 [ 518.518368] ? lock_is_held_type+0x9e/0x120 [ 518.518403] ? jbd2__journal_start+0xf6/0x6b0 [ 518.518438] ? __ext4_journal_start_sb+0x325/0x5d0 [ 518.518460] ? __ext4_journal_start_sb+0x1e3/0x5d0 [ 518.518480] ? ext4_iomap_begin+0x5b8/0xe80 [ 518.518500] ? ext4_meta_trans_blocks+0x256/0x310 [ 518.518528] ext4_iomap_begin+0xa62/0xe80 [ 518.518550] ? __pfx_perf_trace_lock+0x10/0x10 [ 518.518590] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 518.518614] ? mark_held_locks+0x49/0x80 [ 518.518643] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 518.518667] ? __create_object+0x59/0x80 [ 518.518695] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 518.518719] iomap_iter+0x544/0xdb0 [ 518.518761] __iomap_dio_rw+0x69e/0x1cf0 [ 518.518800] ? __virt_addr_valid+0x1c6/0x5d0 [ 518.518848] ? __pfx___iomap_dio_rw+0x10/0x10 [ 518.518892] ? kasan_quarantine_put+0x84/0x1e0 [ 518.518947] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 518.518977] ? __pfx_ext4_orphan_add+0x10/0x10 [ 518.519012] iomap_dio_rw+0x40/0xa0 [ 518.519049] ext4_file_write_iter+0xe0b/0x1990 [ 518.519100] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 518.519133] ? ksys_write+0x121/0x240 [ 518.519160] ? lock_is_held_type+0x9e/0x120 [ 518.519192] vfs_write+0xbe9/0x10c0 [ 518.519214] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 518.519251] ? __pfx_vfs_write+0x10/0x10 [ 518.519303] ksys_write+0x121/0x240 [ 518.519323] ? __pfx_ksys_write+0x10/0x10 [ 518.519357] do_syscall_64+0xbf/0x360 [ 518.519389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.519411] RIP: 0033:0x7fc68e2fdb19 [ 518.519427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 518.519447] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 518.519467] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 518.519482] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 518.519495] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 518.519507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.519520] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 518.519557] 21:50:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 17) 21:50:13 executing program 7: ioprio_set$pid(0x3, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, 0x0) ioprio_get$pid(0x0, 0xffffffffffffffff) 21:50:22 executing program 3: write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) syncfs(0xffffffffffffffff) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:50:22 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 21:50:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) 21:50:22 executing program 4: unshare(0x20000) unshare(0x66060080) semget$private(0x0, 0x3, 0x400) r0 = semget(0x3, 0x4, 0x304) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000000)=""/162) unshare(0x480) semget$private(0x0, 0x3, 0x55) unshare(0x0) unshare(0x10010200) unshare(0x10a80) unshare(0x4000000) 21:50:22 executing program 6: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000140)='cpuset\x00') lseek(r1, 0x100000000, 0x1) r2 = fcntl$getown(r1, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/ip_tables_names\x00') getdents64(r3, &(0x7f0000000180)=""/48, 0x30) lseek(r3, 0x100000000, 0x0) pread64(r1, &(0x7f0000000080)=""/145, 0x91, 0x0) fsync(r3) fcntl$getown(r3, 0x9) 21:50:22 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 21) 21:50:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 18) 21:50:22 executing program 2: r0 = timerfd_create(0x8, 0xc0800) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) timerfd_settime(r1, 0x1, &(0x7f00000010c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000001100)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x20000000) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c8000000ed0300000000000000000000efea6d00d6417b99ab6c5457e382d513d37f9cfac5190dc81c19f4780afaf9107d5a5ad0ea6cd7781f35cff65ab070422043433941f4309ffecc5d321c5c61d686aa270feb581ad00361a360cbf6bd849c9fd9b4cd1ead6ff402c5ef810679cc8a5eccd1133c786827f3beddcd4624765d7cedbf64f68516b8c12f553c6dcd107751411f6766ea710992d99b88f78d2d1af3082c73b7850384c248c1f3b9c82910429d8f12db6dcc0e6803aebaf62a94179b2963a097f2f3"], 0xc8}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x7, 0x1, [0x6, 0x0, 0x2, 0x9, 0xffff], [0x100000000, 0x0, 0x10001, 0x5, 0x7, 0xe98, 0x100, 0x3, 0xe8, 0x491, 0x5, 0x1, 0xd0, 0x6, 0xffffffffffffffff, 0x0, 0x1f, 0xc43, 0x3f, 0x400000000000, 0x1, 0x9, 0x3, 0x0, 0x7ff, 0x3f, 0x8000, 0x3d, 0x7, 0x1ff, 0x4, 0x800, 0x7f, 0x5, 0x4, 0x5, 0x2, 0x0, 0x78, 0xfffffffffffffff6, 0x4, 0x400, 0x0, 0x830, 0x7, 0xa36a, 0x0, 0x200, 0x7, 0x3, 0x8, 0xe006, 0x7, 0x5, 0x1, 0xfffffffffffffffd, 0x92, 0x1, 0x4, 0x401, 0x9, 0x10001, 0x5, 0x6, 0x1d8, 0x1, 0x406, 0x5, 0x2, 0x101, 0x2, 0xfea2, 0x1000, 0x101, 0x20, 0x5, 0x1000, 0x7, 0xffffffff, 0x5, 0x1000, 0x5, 0x6ff, 0x101, 0xfff, 0x100000, 0xb95, 0xffffffffffffffe1, 0x100000000, 0xffffffff00000001, 0x3, 0x0, 0xfff, 0x3, 0xb11, 0xef7f, 0x8001, 0x30, 0xfffffffffffffeff, 0x1, 0x8001, 0x6, 0xf29, 0x4, 0x3f, 0x8, 0x1, 0x100000000, 0x80000001, 0x40, 0x9, 0xfffffffffffffff9, 0x10, 0x9, 0xc5, 0x40000000000003, 0x4, 0x4, 0x1, 0xffffffffffffff80, 0x1000]}) recvmsg$unix(r1, &(0x7f0000002680)={&(0x7f0000001140), 0x6e, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/255, 0xff}, {&(0x7f00000012c0)=""/160, 0xa0}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/114, 0x72}, {&(0x7f0000002400)=""/236, 0xec}, {&(0x7f0000002500)=""/41, 0x29}, {&(0x7f0000002540)=""/17, 0x11}], 0x7, &(0x7f0000002600)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0xa0000000) timerfd_settime(r3, 0x0, &(0x7f00000026c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000002700)) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000680)={0x3, 0x101, @start={r2, 0x1, "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", "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"}, [0x9, 0x3924cb58, 0x5e42, 0x7, 0x9, 0x81f, 0x7, 0x9, 0x405, 0x81, 0xff, 0xffffffffffffffc1, 0x2, 0x9, 0x1, 0x6, 0x0, 0x0, 0x101, 0xffffffffffffff7f, 0x40, 0x8, 0xff, 0x6, 0x1, 0xdaf, 0x3ff, 0x4, 0x200000000, 0x4, 0x5, 0x8, 0x4, 0x5, 0x401, 0x0, 0x101, 0x1, 0x0, 0x8, 0x5, 0x2, 0x1, 0xffffffffffff4610, 0x2, 0x7, 0x6e, 0x7, 0x0, 0x3, 0x1, 0x9, 0xfffffffffffff000, 0x4, 0x8, 0x10001, 0x7ff, 0xfffffffffffffffc, 0x2, 0x9, 0x81, 0x100000000, 0xc9, 0xd503]}) r4 = io_uring_setup(0x1ff, &(0x7f0000000000)={0x0, 0xf248, 0x1}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1d, &(0x7f0000000140), 0x0) timerfd_gettime(r1, &(0x7f0000002740)) 21:50:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 19) [ 527.718317] /dev/sr0: Can't open blockdev [ 527.747781] FAULT_INJECTION: forcing a failure. [ 527.747781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 527.748894] CPU: 0 UID: 0 PID: 6350 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 527.748912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 527.748920] Call Trace: [ 527.748924] [ 527.748929] dump_stack_lvl+0xfa/0x120 [ 527.748958] should_fail_ex+0x4d7/0x5e0 [ 527.748983] should_fail_alloc_page+0xe0/0x110 [ 527.748999] prepare_alloc_pages+0x1af/0x500 [ 527.749019] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 527.749040] ? lock_release+0xc8/0x290 [ 527.749056] ? perf_trace_lock_acquire+0xc9/0x700 [ 527.749076] ? perf_trace_lock_acquire+0xc9/0x700 [ 527.749090] ? perf_trace_lock+0xb5/0x5d0 [ 527.749106] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 527.749124] ? perf_trace_lock_acquire+0xc9/0x700 [ 527.749139] ? perf_trace_lock_acquire+0xc9/0x700 [ 527.749158] ? perf_trace_lock_acquire+0xc9/0x700 [ 527.749174] ? perf_trace_lock_acquire+0xc9/0x700 [ 527.749191] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 527.749209] ? policy_nodemask+0xeb/0x4e0 [ 527.749230] alloc_pages_mpol+0xed/0x340 [ 527.749247] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 527.749266] ? __pfx_perf_trace_lock+0x10/0x10 [ 527.749280] ? get_vma_policy+0x23b/0x350 [ 527.749301] vma_alloc_folio_noprof+0xe9/0x440 [ 527.749320] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 527.749338] ? find_held_lock+0x2b/0x80 [ 527.749356] ? __handle_mm_fault+0x7ed/0x30f0 [ 527.749374] ? lock_release+0xc8/0x290 [ 527.749391] __handle_mm_fault+0x142c/0x30f0 [ 527.749413] ? __pfx_perf_trace_lock+0x10/0x10 [ 527.749428] ? __pfx___handle_mm_fault+0x10/0x10 [ 527.749446] ? __pte_offset_map_lock+0x190/0x330 [ 527.749470] ? no_page_table+0xc7/0x220 [ 527.749488] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 527.749513] handle_mm_fault+0x2c3/0x900 [ 527.749536] __get_user_pages+0x58a/0x2f10 [ 527.749567] ? down_read_killable+0x1d4/0x4f0 [ 527.749587] ? __pfx___get_user_pages+0x10/0x10 [ 527.749610] ? __pfx_perf_trace_lock+0x10/0x10 [ 527.749627] __gup_longterm_locked+0xba7/0x1760 [ 527.749639] ? perf_trace_lock+0x1/0x5d0 [ 527.749652] ? try_get_folio+0xf1/0x730 [ 527.749673] ? lock_release+0xc8/0x290 [ 527.749687] ? __pfx___gup_longterm_locked+0x10/0x10 [ 527.749701] ? try_get_folio+0x235/0x730 [ 527.749721] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 527.749746] gup_fast_fallback+0x84e/0x2500 [ 527.749775] ? __pfx_gup_fast_fallback+0x10/0x10 [ 527.749790] ? kernel_text_address+0x5b/0xc0 [ 527.749805] ? __kernel_text_address+0xd/0x40 [ 527.749818] ? unwind_get_return_address+0x59/0xa0 [ 527.749837] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 527.749854] ? arch_stack_walk+0x9c/0xf0 [ 527.749870] pin_user_pages_fast+0xa7/0x100 [ 527.749882] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 527.749902] iov_iter_extract_pages+0x84d/0x1e00 [ 527.749921] ? lock_acquire+0x15e/0x2f0 [ 527.749935] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 527.749947] ? find_held_lock+0x2b/0x80 [ 527.749965] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 527.749981] ? __pfx_perf_trace_lock+0x10/0x10 [ 527.749998] ? bio_associate_blkg_from_css+0x508/0x1380 [ 527.750015] bio_iov_iter_get_pages+0x351/0xf90 [ 527.750032] ? bio_associate_blkg+0x139/0x2a0 [ 527.750045] ? lock_release+0xc8/0x290 [ 527.750062] ? bio_associate_blkg+0x143/0x2a0 [ 527.750082] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 527.750098] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 527.750113] ? __pfx_perf_trace_lock+0x10/0x10 [ 527.750129] ? iov_iter_is_aligned+0xf2/0x5a0 [ 527.750148] ? iov_iter_npages+0xfe/0x520 [ 527.750169] blkdev_direct_IO+0x753/0x1e70 [ 527.750188] ? __is_insn_slot_addr+0x140/0x290 [ 527.750210] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 527.750221] ? __kernel_text_address+0xd/0x40 [ 527.750234] ? unwind_get_return_address+0x59/0xa0 [ 527.750251] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 527.750277] ? arch_stack_walk+0x9c/0xf0 [ 527.750291] ? avc_policy_seqno+0x9/0x20 [ 527.750308] ? selinux_file_permission+0x99/0x600 [ 527.750327] blkdev_read_iter+0x27f/0x510 [ 527.750343] aio_read+0x2a3/0x450 [ 527.750357] ? __pfx_aio_read+0x10/0x10 [ 527.750370] ? perf_trace_lock+0xb5/0x5d0 [ 527.750388] ? __pfx_perf_trace_lock+0x10/0x10 [ 527.750406] ? lock_acquire+0x15e/0x2f0 [ 527.750419] ? __might_fault+0xe0/0x190 [ 527.750433] ? find_held_lock+0x2b/0x80 [ 527.750451] ? __might_fault+0x138/0x190 [ 527.750466] ? lock_release+0xc8/0x290 [ 527.750480] ? __might_fault+0xe0/0x190 [ 527.750498] io_submit_one+0x5a7/0x1a90 [ 527.750519] ? __pfx_io_submit_one+0x10/0x10 [ 527.750534] ? lock_acquire+0x15e/0x2f0 [ 527.750548] ? __might_fault+0xe0/0x190 [ 527.750565] ? lock_release+0xc8/0x290 [ 527.750579] ? __might_fault+0xe0/0x190 [ 527.750597] __x64_sys_io_submit+0x182/0x2e0 [ 527.750613] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 527.750626] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 527.750649] ? ksys_write+0x1a3/0x240 [ 527.750661] ? __pfx_ksys_write+0x10/0x10 [ 527.750680] do_syscall_64+0xbf/0x360 [ 527.750699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.750712] RIP: 0033:0x7f3246103b19 [ 527.750722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 527.750735] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 527.750747] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 527.750756] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 527.750763] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 527.750771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.750778] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 527.750798] 21:50:22 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x400000, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="34c731a1522e34dc26c006352b5417c5cc48e3dc102a195e47d9a45ebb6eda9817256b2edbd9391b189331be845972ec559542a6c8b19ef1e9c0950e0d5b8c938456eb2fb414335ffb6746a3b166305703ba7a66c5e8fd6ca3f9ad0359bec444e3d575fe03ada76eb248c934e534721cac531e34f622b770c98372d0b0afb674194d11f04a542410a8e6dbdfdfdffba4a3001f1c2996571d0f2de1a2e099bb7c3d743abe47bc7135c7cbba3d70727086c7706e23d57333cf4acd94be767e883aaf9c5077303b9d74f9587a0f81abc6f645957e5bacb10e5e45801167f01c50daf1e885e22695bd2e9a9427fd7a215db93f9885797339a8ba4ee83a6baa9b0815367247b3578e700a9d725ea1344b61240d10fc6fa97f79fb3c42a9e199dd3433bf3dcdfc92ab046f2eb377767efca9f68fc29830304e875eafc9d3bad9479a259616e83d72ce5fb2d431727437f194cb7e2072bfc288d5715ed8d9b93a4b7e1503c004e4c22ffdcae69982762820bd77a6b9fa5e7965ebfed1bc29c2bf54adb4d8054cc7ea1dfed8478538fe8dc884aeea77d8bff0f2ae1f42dad0b7d1749c7e2e2bdcf68229e7ed7ff01dc634555e5b18efa379490516f943e51756c2986d0e3cdc59bdc15630b995f94dc49868b8579347237040b9c1f2db959165a18aa36660575e834a4e6342fef84ce8221fdbafce3f960c0e4f48673632b791d82b286311ff4b1a265ecd0ec861c6330e293c1ca29a77d532f6847f1aef4055ea409b93e165456c38bf19b9eb89be071d01992d3f3434692c3696483ef708ef49debbad5352129018392691090c120853078f8a98415bf002bbe6f9da5ebe8dd176c5c893b0c1c5edf764fc32640e050e51104a5ee79d140edb8e44a38af83de402b8d49d11e8d638b3810492027bad1b314102491bac1478890ee898dc944559195c0905d5a78cd32452a987897d821e02cca039a992a2de80958ae72cf47784f99a41308eeea626f073c8420d19fd8a34b51a625b1150df79c6f93c08cafe744eddd2a5a5386dc564ca6ad8b67471459c2e476780738819a16c7270df9b2c82de9b182308feddc87f851033f06f270349b2efd37f23208d5a2d18dc5c1f3db29764ebb8f211a710d06a7dd895ffc200b036e0295fc1f11d471e5f3afcf1ae236ddb8a15c5165afee96431dc65f58210a797fb46d8cc86c9c1f475794378bca45b1cc5fcdff5b37f73c5836b3800f3d8339bd3d98f1f6a4467f3a13edb45a8e34284d0872be42fc0134abdf71b01763a8df8489735421824bf1131cd65bc54f4b557d71832581ee2d73ce3190a51cc37eee4db2978946914a995b0826043b8cd9c18d0613e8e54d2db4a7c236aa21c97427141fb2aec670b12ee44856bcfd85138e98d20ae22fb6dde510e7f750657c6f8fcc7497d64286074840c44a86e46e6e21b5d724376f6b1018feb638ea5d082e139b307c68247e3df79c8f54b4731c07157efcc2d3ce576be13c3122a21b7a56beff733dc635161d2c2451269fba04ca417963888e20c40808a1c5887e513cdfe1caacaabd124aa47519b6394f7cead390ba8fb91f3f2e497d0bcd6407787e6e077bf6073b528a904f2e073ac8eea3373c67c391efc582a5e20de2afce262a97c6fc404bc941066575c89b4ff0b4b54f63b4b9aaac65a524a511b3edf6d105b843ff01974235ad9c9d01642d8972242fdb6788beb3d826179a5c81491655109dee676b8fe539c2f6020ee061ca8871e50170e53e301251a8d1680470019eb0a923a32a8ccc29b857cc6eaeb14bb60702302029cf009384db21e0b95c22a8c48b283550604e65576478c771757052ac91d226941f66da83856a8bcd60f49d266768bb94add7d1c5e3db850cbdc289505823d949c6b4929b62b3c9afc87db403d7aeb7e17ab10fcaeacf3fafbf3b467f2681640b3c98999a42f57858cd2bcfb176028df281eb1814d12b0ac19f67d2a1f4acc30b1711bc6f81482ca75736e8e9b6954f0dcfb101aa048bd5bdb1baa05d0850785891b1792facb8838eeaa811cf3ebf181246730901c46bfcb5eb69c126b784a3cd00e28a3cd9e4d3c4e42cb7055ded19007ab5681e9541ae3a35a3948938eae6ea19c2e14b07a1d170a0892e2151798ae4395fc26e42cbee3e603540da0626a536500eaa572c160e0f43ce0f34e55fe2b7a315a1ee1e363a16cd87af7286182e4949558b831c1c3b0e1ba749c6c3a5e1e942e5d79ba279b2d27a6e89b0a4f04ac686dd9ebfbb04c37c5d233ef8e024986110194aa9d3a3881426acec12259d75dc28da1c2fe3d985788a0c436492b1c1e0735116c791ef84dd1d4047d6c6f4ff50c6403283f60d6c2d63bad23950e42ff0c15c37d98ba5995347013ba32b2008c78bf07509b2a6416e2c12f7803ed30d2315a40c1da4b66eccde5782f55fe94ed12175a1528ec03960bd63e83f2e337aab08537d1a7c07fc0e8dc2cfee41c5b0bae040380e00a3345e086bde3c50353b32a35ad956b0c03d1161653e6d8506233590af04f703647fcc35314b092e05384c8885bc36e43d7a2b88c5f23f005ce8917b7b3bb9886ab7732d12a84d60fd73be3e731881851b0cacc894292ed8348b10295537806d0a7e22d4091f22d4582ac782a085e67c29a374c8132a4129005e6761b39e25dbb46cd436df61674a5afde62a8e318098ab5afaf8eca8d536c955e1474dd49c321dace5c1aa66bf3f82999d28a816265f7b1a29effd0b3a5d3a2df6b563e79a8d554561c10b151351e31173889bcb5fc8e245f09962921e11a2de39cbbf4e4f132d1f3be8ae0908f7eddbd0bc498a727d8981d8c89015dcdbe13e91ccb4c2fe6298af433576bc768380c3706be1ea3c89e660f608b8b8d68cd88dcce42c8a760f445f17c983346d2cad1869a899a0c953001a6b35f657f28dd1d2393f02c2862bb7f26e483fcb501c295d5346d399d10b26a4ed16b1abd13857d78d712fbe2023568bad25e6b57a985328c46ffbb38a4c4b48ee5824e32559899e7ad62cf7b20c7a28f742d7480fa10bc7f17d13a1ac5c05cb2a6be641e78f78a4373bb6014d9cc3a966a232b36c8b28a2a8c71ed98705e4e017544b5b1baf7a49107ab757d12b22f7774d2ee5eb6ef5ab4e00000dbb4e05697c0ead1d3ab0c7bf4a4da4bbaf394e6adffcdcd724dfd383518ad286d02e97fa2c7c3074dffde74ea220fecd808fe9a6f583aac976b10be20fedf48e4ea3fbebf6547119e7a68c585f70d0fb9ce2cb448d08f038f7a989fba360e03a3f3c6e013d7f4c8894567b7e49ef59fc2f899c70c7df2e258636088cda9cac2d3e9e17c68031182e1d25dcd44d938ed1aa743f84ad48e4edfc16638a8ae84a767ef05077fd1254543a70cb98b97374e2c6eebc177e1f933e113a81d627009263ebef8695a1bd4506586c89ad337ca8cd2a070388e84d0423b2e4f326d2aa543796689960720acb618ba11638dc0e0e9f46918407b420637e3f73ca41dbb100add3fadea7bf8a67600efbbd5d1d019e25e97fbae9a04b60145795aebde9d88f25445a844953bca5b21dee35b4ca9f6f7eb8edcb8dcbc6d2efb4628784674a37152cfb9a0386e28ee526a0eef29763d59f1b93e96dbcf169946bcac7ffe0eb3c30c48f38bbedff9b1e4a9a87c3b752bf3f4d5c4b99f9db88557082224c2a8369cc79a91b654967e4fb0177749a498f5f9a8fc74d6b0bf6fd9ea1adf95d303f8dcb5b80d5258d5601cb7ad4a4207eb772b075b34f78318046c180d799354143243e45d6f9274d647795cbe30cbb0529d3189fa3e1e4edd188a52271b9ece4070679c850abf09f99f8e55c0abc70980268845aece4469668c03609eec9eaa8c7c188eb91da626fe91398d7c9024527f8b8b2aa4e13c5ea86c277111ab3beca20a33a71ff3ae555869d5793c049e5f99fe9ccc21803fafb8660124d3690de8be978e674adcde2e21721fe8f3ebba80f2ea208404ff30140b5c87a541c4c3cf2977190dd210d656c5a1ea445338a024d8596eb6a12ea08b8cad6cfee2e2dd95e99d98f6de54668062a40684367c0d46d1950fa4c535000f8e4315bbc1d5974884e1dae4e8bb333cf7d10d5352df648ce112b1aae16c5622e8d8f097504c047916ee1a1fcd3c47cf78e08eb180c55d3149b4f53b7d257c0f66b9a0ddbc47fd757a15701b6b77a7225f60f95caff45f78062d8a0fe07d559498487f4fbbf854768e278d774bb64e168eabd0ab6d577735e1daa9877a7a94882031724c3599f2955ba6ca4a220e3b5833f9d1ad39ac7f72b72fdcd418578133269ba403c86e72c905dc770255b8875f5c6f7fbb3637f6cec8a88bf7808a5821355955162598087590fcc75f31ee7b28bb825d7760169593e80bd5b00981aada0dc7e7639e3f163eaccbaeb45fe6c3dc56e8cf4ae13e2e878be08926d2973123ee91a04cadafc281ea43e7de5d656e6e377d957fcab0fe0d85ddd393237e9603539017c900d2de7240a41ef99d6d2b361c99bd9940cc887aa409e3efe387dbe587fd3896d4a5870668e57b90cc3479138db66ab75406eb966a74bd6d8f42276691384a133b44c86270e3e3431d32d62af5b5ff2c99fe003fedba2ee8ab423a661bfbc4de2400ab8c6725be06f60cef6bd0998d317d014945328d30c489415c1970bd4cf8c8d87bc0e31ecc61dfd7607bd2b4f164af9078f2ef8d2126d19a21edec60cf1da7d4e2824ae036451527b056b26ee6d1a64aea88011c266c416d4d2494e2f36f239b03389d1cb3f4a3b7d60344e24123673d9eaf3c4998d0349f967c43570ca2b4ef26ed1f1a47d302b1c552950d7a93386730b46c0bc7ebde8e7a79cbbf22d7448d8028859eeba6a4f9d45ca43dd46b01a1f6b6ccaf5bc0273ef9b7e388979f7b1d6171173cffc2444a083e898e826f12e1eb599b778a41c5cd430856a2722b8deb4e6f784458a628c27e1e379e8c9df3a0d1aa75218dc4b07355be03e54c4f789d77162e07d9fb25f311b246a9ad44a38232f4405c603b2b731b5625717749787b77c45aa3a89b3b3063bc796a1afced285082ed6e2eacdf346cf9c35104ad5d040706197c046ddc20b0b099bc0b3c741f0ac45cf367b0bfa9afd08825bb1c6a99e0462fcb67497b7dc6801d668f2d1ba20eba677af0cb4b25eafc9fe8e60992da06a38cb34ced88bcfff2ebc21242daaabdee95ab12c85e5bd2faaceb24a02b40ddc1b0336bf8da59b635fb293683edda2169345b4ef4274fd4e2238ba173aa18dfa3827b63bba6eb1a4fa0b2d379ddaaa5ed51a163d259756df7d02ada301ed563d69c8356e7a6333b7b85ec223cdc8bf9d44d4cd87b24bfc6d1af4f688c70d112114f941b2a32dbaa7257c07e8c1c01181c2012f6bc8300d899b07e3f81e92a899adabcec2d6fa586a80c8f28cb4f6412e139181037de6397f5f4c47e5641b68bc065d0b14bdfb55f61aec37e9dab5e43f4c14765b0af1686cbab5d9a303d20ab72e91bfa5ebcaf14806a1556381eb4df12d45f90f08ad896363e6a5f58059662f1d933dcd0a3aca0bdb1904d959a0bccf531aeda1d88a9a9eb53bbdfba17bd2d07cfcbf027ef0eb1846892bccaea16c9dfddd7a0ac66277d4b17ef985a1ef112be85e74ff2abfe5218c464af09b049c81bec1a4b975a3c675ea6ac5587680497c408997566831fc802044abd13984f8acfe1636f347521ac073aa7c366c95cb47e7338f27d75f91b6a0f84bb6a2e6688dfc0ab5442692b938efaef60faaa7e722f591fd43a068b3f622733ed5262d58325", 0x1000}, {&(0x7f0000000140)="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", 0xfd}, {&(0x7f00000002c0)="2eb074820f8c02640c27c6ab20a8684ca4e5362e32c96dbb9842b07221d7ff0ee2f9c02e311efc0ed2440924af94fd1dc73d69a6cb23c5872ff8533f9484f357c68b7c5b7a4cb4da8b673b0aefa7bb77c6cb588012c91aadae33c676b152c6b4d92fb8e389d420aea7030c167d211153bf70637054288d53e909dd96d32cd7e5cbcdc40405a0418f367585936aa5f596395fe61f4a4fff5dcddb43dd30573a35aaf3c063e60510ff214b5f1f84ae15465648b854ac824e41094dafac1e03aa56917dfd45820f007307ed5f2ec2f85f4351e273d98207aaf3d5fe1c55ed12a3f9c2710b776d97c9cb49a253a94bcf29b4d818", 0xf2}, {&(0x7f0000001400)="a4a6baa9af4a29f626a6bcc13795e220e09656d1423c14745d4622754d787787594915fc5bb1958d83189cc1c5923d69da8cd384f5f62fe559ca7c83dc152b3eb6da663c38cde8e55ae94086f3d1f7a1ba83c031ad6a8399b4592e5e52cadf82ad3a063d61eb611c54a56e727a7835cc9185d0644d07519d431000af36b187770a3692a4ba640cf870b77313f3e4c6b74e3b848f0c7d50926e7062898c979279", 0xa0}], 0x4, 0x0, 0x210e, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000040)) 21:50:22 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) [ 527.874338] FAULT_INJECTION: forcing a failure. [ 527.874338] name failslab, interval 1, probability 0, space 0, times 0 [ 527.875350] CPU: 0 UID: 0 PID: 6362 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 527.875366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 527.875374] Call Trace: [ 527.875379] [ 527.875383] dump_stack_lvl+0xfa/0x120 [ 527.875406] should_fail_ex+0x4d7/0x5e0 [ 527.875428] ? jbd2__journal_start+0x193/0x6b0 [ 527.875444] should_failslab+0xc2/0x120 [ 527.875458] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 527.875476] ? lock_is_held_type+0x9e/0x120 [ 527.875496] jbd2__journal_start+0x193/0x6b0 [ 527.875515] __ext4_journal_start_sb+0x325/0x5d0 [ 527.875529] ? ext4_file_write_iter+0x1465/0x1990 [ 527.875546] ? lock_is_held_type+0x9e/0x120 [ 527.875562] ext4_file_write_iter+0x1465/0x1990 [ 527.875589] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 527.875606] ? ksys_write+0x121/0x240 [ 527.875622] ? lock_is_held_type+0x9e/0x120 [ 527.875639] vfs_write+0xbe9/0x10c0 [ 527.875650] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 527.875670] ? __pfx_vfs_write+0x10/0x10 [ 527.875697] ksys_write+0x121/0x240 [ 527.875708] ? __pfx_ksys_write+0x10/0x10 [ 527.875727] do_syscall_64+0xbf/0x360 [ 527.875744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.875757] RIP: 0033:0x7fc68e2fdb19 [ 527.875767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 527.875778] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 527.875789] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 527.875797] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 527.875804] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 527.875811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.875818] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 527.875837] 21:50:22 executing program 6: lseek(0xffffffffffffffff, 0x100000000, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8000) close(r0) read(r0, &(0x7f0000000040)=""/20, 0x14) [ 527.960407] /dev/sr0: Can't open blockdev 21:50:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 20) 21:50:22 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 22) 21:50:22 executing program 4: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x30, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)="fa134c3a3ec2b3510122d338077d820de911bc54b3be3ef402b5a500ae1c059ac94be590188251dd529d75d13c4c2bdd8671075f4fd7c6e9f25f832250b91cd759d95ce951bd9384917ac13c248da85af6f33235d53c5921df84c1d1ab83ad0c3018bb0a55594e311c08a5daa4eaa9cd811001e061630dd27a365566f4c3063ba924000102876394dcd4e209cb102cbfdbea6ccb2d7a", 0x96, 0x4000, 0x0, {0x0, r1}}, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1001) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) io_uring_enter(r3, 0x951, 0x3226, 0x1, &(0x7f0000000480)={[0x8001]}, 0x8) r4 = socket$nl_audit(0x10, 0x3, 0x9) connect(r4, &(0x7f0000000400)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) lchown(&(0x7f0000000040)='./file0\x00', r2, r5) 21:50:22 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x400000, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x10c00) [ 528.084459] FAULT_INJECTION: forcing a failure. [ 528.084459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 528.086218] CPU: 0 UID: 0 PID: 6375 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 528.086251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 528.086284] Call Trace: [ 528.086293] [ 528.086302] dump_stack_lvl+0xfa/0x120 [ 528.086341] should_fail_ex+0x4d7/0x5e0 [ 528.086388] should_fail_alloc_page+0xe0/0x110 [ 528.086418] prepare_alloc_pages+0x1af/0x500 [ 528.086454] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 528.086491] ? lock_release+0xc8/0x290 [ 528.086519] ? perf_trace_lock_acquire+0xc9/0x700 [ 528.086554] ? perf_trace_lock_acquire+0xc9/0x700 [ 528.086581] ? perf_trace_lock+0xb5/0x5d0 [ 528.086610] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 528.086643] ? perf_trace_lock_acquire+0xc9/0x700 [ 528.086672] ? perf_trace_lock_acquire+0xc9/0x700 [ 528.086705] ? perf_trace_lock_acquire+0xc9/0x700 [ 528.086735] ? perf_trace_lock_acquire+0xc9/0x700 [ 528.086768] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 528.086801] ? policy_nodemask+0xeb/0x4e0 [ 528.086837] alloc_pages_mpol+0xed/0x340 [ 528.086870] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 528.086905] ? __pfx_perf_trace_lock+0x10/0x10 [ 528.086931] ? get_vma_policy+0x23b/0x350 [ 528.086970] vma_alloc_folio_noprof+0xe9/0x440 [ 528.087006] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 528.087039] ? find_held_lock+0x2b/0x80 [ 528.087072] ? __handle_mm_fault+0x7ed/0x30f0 [ 528.087107] ? lock_release+0xc8/0x290 [ 528.087138] __handle_mm_fault+0x142c/0x30f0 [ 528.087178] ? __pfx_perf_trace_lock+0x10/0x10 [ 528.087205] ? __pfx___handle_mm_fault+0x10/0x10 [ 528.087239] ? __pte_offset_map_lock+0x190/0x330 [ 528.087283] ? no_page_table+0xc7/0x220 [ 528.087317] ? follow_page_pte.constprop.0+0x4f9/0x1170 [ 528.087363] handle_mm_fault+0x2c3/0x900 [ 528.087406] __get_user_pages+0x58a/0x2f10 [ 528.087464] ? down_read_killable+0x1d4/0x4f0 [ 528.087500] ? __pfx___get_user_pages+0x10/0x10 [ 528.087541] ? __pfx_perf_trace_lock+0x10/0x10 [ 528.087574] __gup_longterm_locked+0xba7/0x1760 [ 528.087596] ? perf_trace_lock+0x1/0x5d0 [ 528.087620] ? try_get_folio+0xf1/0x730 [ 528.087659] ? lock_release+0xc8/0x290 [ 528.087685] ? __pfx___gup_longterm_locked+0x10/0x10 [ 528.087710] ? try_get_folio+0x235/0x730 [ 528.087747] ? sanity_check_pinned_pages+0x3a3/0xce0 [ 528.087794] gup_fast_fallback+0x84e/0x2500 [ 528.087848] ? __pfx_gup_fast_fallback+0x10/0x10 [ 528.087876] ? kernel_text_address+0x5b/0xc0 [ 528.087902] ? __kernel_text_address+0xd/0x40 [ 528.087927] ? unwind_get_return_address+0x59/0xa0 [ 528.087960] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 528.087991] ? arch_stack_walk+0x9c/0xf0 [ 528.088019] pin_user_pages_fast+0xa7/0x100 [ 528.088042] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 528.088078] iov_iter_extract_pages+0x84d/0x1e00 [ 528.088113] ? lock_acquire+0x15e/0x2f0 [ 528.088139] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 528.088162] ? find_held_lock+0x2b/0x80 [ 528.088195] ? bio_associate_blkg_from_css+0x4fe/0x1380 [ 528.088223] ? __pfx_perf_trace_lock+0x10/0x10 [ 528.088256] ? bio_associate_blkg_from_css+0x508/0x1380 [ 528.088287] bio_iov_iter_get_pages+0x351/0xf90 [ 528.088317] ? bio_associate_blkg+0x139/0x2a0 [ 528.088341] ? lock_release+0xc8/0x290 [ 528.088372] ? bio_associate_blkg+0x143/0x2a0 [ 528.088409] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 528.088441] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 528.088467] ? __pfx_perf_trace_lock+0x10/0x10 [ 528.088497] ? iov_iter_is_aligned+0xf2/0x5a0 [ 528.088531] ? iov_iter_npages+0xfe/0x520 [ 528.088571] blkdev_direct_IO+0x753/0x1e70 [ 528.088606] ? __is_insn_slot_addr+0x140/0x290 [ 528.088646] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 528.088667] ? __kernel_text_address+0xd/0x40 [ 528.088691] ? unwind_get_return_address+0x59/0xa0 [ 528.088723] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 528.088752] ? arch_stack_walk+0x9c/0xf0 [ 528.088779] ? avc_policy_seqno+0x9/0x20 [ 528.088810] ? selinux_file_permission+0x99/0x600 [ 528.088843] blkdev_read_iter+0x27f/0x510 [ 528.088873] aio_read+0x2a3/0x450 [ 528.088899] ? __pfx_aio_read+0x10/0x10 [ 528.088923] ? perf_trace_lock+0xb5/0x5d0 [ 528.088955] ? __pfx_perf_trace_lock+0x10/0x10 [ 528.088989] ? lock_acquire+0x15e/0x2f0 [ 528.089013] ? __might_fault+0xe0/0x190 [ 528.089040] ? find_held_lock+0x2b/0x80 [ 528.089073] ? __might_fault+0x138/0x190 [ 528.089100] ? lock_release+0xc8/0x290 [ 528.089126] ? __might_fault+0xe0/0x190 [ 528.089160] io_submit_one+0x5a7/0x1a90 [ 528.089198] ? __pfx_io_submit_one+0x10/0x10 [ 528.089228] ? lock_acquire+0x15e/0x2f0 [ 528.089254] ? __might_fault+0xe0/0x190 [ 528.089289] ? lock_release+0xc8/0x290 [ 528.089315] ? __might_fault+0xe0/0x190 [ 528.089349] __x64_sys_io_submit+0x182/0x2e0 [ 528.089378] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 528.089403] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 528.089444] ? ksys_write+0x1a3/0x240 [ 528.089466] ? __pfx_ksys_write+0x10/0x10 [ 528.089500] do_syscall_64+0xbf/0x360 [ 528.089535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.089558] RIP: 0033:0x7f3246103b19 [ 528.089577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 528.089598] RSP: 002b:00007f3243679188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 528.089620] RAX: ffffffffffffffda RBX: 00007f3246216f60 RCX: 00007f3246103b19 [ 528.089636] RDX: 00000000200003c0 RSI: 0000000000000001 RDI: 00007f3243618000 [ 528.089650] RBP: 00007f32436791d0 R08: 0000000000000000 R09: 0000000000000000 [ 528.089664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.089678] R13: 00007fff42ee294f R14: 00007f3243679300 R15: 0000000000022000 [ 528.089715] 21:50:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x400e41) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) lseek(r0, 0x100000000, 0x1) fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0xdf, 0x2}, {0x6, 0x8}], 0xee01}, 0x18, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) fcntl$setpipe(r2, 0x407, 0x51aab51c) 21:50:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 21) 21:50:36 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x19a) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400803, 0x0) pwrite64(r2, &(0x7f0000000040)="33ac3fbf3c2df5449d5ec90107dcbf107ca6ed6b53c02ff2be7aeabdf30e12daf43e2a3d415d03f2e4b6a23ac30de8e19179f2b0877250071bd226a9e73c934ccfa939495fe854eb2a1d4717777671108ef8dd86e5fda8626e868a64b0a15de713e4546852ae01b21877c7e9945d6fbe1cb08cf26f1208885a26274b93c478dbb3337c5551e6a5b6acf2fe523434ee4428c4c452827994726aede692f9380cccdccf4f2e93ef90353ec949257381261c18882a4158801f4fb16d9eeee73c6475d791", 0xc2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='task\x00') fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000500f16a458872bba2fa2429fb99850f0690a1800df2d4e7a1aa6f7b0df897263f15d54b7abcbdd0c9468e9935f4c8a055d54123ba88478977a2e9616608a04ed3ed72de9f7fa5adf1a8c8ed47cdfeb4126c0cf95ddb51d23544c9a2fc96388ac9613b31eeee4c4e2a0006edce408d1eeb644b78ae4bda6d15f3f67a2885a7309749c2b862a22f86cdfa53927bf4ad76cb4d3c6c4855090a756a78cfa7d7d2ff5ee54358b610141ebd7d0918c36e7c0fc989af82fadd7dadcfa9cfca758aff5cc4246544ce2311f869", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040002000000000008000000", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\f\x00', @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100002000000000020001f1b00000000"], 0xac, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) pread64(r3, &(0x7f0000000200)=""/211, 0xd3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) sendfile(r5, r0, &(0x7f0000000140)=0x7, 0x5) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r6, 0x100000000, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f00000001c0)=0x1, 0xcd4) 21:50:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@remote, @in=@remote, 0x4e24, 0xe62b, 0x4e23, 0x60, 0x520fb1f5a40743b9, 0xc0, 0x40, 0x0, 0x0, r2}, {0x4, 0x3, 0x2, 0x96, 0x6, 0xfc6, 0x9, 0x2}, {0xfffffffffffffffa, 0x0, 0x3f, 0x6}, 0x4, 0x6e6bbd, 0x0, 0x1, 0x2, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d2, 0x6c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x2, 0x1, 0x9, 0x169b, 0x7, 0x8001}}, 0xe8) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x3ed, 0x400, 0x70bd28, 0x25dfdbfb, "1a0bc0a9be537bb0ce9c8e304af372e149551fde340b1a651d0d31e2c3a62be16939d4d75b8591f8c47f13af031911d3bc989696e3a749093f0e8dfd9b56798e1813b199247657d07a62a1476584d9839413ee1452a8d543895943690aabe267f1119e2d6a230867", ["", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x854}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 21:50:36 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_UNLOCK(r1, 0xc) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:50:36 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) (fail_nth: 23) 21:50:36 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000700000000000019078ac1e0001ac1414aa0c00907800000000450000000000000000eb0000ac1414bbac1e0001832300e0000001e0000002ac1e0003e0040001e0ffffffac1414bb00000000ac1414bb441c00"/126], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) syz_emit_ethernet(0x166, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x2, 0x6, 0x154, 0x67, 0x0, 0x7, 0x6, 0x0, @local, @empty, {[@generic={0x0, 0xd, "5c8b0a7f3a620b1e7613ef"}, @end, @noop]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x40, 0x3f, 0x0, 0xfff8, {[@sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "10b6bd910b3d41b7c6b48dbcf207acb3"}, @fastopen={0x22, 0x4, "d687"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x6, [0x40]}]}}, {"ce0d7b1a9cf26088ba0587619fb9e13bc79f92f699c88c3f9768506498112709657a9818cfe67d371c7b88e75e8fd7344244fd48d9335d82f7b5d4acc0d07725518c493c84642d4108f8ec06a4c9106ef43dd4e7d6c634d55fe19b94fb135a0e6d100d847e81de647decb26d2039e371fafac68ec99d221d5a513070504c440b6a230a1c0532315729dfa163b6b5c39dac35aad3f06c54b21a82092036d7b9cc714b4ad93a9e26d8f819bb0304d67dc4fb8ef57c79a8adca4dd5a36e246a9e8e631047c36d9e1c2063604deb730147794cd68bc44d62f741ff0007faff3194a0aee105291ccf758800f6525e91bdb2aa"}}}}}}, &(0x7f0000000200)={0x1, 0x4, [0x8e1, 0xb0f, 0xb12, 0x875]}) 21:50:36 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="040023bdeaaeffdbdf2502000000080007000000000014000500fe8000000000000000000e040000000000000008000700ac1414bb14000600ff020000000000000000000000000001"], 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x24000010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x40820}, 0xc011) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe8, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8f, 0xa8, @random="0dd1130945a582f218d5cf0f9ba39980db5641a496c36e8b37137282743c696d3c0717e866e5c72eb42389b8e56abf18347530d1decccebe8c9e3d60f55e096ffc3eaa0929764adf5b1162e897f31cdcb891cec59986528805f34126758d91807545b58009d4a03159c376c5eb473b23acb2e455441f8d8b3bf8c0d31a2139ab5216e602191239bf41c076"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x84}, 0x4008004) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x4000000002, 0x7}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xfff}) r4 = dup(r3) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0xbae, 0x800}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x80000}], 0x1, 0x1000, 0x0) 21:50:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) ioctl$TIOCCONS(r2, 0x541d) lseek(r0, 0x100000000, 0x1) 21:50:36 executing program 6: r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "d94aec6e7109130b0b52db90fe57dc67dd9eb00943f1f9e82e9fcae08bbc35ca4e7c6b35b9b39faff6d358de7bd2f7d1dbc20603ffe2c2465f51a09b9dc9cb40"}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r1) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000080)="a4", 0x1, r2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x8, 0x81cd, 0x3ff, 0x1f, 0x5, 0xff}) lseek(r3, 0x100000000, 0x1) [ 541.709657] FAULT_INJECTION: forcing a failure. [ 541.709657] name failslab, interval 1, probability 0, space 0, times 0 [ 541.711516] CPU: 0 UID: 0 PID: 6410 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 541.711549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 541.711564] Call Trace: [ 541.711572] [ 541.711582] dump_stack_lvl+0xfa/0x120 [ 541.711620] should_fail_ex+0x4d7/0x5e0 [ 541.711662] ? jbd2__journal_start+0x193/0x6b0 [ 541.711693] should_failslab+0xc2/0x120 [ 541.711721] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 541.711759] ? lock_is_held_type+0x9e/0x120 [ 541.711799] jbd2__journal_start+0x193/0x6b0 [ 541.711838] __ext4_journal_start_sb+0x325/0x5d0 [ 541.711865] ? ext4_dirty_inode+0xa5/0x130 [ 541.711899] ext4_dirty_inode+0xa5/0x130 [ 541.711928] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 541.711961] __mark_inode_dirty+0x1b7/0xd20 [ 541.711995] generic_update_time+0xcb/0xf0 [ 541.712025] file_modified+0x1f0/0x230 [ 541.712056] ext4_buffered_write_iter+0xf4/0x430 [ 541.712093] ? __ext4_journal_stop+0x10b/0x1f0 [ 541.712123] ext4_file_write_iter+0xff6/0x1990 [ 541.712178] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 541.712216] ? ksys_write+0x121/0x240 [ 541.712246] ? lock_is_held_type+0x9e/0x120 [ 541.712283] vfs_write+0xbe9/0x10c0 [ 541.712307] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 541.712350] ? __pfx_vfs_write+0x10/0x10 [ 541.712406] ksys_write+0x121/0x240 [ 541.712429] ? __pfx_ksys_write+0x10/0x10 [ 541.712467] do_syscall_64+0xbf/0x360 [ 541.712503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.712528] RIP: 0033:0x7fc68e2fdb19 [ 541.712546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 541.712569] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 541.712593] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 541.712609] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 541.712624] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 541.712639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.712654] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 541.712694] 21:50:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x7ff, 0x8, 0xfffc, 0x140, 0x1ff}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x0, "1863408d6d0c138430bfe8b3e907fe9cde92d65faf8569780991ea2e4b3de830a75474c9d653a97346e40910bc4bdc655801d1a293d0aff05f0d6fcfd5b1538cc858595f65a6ba58b7bee089049ad9a280c3a93e0d16366f8cab7ee8d06f3af76ff78724b9f1ca4738d19648c5fb3c25cc2f974824e757b34b18185f87ba0b73980ee77b3e9d1c66b28dc7f09f2a1bfda1980344ad6417798e2ad23bab41e1ec45228e13603a183cbd5abf1f4406408b4e93db5464b263726857b352e21eea8dab33dcfb933e55a445f2572a309545a435fcfe6e855d3dca537781902d56c3a13e5724cf305d4058a6ce7e33e7f5c0e8afacafe68379ca83f9473c4e25910e4f13da87446bc26ee2c16963e5e628ab493ddcc1c91bd6e867c667c084b33456bfb5305186b9ce5e46bb28ee5f198453f30443260a5e45b530865e946d9e54c0221c7a1fccea8bad1b9f5275c9dc198771a6698caa460cefde41c3746918de5fe944978a02632159ba708014633873356464f6c9c261500b7cd73398679b8a1943e576668a9a4980f16aa9740e9598be600a85a377a14c0540c7d7cca49b1aeadacdfd7029821a5d150c2aafd6a3f7ddae313f472409fda770f31a49f021cc3147cf6b64f6ead0f0ab44f36789530240f6966055880c9ca8a27cacb265aced55d8a831611d52656caa2fc26a2b0f325f9c37bf5251527077b01a63b8e4049ad1dc"}) 21:50:36 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xb8, 0x13, 0x7, 0x201, 0x70bd26, 0x25dfdbfd, {0x1, 0x0, 0x8}, [@typed={0x8, 0x81, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x99, 0x72, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="80514892cf8b5e04b8839027bfb8d857a38b4191d3a79647355a38ead1634f966ef998309a1820465939b3f31ac6a15ea0f15c6504cbca21365454bbc2d2860634ac989dd53eaf94c4bab1c5ea0e7f6e6fb37e5e2bc223163d31e15871b7bb8db11a4aec3ed4a89a612923a24bfd13a56ff0c619db7c21d6b07e4cd31d3e571a7141c00d06", @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40005}, 0x851) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fstatfs(r1, &(0x7f0000000080)=""/79) 21:50:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/bnep\x00') r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x800, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="36c8d9a53612e91685ce47131280a994fe61ce15ab0656d45d86db2a1c53f64ae81d26f48c75c46d4aa4e7663f812f6f4a1c4124e2c3b1d11e4b4e661ab5497b353d1db7d58e60fc2be74405480ead57327349066b0668201be7c3107e4563903019f182a07075e9ba93494bcabdb70c4232ac0c04da9971ed75734ee6faf7139806e8398322ed1f773f48ea436525909932d47314311f453dab479ba31d5c6cce11ef8e94d2c98105718b49504e", 0xae, 0x7}, {&(0x7f0000000180)="c08ac59439103271091ae62e3a32c6ac1db6421cc55986ccfbc37b715c490c3dbde1fd2bf4f2953729424661667e53ad7173c10003324b1a83c3be3e7986a19b7fc96873aabf9fbc61b02d8a54f14f9d2f4a49f686e81124bfab74ca90d2cd87a83fbcedde6a1ecaedd92a4e4649a7ea684b5087764e3b324d56af016b6db47016d723f6413d93d59ee1e3cce54fab1a7cdbb22c76ff9639dfea7117ea5cc9efea5ca278ba", 0xa5, 0x1}], 0x12820e0, &(0x7f0000000280)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@grpid}, {@nouid32}], [{@smackfsdef={'smackfsdef', 0x3d, 'net/bnep\x00'}}, {@audit}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) lseek(r1, 0x80, 0x1) lseek(r0, 0x100000000, 0x1) 21:50:36 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:50:36 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fffff70e0000000000b4e25197"]) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='}\'(:\'/\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) r2 = fsmount(r1, 0x0, 0x89) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) readlinkat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/54, 0x36) dup2(r0, r2) 21:50:36 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x27c, 0x40000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:50:36 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_UNLOCK(r1, 0xc) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:50:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 22) 21:50:36 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xcf}}, './file0\x00'}) 21:50:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x1e, 0x18a}) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCXONC(r0, 0x5607, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 541.988862] tmpfs: Unknown parameter 'ÿÿ÷' [ 542.005257] tmpfs: Unknown parameter 'ÿÿ÷' 21:50:47 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x6000, 0x1) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[{0x0}], 0x0, 0x0) 21:50:47 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ff6000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x5940, 0xfffffffffffffff9, 0x2a3266e78d104e8c) 21:50:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 23) 21:50:47 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:50:47 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_UNLOCK(r1, 0xc) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:50:47 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x9, 0x4403f20b0e8fc8e2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9, 0x4b041794}}, './file0\x00'}) 21:50:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='status\x00') lseek(r2, 0x100000000, 0x0) write$P9_RREAD(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x100) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) write$tcp_mem(r3, &(0x7f0000000100)={0x0, 0x20, 0x53, 0x20, 0x5}, 0x48) write$tcp_mem(r0, &(0x7f0000000080), 0x48) write$tcp_mem(r1, &(0x7f00000003c0)={0xfffffffffffffffc, 0x20, 0x4, 0x20, 0x100}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000180)={0x1, 0x18, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000300)) lseek(r6, 0x100000000, 0x0) pread64(r6, &(0x7f0000000440)=""/211, 0xd3, 0x0) r7 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x0, 0x20, 0x4, 0x1f, 0x0, 0x100000003, 0xb5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x3265}, 0x0, 0x3ff, 0x8, 0x7, 0x7, 0x8, 0x8, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xd, r0, 0xa) pread64(r7, &(0x7f0000000200)=""/210, 0x83, 0x4000000013c) 21:50:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = getpid() pidfd_open(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) kcmp(r3, r1, 0x5, r2, r0) lseek(r0, 0x100000000, 0x1) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f0000000000)) [ 553.489749] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 21:50:48 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_UNLOCK(r1, 0xc) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:50:48 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000080)={0x2, 0x168, 0x4e, &(0x7f0000000000)=""/78}) dup(r0) 21:50:48 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/242, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfffffffffffff000) r1 = pidfd_open(0x0, 0x0) process_madvise(r1, &(0x7f0000000100), 0x0, 0xa, 0x0) 21:50:48 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) [ 553.624899] FAULT_INJECTION: forcing a failure. [ 553.624899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 553.627519] CPU: 0 UID: 0 PID: 6475 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 553.627548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 553.627562] Call Trace: [ 553.627570] [ 553.627579] dump_stack_lvl+0xfa/0x120 [ 553.627615] should_fail_ex+0x4d7/0x5e0 [ 553.627654] should_fail_alloc_page+0xe0/0x110 [ 553.627682] prepare_alloc_pages+0x1af/0x500 [ 553.627708] ? __pfx_perf_trace_lock+0x10/0x10 [ 553.627741] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 553.627775] ? __is_insn_slot_addr+0x2e/0x290 [ 553.627811] ? __is_insn_slot_addr+0x136/0x290 [ 553.627843] ? lock_release+0xc8/0x290 [ 553.627876] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 553.627912] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 553.627946] ? __kernel_text_address+0xd/0x40 [ 553.627985] ? perf_trace_lock+0xb5/0x5d0 [ 553.628010] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 553.628039] ? policy_nodemask+0xeb/0x4e0 [ 553.628074] alloc_pages_mpol+0xed/0x340 [ 553.628104] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 553.628136] ? filemap_get_entry+0x1b1/0x3b0 [ 553.628159] ? lock_release+0xc8/0x290 [ 553.628187] folio_alloc_noprof+0x22/0x290 [ 553.628222] filemap_alloc_folio_noprof+0x376/0x420 [ 553.628254] ? perf_trace_lock_acquire+0xc9/0x700 [ 553.628293] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 553.628324] ? perf_trace_lock+0xb5/0x5d0 [ 553.628358] __filemap_get_folio+0x384/0x960 [ 553.628388] ext4_da_write_begin+0x3e1/0xb40 [ 553.628428] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 553.628455] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 553.628492] generic_perform_write+0x392/0x810 [ 553.628528] ? __pfx_current_time+0x10/0x10 [ 553.628557] ? __pfx_generic_perform_write+0x10/0x10 [ 553.628606] ext4_buffered_write_iter+0x11a/0x430 [ 553.628640] ? __ext4_journal_stop+0x10b/0x1f0 [ 553.628667] ext4_file_write_iter+0xff6/0x1990 [ 553.628716] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 553.628750] ? ksys_write+0x121/0x240 [ 553.628777] ? lock_is_held_type+0x9e/0x120 [ 553.628811] vfs_write+0xbe9/0x10c0 [ 553.628832] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 553.628879] ? __pfx_vfs_write+0x10/0x10 [ 553.628935] ksys_write+0x121/0x240 [ 553.628956] ? __pfx_ksys_write+0x10/0x10 [ 553.628990] do_syscall_64+0xbf/0x360 [ 553.629023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.629045] RIP: 0033:0x7fc68e2fdb19 [ 553.629063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 553.629083] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 553.629103] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 553.629118] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 553.629131] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 553.629144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.629156] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 553.629193] 21:50:48 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x9, 0x4403f20b0e8fc8e2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9, 0x4b041794}}, './file0\x00'}) 21:50:48 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) clone3(&(0x7f0000005880)={0x61820100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000002c0)=r0, 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r4}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f00000003c0)=r4, 0x1) pidfd_send_signal(r0, 0x15, &(0x7f0000000240)={0x7, 0xffff8001, 0xffffffff}, 0x0) 21:50:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 24) 21:50:48 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x40000) lseek(r0, 0x100000000, 0x1) [ 553.858713] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 21:50:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = openat$cgroup_devices(r0, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) ftruncate(r1, 0x10001) lseek(r0, 0x100000000, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000080)) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) syncfs(r2) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4}, 0x6900, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x84}, 0x0, 0x0, r2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) 21:51:06 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x16, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x21, 0x0, 0x73}, 0x2c) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(r1, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) 21:51:06 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:06 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8b}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8001}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0xc040000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setfsgid(r3) r4 = getpid() r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setfsgid(r6) r7 = getpid() r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r9) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)="4deac8cfeca1fd6964722a73062972f25c4fb9efd7fdf379fa9cf79aea98cb38bd90592159f5a2f05b1440c2ba38b8b1046fd40a817d6127a5d00f1564f56de8b8f43fb3bff972ddb87f45b3d12f5278a04d5d0446adaf57b4ce0fd2f82479df8b495ebf559b34603e059d31d6e198736b93eb21804d2610e5ad391bd9081768", 0x80}, {&(0x7f0000000180)="a96065b3d09e83970e15c0c3dd6128960fe581b23e3045e7a5025502f7046f0b8c71346f70527f7b892d94761885e2d4efbedf85b6043ef83940818166f4c27b57ae25b0d5008476371e2f102c1278d524cb61e741fd33462aba72056b2b2d049ad1a620837b82d11b7894c84d531050e85e2420", 0x74}], 0x2, &(0x7f0000000200)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, 0xee01}}}], 0x98, 0x24080040}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r10, 0x100000000, 0x1) 21:51:06 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x16, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x21, 0x8ea, 0x73}, 0x2c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000008600)) socket$nl_xfrm(0x10, 0x3, 0x6) clone3(&(0x7f0000005880)={0x61020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x10001) 21:51:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 25) 21:51:06 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/52, 0x34}], 0x1, 0x2d, 0x3) clone3(&(0x7f0000005880)={0x61820100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) 21:51:06 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x4, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:51:06 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 26) 21:51:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$setlease(r0, 0x400, 0x1) lseek(r0, 0x100000000, 0x1) [ 572.320842] FAULT_INJECTION: forcing a failure. [ 572.320842] name failslab, interval 1, probability 0, space 0, times 0 [ 572.321998] CPU: 1 UID: 0 PID: 6546 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 572.322015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 572.322024] Call Trace: [ 572.322028] [ 572.322033] dump_stack_lvl+0xfa/0x120 [ 572.322057] should_fail_ex+0x4d7/0x5e0 [ 572.322080] ? jbd2__journal_start+0x193/0x6b0 [ 572.322097] should_failslab+0xc2/0x120 [ 572.322112] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 572.322131] ? lock_is_held_type+0x9e/0x120 [ 572.322152] jbd2__journal_start+0x193/0x6b0 [ 572.322172] __ext4_journal_start_sb+0x325/0x5d0 [ 572.322187] ? ext4_da_write_end+0xb04/0xe70 [ 572.322206] ext4_da_write_end+0xb04/0xe70 [ 572.322226] generic_perform_write+0x223/0x810 [ 572.322254] ? __pfx_generic_perform_write+0x10/0x10 [ 572.322282] ext4_buffered_write_iter+0x11a/0x430 [ 572.322301] ? __ext4_journal_stop+0x10b/0x1f0 [ 572.322316] ext4_file_write_iter+0xff6/0x1990 [ 572.322344] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 572.322364] ? ksys_write+0x121/0x240 [ 572.322380] ? lock_is_held_type+0x9e/0x120 [ 572.322398] vfs_write+0xbe9/0x10c0 [ 572.322411] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 572.322432] ? __pfx_vfs_write+0x10/0x10 [ 572.322460] ksys_write+0x121/0x240 [ 572.322472] ? __pfx_ksys_write+0x10/0x10 [ 572.322491] do_syscall_64+0xbf/0x360 [ 572.322510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.322523] RIP: 0033:0x7fc68e2fdb19 [ 572.322533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 572.322546] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 572.322558] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 572.322566] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 572.322574] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 572.322581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 572.322588] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 572.322608] 21:51:18 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x5, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:51:18 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x4, 0x10000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8e) syz_io_uring_setup(0xce0, &(0x7f0000000000)={0x0, 0x7ce8, 0x4, 0x0, 0x1f6, 0x0, r0}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 21:51:18 executing program 4: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="08002dbd7000fcdbdf250300000005000300000000004400018008000300000000001400020076657468305f6d6163767461700000000800030000000000140002006d6163766c616e3000000000000000000800030002000000050003000300000005000300f7000000050002006500000005000200ee00000005000500080000001400018008000100", @ANYRES32=0x0, @ANYBLOB="010058d0e5834e", @ANYRES32=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="e4720000", @ANYRES16=r3, @ANYBLOB="080029bd7000fedbdf250b00000014000280080002000100000008000200060000008000028008000100050000004400038008000200fbffffff080002002b02000008000100ff030000080002000200000008000100ff7f0000080002000000000008000100010000000800020001000080080001000c0700001c0003800800010001000000080002000500000008000100ff0100000800010001000000040004004400058008000100657468000c000280080004000100000024000280080002000000000008000400050000000800010015000000080001000600000008000100756470001000028004000400080001007f0000008c0004801300010062726f6164636173742d6c696e6b00000c00078008000300040000001400078008000300400000000800040000e0ff0f14000780080003000300000008000300020000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000c000780080001000a0000000900010073797a31000000001c0004800900010073797a31000000000900010073797a3100000000100005800c0002800800020001000000"], 0x1b4}, 0x1, 0x0, 0x0, 0x8000}, 0x24040090) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x60, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40084}, 0x4000014) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x400, 0x1) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee00) 21:51:18 executing program 6: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/bnep\x00') lseek(r1, 0x100000000, 0x1) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000000)={0x10000, 0x800, 0x1}) 21:51:18 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 27) 21:51:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [{}, {}, {}, {}, {}, {}, {}]}, 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='mnt/encrypted_dir\x00', 0x4, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)="0c0d90ce56904dcbfdb515b7f38fb56b96a4fe631838549b0e133e7106b86b27e796c3337d8fde31cb2d0271d2dc46e22b04690870743816e90b89becc9c0f6a8dc45a7fce176748e7341abda765ba77250f647f2b1f0b800a85445e311ca68b57013545bbda8d5298059c035b721253259531d55c78e74cd8ef6ffaccd62a418545810f98f335fa21e24a7befc0506634ad3b762cd0c638b16f7bb6a6f4d32e6959e56a8b5490e25ee70bc25fec4c8a51a39607f85d648d5e167f", 0xbb, 0x6b}], 0x0, &(0x7f00000002c0)={[{'}\\]^-'}, {}], [{@appraise}]}) mknodat(r0, &(0x7f0000000300)='mnt/encrypted_dir\x00', 0x440a, 0xffffffff) 21:51:18 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x9) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xc, 0x0, r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000240)=""/52, 0x34}], 0x1, 0x2d, 0x3) clone3(&(0x7f0000005880)={0x61820100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x2262, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000003c0)=r5, 0x1) [ 583.762705] FAULT_INJECTION: forcing a failure. [ 583.762705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.764565] CPU: 1 UID: 0 PID: 6581 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 583.764596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 583.764610] Call Trace: [ 583.764618] [ 583.764627] dump_stack_lvl+0xfa/0x120 [ 583.764666] should_fail_ex+0x4d7/0x5e0 21:51:18 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) [ 583.764701] ? page_copy_sane+0xce/0x2b0 [ 583.764742] copy_folio_from_iter_atomic+0x3d3/0x1820 [ 583.764785] ? ext4_da_write_begin+0x60d/0xb40 [ 583.764817] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 583.764849] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 583.764878] ? balance_dirty_pages_ratelimited_flags+0x8f/0x1190 [ 583.764909] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 583.764956] generic_perform_write+0x1d7/0x810 [ 583.765007] ? __pfx_generic_perform_write+0x10/0x10 [ 583.765037] ? __mark_inode_dirty+0x254/0xd20 [ 583.765069] ? generic_update_time+0xcb/0xf0 [ 583.765094] ? mnt_put_write_access_file+0x45/0xe0 [ 583.765137] ext4_buffered_write_iter+0x11a/0x430 [ 583.765172] ? __ext4_journal_stop+0x10b/0x1f0 [ 583.765201] ext4_file_write_iter+0xff6/0x1990 [ 583.765253] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 583.765288] ? ksys_write+0x121/0x240 [ 583.765317] ? lock_is_held_type+0x9e/0x120 21:51:18 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x9, 0x100) madvise(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) [ 583.765353] vfs_write+0xbe9/0x10c0 [ 583.765376] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 583.765416] ? __pfx_vfs_write+0x10/0x10 [ 583.765470] ksys_write+0x121/0x240 [ 583.765491] ? __pfx_ksys_write+0x10/0x10 [ 583.765528] do_syscall_64+0xbf/0x360 [ 583.765562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.765587] RIP: 0033:0x7fc68e2fdb19 [ 583.765605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 583.765632] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 583.765654] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 583.765669] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 583.765683] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 583.765697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 583.765711] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 583.765750] 21:51:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0xfffffffffffffff7, 0x3) 21:51:18 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x6, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:51:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 28) 21:51:18 executing program 5: r0 = perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0xc0, 0x2, 0xf7, 0x7, 0x0, 0xc0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x7fff}, 0x0, 0x6, 0x9, 0x7, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x0, 0x10001}, 0x0, 0x6, 0xffffffffffffffff, 0x1b) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './file0', [{0x20, '-{-'}, {0x20, '}][*'}], 0xa, "c6fa2e6e974c9bc2aadebb35436059c085da47908468b530786e70870012618820005903c5bbc4199a5e0dac5fda7637029f"}, 0x46) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) 21:51:18 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x200401, 0x10, 0x10}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x65}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80c5}, 0x20040840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b00"], 0x20}}, 0x0) [ 584.082650] FAULT_INJECTION: forcing a failure. [ 584.082650] name failslab, interval 1, probability 0, space 0, times 0 [ 584.084570] CPU: 1 UID: 0 PID: 6603 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 584.084600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 584.084613] Call Trace: [ 584.084621] [ 584.084629] dump_stack_lvl+0xfa/0x120 [ 584.084665] should_fail_ex+0x4d7/0x5e0 [ 584.084703] ? jbd2__journal_start+0x193/0x6b0 [ 584.084731] should_failslab+0xc2/0x120 [ 584.084756] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 584.084788] ? lock_is_held_type+0x9e/0x120 [ 584.084824] jbd2__journal_start+0x193/0x6b0 [ 584.084859] __ext4_journal_start_sb+0x325/0x5d0 [ 584.084883] ? ext4_da_write_end+0xb04/0xe70 [ 584.084913] ext4_da_write_end+0xb04/0xe70 [ 584.084957] generic_perform_write+0x223/0x810 [ 584.085004] ? __pfx_generic_perform_write+0x10/0x10 [ 584.085032] ? __mark_inode_dirty+0x254/0xd20 [ 584.085063] ? generic_update_time+0xcb/0xf0 [ 584.085087] ? mnt_put_write_access_file+0x45/0xe0 [ 584.085127] ext4_buffered_write_iter+0x11a/0x430 [ 584.085159] ? __ext4_journal_stop+0x10b/0x1f0 [ 584.085186] ext4_file_write_iter+0xff6/0x1990 [ 584.085235] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 584.085268] ? ksys_write+0x121/0x240 [ 584.085295] ? lock_is_held_type+0x9e/0x120 [ 584.085327] vfs_write+0xbe9/0x10c0 [ 584.085348] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 584.085386] ? __pfx_vfs_write+0x10/0x10 [ 584.085436] ksys_write+0x121/0x240 [ 584.085456] ? __pfx_ksys_write+0x10/0x10 [ 584.085490] do_syscall_64+0xbf/0x360 [ 584.085522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.085544] RIP: 0033:0x7fc68e2fdb19 [ 584.085562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 584.085582] RSP: 002b:00007fc68b873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 584.085603] RAX: ffffffffffffffda RBX: 00007fc68e410f60 RCX: 00007fc68e2fdb19 [ 584.085617] RDX: 000000000000008b RSI: 0000000020000100 RDI: 0000000000000004 [ 584.085630] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 584.085643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.085656] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 584.085692] 21:51:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') io_uring_setup(0xd32, &(0x7f0000000000)={0x0, 0xdff0, 0x1, 0x2, 0x346}) lseek(r0, 0x100000000, 0x1) 21:51:18 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 21:51:18 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) r0 = shmget(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r1 = shmget$private(0x0, 0x5000, 0x78000000, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r1, 0xb) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_LOCK(r1, 0xb) 21:51:18 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x7, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:51:18 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66a03, 0x121) r2 = dup(r0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000001c0)=0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r3, 0x0, 0xa0103) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x7f) creat(&(0x7f0000000180)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) fcntl$setstatus(r5, 0x4, 0x2400) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r4, r6, 0x0, 0xa0103) 21:51:18 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) readv(r0, &(0x7f0000003440)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f00000010c0)=""/52, 0x34}, {&(0x7f0000001100)=""/246, 0xf6}, {&(0x7f0000001200)=""/242, 0xf2}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/68, 0x44}, {&(0x7f0000003380)=""/84, 0x54}, {&(0x7f0000003400)=""/52, 0x34}], 0xa) 21:51:18 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:27 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp, &(0x7f0000000080)=0x80, 0x80000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000180)=""/45, 0x80000000}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e22, @remote}}}, 0x88) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) lseek(r0, 0x5, 0x2) 21:51:27 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xe, 0x0, &(0x7f0000000080)) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xe05, &(0x7f0000000180)="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") r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) 21:51:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 29) 21:51:27 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:51:27 executing program 5: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x5) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x4638d04d) lseek(r0, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 'none\x00', 0x39, 0x2, 0x5a}, 0x2c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) close(r0) 21:51:27 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:27 executing program 2: clock_adjtime(0x0, &(0x7f0000000100)={0xa53, 0x0, 0xe3a59bc420000000, 0xfffffffffffffffd}) clock_adjtime(0x7, &(0x7f0000000000)={0x2, 0x7, 0x1ff, 0x100, 0x2e, 0xfed, 0x80000001, 0x0, 0x80000000, 0x879, 0x3f, 0x2, 0xbe23, 0x3, 0x6, 0x80000001, 0x7fffffff, 0xfffffffeffffffff, 0x7, 0x97, 0x0, 0x9, 0x802, 0x7ff, 0x2, 0x1}) 21:51:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f6e756d7461cd6c1e983cfdd897f8a8b448204a4dcba1fee7fa39"]) 21:51:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 30) [ 593.266571] vfat: Unknown parameter 'nonumtaÍl˜<ýØ—ø¨´H JMË¡þçú9' [ 593.270885] vfat: Unknown parameter 'nonumtaÍl˜<ýØ—ø¨´H JMË¡þçú9' 21:51:27 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') pread64(0xffffffffffffffff, &(0x7f0000000100)=""/116, 0x74, 0x100000001) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) fchdir(r1) fcntl$setsig(r0, 0xa, 0x7) r2 = signalfd4(r0, &(0x7f0000000080)={[0x7ff]}, 0x8, 0x80000) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/3\x00') lseek(r3, 0x100000000, 0x0) dup2(r3, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x8, "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"}) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000400)={0x2, 0x30, [0xffffffffffffff7f, 0x2, 0x9, 0x7f], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1, 0x5469, 0x840) lseek(r0, 0x100000000, 0x1) 21:51:27 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x401) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000180)="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", 0x1000}, 0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) r3 = syz_io_uring_setup(0x7255, &(0x7f00000000c0)={0x0, 0xd16c, 0x8, 0x0, 0x15d}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001180), &(0x7f00000011c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) ppoll(&(0x7f0000001200)=[{r2, 0x89}, {r3, 0x10}, {r0, 0x430}, {r4, 0x20a0}], 0x4, &(0x7f0000001240)={0x0, 0x989680}, &(0x7f0000001280)={[0x4]}, 0x8) r5 = syz_open_dev$vcsa(&(0x7f00000012c0), 0x1, 0x80000) write$P9_RLERRORu(r5, &(0x7f0000001300)={0x1b, 0x7, 0x1, {{0xe, '/dev/snapshot\x00'}, 0x1}}, 0x1b) [ 593.465499] random: crng reseeded on system resumption [ 593.513608] random: crng reseeded on system resumption 21:51:42 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x9, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:51:42 executing program 5: r0 = memfd_create(&(0x7f0000001280)='\x00', 0x5) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x4638d04d) lseek(r0, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 'none\x00', 0x39, 0x2, 0x5a}, 0x2c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) close(r0) 21:51:42 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:51:42 executing program 3: shmat(0x0, &(0x7f0000ff4000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:42 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x406603, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x8021) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/kexec_crash_size', 0x2, 0x110) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000280)) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000001340), 0x2, 0x0) pread64(r0, &(0x7f0000001300)=""/31, 0x1f, 0x1ff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000300)={{r2}, r5, 0x10, @inherit={0x78, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"]}, @subvolid=0x8}) 21:51:42 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 31) 21:51:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) close(r0) fcntl$setlease(r1, 0x400, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000100)={"e225b96a175af1bf8b164147", &(0x7f0000000000)="9f226dd924db99b5f95ab2748561dfb459def82d07b5f3a2f616a176f683bb698799aa7856f4079711f5b1a8bcf8ccf9b5d050232e62b8aac75cb502082f925a7647627534beb7f5e1495f9628d23f9d00cf7f43260e49272d1edc74a16ff90c", 0x60, 0x2, &(0x7f0000000080)={0x4, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, '\x00', 0x2, "953ede33", 0xff, 0xc, 0x1, '\x00\x00$', "2c8063efa9d30e96cc00db28d1a30b2636f45bbe929d9bc7e98d673cf3c9c6d3759c9ab68238f689cc7f4193abc3"}, 0x3, 0x0, 0x2, &(0x7f00000000c0)}) lseek(r0, 0x100000000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) dup2(r2, r3) 21:51:42 executing program 2: read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x32b, 0x0, &(0x7f0000000080)=[r2, r0]}, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = dup2(r4, r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0xc0189436, 0x0) 21:51:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 32) 21:51:42 executing program 5: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x31, 0x8, 0x2, 0x6, 0x0, 0x4, 0x202, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf026, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x800, 0x20, 0x80, 0x0, 0x9, 0x36796f56, 0xff3, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xc, r0, 0xb) clone3(&(0x7f0000005880)={0x71060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21:51:42 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:42 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0xa, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:51:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 33) 21:51:42 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:53 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0xb, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:51:53 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000180)='./file0\x00') acct(&(0x7f0000000040)='./file0\x00') 21:51:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) 21:51:53 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:51:53 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) (fail_nth: 34) 21:51:53 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmdt(r2) shmdt(r2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0xffffffffffffffff) 21:51:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000252cf66c56f4008b445f2140244460ca4bca0cc80300e868757cc8da1ccfa70eef2e7eac8104525dd90976a4432fa687a78df42396a04489e6cde9680a86d59d698d3ff2b88d2ae6688d904f0cbb2ef94644204a4d5d25015e7e378bc3bf6037abcb252878e4f5e92efe0827efe7930a037f660eee89fdac6ce561d5878b5cdd4aef8b65c39fdd24dd2a8a89fda5f66470e0db3763ef08c0fc093cc5062823a926e5ef967bbfefe5a1b59721575a27f5f3c9eb102caccd764ac1891234763de602f83c2143ffeb782d7685e50f330a93a32b4dbf6a5b668f4fc26c9438322cfa4e2229f541f60fe6cc5e"]) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x59) [ 618.918848] FAULT_INJECTION: forcing a failure. [ 618.918848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.919888] CPU: 0 UID: 0 PID: 6728 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 618.919904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 618.919912] Call Trace: [ 618.919916] [ 618.919921] dump_stack_lvl+0xfa/0x120 [ 618.919946] should_fail_ex+0x4d7/0x5e0 [ 618.919969] _copy_to_user+0x32/0xd0 [ 618.919983] simple_read_from_buffer+0xe0/0x180 [ 618.920003] proc_fail_nth_read+0x18a/0x240 [ 618.920024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.920045] ? security_file_permission+0x22/0x90 [ 618.920063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.920083] vfs_read+0x1eb/0xbe0 [ 618.920106] ? __pfx_vfs_read+0x10/0x10 [ 618.920125] ? lock_release+0xc8/0x290 [ 618.920143] ? __fget_files+0x20d/0x3b0 [ 618.920169] ksys_read+0x121/0x240 [ 618.920180] ? __pfx_ksys_read+0x10/0x10 [ 618.920197] do_syscall_64+0xbf/0x360 [ 618.920215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.920228] RIP: 0033:0x7fc68e2b069c [ 618.920237] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 618.920249] RSP: 002b:00007fc68b873170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 618.920260] RAX: ffffffffffffffda RBX: 000000000000008b RCX: 00007fc68e2b069c [ 618.920268] RDX: 000000000000000f RSI: 00007fc68b8731e0 RDI: 0000000000000005 [ 618.920275] RBP: 00007fc68b8731d0 R08: 0000000000000000 R09: 0000000000000000 [ 618.920282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 618.920288] R13: 00007ffc45d4c41f R14: 00007fc68b873300 R15: 0000000000022000 [ 618.920308] 21:51:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2020002, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',s=c{ientdfltuid=\x00'/27, @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=r3, @ANYBLOB=',noextend,nodevmap,access=client,fscache,\x00']) lseek(r0, 0x1, 0x2) [ 618.959905] Process accounting resumed [ 618.963264] Process accounting resumed [ 618.983775] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.999608] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 619.009763] Process accounting resumed 21:51:53 executing program 2: creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x4) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write(r1, &(0x7f0000000100)="cff6b4278cc25dade10a920e6ddb715729f6d2ce2857528c5eae3759ec493def8c5719e117261e90a7e21aa88e", 0x2d) 21:51:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:51:53 executing program 5: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) 21:51:53 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:51:53 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0xc, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:51:53 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x8008010, 0xffffffffffffffff, 0x8000000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0xffffffffffffffff) munmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000) 21:51:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0xe3aafb0e766da637, r0, 0x0) 21:51:53 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x9, 0x4, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) [ 619.308280] EXT4-fs warning (device sda): verify_group_input:136: Cannot add at group 0 (only 16 groups) 21:52:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfdef) 21:52:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x404}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="9f", 0xfffffdef}], 0x16, 0x1008, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:52:02 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget(0x2, 0x12000, 0x1000, &(0x7f0000fee000/0x12000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x2000) 21:52:02 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0xd, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:02 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:52:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) sync_file_range(r0, 0x100000002000, 0x1, 0x2) lseek(r0, 0x100000000, 0x1) 21:52:02 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:52:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000001c0), 0x1) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) splice(r0, &(0x7f0000000100)=0x35, r1, &(0x7f0000000140), 0x800, 0x6) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7fff}, 0xe) 21:52:02 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:52:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="d3", 0x1}]) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)=""/231, 0xe7}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000000500)=""/232, 0xe8}], 0x4, &(0x7f0000000600)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x102) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x100, 0x124, 0x5}, 0x18) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r7, 0x100000000, 0x0) io_setup(0x318, &(0x7f0000000800)=0x0) io_submit(r8, 0x3, &(0x7f0000000880)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x1, r4, &(0x7f0000000180)="0a3d8c2b890d1059f67e839b070597b352882c35ff22af2147fc4b729338f7670bdc02ce17c7e15cf2b7e543c43977e7eaa10c199f0c80eeadff0450de6b05e6a6bf52af458bed6351a6961e3e4d89a7e35ec36e4c892bb41043b13c37ec552c0dadd94fee01419b2c4a03000000000000000ad651bd4bab9f5becdd0f41fab8256b0e052de236dc4ff0ddbcf8a7fc56b4c19f5f9a85ec4fc63c2ed14875635607ec01b76bd48a5f4753ababb3587046f43723d037905f05521770f19acfb95e1f10ba38e29027", 0xc7, 0x1, 0x0, 0x3, r5}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0x101, r6, &(0x7f0000000780)="cc40efc20920873b335b8944da3a2f969acf0653f696740000000000", 0x1c, 0xffffffffffff0000, 0x0, 0x3, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x101, r1, &(0x7f00000008c0)="183ec2eb2eefa422dc89192d077963d7bfc1f44f8ff5e85e60271fdd53a31329843c4fbfef523b2c9e05af851f49ada03e3be7c752090529b223d75dfe9f518a30d8e73dbfd260f0ef3543eaa33f8d9aa04d42a199561bd4b8bfabf84a60fe1117560ce868ab569591b0bd1e7fddb16236848bfa3035c96d7d6adbce7ca7aedfc5f9925a5cd5f43458b68063547e3a933ffd6cbb81ec612c614230ba8a4bd2f35cb44d84feaeab2bc93392ec706d99d68ebb44fce9a299b56d19a4ec9f1f4db9d3646d165dd1ecaebdc7451ed878de1762fad03c3450", 0xd6, 0x3e, 0x0, 0x1}]) lseek(r1, 0x9, 0x1) 21:52:03 executing program 5: r0 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000001340), 0x8, 0x180800) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001300), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) [ 628.498061] 9pnet_fd: Insufficient options for proto=fd 21:52:03 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x4, 0x6, 0x5) mlock2(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x1) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff6000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:52:03 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0xe, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffdef) 21:52:03 executing program 5: perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x80, 0xff, 0x0, 0xff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x10000}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) r3 = epoll_create(0x6) r4 = dup2(r2, r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)={0xc}) 21:52:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') pread64(r0, &(0x7f0000000000)=""/108, 0x6c, 0x9) lseek(r0, 0x100000000, 0x1) 21:52:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfffffffffffffdef) 21:52:24 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:52:24 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:52:24 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0xf, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:24 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="001849c08844fd14467ee526292e9e596da081fc3a6a6441247d9c32008878f30441983a622c56504158380c023aefbff8d70feb911e86eca4e6a0d87562465e94c7c39f7217eb1d7dffaed0466b56ceafad24cbd67c38065a5187c62c12833f0c36dda8feba7be8951329a46316dcb2b8cf8ac34c26ff563dbaacf46099317e4b228ef96da7797a795bc9271a58"]) creat(0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000021000000000000210000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x10000008800}, {&(0x7f0000010900)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000", 0x27, 0xb800}, {0x0, 0x0, 0xc000}], 0x0, &(0x7f0000011300)=ANY=[@ANYBLOB]) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 21:52:24 executing program 5: r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x41000248) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) creat(&(0x7f0000000040)='./file0\x00', 0x0) 21:52:24 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) shmat(r2, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_UNLOCK(r0, 0xc) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:52:24 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ff4000/0x4000)=nil) 21:52:24 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x10, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) 21:52:24 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = dup(r0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x0, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x0, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD, @IPVS_DEST_ATTR_WEIGHT={0x0, 0x4, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x0, 0x4, 0x84}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x0, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x0, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xd, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x88e}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0x20004000) 21:52:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7, 0x3, 0x20, 0xa0, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x16000, 0x2, 0x9, 0x8, 0x5, 0x7, 0x2, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r1, 0x2) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:52:24 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:52:24 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:52:33 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:52:33 executing program 3: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:52:33 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x11, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:33 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0000) syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="001849c08844fd14467ee526292e9e596da081fc3a6a6441247d9c32008878f30441983a622c56504158380c023aefbff8d70feb911e86eca4e6a0d87562465e94c7c39f7217eb1d7dffaed0466b56ceafad24cbd67c38065a5187c62c12833f0c36dda8feba7be8951329a46316dcb2b8cf8ac34c26ff563dbaacf46099317e4b228ef96da7797a795bc9271a58"]) creat(0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000021000000000000210000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x10000008800}, {&(0x7f0000010900)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000", 0x27, 0xb800}, {0x0, 0x0, 0xc000}], 0x0, &(0x7f0000011300)=ANY=[@ANYBLOB]) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 21:52:33 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:52:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:52:33 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x5, 0x4) 21:52:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="c00000001b00030000000000000000007f000001000000000000000000000000ff01b4506f43ae75017a00000000000100000000000000000200808000000000e582eaa6045e75de59af6a2ac20a5c69dd456b68f7f83fd56e647b0ef99bed759d4663166bf6879529f6cb3239723af54a1c9a984cea31a364dbc16627c241d28dfa78292c129a4aa19ed0682a7ae2191fab5566d4d4eb78472531b1dfc3481d6c88d38f7d1df2f0e3c83ee6ad98bd022f444e640a7ed109f7e3b712c54d7a9fb230c2883d4c57698a4d8af12bfe8268ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/120], 0xc0}}, 0x0) 21:52:33 executing program 6: r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='task\x00') fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) lseek(r1, 0x100000000, 0x1) process_madvise(r1, &(0x7f00000004c0)=[{&(0x7f0000000180)="bb0ac59fb8b8c11d590deb24bec0aed1f61fccad95d305fdf6ed04981846eefffc5685dc556c2e55aac5c7ea97f66ae1e6b6460cdb86a3d67af486e00ca22fd2f81c13e9f9dcf21a9e561efdbb7c0ed367c51ef1f57e6f4ad7dda53487ec1ffa9443d37fed0bab316cf34c212315c6e57e9840a30ec7697fd094c4f42b5ef9ee884cbf65c696822c094feefe2485e816a05c4dfa5b8692f79ac99782916ce756f93f16888db9a89ae2a7dd", 0xab}, {&(0x7f0000000240)="f3b1e1479bf8b2507a3161e3158f753bec4b30e7ad9fd62db10579e9123438ea34e98ec6d8c1bca1fc847ac10f5db027feb5782e3dd00e299fa08f8df0a9c521c6690ab1266c45ecd20725d972b61aaf9a10e79418e1685ae6daef9e5d8ce228fafe87d76cf036ecb4fc29c42d3d2f6b69e4544abd8d4fea9157df3b795c6c31eded6fcebf09a4d2697371b10de96e183ca1c7a33c12cde4b528a952722f96f9384e42ac27a90e2ccab68d8726b2dbfc013fda1f419a4e70900b5ad5e6914e6b8ba7941bace3bbe8f961e68f81ad10fa99fd8b9854fd6bc75ea5b8e6b0f28c70e3bbeb7d22781aeefcbf54d44f48c345885ad97b", 0xf4}, {&(0x7f0000000340)="b023904528ab0777382278a2bc749f9f0e01f7cc661e4c4f2aa8086242110e774cd4b147079fefaaedf5096585452d3ef749f3a12d239a9043e82a8447df98057810c2fcccd0c05d83c7748e87b6c1cc8bf289f0dad1c2dec985ed8af9d122989cf91d1f564ffbeb3a9c0d8dfe84954f8b47ce777bad96cc5a779f730ab1ebd99ea20f0b8c47ce15131a17e7f9d9ad9290c278b7b983c8e33e62da3a8f8e8d2a924706144faa1431b1f98f450ec689d412111d169d05", 0xb6}, {&(0x7f0000000400)="a4f358074cdf62cf4a23c378abe5728acef85fa7cdd66e546e86f95e6dffd73c6b87fe19f80250e93da426ae7919a37adb80b4d1a530830f9dd9993fc7bc94bb43dbd7fe661b540d099b1573d10ac5d218ef1ff76c6ae825fbfb6eeb5c33f49633b6bb753b62ab4b406dea19884161160f27a1a3e620d5e0cba4460bfcca4ea3dc7e5524ea0cc3c1235343902b4820785a8887d2413a1f976fab", 0x9a}], 0x4, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20840}, 0x20000000) 21:52:34 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff4000/0x4000)=nil) 21:52:34 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x12, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:34 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff4000/0x4000)=nil) 21:52:34 executing program 5: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r1}}, '.\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) io_submit(r0, 0x5, &(0x7f0000001580)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xf4e9, r1, &(0x7f0000000080)="469919ff3167298027267b3d8c36cec2d3898f9b3b91fe48deb30c52ece9ea84996a0ae1bebac696c6a17eec78c02ef811f0143e9cfb8125d8a4b94e8e9b5d97001038007f158cf276078bd19635da807d7ab0ea1ba095690e0512a5106d64e8f114922e0d87dd4128e3d45f8e3854f95fc43bd206936ea9f1e13d0f4fb359427d2f727e4d10ab0df7747012a354931688873fd941", 0x95, 0x0, 0x0, 0x3, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xd800, 0xffffffffffffffff, &(0x7f0000000180)="2e9e8f0547e4907b0008f1d5115d42b2fa14d69b0db818b7b2122da466765c3a529d34d4603743fff28015e539bd9197bec4748e3e8ba91746f0547e0dde7aaf062a6f0e846da8d02c0d000e915f1a4254930dfc9c540e003e78ed913e9fae724d835674fa70aaa97a2422df0550dedfbfc49c77fd17a75356673c8e6d7dc2bad936c3b21388863074aaa56a48a020205857f7d4cbcdc4e048f855484d39495995496e3dfe48524ceb07d1e21f7912823cf54126accb0e9aea01213dc93424d03b66a60118a039689453ed9a7d35ab4d482f38d5ac3bd2c8687b5318f1ab7422b6c632a708e7052f504619025f1a2efa3ffb6a0710", 0xf5, 0x7fffffff, 0x0, 0x2, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x7f, r1, &(0x7f0000000300)="a16300778d79d29cc452554aa3677eeabbe20aed209e90dc6cd6d94183109305bc772de2b074f14be077986b1817ddb33cbaea178a0141f9aeb49fb497eb69c1f05733e3e3b277d076b6554c8ce8ef7dc849127faa3451fc2ec63e23affbf51ac622b77e418142dffa6aa64ab9a3d1b0d94558a971dd5257acddb0ee9d91eecafe2b0ac81f7cc38ac68028581df8cc9a84e34b33e584ee7265fb6cc18fac318e89c86180c8c3bcb6ade5ff34789716563d35e9ba2c9154ccc347abdf2f490eacbae8555af25a", 0xc6, 0x7fff, 0x0, 0x3, r3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x80, r1, &(0x7f0000000480)="5359ac9d41fe883265d52a618f13ac2a99480cf1497cec949eca4885adea4b9f38a9634245fed174f749664bd0c1043a297996f39a75876da227273077f9a1a27f6f877d0c5c80add78a4dd08963274b0766fd91", 0x54, 0xc1, 0x0, 0x2, r4}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x2, 0x8001, r5, &(0x7f0000000540)="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", 0x1000, 0x6, 0x0, 0x2, r1}]) io_submit(r0, 0x2, &(0x7f0000001e00)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001b80)='r', 0x1}]) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r6, 0x100000000, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r6, 0x5) 21:52:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) pread64(r1, &(0x7f0000000180)=""/105, 0x69, 0xa1) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000000)=0x2) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) dup2(r2, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x81, 0x1, 0x3, 0x2, 0x0, 0x100000001, 0x108, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffe347, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0xc02, 0xacb7, 0x80000000, 0x8, 0x3, 0x1000, 0x3, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r5, 0x9) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r6, &(0x7f0000000080)=@nl=@unspec, 0x0) lseek(r4, 0x100000000, 0x0) 21:52:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:52:34 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x15) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) [ 659.678204] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 659.679074] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 659.679662] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 659.680526] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 659.681310] blk_print_req_error: 3 callbacks suppressed [ 659.681319] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 659.683106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 659.684194] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 659.685438] buffer_io_error: 14 callbacks suppressed [ 659.685453] Buffer I/O error on dev sr0, logical block 0, async page read [ 659.700115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 659.700627] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 659.701466] Buffer I/O error on dev sr0, logical block 1, async page read [ 659.706378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 659.706873] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 659.707620] Buffer I/O error on dev sr0, logical block 2, async page read [ 659.726434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 659.726915] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 659.727959] Buffer I/O error on dev sr0, logical block 3, async page read [ 659.739298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 21:52:34 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:52:34 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f00000009c0)={0x165000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0], 0x1}, 0x58) creat(&(0x7f0000000000)='./file0\x00', 0x14) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000a40)="e5bda5a9260fb4cad0c800c9e4adfa8b3eae34f7b1c40e6e8c3cedf566b3dcc9f0c4c994133903faee825c24f360caff68cfb5dc031a1aae9f4e7abc28ccb88f7057d072bfd3cc3ba5824680ea6a2219427e7392c0744a6269d73dccd6d3a8e7ac106557bc260c2c26dbc68a7a64a5a1c397f417767dccff3877820c236e65b082705f205db26a9b791ebc2b761695ffce8e1480d4064ebc2bcf7ab34af8401366b5b00affd716bf03fa52b7cb734409e715f4c7882cdc2570ee5b74d985a68629e269f6643b7a9889ed6c754c15f75bd064d97c796fc2d5f7861c5cfd44cc37ea63992c55f7a07c5a73a6556bdfe055f08853a35d02d94e094b914d6a885804cb22e7145c75e2384c52b203b17e154f2db63b74d30b77fb1404224515c07eb47a281f11611ca6f92190f8575307eeeb54e17519f1edfe8be8e3960cab8775e4840df32e12d16792fa3ae677fc7902edbb81901b00deb35152b30bd78eccfdc92bf4341af167575dd4bc0820580576d79ee24030ebace6110062f78aa03ad18726742150b8d5d6758caee7f6957682606a418f66e7f6adc6d8d0c798301b3788200e6223a8ab4b36e1b752c6a881a8708732b4d6fedb26e6d401abdaf3cbc65a9a7b8df1a213b2e9cbd6e22c42197f808d8877f586bdbbfed91b004cf6431f4add701c589277b59575a60b3a340312ca2a005c1a8fa3e8ebe1de49f3dfa5f8bb6eff49d2a5822bcb2bdef9d041a5b50ddc561e545c9e6af3566a23aafbe6129c39faf91f1d4bf1fee467fff738b86ab3866691d6f2c38c7c1e13b2826ce49976d329543d155fc1ac08d43f8321dcfef9619391b300856eecc8cdf3af294f9ce7aa612bb72ab4a98319527df08488573c785fece5deffd6e399c2b26fd334ce669c68765369eea7d5945d87ebeb6b3a3956dc50256ad38375c4076a0fc24d05f2b83bb34e39b43253481f50b10252357a0794a12297f20db40d1f84289951695581ed8a71fd0a074cc29a8b263f996c8af18e92046f6e12eb614de3059ba7c902f0eca9d5a7f159341d954777638c42edd9f1f1f05fe034e065ef5a56327417787fdb0a5cf2a662ece63495146623afe0d163c7d1ff81a79bb98652d355e72bdff0454d838fd737f3e0c2e070c0f242e3001376728edf20e88500c3fc3b04f054172093e7ce9240e7f0c4681e614d398afe27ccb240efadcaf79a22a90c7ae0c91b49a8ee28e3bdba3f7ad1a52d3e9fca9ee5d5fec2a2afbe873c9893b1033dd26597714d0285f9f873921a0676c21f234711816840687a8fb92b693272614fbe474a0a63f7d2667db0ab7e6789c43ac1744857b42ded05840653f6df7e001c616e3baf9389ee4fe271163fdc2e10280838c11d751de41b08afba252c61102093ff13df4bd945e49f994843787c1d0834437f5291cc55b73205e42e77939a1562fc3b15999caa161598b7b503d8dae49eaa34b10937188d37ee920e89e02d7d495b5f5469e5b16a72729cb394ecd567b968683ad3414ad5110ee10ed7b3df3d1f541d6b08ea4375958f913bf7004dcf1b55733b228ab77d21c539b748c35a09a88a47fa72346bbad8a8f16b634fc287bc203a9d048d92d613256324cc8c40dbd8c49704f24ab3a194258733d04b1bb7c439f66d63118e02170b261586ea1038f34c9c4f97c701148364f8ae8a0e705ab152d9fe0be865be2e4ba45aa7b725abe5229f008269d6701fd784437b68d63d94c15a208e935fd2e9a423851310fd76c570ae148763c5b9b06537a510989c4a776f50394a1f5dbba8a7045806c58110c06ff7ce8c45fea8ff51569631cac9151cf79d5dac8caa5f24351de04f544130668c34a5af133f654fd17ab94e234db76fd8ee64c4d8f79dccc055a14e3cb5d858a5123ee2c49a7ef3a656597263f5cd1611450ecbe91e24da85e9e76d6c17c54ef660cf2dc9eda364555b4e1e6c733bda0b5119f9f3db06745ffac4c14b7ba278016ebd2ddbc486b6d606d3e5bfce23dcec3a0a93d26b9c2695e9846ed53c70cee4ccdd3cf65275f2db744476d3249a361b194e8f8774cc0c1e86a2bb05ef3a75fafac727eea520fea81c4a88e656f049cbf89ec2241894f85b6f17f47fa5a9a32b32a823138c57467cbe29fbd53020bed6f21655efde5472dbce691771e75b92c27ab3301c85db6c53256ce1ca00438409c6acfb7a4a83af5347351532e62b8357a631e79bdc8dd03a74f90f5f7d496827aaaac3932f471509f7a61a5f44e1b782b7393d09bc97371404ce1d6b45e91cd8f8a30a377ccc83d8d5cded0d7858c95226deab760034bc923becbf4850b67083a8690746562492f664e42f4be9bd973960bbfeaa5e4e7910128fb197b3340ae03c41fe77b1d59598e5dd87c4fcee77f95843f4d648002bb7d0e084bca457c64120ef68f373743b2b93bc08d1dccc247e158b83fa414d75fe89eaf27e8dab5ab098ff54bac4b94662cde9d6c8c12fb4e1d0ebe976c5adba808e4063103669e2999996bab116a3636c9144130c0d246d5b268ade570461b86b8a597888cb98ad6cc0859b95dbb42611aecd230776e56624094815d2ea695a3496c39deb707aecde7835c4466dc531f3bf870a0cd642ba173c310e884ddfad4caf073eb7aabb5107bb01599bc4653e3c6c0a939f7c055914a685e809e07b1dd96f0797b622955067b0d36a56d52469d9728a410078b742a528577c46aca6f60cafb2077c035995859d2493f6482a0ecfb260cc676f0bda1c1f1e0699f6a57cebf257407d911300bd07232c13fb2286159e3d4c9c82f34d26114eb85596d8ca967ab1287b0cb7d776970e7f5e01b6ac70c34b366d2005adc86dc5db19407b8f4c35b2a8a5ec9d1befeb63bd5412eb42a304fd159f81044eaf77d58c0d27087fd7b0071837a7443f87aab511522311803f0e455e68c24193a834e77441b5d95d435b36b37af7c0b05ec3cb6d2e67e3c4c94b8b42439413a61f879b48509eb441f01dbb5c3a2d9518ad2d9221ecdcc0bb7bb6c77926123c7ecbbaec1edf7631b864a84dd594e3000e20c0a2ff338c90ce640f84397ee1a6edf698976e47e3a65eded381eabe4ae1dfec4fecebac8ec1b0edb3ca124b5dbadb4dbfdb2d508d7f3e139dd0cc11518ce3d2bf295682657a7d52b9df64b9d55b65269bb29a2d47b8b4c1025d859d52f376f58f18940f7929ce2e7ba9fd1238a3f1373195b9deac7ac7bfff74e2e9a22ae6ea0a6c3c8deed6147429bd77a59364967332df3a05553ea2128489b9baf747456f9fe0c8008162341294b8d8f503cbc254132db053a09810092900c4eb141df12ba888a238fbfc3b2a2d32ff74a9aca18049ad4232db21635309af9c78ad76ad40b5424d5ff30120d23531c76a5f9bf03f370ce9264e952c45d52f4f45bfbfa93e515581f9939d426631cb544b7949251769d574e99ce6c46527ad6faaf9ce84652b5cdedc0c159a1d65de8ec00004f81b1e5d74388c3b0d5ff4f281bc07afc1974f1876f2b5ccbbab1e31704817aaa08a57a83236fe8254ed595195864f25c215fa06087051b192274c435efe5594989f4d0c5f41b56f357de18326006bce288e5bc58c0109bb4a791fccdb52f47c470508110533336bc106cb6a3a09b893219e975ff33528db534150d1253cae446d56bd57355fd84bf9afc4bc34e5acdb425962938bb1094d08d3545f6ee4f0c1e65ff084a2e2b48a4871ddd6d7ec12c59b8ce30701551e1ec568501f4e1d7cfc262516414f746773d9d1da4d686fae9e229af4485f0d38ced43a8b339712865268dd26c59737d2f0e19e9de5454c0b2aa8e9e3d604dbcc61b00ff16af003bda0ed0c0174ad7c914e05b7d9c219bc5519b226ae3f4951f947b7c4266e1893f9857a7c836df8ed246d3063f8f3c5534926cb602c56dbbfc6cce7637193cf772c3c1c5bad694dec16af8f65a93601a9df3480e78b38b9ed02665de848f3cf84bb471ce86a8915198148cee74aecdd2cded84e062e5f936aadb0bd7ae52f2310641ebabd51318c3aeddd9d559ed66f772f253afd6f5267af88a67a7458c1cf6d889d1373ef1c71382cd00c08483748100ed7abf1cc2d1191b8c8ff712f557b6b51a839ce6c1d0d5793c03049f10ad94565c26bc505df42d1d79c866d8ab3426c3a70f236c7a59bffa548d8fe3b4f1fab30787d1066c8fe92330e1b0ed09d5aeff8adabf2962608dffd30b4babe8de29d7a6be0a24e4fd3a07eb1213ae8a12c78574658e932976698e6258d8cf376b3d753a2c4ccd205668b8a66d4622f4d3f3f9d6e3e3436a14078a68a320f10e13dc945b1a248b78b455a01b1cdf44337f702aed8509f450071452910c552dac9afd6337cdf6c01e17ccae53cf3ec18ba34f5d77f63a6af619591ed019e17cc7bb673362734b4c359a1deec7f04e998fdd4c40cc7c4880ace931d1fbe245bf77ec23b3cb02c6f387b1d7af3764a2cd423893d8d55dcb402d16044fc7acfcadb695e34ff7247d02e5f533533e601811b1746878ad218281d3b3f1a1cd04b4a2abe98ef487dca55c95357a54dae1c2d5da934106d17d86e9408abb31d7c80f9e5a88a6cb5933a8ffa977b26fdc29805d90dab5e99a090f7e49ec33b145883fc885110da167ae14d3291a49e66bb5f19c08a893a29bb7feb92693d397c6b05724775994b694657210a3a7c0dd9569a237901e5fb6933bda3bd6408d7a80669a7b75df34c1b60fefedf8f526a8de1d4ecc0f35ca95caef963d9f9cea03816a0ebe0de0e7d1ba2e08ffd8a205c5ed5640faa9cf2e2af5282e11d1146b88e7be5ad209aa6b4f98daf50c0c3bb96837ca76c4fc6027d83589997f84e959ec2c25e9418b2506816dc5c0a13963c0df5baf5b4faff7ac352ba2f9802ba9a4012d03ba0578a8f75acc5d0887b84eac7c19745a30cf92b218c5bf1b9713a8b84765ab76464a6ba42e71808a59ba699647c1cedaf4e6013db15ee61a7ac07ef0ee72e0c8a0fb3531020056596d6276f9bd79ac50db0cabe4b4a09b0a9f2ce914ae73eb99b69df35bab3a7cce6b490fc7148977ad510a26591f81439ee47131a7a3d8e1159b05b9e5f664ad60cf291058789ca415248e3d54b93744930954527398f1b6ec86373cbb04b217acb69408459070d78d0381f1dabec59d616303d02c7e790e475f1e8653894519b396c636b476a5c7029e5179c548c492cf4513109e5a648ce8236ff9d35fa62c49a7875187bdbb5ae774e4ca728e779820c6ca9282a0e93d2c12fb173b0ea866ff3f2a39986bf17bad49e2c4f9b3c714dda560ea10a86e6f23d22cf3567d2b8ca2a358fb57ffbc1868c88ede44798c3cd0b76fceb96df4be7c919ad95134d5cbe8f07003d22f4e9af27a1553bdde3392d83d215428c6c23e5f0cc48ba06c8145e7afc4a73def9036b17449ef0a3d28b1661ee604419edc8915f7d9a0e1a2533a33385c33a173cd693ea675cba3800f741baabb6cc19df0cc6c9a358bdebc574c17bc23ae48ef4ef352e52edaef56ccb0c0c34a77a00c50c7fc046d26b86f2447be151ad4adc1d82b45e76d6e3ce6c52f5589e753a144ed3032786d964b7b48a470b83a39c97c77b358f7593a8fae3f3c69e93471651917ca18f555dcac3cac7097f978d0686ff73a37d5d229422026c688d04385c2702a5c5da6e44e14828ecc20d9e12a424862d524204244db8c06b50c378cb2e784159559e3ed956fa23f5cee1a1b30ae051d4ffe2c99370e7cd7df5c04aa1404ff3308a07b231cbe8a3b3c1a807bcdd0323b1c6f1eaf76a4661b9ce", 0x1000}], 0x1, 0x1, 0x1000) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x1, 0x8, 0xc0, 0x0, 0x0, 0x1281, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x50, 0x3, @perf_bp={&(0x7f00000000c0), 0x7}, 0x10000, 0x100000001, 0x3, 0x4, 0x400, 0x8, 0x5, 0x0, 0x8, 0x0, 0x100}, r2, 0x9, 0xffffffffffffffff, 0x9) [ 659.740110] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 659.740788] Buffer I/O error on dev sr0, logical block 4, async page read [ 659.783825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 659.784428] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 659.785139] Buffer I/O error on dev sr0, logical block 5, async page read [ 659.805823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 659.806833] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 659.808132] Buffer I/O error on dev sr0, logical block 6, async page read [ 659.809802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 659.810732] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 659.811999] Buffer I/O error on dev sr0, logical block 7, async page read 21:52:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x4c) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:52:44 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:44 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:52:44 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x17}, './cgroup/cgroup.procs\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x101}}, './cgroup/cgroup.procs\x00'}) 21:52:44 executing program 6: r0 = getpid() pidfd_open(r0, 0x0) r1 = getpid() syz_open_procfs$userns(r0, &(0x7f0000000000)) pidfd_open(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/bnep\x00') 21:52:44 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60c770cc00343a0000000000000000000000000000000000ff020000000000000000000000000001020090780000000060ca9d0100002b001b010000000000000000000000000001fe800000000000000000000000000000fcdc4613"], 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) syz_extract_tcp_res(&(0x7f0000000040), 0x800, 0xfff) 21:52:44 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:52:44 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff4000/0x4000)=nil) 21:52:44 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ff4000/0x4000)=nil) 21:52:44 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x14, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:44 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:52:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x2f0, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "ac22adc7951cd9110a3be80eb760f90f7c2898db3d6d15707d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "854319a4ff24022d2c20b91b58a0c888ece02d49c9b975bf59"}}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x786}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xb30, @mcast2, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xde}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff0f8d}]}]}, 0x2f0}}, 0x20000000) lseek(r0, 0x100000000, 0x1) read(0xffffffffffffffff, &(0x7f00000000c0)=""/19, 0x13) 21:52:57 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff7000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = shmget(0x1, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ff4000/0x4000)=nil, 0x0) r2 = shmget(0x0, 0x2000, 0x200, &(0x7f0000ff5000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x1, 0x5, 0x1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 21:52:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:57 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:52:57 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x15, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0xfffffffc, 0x1) 21:52:57 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:52:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf250c0000000c0099000002000103000000080037000200000004000b0005000800010000000800090001ac0f000800090001ac0f00090007007089c8364800000020006e68d89095800400010004000100040002000400020004000100040002000400010011000700e0e924946dcce225d929d95051000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) 21:52:57 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 1) [ 683.102415] FAULT_INJECTION: forcing a failure. [ 683.102415] name failslab, interval 1, probability 0, space 0, times 0 [ 683.104305] CPU: 0 UID: 0 PID: 7003 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 683.104340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 683.104355] Call Trace: [ 683.104364] [ 683.104374] dump_stack_lvl+0xfa/0x120 [ 683.104416] should_fail_ex+0x4d7/0x5e0 [ 683.104460] ? vm_area_dup+0x25/0x6f0 [ 683.104487] should_failslab+0xc2/0x120 [ 683.104514] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 683.104566] vm_area_dup+0x25/0x6f0 [ 683.104596] __split_vma+0x179/0xde0 [ 683.104638] ? __pfx___split_vma+0x10/0x10 [ 683.104671] ? find_held_lock+0x2b/0x80 [ 683.104709] ? get_page_from_freelist+0x484/0x24b0 [ 683.104746] ? lock_release+0xc8/0x290 [ 683.104776] ? do_raw_spin_unlock+0x53/0x220 [ 683.104808] ? kasan_unpoison+0x27/0x60 [ 683.104833] ? __kasan_unpoison_pages+0x2f/0x40 [ 683.104861] ? get_page_from_freelist+0x194a/0x24b0 [ 683.104905] vms_gather_munmap_vmas+0x16e/0xc60 [ 683.104961] do_vmi_align_munmap+0x25b/0x550 [ 683.105004] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 683.105059] ? mtree_range_walk+0x74a/0xb90 [ 683.105112] ? mas_walk+0x6ba/0x8c0 [ 683.105158] do_vmi_munmap+0x1eb/0x3c0 [ 683.105201] do_munmap+0xbd/0x100 [ 683.105234] ? __pfx_do_munmap+0x10/0x10 [ 683.105280] ? mas_walk+0x6ba/0x8c0 [ 683.105319] mremap_to+0x242/0x450 [ 683.105346] __do_sys_mremap+0xbfb/0x1490 [ 683.105384] ? __pfx___do_sys_mremap+0x10/0x10 [ 683.105410] ? __mutex_unlock_slowpath+0x155/0x7b0 [ 683.105441] ? kernel_write+0x5d3/0x660 [ 683.105470] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 683.105547] do_syscall_64+0xbf/0x360 [ 683.105584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.105609] RIP: 0033:0x7f474c078b19 [ 683.105629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 21:52:57 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) [ 683.105653] RSP: 002b:00007f47495ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 683.105677] RAX: ffffffffffffffda RBX: 00007f474c18bf60 RCX: 00007f474c078b19 [ 683.105693] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 683.105709] RBP: 00007f47495ee1d0 R08: 0000000020ff4000 R09: 0000000000000000 [ 683.105724] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 683.105738] R13: 00007fffe7a788ef R14: 00007f47495ee300 R15: 0000000000022000 [ 683.105778] 21:52:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x1, 0x0) fcntl$notify(r1, 0x402, 0x6) 21:52:57 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 2) 21:52:57 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:52:57 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x10001, 0x9bfb, 0x4) 21:52:57 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x16, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000040)="9e390016b893083ec60260c46b33691e9d62ed4a9c534df22c895a8f6da5cd48e6ab1cc25ae8bd7671ed83cdc538dc7f153ea413ba404f98535c2a03b8cc1716690ac10807bab8378d97f83dce7b9d19515018b78ad77d141e328d59edb6e07846a0adfdcbc49de0b2", 0x69, 0xf8fd, 0x0, 0x3}, &(0x7f0000000100)) fcntl$setstatus(r0, 0x4, 0x44000) creat(&(0x7f0000000000)='./file0\x00', 0x41) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) [ 683.375693] audit: type=1400 audit(1752875577.979:21): avc: denied { watch } for pid=7020 comm="syz-executor.6" path="/proc/7020/task" dev="proc" ino=14839 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 21:52:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) r1 = getpid() pidfd_open(r1, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000000c0)={{'\x00', 0x1}, {0x7ff}, 0x8, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)="38f023705bb75bfee48dd08391ed783987bbabf8d43f8ec98448a5c207c9cdc322ada461daf5ab2f4f110dd4cea0e3ea3dd1e481a1c82d88fb85b63255785925a20e3e4a42b23ed179fa4936c69b615a9adbff09f23460b4b44ecc4c77b234e52be0d6cb054dbc4310a7bc1ce4be85500abfd8bfcef10577474d9ae15fed0b3eb29713c53c87a4f394c543ab9968d12f630d1ac710fd8aa74152b992df8281e59743f747299aaf602fc6ce75658da1c741614f57b64905a9256b91dea7", 0xbd, 0x0, &(0x7f0000000240)={0x2, 0x100d, {0x1, 0xc, 0x0, "", 0x1000, "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"}, 0x65, "d588a00d6e4c7d097d5f7086c11d26d072d5952077ecef8ff927517bc177d606d148ca174b764cd4796ac70ec6e87451cb52237fdab013957b0c1f85889d030a7b49c9984213ce70e0a5d4eebf592e63ac8c15c7548d1e65271b0f2449de4c823a9029228c"}, 0x107e}) syz_open_procfs(r1, &(0x7f0000000000)='net/protocols\x00') r2 = syz_open_dev$mouse(&(0x7f00000012c0), 0xffffffff, 0x42) fsmount(r2, 0x0, 0x9) 21:52:58 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_submit(0x0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:52:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x5, 0x48009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, @perf_config_ext={0x100000001, 0x5}, 0x1, 0x2, 0x80000000, 0x0, 0x10, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x5) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:53:07 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 3) 21:53:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0xc) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newspdinfo={0x3c, 0x24, 0x300, 0x70bd27, 0x25dfdbfb, 0x9, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008d4}, 0x80) fcntl$setstatus(r0, 0x4, 0x4c00) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:53:07 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:07 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x17, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:07 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x100, &(0x7f0000000040)=0x2) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="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"]) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x2, 0x0, {{0x16, 0x4, 0x0, 0x1b, 0x58, 0x67, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x39}, {[@timestamp={0x44, 0x8, 0x40, 0x0, 0xa, [0x6]}, @ra={0x94, 0x4}, @generic={0x44, 0xa, "3c04730203a4f04d"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xf6, [@empty, @multicast1, @empty, @broadcast]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x23, [@multicast2, @broadcast, @empty, @rand_addr=0x64010100]}]}}}}}) lseek(r0, 0x100000000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) connect(r4, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @mcast2, 0x40}}, 0x80) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e21, @empty}, 0x102, 0x0, 0x0, 0x0, 0xae, &(0x7f0000000240)='macsec0\x00', 0x17c00000000, 0x4, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', r3, 0x0, 0x10, 0x8, 0x1, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast1, @loopback}}}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7fff, 0x7f, 0xb7, 0x0, 0xfff, 0x83020000, r6}) 21:53:07 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ff6000/0x1000)=nil, 0x6000) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) shmdt(r1) 21:53:07 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_submit(0x0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:07 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) [ 693.119599] FAULT_INJECTION: forcing a failure. [ 693.119599] name failslab, interval 1, probability 0, space 0, times 0 [ 693.121794] CPU: 0 UID: 0 PID: 7065 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 693.121824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 693.121837] Call Trace: [ 693.121844] [ 693.121852] dump_stack_lvl+0xfa/0x120 [ 693.121889] should_fail_ex+0x4d7/0x5e0 [ 693.121934] ? mas_alloc_nodes+0x432/0x8f0 [ 693.121959] should_failslab+0xc2/0x120 [ 693.121984] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 693.122017] ? lock_is_held_type+0x9e/0x120 [ 693.122052] mas_alloc_nodes+0x432/0x8f0 [ 693.122087] mas_node_count_gfp+0x106/0x140 [ 693.122117] mas_preallocate+0x2af/0x690 [ 693.122154] ? __pfx_mas_preallocate+0x10/0x10 [ 693.122190] ? __create_object+0x59/0x80 [ 693.122232] ? lockdep_init_map_type+0x4b/0x240 [ 693.122267] __split_vma+0x304/0xde0 [ 693.122304] ? __pfx___split_vma+0x10/0x10 [ 693.122333] ? find_held_lock+0x2b/0x80 [ 693.122364] ? get_page_from_freelist+0x484/0x24b0 [ 693.122396] ? lock_release+0xc8/0x290 [ 693.122421] ? do_raw_spin_unlock+0x53/0x220 [ 693.122449] ? kasan_unpoison+0x27/0x60 [ 693.122470] ? __kasan_unpoison_pages+0x2f/0x40 [ 693.122495] ? get_page_from_freelist+0x194a/0x24b0 [ 693.122533] vms_gather_munmap_vmas+0x16e/0xc60 [ 693.122576] do_vmi_align_munmap+0x25b/0x550 [ 693.122613] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 693.122661] ? mtree_range_walk+0x74a/0xb90 [ 693.122707] ? mas_walk+0x6ba/0x8c0 [ 693.122748] do_vmi_munmap+0x1eb/0x3c0 [ 693.122785] do_munmap+0xbd/0x100 [ 693.122813] ? __pfx_do_munmap+0x10/0x10 [ 693.122853] ? mas_walk+0x6ba/0x8c0 [ 693.122888] mremap_to+0x242/0x450 [ 693.122912] __do_sys_mremap+0xbfb/0x1490 [ 693.122946] ? __pfx___do_sys_mremap+0x10/0x10 [ 693.122968] ? __mutex_unlock_slowpath+0x155/0x7b0 [ 693.122993] ? kernel_write+0x5d3/0x660 [ 693.123018] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 693.123087] do_syscall_64+0xbf/0x360 [ 693.123119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.123142] RIP: 0033:0x7f474c078b19 [ 693.123159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 693.123179] RSP: 002b:00007f47495ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 693.123199] RAX: ffffffffffffffda RBX: 00007f474c18bf60 RCX: 00007f474c078b19 [ 693.123214] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 693.123227] RBP: 00007f47495ee1d0 R08: 0000000020ff4000 R09: 0000000000000000 [ 693.123240] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 693.123252] R13: 00007fffe7a788ef R14: 00007f47495ee300 R15: 0000000000022000 [ 693.123288] 21:53:07 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 21:53:07 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) pread64(r1, &(0x7f0000000040)=""/89, 0x59, 0x1) lseek(r0, 0x100000000, 0x1) 21:53:07 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_submit(0x0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:07 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 4) 21:53:07 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x18, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:08 executing program 0: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/190, 0xbe) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:53:08 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 5) 21:53:08 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) [ 693.566167] FAULT_INJECTION: forcing a failure. [ 693.566167] name failslab, interval 1, probability 0, space 0, times 0 [ 693.567993] CPU: 1 UID: 0 PID: 7102 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 693.568023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 693.568036] Call Trace: [ 693.568044] [ 693.568052] dump_stack_lvl+0xfa/0x120 [ 693.568091] should_fail_ex+0x4d7/0x5e0 [ 693.568130] ? vm_area_dup+0x25/0x6f0 [ 693.568153] should_failslab+0xc2/0x120 [ 693.568178] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 693.568223] vm_area_dup+0x25/0x6f0 [ 693.568250] __split_vma+0x179/0xde0 [ 693.568287] ? __pfx___split_vma+0x10/0x10 [ 693.568328] ? __pfx_mas_prev+0x10/0x10 [ 693.568370] vms_gather_munmap_vmas+0x32c/0xc60 [ 693.568414] do_vmi_align_munmap+0x25b/0x550 [ 693.568451] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 693.568523] ? mas_walk+0x6ba/0x8c0 [ 693.568565] do_vmi_munmap+0x1eb/0x3c0 [ 693.568602] do_munmap+0xbd/0x100 [ 693.568631] ? __pfx_do_munmap+0x10/0x10 [ 693.568671] ? mas_walk+0x6ba/0x8c0 [ 693.568706] mremap_to+0x242/0x450 [ 693.568731] __do_sys_mremap+0xbfb/0x1490 [ 693.568765] ? __pfx___do_sys_mremap+0x10/0x10 [ 693.568787] ? __mutex_unlock_slowpath+0x155/0x7b0 [ 693.568814] ? kernel_write+0x5d3/0x660 [ 693.568840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 693.568910] do_syscall_64+0xbf/0x360 [ 693.568949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.568972] RIP: 0033:0x7f474c078b19 [ 693.568989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 693.569009] RSP: 002b:00007f47495ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 693.569030] RAX: ffffffffffffffda RBX: 00007f474c18bf60 RCX: 00007f474c078b19 [ 693.569045] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 693.569058] RBP: 00007f47495ee1d0 R08: 0000000020ff4000 R09: 0000000000000000 [ 693.569072] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 693.569085] R13: 00007fffe7a788ef R14: 00007f47495ee300 R15: 0000000000022000 [ 693.569121] 21:53:19 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ff4000/0xc000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:53:19 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:19 executing program 6: r0 = getpid() r1 = getpid() r2 = pidfd_open(r1, 0x0) ptrace$getenv(0x4201, r1, 0x2, &(0x7f0000000040)) pidfd_open(r0, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/tcp\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="e4000000080000002e2f66698f653000"]) lseek(r4, 0xffff, 0x1) 21:53:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) readahead(r1, 0x6e, 0x800) 21:53:19 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:19 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x19, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:19 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 6) 21:53:19 executing program 2: io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x80000}]) 21:53:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) r1 = fork() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0xf7, 0xff, 0x2, 0x0, 0x7, 0x84, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3c, 0x0, @perf_config_ext={0x20, 0xffffffffffffffe0}, 0x211, 0x0, 0xffffffff, 0x0, 0x3ff, 0x8, 0x9, 0x0, 0x455a, 0x0, 0x4}, r1, 0x3, r2, 0x1) 21:53:20 executing program 2: io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x80000}]) 21:53:20 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x1, r1}) lseek(r0, 0x2000100000000, 0x2) 21:53:20 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 7) 21:53:20 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1a, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:20 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000ff4000/0x1000)=nil) r0 = shmget(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 21:53:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100eeff17000000", @ANYRES32=r0, @ANYBLOB="e104df06000000ad83000000f500800e2f66696c653000b0d715c262f38d0540a2afbf9635772eb572cf37e99b6aa6be5dcebaeb35739e06463ba70a2f122263b15e54a19e0993e149a75325525986b47d0ec3935bb59c55a20e56578e680a8330123c1445877a74ee3a4feef66e497d4c2cdfad17cfbdec2bfaa286edb01485b6f5016034939ef0ff0017c6a56b46ab2a7083bb09a7297b86e28579929a07c419104dd96847d27fc8dbf8316ea505e6a0242f766a776a336c9cf04716aa0cc106c47134887ea1a7e75a3447eb41afc001968b10527188"]) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000100)=0x14) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) recvmmsg$unix(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000400)=""/31, 0x1f}], 0x2, &(0x7f0000000480)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)=""/210, 0xd2}], 0x1, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}], 0x3, 0x2000, &(0x7f00000009c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x1000) fstatfs(r1, &(0x7f0000000180)=""/45) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="38706e63e2a437ff7b2c6ccf9849e34f0ea12fcde55455caee4952", 0x1b}], 0x1) lseek(r0, 0x100000000, 0x1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'syztnl0\x00', r2, 0x29, 0x4, 0x2, 0x7, 0x40, @loopback, @dev={0xfe, 0x80, '\x00', 0xc}, 0x40, 0x8, 0x6, 0x9}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000bc0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x1) 21:53:20 executing program 2: io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x80000}]) [ 705.582365] FAULT_INJECTION: forcing a failure. [ 705.582365] name failslab, interval 1, probability 0, space 0, times 0 [ 705.584163] CPU: 1 UID: 0 PID: 7148 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 705.584195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 705.584209] Call Trace: [ 705.584218] [ 705.584227] dump_stack_lvl+0xfa/0x120 [ 705.584265] should_fail_ex+0x4d7/0x5e0 [ 705.584306] ? mas_alloc_nodes+0x432/0x8f0 [ 705.584334] should_failslab+0xc2/0x120 [ 705.584361] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 705.584398] ? lock_is_held_type+0x9e/0x120 [ 705.584434] mas_alloc_nodes+0x432/0x8f0 [ 705.584487] mas_node_count_gfp+0x106/0x140 [ 705.584535] mas_preallocate+0x2af/0x690 [ 705.584598] ? __pfx_mas_preallocate+0x10/0x10 [ 705.584652] ? __create_object+0x59/0x80 [ 705.584723] ? lockdep_init_map_type+0x4b/0x240 [ 705.584783] __split_vma+0x304/0xde0 [ 705.584845] ? __pfx___split_vma+0x10/0x10 [ 705.584909] ? __pfx_mas_prev+0x10/0x10 [ 705.584989] vms_gather_munmap_vmas+0x32c/0xc60 [ 705.585045] do_vmi_align_munmap+0x25b/0x550 [ 705.585085] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 705.585160] ? mas_walk+0x6ba/0x8c0 [ 705.585203] do_vmi_munmap+0x1eb/0x3c0 [ 705.585243] do_munmap+0xbd/0x100 [ 705.585274] ? __pfx_do_munmap+0x10/0x10 [ 705.585316] ? mas_walk+0x6ba/0x8c0 [ 705.585355] mremap_to+0x242/0x450 [ 705.585381] __do_sys_mremap+0xbfb/0x1490 [ 705.585416] ? __pfx___do_sys_mremap+0x10/0x10 [ 705.585440] ? __mutex_unlock_slowpath+0x155/0x7b0 [ 705.585480] ? kernel_write+0x5d3/0x660 [ 705.585513] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 705.585585] do_syscall_64+0xbf/0x360 [ 705.585619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.585643] RIP: 0033:0x7f474c078b19 [ 705.585661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 705.585683] RSP: 002b:00007f47495ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 705.585706] RAX: ffffffffffffffda RBX: 00007f474c18bf60 RCX: 00007f474c078b19 [ 705.585721] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 705.585735] RBP: 00007f47495ee1d0 R08: 0000000020ff4000 R09: 0000000000000000 [ 705.585750] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 705.585763] R13: 00007fffe7a788ef R14: 00007f47495ee300 R15: 0000000000022000 [ 705.585800] 21:53:29 executing program 2: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:29 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1b, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:29 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 8) 21:53:29 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ff6000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:53:29 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) fork() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:29 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000000)={0xf6, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x1) 21:53:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xfffffffffffffce3, 0x58, 0x75}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0xfa7) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:53:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') lseek(r0, 0x100000000, 0x1) 21:53:29 executing program 2: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:29 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x1, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xcfe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xabd}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xbe}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8890) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x101}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ff4000/0x4000)=nil) 21:53:29 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 9) 21:53:29 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1c, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:29 executing program 2: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:29 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r1 = fork() kcmp(r1, 0x0, 0x0, r0, r0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:38 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:38 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x7fff, 0x1) lseek(r0, 0x100000000, 0x1) 21:53:38 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 10) 21:53:38 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 21:53:38 executing program 0: clone3(&(0x7f0000000d00)={0x200, &(0x7f0000000380), &(0x7f0000000980)=0x0, &(0x7f0000000b80)=0x0, {0x30}, &(0x7f0000000bc0)=""/43, 0x2b, &(0x7f0000000c00)=""/152, &(0x7f0000000cc0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r2 = syz_open_procfs(r1, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x100000000, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000400)={0x4, 0x80, 0x6f, 0x7, 0x1, 0x8, 0x0, 0x1f, 0x42200, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100)}, 0x61, 0x0, 0x4, 0x6, 0x1, 0xdd28, 0x6000, 0x0, 0x8, 0x0, 0x5}, r2, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4a, 0x3, 0x6, 0x8, 0x0, 0x1, 0x20d20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x518d}, 0x2189, 0x7, 0x0, 0x7, 0x8001, 0xe04a, 0x30ae, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0xc, r4, 0xa) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000000)={0x1, 0x80000001}) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000480), 0xfffffffffffffdaa, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f00000007c0)=""/255, 0xff}, {&(0x7f00000008c0)=""/192, 0xc0}, {&(0x7f0000000380)}], 0x6, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000000b00)={0x1, 0x80, 0x1, 0x80, 0x40, 0x8, 0x0, 0x25c, 0x80a, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000ac0), 0x2}, 0x10400, 0x100000001, 0xfff, 0x4, 0xdf, 0x1000, 0x4da, 0x0, 0x0, 0x0, 0x1}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r9, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xc4, 0x0, 0xce831dac907d6202, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4000000}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="28b5af26684ca1d6d91ba6fc82914751032aae5a3d86e5fa"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfe1}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3367d3b64e82d76d3a36ef7f97fa4d82"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x200}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9dd61aadd22ff1494d8408efa2f9faf7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dc23fb3352cc111c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8e1404a7d82c176a7c29ebc7f679a735"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2cd43bc12bac28c1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5d78179a14188d4f"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a01012c7c964763c1a906c63e83b7ed6"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4001085}, 0x440a0) fcntl$setstatus(r5, 0x4, 0x44000) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x8b) lseek(0xffffffffffffffff, 0x100000000, 0x0) clone3(&(0x7f0000000fc0)={0x60000200, &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00), {0xf}, &(0x7f0000000e40)=""/103, 0x67, &(0x7f0000000ec0)=""/167, &(0x7f0000000f80)=[0x0, r7, 0x0, 0x0, r0, 0x0, 0x0], 0x7}, 0x58) 21:53:38 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1d, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:38 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) fork() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:38 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:38 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 21:53:38 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 11) [ 724.448506] cgroup: fork rejected by pids controller in /syz4 21:53:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') fcntl$setlease(r0, 0x400, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) lseek(r0, 0x100000000, 0x1) 21:53:39 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) [ 724.498144] FAULT_INJECTION: forcing a failure. [ 724.498144] name failslab, interval 1, probability 0, space 0, times 0 [ 724.499156] CPU: 0 UID: 0 PID: 7236 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 724.499173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 724.499185] Call Trace: [ 724.499190] [ 724.499195] dump_stack_lvl+0xfa/0x120 [ 724.499220] should_fail_ex+0x4d7/0x5e0 [ 724.499244] ? vm_area_dup+0x25/0x6f0 [ 724.499258] should_failslab+0xc2/0x120 [ 724.499274] kmem_cache_alloc_noprof+0x5f/0x3d0 [ 724.499300] vm_area_dup+0x25/0x6f0 [ 724.499316] copy_vma+0x4a7/0xa00 [ 724.499340] ? __pfx_copy_vma+0x10/0x10 [ 724.499359] ? __pfx_percpu_counter_add_batch+0x10/0x10 [ 724.499382] ? __mt_destroy+0xa8/0x3f0 [ 724.499400] ? register_lock_class+0x41/0x560 [ 724.499424] ? do_vmi_align_munmap+0x1f0/0x550 [ 724.499449] copy_vma_and_data+0x1d2/0x7f0 [ 724.499464] ? perf_trace_lock+0xb5/0x5d0 [ 724.499479] ? __pfx_copy_vma_and_data+0x10/0x10 [ 724.499501] ? find_held_lock+0x2b/0x80 [ 724.499520] ? move_vma+0x59f/0x1930 [ 724.499531] ? lock_release+0xc8/0x290 [ 724.499551] move_vma+0x5b1/0x1930 [ 724.499567] ? __pfx_move_vma+0x10/0x10 [ 724.499582] ? shmem_get_unmapped_area+0xf0/0x180 [ 724.499599] ? cap_mmap_addr+0x4e/0x130 [ 724.499614] ? selinux_mmap_addr+0x2d/0x110 [ 724.499627] ? security_mmap_addr+0x6e/0x80 [ 724.499645] ? __get_unmapped_area+0x1a0/0x3e0 [ 724.499665] ? vrm_set_new_addr+0x210/0x2a0 [ 724.499679] mremap_to+0x1c3/0x450 [ 724.499693] __do_sys_mremap+0xbfb/0x1490 [ 724.499712] ? __pfx___do_sys_mremap+0x10/0x10 [ 724.499725] ? __mutex_unlock_slowpath+0x155/0x7b0 [ 724.499742] ? kernel_write+0x5d3/0x660 [ 724.499757] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 724.499796] do_syscall_64+0xbf/0x360 [ 724.499816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.499829] RIP: 0033:0x7f474c078b19 [ 724.499839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 724.499852] RSP: 002b:00007f47495ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 724.499865] RAX: ffffffffffffffda RBX: 00007f474c18bf60 RCX: 00007f474c078b19 [ 724.499873] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 724.499881] RBP: 00007f47495ee1d0 R08: 0000000020ff4000 R09: 0000000000000000 [ 724.499889] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000002 [ 724.499897] R13: 00007fffe7a788ef R14: 00007f47495ee300 R15: 0000000000022000 [ 724.499917] 21:53:39 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:53:47 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 12) 21:53:47 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:47 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1e, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:47 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:47 executing program 6: lseek(0xffffffffffffffff, 0x100000000, 0x1) 21:53:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x1a0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:53:47 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0x10000, 0x3, 0x2) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000c, r0) 21:53:47 executing program 6: r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)='io.pressure\x00', 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000240)=0xe7d0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') sched_setattr(0x0, &(0x7f0000001480)={0x38, 0x0, 0x77}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, r4, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r4, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x2404c8c0) lseek(r1, 0x100000000, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 21:53:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x1) getdents(r0, &(0x7f0000000180)=""/4096, 0x1000) close_range(r0, r0, 0x0) 21:53:47 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) (fail_nth: 13) 21:53:47 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgid(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:47 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '^{,%!}'}], 0xa, "dca7e881c0a723c52be95fab05ce08f213049a13427a8daa4287f83f93ffb6447ce2ac75921391bd00fe76c486c8f823596f724cc2e5e90bd1"}, 0x4b) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) 21:53:47 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:47 executing program 3: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff7000/0x1000)=nil) 21:53:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:47 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x21, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) lseek(r0, 0x100000000, 0x1) 21:53:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x1) [ 733.359480] FAULT_INJECTION: forcing a failure. [ 733.359480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.361490] CPU: 1 UID: 0 PID: 7308 Comm: syz-executor.7 Not tainted 6.16.0-rc6-next-20250718 #1 PREEMPT(voluntary) [ 733.361524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 733.361540] Call Trace: [ 733.361548] [ 733.361557] dump_stack_lvl+0xfa/0x120 [ 733.361598] should_fail_ex+0x4d7/0x5e0 [ 733.361643] _copy_to_user+0x32/0xd0 [ 733.361672] simple_read_from_buffer+0xe0/0x180 [ 733.361712] proc_fail_nth_read+0x18a/0x240 [ 733.361756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 733.361799] ? security_file_permission+0x22/0x90 [ 733.361838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 733.361879] vfs_read+0x1eb/0xbe0 [ 733.361935] ? __pfx_vfs_read+0x10/0x10 [ 733.361976] ? lock_release+0xc8/0x290 [ 733.362012] ? __fget_files+0x20d/0x3b0 [ 733.362066] ksys_read+0x121/0x240 [ 733.362088] ? __pfx_ksys_read+0x10/0x10 [ 733.362125] do_syscall_64+0xbf/0x360 [ 733.362162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.362187] RIP: 0033:0x7f474c02b69c [ 733.362206] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 733.362229] RSP: 002b:00007f47495ee170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 733.362253] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f474c02b69c [ 733.362270] RDX: 000000000000000f RSI: 00007f47495ee1e0 RDI: 0000000000000003 [ 733.362285] RBP: 00007f47495ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 733.362300] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000002 [ 733.362314] R13: 00007fffe7a788ef R14: 00007f47495ee300 R15: 0000000000022000 [ 733.362354] 21:53:48 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = shmget(0x3, 0x4000, 0x20, &(0x7f0000ff5000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:53:48 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:48 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xf74a, 0x6, &(0x7f0000000480)=[{&(0x7f00000000c0)="5721690623f3cf19941ada7903869ccd3ff0f53f5c68f22c85acaaca895c1d019eb86365196552ce1eed7c7b7ebad3346c35c0ef0670eda26876d4365252823b3d6305507182ea47345eb94d93a876b6cf53ee41c24a8e1877995cc03f02f65c63d8c39087cefcf58706612e7923d4fe87b7b0d926392a6bb7bf61ffc6e2b91169da81486eb0b66756a0fba79e7788c5066b9b4268a80a5b769dc388be420b109d5c4518cf59b6143ee7719d2e2884e58c641ac95736de81b2a46c394a65cd5015d99d6bce0647c981f9e4270ed493439707a1222ffe1f8def", 0xd9, 0x7}, {&(0x7f00000001c0)="4a9aaa5f86da5510e061e9fe9dd90dd8341ef759868a7deebaf947daf9514c0c1a9a708fc7fd3c22c89530092f6567d083706090b7deb117ff5cd93a1c7c7533186c4487f505220f885e2a0b920c7aee39d97551c35bc2b7c06161ff23d0bf6877a0a997c8c7cdedbdc27db2ff180b26c00830a6db655b3394030c099e42fbb59dbba002225e01eaf770381607e627cea7d168e0d608b4face4e65d830c8f0afc2cd190dd6c8af1e7f4c44ce747c2dd1ff1096336839339c961963c60f961eccac48ae8b05a83280875e9b60739fe4283703f58dfb8df9db8251c35ee0102c14dc2df0", 0xe3, 0x8}, {&(0x7f00000002c0)="71e23ee6b2e2f4f22ddf67a5d153", 0xe, 0x62a}, {&(0x7f0000000300)="9ed4be261a6e9cd13682140599e8109e2243b1d3647a478d598fda8a41ade66e2743bd9c972653fb98aa15de14167b3167e0dbf6a466785bcf7937b6c73124a3ce32e234160d55574d887eeffeee8781ccd1acb79370c0acc6afd7ba4d65f2fbcfacb31f4b4943c2088e9b199361f4a3af2f1eebd536872c9c4aa08ff162482a0e5499", 0x83, 0xfffffffeffffffff}, {&(0x7f00000003c0)="3ba693fafc6b148b8796a23ac17224", 0xf, 0x5}, {&(0x7f0000000400)="29d7d3e84bc9e49204fc5de582bd1f7ec46b179453829721f7b86b34056008b6528068fa5067f76e864dee1f9a8a71d693c0a919e41fdb626afc4800fb947c5bf88381e1e4", 0x45, 0x1180}], 0x4100019, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'default'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_win95}], [{@fowner_gt={'fowner>', 0xee01}}, {@fowner_gt}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@subj_role}]}) writev(r0, &(0x7f0000001700)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="5793624e1c77a3316547726d960e5458f7a54aca6ef4b0e309b521022f560cae98e600ddb483c1a127dc012201083f2529b1b0748f4c267b5cca807c2f5d9521f99f82a09ac830bcd38019c091f1022823c82e92a59981507dde9a6fe1d909ff4a96bb92e783093a1f10c8d9c9ebf8ff06f6db7483c588e60c818aa86765766e37480fb1f6f9169bc8c28151b2aef27cef7dbc6eae854aa41d554f4b805c24ebfd0c0a58f7e794dc551319cf3211736bebee205b6b6a2f3590e2e449d5d1131f08b1a421924b49a72040a380b6dfc29ceced3e5629fb6efe8c95a681d1f655cfceaf920db54b266152b7c0134287d8bcbe", 0xf1}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') lseek(r1, 0x100000000, 0x1) 21:53:48 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:53:48 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:48 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x22, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:48 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:57 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:57 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 21:53:57 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:53:57 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x23, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:57 executing program 6: syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x40, 0x8, &(0x7f0000000500)=[{&(0x7f00000000c0)="a72f451e0fd2885edcb68e203b93094c56febd9c2abb843d48527c05c7", 0x1d, 0x5}, {&(0x7f0000000180)="de6ee2a54d77c5790abed73f4e3bceec4636f3f3cf660441ee95ff0067e2c84458e76fa6af882425fa8f0a2117fb89d14822505c61308e145df72b6f98e04e78682935771094191796e150b765cabe86dcec9932fb2a99f08ca0437aed6450ec33d540b285db701366e4a84ad367b8e49d7ee5fd4488f5aa974890a468afe9e12f54af83f9291f143663cda25a93ae77236d943c20a7292857ffc73b4dae7214", 0xa0}, {&(0x7f0000000100)="3134c024dd693da75b4884cd53b9c61143762b260694e6ce01596b5e538ab76bc837f71f40ef2e4884bb756927cbacb9194beb3a9eb555b67f", 0x39}, {&(0x7f0000000240)="6ed9ae20d48bc01d0d046bd06cfc891557576f92ac17912fc5dd5e4c8e2c724c29bcba53345efd20ab8b68d7a1584331782fff9341fcdb034a26d32d46cd4e08c52a6ce040e5da04a388491655a2", 0x4e, 0x400}, {&(0x7f00000002c0)="38cb9f90bb564ef225b26cd1a9a89c62a0c36308d13c800c44d6d23b6ff0", 0x1e, 0x7fff}, {&(0x7f0000000300)="58ee2614081c1ed60a10773137caacb6e2d140eac93e9cd766a882269b49ea8c35068b8c71787f2a0643d35afb709fbad4afc26534af1177ffab3bc33e6542d0829e9f33d695441287446bfcde3148667a866d23bb325169a15bb8d06c1dfb9c4b50a94bb9551b899bcc1b6db20b0e90d57d62b00391f5c28cbb398d474ad0de7d2b7164f4929d142430e503e2751cbb1ba97afa204fcf3d1cc49da2c12ec9ee3bfad8976391d1dba5ba3db9311a9c8759be9d9770517cc7a5886fd16cc6b07267ae8a1ca80f89b4e43f51501304f99da7668ae2d19c255ff5ad8c0265ffa476de51de58e8d87cfbe7d9bd09e8e3375b1680829a0c40", 0xf6, 0x7}, {&(0x7f0000000400)="7f97b58bcb1c1521763edcc7cd26c1f149255fe5eeee267beae5632ef1801de1bfefd2b072db6202c5c76e2088f8df88ccd7fee92c32fb2551c7f8922f784a6b908ab650b6007acaff6d9854ec456ebf69fe335c22e219213be630465c841e81baa25bcd5e2fb7f722eb35072040b514f413a53494e14eb4693ffdb8f07c9e66dc2a23c6394b050b973f6de5f95075aeee74f9367df2acb1a304b1f7bc11233d277760f54cde3b1efdb80ce4770d2270", 0xb0, 0x7}, {&(0x7f00000004c0)="be6925b7", 0x4, 0x8}], 0x80027, &(0x7f00000005c0)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@shortname_winnt}, {@uni_xlateno}], [{@subj_user={'subj_user', 0x3d, '-'}}]}) lseek(r0, 0x7, 0x1) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) write$P9_RREAD(r2, &(0x7f0000000000)={0x39, 0x75, 0x2, {0x2e, "49918a97084329f48207e54c6b59a0b03d4bc5f7e8cc99d6819d8df0098bd567b6b17eb74aa9a762766fda2f84fd"}}, 0x39) 21:53:57 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0x400000, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x694040, 0x41) truncate(&(0x7f00000000c0)='./file0\x00', 0x7) fcntl$setstatus(r1, 0x4, 0x44000) fcntl$getown(r0, 0x9) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x1, 0x2, "77e729", 0x8, 0x1}) 21:53:57 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:53:57 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1e, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:57 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ff6000/0x1000)=nil, 0x2000) 21:53:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, 0x0) io_submit(0x0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:53:57 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4003, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:06 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x24, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:06 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0x400000, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x694040, 0x41) truncate(&(0x7f00000000c0)='./file0\x00', 0x7) fcntl$setstatus(r1, 0x4, 0x44000) fcntl$getown(r0, 0x9) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x1, 0x2, "77e729", 0x8, 0x1}) 21:54:06 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) signalfd(r1, &(0x7f0000000040)={[0xffffffff]}, 0x8) sendfile(r2, r3, &(0x7f0000000000)=0x4, 0x11) fcntl$setstatus(r1, 0x4, 0x44000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x5, 0x1ff}) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) 21:54:06 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:06 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:06 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:06 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, 0x0) io_submit(0x0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:21 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @xdp={0x2c, 0x0, 0x0, 0x26}, @nfc={0x27, 0x1, 0x2, 0x4}, @l2={0x1f, 0x8, @none, 0x401}, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='ip6erspan0\x00', 0x9, 0xfffffffffffffff8, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000016c0)={&(0x7f0000000380), 0xc, &(0x7f0000001680)={&(0x7f00000003c0)={0x12a0, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2c533440}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1270, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdd, 0x4, "b218a8d20cb0644ee29752a0d805a06b423daba7f6589025a473cb30a62ddfeda0a4a60c54f16d9a478392f015ce18b9766cf77913e6a62fb83a8531274b193b6aab5b3c70dfa07232703b2434d2c5bb2a8896541a0166b3aef0826434ea0efa0e15b6cac73df8c9d6d2057c03e6250012a62a4e97aabaeecaf3fc8d85290c838e460b362ab825c977b484a1ea230bdbcf8a00f3db636ca33ab7e210b4e3d1f27fe5eaf7087412debe9ea1b65dc977c0c8ef076af218af36a2b354eee346633310bc7e11a9354e9ec287cd2572060e74f4a02b2da6c486cf16"}, @ETHTOOL_A_BITSET_MASK={0x63, 0x5, "37de4dbc0043f557139d0b09916527ae49dd6bd2d1cf5752ef658ff56eee152d3a7e3f0e1679b28c5005ec53a3bceab3634a75577ae6e00362b5e9685b366d6399a6653f09263e91f2d522e3d193a9527766ebff19baabfd6b7d0ee983bde1"}, @ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "43d819ceb399ffe704a9842072881c1f73bfb3e5f444699626c456234e8492611a02570279522c6d8a37ccf45e10a38547dc282cfe8aa9ab145a6284f5f64eb0a330158c95f2ada8af3eaa2c8227c5fcc315f98d33dcb339130bdcfaebcd5fdbd387c0e4b64f559931c22d6536fd64ef8ee4e39870374ad4"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x24, 0x5, "10d3e3aa3250afd1aac3deb506ab94cc1fa1bbb0d8529901c5090e67594adabe"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x12, 0x5, "d6d4aeed2e1032acf9a240bdb00b"}, @ETHTOOL_A_BITSET_VALUE={0x4b, 0x4, "f4c459d4b09cb7a22fd95fb7f97f62eb2c8c1005a0e585f06fdd85d93bdf465df99510485b4c0f99db2c85b5f5336fb0d63af18800b3dce3cb4d41bc31cd5ea5406b73ce2f9963"}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x4}, 0x44000) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x140, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000030}, 0x4000000) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x20000040) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:21 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fork() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:21 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 21:54:21 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4005, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:21 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x25, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:21 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, 0x0) io_submit(0x0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:21 executing program 0: ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x3, [0x10001, 0x9, 0x3, 0x6, 0x8001, 0x20]}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) 21:54:21 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4006, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:21 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x1000)=nil, 0x6800) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ff5000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ff4000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:21 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:21 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x26, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:21 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_submit(0x0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:21 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 21:54:21 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4007, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:30 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x400b, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:30 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ff6000/0x1000)=nil) 21:54:30 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 21:54:30 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:30 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:30 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_submit(0x0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:30 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x27, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x94800, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:54:31 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4021, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:31 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff7000/0x2000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$IPC_RMID(r1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:31 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:31 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)) io_submit(0x0, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:31 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x40b1, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:31 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)) 21:54:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xba) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x4103, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x38, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001}, 0x1c) fcntl$setstatus(r0, 0x4, 0x44000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x9ef59000) r3 = getpid() pidfd_open(r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x100000000, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x2, 0x7, 0x80, 0x0, 0x46f7, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x8001, 0x51d}, 0x801, 0x80, 0xfffffefd, 0x4, 0x7ff, 0xcb9, 0x1, 0x0, 0x0, 0x0, 0x6}, r3, 0xc, r4, 0x9) 21:54:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:31 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x28, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:31 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:31 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 21:54:31 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x2bd4, 0x9, 0x6) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 21:54:42 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x29, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:42 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 21:54:42 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x5000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:42 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:42 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x100000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r2, 0x100000000, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000040)='@]#--\x00', 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') lseek(r4, 0x100000000, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x8b) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x100000000, 0x0) fcntl$dupfd(r5, 0x406, r3) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') lseek(r6, 0x100000000, 0x0) mknodat$loop(r6, &(0x7f0000000080)='./file0\x00', 0x8, 0x0) 21:54:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r2, 0x3, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xe8, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dbusd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:klogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20008810}, 0x20004850) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) mbind(&(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x8000, &(0x7f0000000080)=0xa99, 0x0, 0x6) 21:54:42 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x7fffdf00b000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:42 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x2a, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:42 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 21:54:42 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) 21:54:42 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:42 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:57 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000000)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:57 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) fork() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:57 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:57 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f00000003c0)) 21:54:57 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:57 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x2b, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:57 executing program 0: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)="df7bc6240517f233bcec55bcdcaacb25a2fef334e81f963df6336d2ff2dfa160cb75df90f29c50e6c3479dd558ab8ce9ab0ac4b9b29c2139434e25603fe779a56db8f50b8725fbf8539218a7c9a76b3bdd852bb3a2b821bb7bd995d66dae858f11617520139e870ed282971ef30264", 0x6f) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7f) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) read$hiddev(0xffffffffffffffff, &(0x7f0000000080)=""/31, 0x1f) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100000000, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)) 21:54:57 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:57 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:57 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:57 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f00000003c0)) 21:54:57 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x44000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:54:58 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4004, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:54:58 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x2c, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:54:58 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) fork() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:58 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:54:58 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff5000/0x2000)=nil) shmat(r1, &(0x7f0000ff6000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) shmat(r0, &(0x7f0000ff2000/0x4000)=nil, 0x4000) 21:54:58 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, &(0x7f00000003c0)) [ 803.667195] cgroup: fork rejected by pids controller in /syz5 21:55:07 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) madvise(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1) 21:55:07 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) fork() r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:55:07 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:55:07 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[0x0]) 21:55:07 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) 21:55:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) open(&(0x7f0000000000)='./file0\x00', 0x321000, 0x18) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) 21:55:07 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x2d, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 21:55:07 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:55:08 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4006, 0x7, &(0x7f0000ff4000/0x4000)=nil) 21:55:08 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=' ', 0x1}], 0x1, 0x401000, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000000080)=""/23, 0x17}], 0x6) [ 969.840140] INFO: task syz-executor.6:7807 blocked for more than 143 seconds. [ 969.841417] Not tainted 6.16.0-rc6-next-20250718 #1 [ 969.842327] Blocked by coredump. [ 969.842910] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 969.844434] task:syz-executor.6 state:D stack:26352 pid:7807 tgid:7807 ppid:285 task_flags:0x40004c flags:0x00004000 [ 969.846568] Call Trace: [ 969.847008] [ 969.847371] __schedule+0xe8d/0x35b0 [ 969.848815] ? __pfx___schedule+0x10/0x10 [ 969.849432] ? lock_acquire+0x15e/0x2f0 [ 969.850022] ? find_held_lock+0x2b/0x80 [ 969.850679] ? schedule+0x2c7/0x390 [ 969.851286] ? lock_release+0xc8/0x290 [ 969.852016] schedule+0xdb/0x390 [ 969.852464] schedule_preempt_disabled+0x10/0x20 [ 969.853715] rwsem_down_read_slowpath+0x578/0xd00 [ 969.854715] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 969.855973] down_read+0xec/0x470 [ 969.856675] ? lock_release+0xc8/0x290 [ 969.857469] ? __pfx_down_read+0x10/0x10 [ 969.858302] ? __might_fault+0xe0/0x190 [ 969.859145] do_exit+0x68f/0x2970 [ 969.859883] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 969.861645] ? zap_other_threads+0x2b9/0x3a0 [ 969.862640] ? __pfx_do_exit+0x10/0x10 [ 969.863405] ? do_group_exit+0x1c3/0x2a0 [ 969.864407] ? _raw_spin_unlock_irq+0x23/0x40 [ 969.865371] do_group_exit+0xd3/0x2a0 [ 969.866487] __x64_sys_exit_group+0x3e/0x50 [ 969.866991] x64_sys_call+0x18b4/0x18c0 [ 969.867437] do_syscall_64+0xbf/0x360 [ 969.867862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.868447] RIP: 0033:0x7f0f5ec4db19 [ 969.868850] RSP: 002b:00007ffce91f80b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 969.869674] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f0f5ec4db19 [ 969.870455] RDX: 00007f0f5ec0072b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 969.871242] RBP: 0000000000000000 R08: 0000001b2d222160 R09: 0000000000000000 [ 969.872034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.872795] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffce91f81a0 [ 969.873591] [ 969.874009] INFO: task syz-executor.6:7807 blocked on an rw-semaphore likely owned by task syz-executor.6:7811 [ 969.875235] task:syz-executor.6 state:R running task stack:27976 pid:7811 tgid:7807 ppid:285 task_flags:0x400140 flags:0x00004006 [ 969.876635] Call Trace: [ 969.876952] [ 969.877220] ? alloc_slab_obj_exts+0x35/0x90 [ 969.877707] ? perf_trace_lock+0xb5/0x5d0 [ 969.878199] ? __pfx___schedule+0x10/0x10 [ 969.878665] ? __pfx_perf_trace_lock+0x10/0x10 [ 969.879208] ? kmem_cache_alloc_noprof+0x13c/0x3d0 [ 969.879752] ? perf_trace_lock_acquire+0xc9/0x700 [ 969.880306] ? perf_trace_lock+0xb5/0x5d0 [ 969.880768] ? __alloc_object+0x2f/0x2d0 [ 969.881248] ? __pfx_vma_link+0x10/0x10 [ 969.881699] ? lock_is_held_type+0x9e/0x120 [ 969.882210] ? __cond_resched+0x4c/0x80 [ 969.882658] ? move_page_tables+0x48d/0x2c80 [ 969.883177] ? __kmalloc_cache_noprof+0x314/0x3e0 [ 969.883724] ? __pfx_copy_vma+0x10/0x10 [ 969.884195] ? __pfx_mas_store_gfp+0x10/0x10 [ 969.884681] ? vms_complete_munmap_vmas+0x549/0x9f0 [ 969.885263] ? __mt_destroy+0xa8/0x3f0 [ 969.885715] ? do_vmi_align_munmap+0x271/0x550 [ 969.886256] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 969.886841] ? mas_walk+0x6ba/0x8c0 [ 969.887296] ? do_vmi_munmap+0x1eb/0x3c0 [ 969.887744] ? mtree_load+0x318/0xa10 [ 969.888204] ? do_munmap+0xbd/0x100 [ 969.888615] ? mm_get_unmapped_area_vmflags+0x9a/0xe0 [ 969.889209] ? cap_mmap_addr+0x4e/0x130 [ 969.889657] ? mas_walk+0x6ba/0x8c0 [ 969.890098] ? vrm_set_new_addr+0x210/0x2a0 [ 969.890579] ? mremap_to+0x1c3/0x450 [ 969.891026] ? __do_sys_mremap+0xbfb/0x1490 [ 969.891508] ? __pfx___do_sys_mremap+0x10/0x10 [ 969.892065] ? trace_sched_exit_tp+0xc9/0x110 [ 969.892573] ? __schedule+0xea4/0x35b0 [ 969.893063] ? do_syscall_64+0xbf/0x360 [ 969.893510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.894118] [ 969.894390] [ 969.894390] Showing all locks held in the system: [ 969.895174] 1 lock held by khungtaskd/32: [ 969.895702] #0: ffffffff85c1d1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 969.896898] 1 lock held by in:imklog/174: [ 969.897452] 1 lock held by syz-executor.6/7807: [ 969.898081] #0: ffff888043ba6060 (&mm->mmap_lock){++++}-{4:4}, at: do_exit+0x68f/0x2970 [ 969.899177] 1 lock held by syz-executor.6/7811: [ 969.899766] [ 969.900032] ============================================= [ 969.900032] VM DIAGNOSIS: 21:57:44 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000005 RDX=0000000000000000 RSI=ffffffff8135460d RDI=fffffbfff0b83a3c RBP=ffffffff85c1d1e0 RSP=ffff88801672f608 R8 =ffffffff813545f9 R9 =0000000000000000 R10=ffffffff85b240e0 R11=000000000002648e R12=0000000000000002 R13=ffffffff8135460d R14=0000000000000000 R15=ffff88801672f718 RIP=ffffffff81af3b38 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd47fcb2700 00000000 00000000 GS =0000 ffff8880e55e0000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fefd0252db0 CR3=000000000ea91000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2034343a37353a3132203831206c754a XMM01=5d3337393535382e39363920205b203a XMM02=5f6e776f6420205d3337393535382e39 XMM03=6c6c616b7a79732034343a37353a3132 XMM04=662063343030303478303a7367616c66 XMM05=702020373038373a6469677420203730 XMM06=747320443a65746174732020362e726f XMM07=5d3433343434382e39363920205b203a XMM08=2022636f7270223d76656420226b7361 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828caa05 RDI=ffffffff88731060 RBP=ffffffff88731020 RSP=ffff888009a8f7b0 R8 =0000000000000000 R9 =ffffed1001728046 R10=000000000000005f R11=0000000000000001 R12=000000000000005f R13=0000000000000010 R14=ffffffff88731020 R15=ffffffff828ca9f0 RIP=ffffffff828caa5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56e0000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffea6c28000 CR3=000000001e4fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004174237a80000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000